CVE-2021-20295

It was discovered that the update for the virt:rhel module in the RHSA-2020:4676 https://access.redhat.com/errata/RHSA-2020:4676 erratum released as part of Red Hat Enterprise Linux 8.3 failed to include the fix for the qemu-kvm component issue CVE-2020-10756, which was previously corrected in...

CVE-2021-20295

It was discovered that the update for the virt:rhel module in the RHSA-2020:4676 https://access.redhat.com/errata/RHSA-2020:4676 erratum released as part of Red Hat Enterprise Linux 8.3 failed to include the fix for the qemu-kvm component issue CVE-2020-10756, which was previously corrected in...

Use after free in Wasmtime

There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default then you are not affected. If you are explicitly disabling the Wasm referenc...

SUSE: Security Advisory (SUSE-SU-2022:14934-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

imagemagick:encoder_miff_fuzzer: Heap-use-after-free in LocaleCompare

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4712380438806528 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encodermifffuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-use-after-free READ 1...

SUSE-SU-2022:14934-1 Security update for expat

This update for expat fixes the following issues: - Fixed a regression caused by the patch for CVE-2022-25236 bsc1196784...

ffmpeg:ffmpeg_AV_CODEC_ID_WMALOSSLESS_fuzzer: Index-out-of-bounds in decode_init

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5354894996930560 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDWMALOSSLESSfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

DLA-2962-2 pjproject - regression update

Bulletin has no description...

ffmpeg:ffmpeg_AV_CODEC_ID_THEORA_fuzzer: Crash in ff_put_pixels8_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6751648258588672 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDTHEORAfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0001044f27f...

USN-5313-2: OpenJDK 11 regression

USN-5313-1 fixed vulnerabilities and added features in OpenJDK. Unfortunately, that update introduced a regression in OpenJDK 11 that could impact interoperability with some popular HTTP/2 servers making it unable to connect to said servers. This update fixes the problem. We apologize for the...

USN-5313-2 openjdk-lts regression

USN-5313-1 fixed vulnerabilities and added features in OpenJDK. Unfortunately, that update introduced a regression in OpenJDK 11 that could impact interoperability with some popular HTTP/2 servers making it unable to connect to said servers. This update fixes the problem. We apologize for the...

fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Heap-buffer-overflow in add_compile_string

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6291057615175680 Project: fluent-bit Fuzzing Engine: afl Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: aflasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow READ 4...

CVE-2021-3567

A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-locking applications that leverage Caribou as an input mechanism. The highest threat from this vulnerability is to system availability...

DEBIAN-CVE-2021-3567

A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-locking applications that leverage Caribou as an input mechanism. The highest threat from this vulnerability is to system availability...

UBUNTU-CVE-2021-3567

A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-locking applications that leverage Caribou as an input mechanism. The highest threat from this vulnerability is to system availability...

USN-5321-3 firefox regressions

USN-5321-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted...

CLSA-2022-1648067906 Fix of CVE: CVE-2020-25717

CVE-2020-25717: Fix username map script regression rhbz2046174 - Fix possible segfault while joining a domain rhbz2046160...

unicorn:fuzz_emu_mips_32be: Index-out-of-bounds in helper_mthlip_mips

Detailed Report: https://oss-fuzz.com/testcase?key=5041325306675200 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemumips32be Job Type: libfuzzerubsanunicorn Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: helpermthlipmips Sanitizer: undefined UBSAN...

ffmpeg:ffmpeg_AV_CODEC_ID_DFPWM_fuzzer: Heap-buffer-overflow in dfpwm_dec_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4520058007715840 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDDFPWMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

[SECURITY] [DLA 2955-2] bind9 regression update

Debian LTS Advisory DLA-2955-2 [email protected] https://www.debian.org/lts/security/ Markus Koschany March 19, 2022 https://wiki.debian.org/LTS Package : bind9 Version : 1:9.10.3.dfsg.P4-12.3+deb9u12 CVE ID : CVE-2021-25220 Debian Bug : 1007945 The security update announced as DLA 2955...