USN-4944-2 mariadb-10.3 regression

USN-4944-1 fixed vulnerabilities in MariaDB. It caused a regression. This update fixes the problem. Original advisory details: Ubuntu 20.04 has been updated to MariaDB 10.3.30...

USN-4944-2: MariaDB regression

USN-4944-1 fixed vulnerabilities in MariaDB. It caused a regression. This update fixes the problem. Original advisory details: Ubuntu 20.04 has been updated to MariaDB 10.3.30...

Ubuntu 20.04 LTS : MariaDB regression (USN-4944-2)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4944-2 advisory. USN-4944-1 fixed vulnerabilities in MariaDB. It caused a regression. This update fixes the problem. Tenable has extracted the preceding description block directly...

[SECURITY] [DLA 2710-2] rabbitmq-server regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2710-2 [email protected] https://www.debian.org/lts/security/ Abhijith PA July 25, 2021 https://wiki.debian.org/LTS -...

DLA-2710-2 rabbitmq-server - regression update

Bulletin has no description...

mupdf:pdf_fuzzer: Use-of-uninitialized-value in fz_is_infinite_irect

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5623656188346368 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

mupdf:pdf_fuzzer: Use-of-uninitialized-value in fz_paint_pixmap_with_mask

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5888564704444416 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::ljpeg_diff

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6010949831098368 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

SUSE SLED15: caribou / caribou-common / caribou-devel / etc (SUSE-SU-2021:2414-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2414-1 advisory. Security issue fixed: - CVE-2021-3567: Fixed a segfault when attempting to use shifted characters bsc1186617. Tenable has extracted the precedi...

SUSE-SU-2021:2405-1 Security update for systemd

This update for systemd fixes the following issues: - CVE-2021-33910: Fixed a denial of service in systemd via unitnamepathescape bsc1188063 - Fixed a regression with hostnamectl and timedatectl bsc1184761 - Fixed permissions for /usr/lib/udev/compat-symlink-generation bsc1185807...

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in ZSTD_createDDict_advanced

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=6239899891138560 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasanc-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

F5 Networks BIG-IP : Python vulnerabilities (K57542514)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the K57542514 advisory. Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding with an...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Heap-use-after-free in void std::__1::allocator<unsigned long>::construct<unsigned long, unsigned long

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4634691016720384 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsapfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

Security update for libX11 (important)

openSUSE Security Update: Security update for libX11 Announcement ID: openSUSE-SU-2021:1897-1 Rating: important References: 1186643 Cross-References: CVE-2021-31535 CVSS scores: CVE-2021-31535 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-31535 SUSE: 8.1...

dnsmasq:fuzz_dhcp: Heap-buffer-overflow in print_mac

Detailed Report: https://oss-fuzz.com/testcase?key=6540853068824576 Project: dnsmasq Fuzzing Engine: afl Fuzz Target: fuzzdhcp Job Type: aflasandnsmasq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x6070000000dc Crash State: printmac logpacket dhcpreply Sanitizer:...

dnsmasq:fuzz_rfc1035: Heap-buffer-overflow in check_bad_address

Detailed Report: https://oss-fuzz.com/testcase?key=4804951573397504 Project: dnsmasq Fuzzing Engine: afl Fuzz Target: fuzzrfc1035 Job Type: aflasandnsmasq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x607000000dfc Crash State: checkbadaddress checkforboguswildcard...

dnsmasq:fuzz_dhcp6: Heap-use-after-free in dhcp6_no_relay

Detailed Report: https://oss-fuzz.com/testcase?key=5540148237434880 Project: dnsmasq Fuzzing Engine: honggfuzz Fuzz Target: fuzzdhcp6 Job Type: honggfuzzasandnsmasq Platform Id: linux Crash Type: Heap-use-after-free WRITE 1 Crash Address: 0x6020000000f0 Crash State: dhcp6norelay dhcp6mayberelay...

gdal:osr_set_from_user_input_fuzzer: Heap-double-free in Curl_free_request_state

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5379524513628160 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: osrsetfromuserinputfuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x617000000780...

[SECURITY] [DSA 4934-1] intel-microcode security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4934-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 26, 2021 https://www.debian.org/security/faq -...

libwebp:advanced_api_fuzzer: Negative-size-param in WebPRescalerInit

Detailed Report: https://oss-fuzz.com/testcase?key=5193837222952960 Project: libwebp Fuzzing Engine: afl Fuzz Target: advancedapifuzzer Job Type: aflasanlibwebp Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State: WebPRescalerInit AllocateAndInitRescaler VP8LDecodeImage...