PT-2021-24548

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.3 Description: A regression issue exists when mounting shares with prefix paths. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

The SolarWinds Hackers Aren’t ‘Back.’ They Never Went Away

A new phishing campaign from Russian spies targeted USAID, among others. But it’s less an escalation than a regression to the mean...

poppler:pdf_draw_fuzzer: Heap-buffer-overflow in Decrypt::makeFileKey2

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5599864430919680 Project: poppler Fuzzing Engine: honggfuzz Fuzz Target:...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

[SECURITY] [DSA 4916-2] prosody regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4916-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 21, 2021 https://www.debian.org/security/faq -...

DSA-4916-2 prosody - regression update

Bulletin has no description...

unicorn:fuzz_emu_arm_thumb: Use-of-uninitialized-value in helper_vfp_touid_arm

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5370844487483392 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarmthumb Job Type: libfuzzermsanunicorn Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

SUSE SLES15 Security Update : redis (SUSE-SU-2021:1652-1)

This update for redis fixes the following issues : redis was updated to 6.0.13 : CVE-2021-29477: Integer overflow in STRALGO LCS command bsc1185729 CVE-2021-29478: Integer overflow in COPY command for large intsets bsc1185730 Cluster: Skip unnecessary check which may prevent failure detection Fix...

SUSE-SU-2021:1652-1 Security update for redis

This update for redis fixes the following issues: redis was updated to 6.0.13: CVE-2021-29477: Integer overflow in STRALGO LCS command bsc1185729 CVE-2021-29478: Integer overflow in COPY command for large intsets bsc1185730 Cluster: Skip unnecessary check which may prevent failure detection Fix...

SUSE-SU-2021:1648-1 Security update for xen

This update for xen fixes the following issues: Security issue fixed: - CVE-2021-28689: Fixed some x86 speculative vulnerabilities with bare non-shim 32-bit PV guests XSA-370 bsc1185104 - Make sure xencommons is in a format as expected by fillup. bsc1185682 Each comment needs to be followed by an...

openSUSE Security Update : redis (openSUSE-2021-682)

This update for redis fixes the following issues : redis 6.0.13 - CVE-2021-29477: Integer overflow in STRALGO LCS command boo1185729 - CVE-2021-29478: Integer overflow in COPY command for large intsets boo1185730 - Cluster: Skip unnecessary check which may prevent failure detection - Fix...

imagemagick:ping_dng_fuzzer: Invalid-free in RelinquishMagickMemory

Detailed Report: https://oss-fuzz.com/testcase?key=6662829303267328 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingdngfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Invalid-free Crash Address: 0x39000000 Crash State: RelinquishMagickMemory...

Security update for virtualbox (important)

openSUSE Security Update: Security update for virtualbox Announcement ID: openSUSE-SU-2021:0723-1 Rating: important References: 1182918 Cross-References: CVE-2021-2145 CVE-2021-2250 CVE-2021-2264 CVE-2021-2266 CVE-2021-2279 CVE-2021-2280 CVE-2021-2281 CVE-2021-2282 CVE-2021-2283 CVE-2021-2284...

SUSE SLES12 Security Update : xen (SUSE-SU-2021:1580-1)

This update for xen fixes the following issues : A recent systemd update caused a regression in 'xenstored.service' systemd now fails to track units that use systemd-notify. bsc1183790 Add a fix to delay between the call to 'systemd-notify' and the final exit of the wrapper script. bsc1185021,...

PT-2021-28429

Name of the Vulnerable Software and Affected Versions: xen affected versions not specified Description: A recent systemd update caused a regression in 'xenstored.service', where systemd now fails to track units that use systemd-notify. The issue is resolved by adding a fix to delay between the ca...

njs:njs_process_script_fuzzer: Object-size in njs_vmcode_interpreter

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=6531069303193600 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerubsannjs Platform Id: linux Crash Type: Object-size Crash Address: Crash State: njsvmcodeinterpreter...

OPENSUSE-SU-2021:0691-1 Security update for vlc

This update for vlc fixes the following issues: Update to version 3.0.13: + Demux: - Adaptive: fix artefacts in HLS streams with wrong profiles/levels - Fix regression on some MP4 files for the audio track - Fix MPGA and ADTS probing in TS files - Fix Flac inside AVI files - Fix VP9/Webm artefact...

OPENSUSE-SU-2021:0682-1 Security update for redis

This update for redis fixes the following issues: redis 6.0.13 CVE-2021-29477: Integer overflow in STRALGO LCS command boo1185729 CVE-2021-29478: Integer overflow in COPY command for large intsets boo1185730 Cluster: Skip unnecessary check which may prevent failure detection Fix performance...

DLA-2648-2 mediawiki - regression update

Bulletin has no description...

Security update for redis (important)

openSUSE Security Update: Security update for redis Announcement ID: openSUSE-SU-2021:0682-1 Rating: important References: 1178205 1182657 1185729 1185730 ECO-2417 ECO-2867 PM-1547 PM-1615 PM-1622 PM-1681 SLE-11578 SLE-12821 Cross-References: CVE-2021-21309 CVE-2021-29477 CVE-2021-29478 CVSS...