USN-4712-1 linux, linux-hwe-5.4, linux-hwe-5.8 regression

USN-4576-1 fixed a vulnerability in the overlay file system implementation in the Linux kernel. Unfortunately, that fix introduced a regression that could incorrectly deny access to overlay files in some situations. This update fixes the problem. We apologize for the inconvenience. Original...

CentOS 8 : kernel (CESA-2020:4685)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4685 advisory. - kernel: net: bluetooth: heap buffer overflow when processing extended advertising report events CVE-2020-24490 - kernel: Red Hat only CVE-2020-12351...

htslib:hts_open_fuzzer: Heap-buffer-overflow in unstripe

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5116014876557312 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

DLA-2431-2 libonig - regression update

Bulletin has no description...

cryptofuzz:cryptofuzz-openssl-noasm: Stack-buffer-overflow in kdf_sshkdf_set_ctx_params

Detailed Report: https://oss-fuzz.com/testcase?key=6575133781262336 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7ffdddf6df91 Crash State:...

htslib:hts_open_fuzzer: Heap-buffer-overflow in safe_ltf8_get

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5102088579317760 Project: htslib Fuzzing Engine: afl Fuzz Target: htsopenfuzzer Job Type: aflasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60300000134d Crash...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel regression (USN-4712-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4712-1 advisory. USN-4576-1 fixed a vulnerability in the overlay file system implementation in the Linux kernel. Unfortunately, that fix introduced a regression that...

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::subtract_black_internal

Detailed Report: https://oss-fuzz.com/testcase?key=4929946558529536 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::subtractblackinternal...

htslib:hts_open_fuzzer: Heap-buffer-overflow in rans_uncompress_to_4x16

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=4797759477645312 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

OPENSUSE-SU-2021:0165-1 Security update for virtualbox

This update for virtualbox fixes the following issues: Version update to 6.1.18 released January 19 2021 This is a maintenance release. The following items were fixed and/or added: - Nested VM: Fixed hangs when executing SMP nested-guests under certain conditions on Intel hosts bug 19315, 19561 -...

[SECURITY] [DSA 4830-2] flatpak regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4830-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 22, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4830-2] flatpak regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4830-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 22, 2021 https://www.debian.org/security/faq -...

c-blosc2:decompress_frame_fuzzer: Crash in frame_get_metalayers

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=4800450727641088 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerubsanc-blosc2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

DSA-4830-2 flatpak - regression update

Bulletin has no description...

java-11-openjdk bug fix and enhancement update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Bug Fixes and Enhancements: java-11-openjdk Seccomp related performance regression in RHEL8 BZ1901703 Prepare for the next quarterly OpenJDK upstream release 2021-01,...

matio:matio_fuzzer: Use-of-uninitialized-value in H5T_vlen_reclaim

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=4806897339334656 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

llvm:llvm-isel-fuzzer--x86_64-O2: Heap-use-after-free in lowerConstantIntrinsics

Detailed Report: https://oss-fuzz.com/testcase?key=5262146025947136 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-isel-fuzzer--x8664-O2 Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x607000011218 Crash State:...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : containerd vulnerability (USN-4653-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4653-2 advisory. USN-4653-1 fixed a vulnerability in containerd. Unfortunately, those containerd packages introduced a regression in docker.io and the upda...

USN-4653-2: containerd vulnerability

USN-4653-1 fixed a vulnerability in containerd. Unfortunately, those containerd packages introduced a regression in docker.io and the update was reverted. This update addresses the docker.io issue and reintroduces the fixes from USN-4653-1. We apologize for the inconvenience...

USN-4653-2 containerd vulnerability

USN-4653-1 fixed a vulnerability in containerd. Unfortunately, those containerd packages introduced a regression in docker.io and the update was reverted. This update addresses the docker.io issue and reintroduces the fixes from USN-4653-1. We apologize for the inconvenience...