Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : xdg-utils regression (USN-4649-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4649-2 advisory. USN-4649-1 fixed vulnerabilities in xdg-utils. That update caused a regression by removing the --attach functionality in thunderbird and...

USN-4649-2: xdg-utils regression

USN-4649-1 fixed vulnerabilities in xdg-utils. That update caused a regression by removing the --attach functionality in thunderbird and others applications. This update fix the problem by reverting these changes. Original advisory details: Jens Mueller discovered that xdg-utils incorrectly handl...

USN-4649-2 xdg-utils regression

USN-4649-1 fixed vulnerabilities in xdg-utils. That update caused a regression by removing the --attach functionality in thunderbird and others applications. This update fix the problem by reverting these changes. Original advisory details: Jens Mueller discovered that xdg-utils incorrectly handl...

pyyaml:fuzz_loader: Uncaught exception in fuzz_loader.pkg

Detailed Report: https://oss-fuzz.com/testcase?key=5369275126775808 Project: pyyaml Fuzzing Engine: libFuzzer Fuzz Target: fuzzloader Job Type: libfuzzerasanpyyaml Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: fuzzloader.pkg fuzzloader.pkg fuzzloader.pkg Sanitizer:...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

mysql-server:fuzz_initfile: Heap-buffer-overflow in my_casedn_str_utf8

Detailed Report: https://oss-fuzz.com/testcase?key=5656253911138304 Project: mysql-server Fuzzing Engine: honggfuzz Fuzz Target: fuzzinitfile Job Type: honggfuzzasanmysql-server Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x625000278128 Crash State: mycasednstrutf8...

igraph:read_gml_fuzzer: Heap-use-after-free in igraph_vector_ptr_size

Project: https://github.com/igraph/igraph.git Detailed Report: https://oss-fuzz.com/testcase?key=4855254405480448 Project: igraph Fuzzing Engine: honggfuzz Fuzz Target: readgmlfuzzer Job Type: honggfuzzasanigraph Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

[SECURITY] [DSA 4806-2] minidlna regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4806-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 05, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4806-2] minidlna regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4806-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 05, 2021 https://www.debian.org/security/faq -...

USN-4668-3 python-apt regression

USN-4668-1 fixed vulnerabilities in python-apt. The update caused a regression when using certain APIs with a file handle. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Kevin Backhouse discovered that python-apt incorrectly handled resources. A loca...

USN-4668-3: python-apt regression

USN-4668-1 fixed vulnerabilities in python-apt. The update caused a regression when using certain APIs with a file handle. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Kevin Backhouse discovered that python-apt incorrectly handled resources. A loca...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : python-apt regression (USN-4668-3)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4668-3 advisory. USN-4668-1 fixed vulnerabilities in python-apt. The update caused a regression when using certain APIs with a file handle. This update fix...

imagemagick:encoder_vips_fuzzer: Use-of-uninitialized-value in WritePixelCacheRegion

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6633969403691008 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodervipsfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

[SECURITY] [DSA 4809-2] python-apt regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4809-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 27, 2020 https://www.debian.org/security/faq -...

DSA-4809-2 python-apt - regression update

Bulletin has no description...

pcapplusplus:FuzzTarget: Bad-cast to pcpp::Layer from invalid vptr in pcpp::IDnsResource::getRawData

Detailed Report: https://oss-fuzz.com/testcase?key=5731167462621184 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerubsanpcapplusplus Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000031c4200 Crash State: Bad-cast to pcpp::Layer from invalid...

pygments:pygments_fuzzer: Uncaught exception in get_tokens_unprocessed

Project: https://github.com/pygments/pygments.git Detailed Report: https://oss-fuzz.com/testcase?key=5434047438389248 Project: pygments Fuzzing Engine: libFuzzer Fuzz Target: pygmentsfuzzer Job Type: libfuzzerasanpygments Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash Stat...

[SECURITY] [DSA 4797-2] webkit2gtk regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4797-2 [email protected] https://www.debian.org/security/ Alberto Garcia December 22, 2020 https://www.debian.org/security/faq -...

DLA-2412-2 openjdk-8 - regression update

Bulletin has no description...

[SECURITY] [DSA 4810-2] lxml regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4810-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 19, 2020 https://www.debian.org/security/faq -...