systemd security and bug fix update

239-68.0.2.1 - Backport upstream pstore dmesg fix Orabug: 34850699 - Standardize ioctl BTRFSIOCQGROUPCREATE check and return -ENOTCONN, if quota is not enabled Orabug: 34694253 - Disable unprivileged BPF by default Orabug: 32870980 - backport upstream pstore tmpfiles patch Orabug: 31420486 - udev...

systemd: buffer overrun in format_timespan() function

An off-by-one error flaw was found in systemd in the formattimespan function of time-util.c. This flaw allows an attacker to supply specific values for time and accuracy, leading to a buffer overrun in formattimespan, leading to a denial of service...

util-linux bug fix and enhancement update

An update is available for util-linux. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The util-linux packages contain a large variety of low-level system...

`tokio::io::ReadHalf<T>::unsplit` is Unsound

tokio::io::ReadHalf::unsplit can violate the Pin contract The soundness issue is described in the tokio/issues5372 Specific set of conditions needed to trigger an issue a !Unpin type in ReadHalf is unusual, combined with the difficulty of making any arbitrary use-after-free exploitable in Rust...

RUSTSEC-2023-0005 `tokio::io::ReadHalf<T>::unsplit` is Unsound

tokio::io::ReadHalf::unsplit can violate the Pin contract The soundness issue is described in the tokio/issues5372 Specific set of conditions needed to trigger an issue a !Unpin type in ReadHalf is unusual, combined with the difficulty of making any arbitrary use-after-free exploitable in Rust...

Node v18.13.0 (LTS)

Node v18.13.0 LTS By Danielle Adams, Jan 06, 2023 Notable changes Add support for externally shared js builtins By default Node.js is built so that all dependencies are bundled into the Node.js binary itself. Some Node.js distributions prefer to manage dependencies externally. There are existing...

com.github.mjeanroy:junit-servers-tomcat (>=2.1.1, <=3.0.0), com.github.mjeanroy:junit-servers-tomcat-8 (3.0.0) +12 more potentially affected by CVE-2022-45143 via org.apache.tomcat:tomcat-util (8.5.83)

org.apache.tomcat:tomcat-util MAVEN version 8.5.83 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-util and may be impacted: - com.github.mjeanroy:junit-servers-tomcat =2.1.1, =1.3.7, =17.0.0.final, =17.0.0.final, =17.0.1.final...

com.github.mjeanroy:junit-servers-tomcat (>=2.1.1, <=3.0.0), com.github.mjeanroy:junit-servers-tomcat-8 (3.0.0) +12 more potentially affected by CVE-2022-45143 via org.apache.tomcat:tomcat-util (8.5.83)

org.apache.tomcat:tomcat-util MAVEN version 8.5.83 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-util and may be impacted: - com.github.mjeanroy:junit-servers-tomcat =2.1.1, =1.3.7, =17.0.0.final, =17.0.0.final, =17.0.1.final...

be.dabla:grizzly-spring-boot-jasper (>=2.4, <=2.7), com.armanbilge:http4s-tomcat-server_2.12 (>=1.0-148-8da8898, <=1.0-377-020cf9e) +162 more potentially affected by CVE-2022-45143 via org.apache.tomcat:tomcat-util (>=9.0.40, <=9.0.68)

org.apache.tomcat:tomcat-util MAVEN version =9.0.40, =2.4, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =3.0.11, =5.9.6, =3.3.7, =1.7.0, =6.35, =6.39 and more Source cves: CVE-2022-45143 Source advisory: GHSA-RQ2W-37H9-VG94...

be.dabla:grizzly-spring-boot-jasper (>=2.4, <=2.7), com.armanbilge:http4s-tomcat-server_2.12 (>=1.0-148-8da8898, <=1.0-377-020cf9e) +162 more potentially affected by CVE-2022-45143 via org.apache.tomcat:tomcat-util (>=9.0.40, <=9.0.68)

org.apache.tomcat:tomcat-util MAVEN version =9.0.40, =2.4, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =3.0.11, =5.9.6, =3.3.7, =1.7.0, =6.35, =6.39 and more Source cves: CVE-2022-45143 Source advisory: OSV:GHSA-RQ2W-37H9-VG94...

com.github.mjeanroy:junit-servers-tomcat (>=2.1.1, <=3.0.0), com.github.mjeanroy:junit-servers-tomcat-8 (3.0.0) +12 more potentially affected by CVE-2022-45143 via org.apache.tomcat:tomcat-util (8.5.83)

org.apache.tomcat:tomcat-util MAVEN version 8.5.83 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-util and may be impacted: - com.github.mjeanroy:junit-servers-tomcat =2.1.1, =1.3.7, =17.0.0.final, =17.0.0.final, =17.0.1.final...

be.dabla:grizzly-spring-boot-jasper (>=2.4, <=2.7), com.armanbilge:http4s-tomcat-server_2.12 (>=1.0-148-8da8898, <=1.0-377-020cf9e) +162 more potentially affected by CVE-2022-45143 via org.apache.tomcat:tomcat-util (>=9.0.40, <=9.0.68)

org.apache.tomcat:tomcat-util MAVEN version =9.0.40, =2.4, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =3.0.11, =5.9.6, =3.3.7, =1.7.0, =6.35, =6.39 and more Source cves: CVE-2022-45143 Source advisory: MEND:CVE-2022-45143...

systemd:fuzz-time-util: Use-of-uninitialized-value in rename_process

Detailed Report: https://oss-fuzz.com/testcase?key=5339469178077184 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-time-util Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: renameprocess safeforkfull parsetimestamp...

systemd:fuzz-time-util: Use-of-uninitialized-value in rename_process

Detailed Report: https://oss-fuzz.com/testcase?key=5397368558452736 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-time-util Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: renameprocess safeforkfull parsetimestamp...

CVE-2020-36634 Indeed Engineering util ViewExportedVariablesServlet.java appendTo cross site scripting

A vulnerability classified as problematic has been found in Indeed Engineering util up to 1.0.33. Affected is the function visit/appendTo of the file varexport/src/main/java/com/indeed/util/varexport/servlet/ViewExportedVariablesServlet.java. The manipulation leads to cross site scripting. It is...

CVE-2020-36634

A vulnerability classified as problematic has been found in Indeed Engineering util up to 1.0.33. Affected is the function visit/appendTo of the file varexport/src/main/java/com/indeed/util/varexport/servlet/ViewExportedVariablesServlet.java. The manipulation leads to cross site scripting. It is...

CVE-2020-36634

This CVE (CVE-2020-36634) affects Indeed Engineering util up to version 1.0.33. The vulnerability resides in the function visit/appendTo of varexport/src/main/java/com/indeed/util/varexport/servlet/ViewExportedVariablesServlet.java, where input is mishandled and leads to cross-site scripting. It ...

CVE-2020-36634: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Indeed Engineering util up to 1.0.33. Affected is the function visit/appendTo of the file varexport/src/main/java/com/indeed/util/varexport/servlet/ViewExportedVariablesServlet.java. The manipulation leads to cross site scripting. It is...

CVE-2022-42930

If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the ThirdPartyUtil component. This vulnerability affects Firefox 106...

systemd:fuzz-time-util: Use-of-uninitialized-value in rename_process

Detailed Report: https://oss-fuzz.com/testcase?key=5347401462579200 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-time-util Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: renameprocess safeforkfull parsetimestamp...