util-linux bug fix and enhancement update

An update is available for util-linux. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9...

util-linux:test_blkid_fuzz: Stack-buffer-overflow in merge_utf16be_ascii

Project: https://github.com/karelzak/util-linux.git https://github.com/util-linux/util-linux.git Detailed Report: https://oss-fuzz.com/testcase?key=4742512162242560 Project: util-linux Fuzzing Engine: afl Fuzz Target: testblkidfuzz Job Type: aflasanutil-linux Platform Id: linux Crash Type:...

AZL-41659 CVE-2022-3821 affecting package systemd-bootstrap for versions less than 250.3-17

An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in formattimespan, leading to a Denial of Service...

util-linux bug fix and enhancement update

An update is available for util-linux. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8...

UBUNTU-CVE-2022-42930

If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the ThirdPartyUtil component. This vulnerability affects Firefox 106...

PT-2022-27663 · Systemd +5 · Systemd +5

Name of the Vulnerable Software and Affected Versions: systemd versions 250 through 251 Description: The issue allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in the parse elf object function in shared/elf-util.c. The...

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2022-2593)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.0 : util-linux (EulerOS-SA-2022-2593)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an...

airflow-util-dv (>=1.2.1, <=1.6.2) potentially affected by CVE-2022-41672 via apache-airflow (1.10.1)

apache-airflow PYPI version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-util-dv =1.2.1, =1.6.2 Source cves: CVE-2022-41672 Source advisory: OSV:GHSA-3Q8R-F3PJ-3GC4...

airflow-util-dv (>=1.2.1, <=1.6.2) potentially affected by CVE-2022-41672 via apache-airflow (1.10.1)

apache-airflow PYPI version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-util-dv =1.2.1, =1.6.2 Source cves: CVE-2022-41672 Source advisory: OSV:PYSEC-2022-42983...

ASB-A-237288416

In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

com.alipay.sofa.acts:acts-bom (1.0.0), com.alipay.sofa.acts:acts-core (1.0.0) potentially affected by CVE-2022-38749 via com.alipay.sofa.acts:acts-common-util (1.0.0)

com.alipay.sofa.acts:acts-common-util MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa.acts:acts-common-util and may be impacted: - com.alipay.sofa.acts:acts-bom 1.0.0 - com.alipay.sofa.acts:acts-core 1.0.0 Source cve...

Amazon Linux 2022 : libblkid, libblkid-devel, libfdisk (ALAS2022-2022-099)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-099 advisory. A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to...

Ubuntu: Security Advisory (USN-5478-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2021-3996

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves like /tmp or mounted in a...

ALPINE-CVE-2021-3996

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves like /tmp or mounted in a...

CVE-2021-3996

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves like /tmp or mounted in a...

CVE-2021-3996

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves like /tmp or mounted in a...

CVE-2021-3995

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to unmount FUSE filesystems that belong to certain other users who have a UID that is a prefix of the UID of...

CVE-2021-3996: Files or Directories Accessible to External Parties

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves like /tmp or mounted in a...