[Bug 2067022] New: ImageMagick: heap-buffer-overflow in PushShortPixel of quantum-private.h
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2067022
Bug ID: 2067022
Summary: ImageMagick: heap-buffer-overflow in PushShortPixel of
quantum-private.h
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: trathi(a)redhat.com
CC: blaise(a)gmail.com, dcavalca(a)fb.com,
epel-packagers-sig(a)lists.fedoraproject.org,
fedora(a)famillecollet.com, jhorak(a)redhat.com,
luya_tfz(a)thefinalzone.net, michel(a)michel-slm.name,
ngompa13(a)gmail.com, pampelmuse(a)gmx.at,
sergio(a)serjux.com, troy(a)troycurtisjr.com
Target Milestone: ---
Classification: Other
A heap-buffer-overflow flaw was found in PushShortPixel function of
quantum-private.h
References:
https://github.com/ImageMagick/ImageMagick/issues/4974
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2067022
1 year, 6 months
[Bug 2105033] New: CVE-2022-2097 openssl3: openssl: AES OCB fails to encrypt some bytes [epel-8]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2105033
Bug ID: 2105033
Summary: CVE-2022-2097 openssl3: openssl: AES OCB fails to
encrypt some bytes [epel-8]
Product: Fedora EPEL
Version: epel8
Status: NEW
Component: openssl3
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: michel(a)michel-slm.name
Reporter: mcascell(a)redhat.com
CC: epel-packagers-sig(a)lists.fedoraproject.org,
michel(a)michel-slm.name
Target Milestone: ---
Classification: Fedora
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-8.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2105033
1 year, 7 months
[Bug 2099970] New: CVE-2022-2068 openssl3: openssl: the c_rehash script allows command injection [epel-8]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2099970
Bug ID: 2099970
Summary: CVE-2022-2068 openssl3: openssl: the c_rehash script
allows command injection [epel-8]
Product: Fedora EPEL
Version: epel8
Status: NEW
Component: openssl3
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: michel(a)michel-slm.name
Reporter: mrehak(a)redhat.com
CC: epel-packagers-sig(a)lists.fedoraproject.org,
michel(a)michel-slm.name
Target Milestone: ---
Classification: Fedora
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-8.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2099970
1 year, 7 months
[Bug 2095814] New: CVE-2022-1292 openssl3: openssl: c_rehash script allows command injection [epel-8]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2095814
Bug ID: 2095814
Summary: CVE-2022-1292 openssl3: openssl: c_rehash script
allows command injection [epel-8]
Product: Fedora EPEL
Version: epel8
Status: NEW
Component: openssl3
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: michel(a)michel-slm.name
Reporter: mcascell(a)redhat.com
CC: epel-packagers-sig(a)lists.fedoraproject.org,
michel(a)michel-slm.name
Target Milestone: ---
Classification: Fedora
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-8.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2095814
1 year, 7 months
[Bug 2104744] New: CVE-2022-33099 compat-lua: lua: heap buffer overflow in luaG_errormsg() in ldebug.c due to uncontrolled recursion in error handling [epel-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2104744
Bug ID: 2104744
Summary: CVE-2022-33099 compat-lua: lua: heap buffer overflow
in luaG_errormsg() in ldebug.c due to uncontrolled
recursion in error handling [epel-all]
Product: Fedora EPEL
Version: epel8
Status: NEW
Component: compat-lua
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: hdegoede(a)redhat.com
Reporter: trathi(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
fedora(a)famillecollet.com, hdegoede(a)redhat.com,
michel(a)michel-slm.name, moceap(a)hotmail.com
Target Milestone: ---
Classification: Fedora
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora EPEL. While
only one tracking bug has been filed, please correct all affected versions
at the same time. If you need to fix the versions independent of each
other, you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2104744
1 year, 7 months
[Bug 2104745] New: CVE-2022-33099 compat-lua: lua: heap buffer overflow in luaG_errormsg() in ldebug.c due to uncontrolled recursion in error handling [fedora-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2104745
Bug ID: 2104745
Summary: CVE-2022-33099 compat-lua: lua: heap buffer overflow
in luaG_errormsg() in ldebug.c due to uncontrolled
recursion in error handling [fedora-all]
Product: Fedora
Version: 36
Status: NEW
Component: compat-lua
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: hdegoede(a)redhat.com
Reporter: trathi(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
fedora(a)famillecollet.com, hdegoede(a)redhat.com,
michel(a)michel-slm.name, moceap(a)hotmail.com
Target Milestone: ---
Classification: Fedora
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2104745
1 year, 7 months