4 matches found
CLSA-2026-1790163949 grafana-pcp: Fix of CVE-2026-42504
rebuild with newer golang version 1.22.9-1.el92.tuxcare.els28 to fix the following Go standard-library CVE tracked for this package - CVE-2026-42504: fix mime quadratic complexity in DecodeHeader, which skipped only the leading "=?" of an undecodable encoded-word and so burned CPU on a header...
Quadratic complexity in WordDecoder.DecodeHeader in mime
...
brunsli:fuzz_decode: Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha
Project: https://github.com/google/brunsli.git Detailed Report: https://oss-fuzz.com/testcase?key=6654825878650880 Project: brunsli Fuzzing Engine: libFuzzer Fuzz Target: fuzzdecode Job Type: libfuzzermsanbrunsli Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State...