Fedora: Security Advisory for pypy3.8 (FEDORA-2022-15f1aa7dc7)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

php:php-fuzz-function-jit: Global-buffer-overflow in ZEND_ASSIGN_OP_SPEC_CV_CV_HANDLER

Detailed Report: https://oss-fuzz.com/testcase?key=5150697045229568 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x0000019ed738 Crash State:...

(Pwn2Own) Apple Safari Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the B3 JIT compiler. ...

Fedora: Security Advisory for pypy (FEDORA-2022-ce55d01569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for pypy3.8 (FEDORA-2022-b499f2a9c6)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for pypy (FEDORA-2022-9dd70781cb)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for pypy3.8 (FEDORA-2022-9cd41b6709)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: pypy-7.3.9-2.fc35

PyPy's implementation of Python, featuring a Just-In-Time compiler on some CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc This build of PyPy has JIT-compilation enabled...

[SECURITY] Fedora 35 Update: pypy3.8-7.3.9-2.3.8.fc35

PyPy's implementation of Python 3.8, featuring a Just-In-Time compiler on some CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc.. This build of PyPy has JIT-compilation enabled...

[SECURITY] Fedora 36 Update: pypy3.7-7.3.9-2.3.7.fc36

PyPy's implementation of Python 3.7, featuring a Just-In-Time compiler on some CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc.. This build of PyPy has JIT-compilation enabled...

[SECURITY] Fedora 36 Update: pypy3.9-7.3.9-2.3.9.fc36

PyPy's implementation of Python 3.9, featuring a Just-In-Time compiler on some CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc.. This build of PyPy has JIT-compilation enabled...

EulerOS Virtualization 2.9.0 : mozjs60 (EulerOS-SA-2022-1632)

According to the versions of the mozjs60 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. We presume that wi...

EulerOS 2.0 SP9 : mozjs60 (EulerOS-SA-2022-1431)

According to the versions of the mozjs60 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. We presume that with enough effor...

EulerOS 2.0 SP9 : mozjs60 (EulerOS-SA-2022-1452)

According to the versions of the mozjs60 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. We presume that with enough effor...

Firefox MCallGetProperty Write Side Effects Use-After-Free Exploit

This Metasploit modules exploits CVE-2020-26950, a use-after-free exploit in Firefox. The MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition. This exploit uses a somewhat novel technique of spraying ArgumentsData structures in order ...

Mageia: Security Advisory (MGASA-2019-0131)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

php:php-fuzz-function-jit: Crash in zero

Detailed Report: https://oss-fuzz.com/testcase?key=6415004149088256 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00010a4d1dbf Crash State: zero zendexecute fuzzerdorequestfrombuff...

Mozilla Firefox And Thunderbird Type Confusion Vulnerability

Mozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the IonMonkey JIT compiler when setting array elements...

SUSE-SU-2021:3529-1 Security update for pcre

This update for pcre fixes the following issues: Update pcre to version 8.45: - CVE-2020-14155: Fixed integer overflow via a large number after a '?C' substring bsc1172974. - CVE-2019-20838: Fixed buffer over-read in JIT compiler bsc1172973...

php:php-fuzz-function-jit: Crash in ZEND_HANDLE_EXCEPTION_SPEC_HANDLER

Detailed Report: https://oss-fuzz.com/testcase?key=4850341603049472 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasani386php Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xbebebebe Crash State: ZENDHANDLEEXCEPTIONSPECHANDLER zero...