725 matches found
OPENSUSE-SU-2021:3255-1 Security update for postgresql13
This update for postgresql13 fixes the following issues: - CVE-2021-3677: Fixed memory disclosure in certain queries bsc1189748. - Fixed build with llvm12 on s390x bsc1185952. - Re-enabled icu for PostgreSQL 10 bsc1179945. - Made the dependency of postgresqlXX-server-devel on llvm and clang...
Security update for postgresql12 (moderate)
openSUSE Security Update: Security update for postgresql12 Announcement ID: openSUSE-SU-2021:3256-1 Rating: moderate References: 1179945 1185952 1187751 1189748 Cross-References: CVE-2021-3677 CVSS scores: CVE-2021-3677 SUSE: 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products:...
SUSE: Security Advisory (SUSE-SU-2021:3119-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
llvm-alt (>=0.3.2 <=0.5.0), llvm-rs (>=0.1.0 <=0.2.1) potentially affected by CVE-2020-35860 via cbox (=0.3.0)
cbox CARGO version =0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on cbox and may be impacted: - llvm-alt =0.3.2, =0.1.0, =0.2.1 Source cves: CVE-2020-35860 Source advisory: OSV:GHSA-3VJM-36RR-7QRQ...
Security fix for the ALT Linux 10 package thunderbird version 91.0.2-alt1
Aug. 23, 2021 Andrey Cherepanov 91.0.2-alt1 - New version. - Build using LLVM 12.0. - Do not build for armh. - Security fixes in 91.0.1: + CVE-2021-29991 Header Splitting possible with HTTP/3 Responses...
OSV-2021-1084 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36738 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::ResolveConstant...
Code injection
Keystone Engine 0.9.2 has an invalid free in llvmks::SmallVectorImpl::SmallVectorImpl...
Keystone Engine 安全漏洞
Keystone Engine is an assembler framework. A security vulnerability exists in Keystone Engine that stems from Keystone Engine having an invalid idle in llvmks::SmallVectorImpl::SmallVectorImpl...
llvm-toolset:rhel8 bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
llvm-toolset:rhel8 bug fix and enhancement update
An update is available for compiler-rt, lldb, lld, llvm, llvm-toolset, clang, libomp, python-lit. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed...
SUSE: Security Advisory (SUSE-SU-2015:0188-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-35916
An issue was discovered in the image crate before 0.23.12 for Rust. A Mutable reference has immutable provenance. In the case of LLVM, the IR may be always correct...
CVE-2020-35916
An issue was discovered in the image crate before 0.23.12 for Rust. A Mutable reference has immutable provenance. In the case of LLVM, the IR may be always correct...
Design/Logic Flaw
An issue was discovered in the image crate before 0.23.12 for Rust. A Mutable reference has immutable provenance. In the case of LLVM, the IR may be always correct...
UBUNTU-CVE-2020-35916
An issue was discovered in the image crate before 0.23.12 for Rust. A Mutable reference has immutable provenance. In the case of LLVM, the IR may be always correct...
CVE-2020-35916
An issue was discovered in the image crate before 0.23.12 for Rust. A Mutable reference has immutable provenance. In the case of LLVM, the IR may be always correct...
CVE-2020-35916
An issue was discovered in the image crate before 0.23.12 for Rust. A Mutable reference has immutable provenance. In the case of LLVM, the IR may be always correct...
llvm:llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::StringMapImpl::LookupBucketFor
Detailed Report: https://oss-fuzz.com/testcase?key=5071836601384960 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x607000000148 Crash State:...
llvm:llvm-opt-fuzzer--x86_64-guard_widening: Heap-use-after-free in llvm::Value::setValueName
Detailed Report: https://oss-fuzz.com/testcase?key=5720028133195776 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-opt-fuzzer--x8664-guardwidening Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6210000094b0 Crash State:...
llvm:clang-objc-fuzzer: Use-of-uninitialized-value in clang::Lexer::getTokenPrefixLength
Detailed Report: https://oss-fuzz.com/testcase?key=5735061403729920 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clang::Lexer::getTokenPrefixLength Diag...