OSV-2021-719 Heap-buffer-overflow in tt_face_get_paint_layers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33855 Crash type: Heap-buffer-overflow READ 1 Crash state: ttfacegetpaintlayers FTGetPaintLayers colrv1traversepaint...

OSV-2021-717 Heap-use-after-free in real_param

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33862 Crash type: Heap-use-after-free READ 1 Crash state: realparam zpdfinkpath interp...

OSV-2021-713 Heap-use-after-free in AK::StringView::StringView

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33852 Crash type: Heap-use-after-free READ 8 Crash state: AK::StringView::StringView void AK::formatvalue AK::vformatimpl...

OSV-2021-710 Heap-use-after-free in iov_from_buf_full

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33785 Crash type: Heap-use-after-free WRITE 2 Crash state: iovfrombuffull iovfrombuf virtionetreceivercu...

OSV-2021-703 Container-overflow in unsigned long jsoncons::detail::escape_string<char, jsoncons::string_sink<std::_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33781 Crash type: Container-overflow READ 1 Crash state: unsigned long jsoncons::detail::escapestring::key...

OSV-2021-702 Heap-double-free in flb_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33750 Crash type: Heap-double-free Crash state: flbfree flbparserjsondo flbparserdo...

OSV-2021-701 Heap-use-after-free in m3_FreeRuntime

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33765 Crash type: Heap-use-after-free READ 8 Crash state: m3FreeRuntime fuzzer.c RuntimeRelease...

OSV-2021-700 UNKNOWN READ in ReadLEB_u32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33749 Crash type: UNKNOWN READ Crash state: ReadLEBu32 InitElements CompileExtendedOpcode...

OSV-2021-698 UNKNOWN READ in m3_Realloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33744 Crash type: UNKNOWN READ Crash state: m3Realloc InitMemory CompileBlockStatements...

OSV-2021-695 Stack-buffer-overflow in XCFImageFormat::loadTileRLE

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33742 Crash type: Stack-buffer-overflow WRITE 1 Crash state: XCFImageFormat::loadTileRLE XCFImageFormat::loadLevel XCFImageFormat::loadHierarchy...

OSV-2021-692 UNKNOWN READ in qpaintengineex_lineTo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33678 Crash type: UNKNOWN READ Crash state: qpaintengineexlineTo bool qtstrokeside QStroker::processCurrentSubpath...

OSV-2021-689 UNKNOWN WRITE in Runtime_Release

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33689 Crash type: UNKNOWN WRITE Crash state: RuntimeRelease EvaluateExpression InitDataSegments...

OSV-2021-688 Segv on unknown address in std::__Fuzzer::basic_string<char, std::__Fuzzer::char_traits<char>, std::__Fuzze

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33682 Crash type: Segv on unknown address Crash state: std::Fuzzer::basicstring, std::Fuzze std::Fuzzer::moneypunctbyname::init...

OSV-2021-687 UNKNOWN WRITE in InitDataSegments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33663 Crash type: UNKNOWN WRITE Crash state: InitDataSegments CompileBlockStatements CompileBlock...

OSV-2021-676 Heap-buffer-overflow in op_Const64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33554 Crash type: Heap-buffer-overflow WRITE 8 Crash state: opConst64 EvaluateExpression m3LoadModule...

OSV-2021-678 UNKNOWN WRITE in CompileBlock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33555 Crash type: UNKNOWN WRITE Crash state: CompileBlock CompileLoopOrBlock CompileBlockStatements...

OSV-2021-677 Heap-buffer-overflow in grk::FileFormatDecompress::apply_palette_clr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33544 Crash type: Heap-buffer-overflow WRITE 16 Crash state: grk::FileFormatDecompress::applypaletteclr grk::FileFormatDecompress::applyColour grkdecompressfuzzer.cpp...

OSV-2021-675 Segv on unknown address in lxc_conf_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33551 Crash type: Segv on unknown address Crash state: lxcconffree lxccontainerfree lxccontainerput...

Security update for irssi (moderate)

openSUSE Security Update: Security update for irssi Announcement ID: openSUSE-SU-2021:0595-1 Rating: moderate References: 1184848 Affected Products: openSUSE Backports SLE-15-SP2 An update that contains security fixes can now be installed. Description: This update for irssi fixes the following...

OSV-2021-670 Heap-buffer-overflow in av1_free_cdef_buffers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33480 Crash type: Heap-buffer-overflow READ 8 Crash state: av1freecdefbuffers decoderdestroy aomcodecdestroy...