CVE-2022-39397

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1...

Code injection

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1...

OSV-2022-1193 Heap-buffer-overflow in archive_read_has_encrypted_entries

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53594 Crash type: Heap-buffer-overflow READ 8 Crash state: archivereadhasencryptedentries libarchivefuzzer.cc...

CVE-2022-39397

CVE-2022-39397 affects the Rust crate aliyun-oss-client (Alibaba Cloud OSS). The vulnerability causes unintentional disclosure of incoming secret data. It has been patched in version 0.8.1. If using this crate, upgrade to 0.8.1 or newer to mitigate the issue. The available connected documents con...

CVE-2022-39397 Exposure of sensitive information in aliyun-oss-client

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1...

CVE-2022-39397 Exposure of sensitive information in aliyun-oss-client

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1...

CVE-2022-39397 Exposure of sensitive information in aliyun-oss-client

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1...

`aliyun-oss-client` secret exposure

The aliyun-oss-client unintentionally divulges the authentication secret. This bug was fixed in this commit by limiting the concerned traits to be pub only within the crate...

OSV-2022-1181 Heap-use-after-free in template_execute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53469 Crash type: Heap-use-after-free READ 1 Crash state: templateexecute msgpackunpacknext cbstdoutflush...

OSV-2022-1180 Heap-buffer-overflow in json_common_entity_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53468 Crash type: Heap-buffer-overflow READ 8 Crash state: jsoncommonentitydata jsonobjectswrite dwgwritejson...

OSV-2022-1177 Stack-buffer-overflow in FLAC::Decoder::FuzzerDecoder::metadata_callback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53454 Crash type: Stack-buffer-overflow WRITE 8 Crash state: FLAC::Decoder::FuzzerDecoder::metadatacallback FLAC::Decoder::Stream::metadatacallback readmetadata...

Microsoft contributes S2C2F to OpenSSF to improve supply chain security

On August 4, 2022, Microsoft publicly shared a framework.pdf that it has been using to secure its own development practices since 2019, the Secure Supply Chain Consumption Framework S2C2F, previously the Open Source Software-Supply Chain Security OSS-SSC Framework. As a massive consumer of and...

Microsoft contributes S2C2F to OpenSSF to improve supply chain security

On August 4, 2022, Microsoft publicly shared a framework.pdf that it has been using to secure its own development practices since 2019, the Secure Supply Chain Consumption Framework S2C2F, previously the Open Source Software-Supply Chain Security OSS-SSC Framework. As a massive consumer of and...

OSV-2022-1173 Heap-buffer-overflow in parse_content_length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53397 Crash type: Heap-buffer-overflow READ 1 Crash state: parsecontentlength gethdrfield parseheaders...

OSV-2022-1172 UNKNOWN WRITE in instantiate_many::_::run::hb58bf0fc7b8817e5

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53381 Crash type: UNKNOWN WRITE Crash state: instantiatemany::::run::hb58bf0fc7b8817e5...

kernel: ALSA: oss: Fix PCM OSS buffer allocation overflow

In the Linux kernel, the following vulnerability has been resolved: ALSA: oss: Fix PCM OSS buffer allocation overflow We've got syzbot reports hitting INTMAX overflow at vmalloc allocation that is called from sndpcmplugalloc. Although we apply the restrictions to input parameters, it's based only...

OSV-2022-1169 Heap-use-after-free in output_thread

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53324 Crash type: Heap-use-after-free READ 8 Crash state: outputthread stepcallback flbtaskdestroy...

OSV-2022-1168 Heap-buffer-overflow in parse_subrip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53210 Crash type: Heap-buffer-overflow WRITE Crash state: parsesubrip parsewebvtt gstsubparsechain...

OSV-2022-1165 Heap-buffer-overflow in parse_content_length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53199 Crash type: Heap-buffer-overflow READ 1 Crash state: parsecontentlength gethdrfield parseheaders...

OSV-2022-1164 Heap-buffer-overflow in virtio_net_queue_enable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53186 Crash type: Heap-buffer-overflow READ 8 Crash state: virtionetqueueenable virtioqueueenable virtiopcicommonwrite...