ghostscript:gs_device_ps2write_fuzzer: Heap-buffer-overflow in ttfOutliner__BuildGlyphOutlineAux

Detailed Report: https://oss-fuzz.com/testcase?key=5426429646471168 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x62a000323a2c Crash State:...

libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in init_main_qtable

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5385305294766080 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

libyang:lyd_parse_mem_json: Crash in log_vprintf

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=4912893090463744 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lydparsememjson Job Type: libfuzzerasanlibyang Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6020bebf0a4e Crash...

zeek:zeek-packet-fuzzer: Heap-buffer-overflow in zeek::String::String

Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=5556559643541504 Project: zeek Fuzzing Engine: libFuzzer Fuzz Target: zeek-packet-fuzzer Job Type: libfuzzerasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60200099f873...

Ubuntu: Security Advisory (USN-4038-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4182-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-327-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3090-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-288-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-5051-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libpng:libpng_read_fuzzer: Use-of-uninitialized-value in png_do_expand

Detailed Report: https://oss-fuzz.com/testcase?key=5179162188447744 Project: libpng Fuzzing Engine: libFuzzer Fuzz Target: libpngreadfuzzer Job Type: libfuzzermsanlibpng Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pngdoexpand OSSFUZZpngdoreadtransformatio...

Ubuntu 20.04 LTS : Varnish Cache regression (USN-5474-2)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5474-2 advisory. USN-5474-1 fixed vulnerabilities in Varnish Cache. Unfortunately the fix for CVE-2020-11653 was incomplete. This update fixes the problem. Tenable has extracted t...

USN-5474-2 varnish regression

USN-5474-1 fixed vulnerabilities in Varnish Cache. Unfortunately the fix for CVE-2020-11653 was incomplete. This update fixes the problem. Original advisory details: It was discovered that Varnish Cache could have an assertion failure when a TLS termination proxy uses PROXY version 2. A remote...

PT-2025-25870

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A regression was introduced in the Linux kernel by a recent commit, causing a NULL dereference when reading the power supply sysfs. This issue arose from a stale sysfs entry that was not...

podman: Security regression of CVE-2020-14370 due to source code management issue

The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-14370, which was previously fixed via RHSA-2020:5056. This issue could possibly allow an attacker to gain access to sensitive...

apache-commons-configuration:YAMLConfigurationReadFuzzer: Security exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject

Detailed Report: https://oss-fuzz.com/testcase?key=5983542454124544 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

jackson-modules-java8:DatatypeFuzzer: Security exception in DatatypeFuzzer.fuzzerTestOneInput

Project: https://github.com/FasterXML/jackson-modules-java8.git Detailed Report: https://oss-fuzz.com/testcase?key=5125706576691200 Project: jackson-modules-java8 Fuzzing Engine: libFuzzer Fuzz Target: DatatypeFuzzer Job Type: libfuzzerasanjackson-modules-java8 Platform Id: linux Crash Type:...

apache-commons-jxpath:JXPathFuzzer: Security exception in org.apache.commons.jxpath.ri.parser.XPathParser.MultiplicativeExpr

Detailed Report: https://oss-fuzz.com/testcase?key=5527081739485184 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

fastjson2:JsonFuzzer: Security exception in com.alibaba.fastjson.JSONPath.getPropertyValue

Detailed Report: https://oss-fuzz.com/testcase?key=4669183308201984 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Security exception Crash Address: Crash State: com.alibaba.fastjson.JSONPath.getPropertyValue...

Ubuntu 22.04 LTS : PyJWT regression (USN-5526-2)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5526-2 advisory. USN-5526-1 fixed vulnerabilities in PyJWT. Unfortunately this caused a regression by incrementing the internal package version number on Ubuntu 22.04 LTS. This...