PT-2021-15142

Name of the Vulnerable Software and Affected Versions libjxl versions prior to 0.6.0 Description The issue arises from invalid JPEG XL images that can cause an out of bounds access on a std::vector when rendering splines using libjxl. This out of bounds read access can lead to a segfault or resul...

CVE-2021-22563: Buffer Over-read

Invalid JPEG XL images using libjxl can cause an out of bounds access on a std::vector when rendering splines. The OOB read access can either lead to a segfault, or rendering splines based on other process memory. It is recommended to upgrade past 0.6.0 or patch with...

php:php-fuzz-tracing-jit: Segv on unknown address in zend_jit_trace_execute

Detailed Report: https://oss-fuzz.com/testcase?key=4508810148970496 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: zendjittraceexecute zendjittracehotroot...

rdkit:smiles_string_to_mol_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4964482917466112 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: memory MSAN Crash...

poppler:qt_textbox_fuzzer: Segv on unknown address in ft_free

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5397142898868224 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...

SUSE-SU-2021:3463-1 Security update for util-linux

This update for util-linux fixes the following issues: - CVE-2021-37600: Fixed an integer overflow which could lead to buffer overflow in getsemelements. bsc1188921 - Prevent outdated pam files bsc1082293, bsc1081947c68. - Do not trim read-only volumes bsc1106214. - libmount: To prevent incorrect...

json-patch:fuzz_create_merge: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5477511870414848 Project: json-patch Fuzzing Engine: libFuzzer Fuzz Target: fuzzcreatemerge Job Type: libfuzzerasanjson-patch Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

freetype2:ftfuzzer: Segv on unknown address in ft_free

Detailed Report: https://oss-fuzz.com/testcase?key=4952506610876416 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: ftfuzzer Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: ftfree ftmemfree ttfacefreename Sanitizer:...

Denial Of Service (DoS)

lua5.3 is vulnerable to denial of service. The vulnerability exists due to a negation overflow and segmentation fault in getlocal and setlocal...

CVE-2021-22563

Invalid JPEG XL images using libjxl can cause an out of bounds access on a std::vector when rendering splines. The OOB read access can either lead to a segfault, or rendering splines based on other process memory. It is recommended to upgrade past 0.6.0 or patch with...

MGASA-2021-0442 Updated php packages fix security vulnerabilities

Updated php packages fix security vulnerabilities: - Integer overflow in mysqlirealescapestring - Symlinks are followed when creating PHAR archive - shmop can't read beyond 2147483647 bytes - Integer overflow on substrreplace - Heap buffer overflow via strrepeat - Integer Overflow when...

Updated php packages fix security vulnerabilities

Updated php packages fix security vulnerabilities: - Integer overflow in mysqlirealescapestring - Symlinks are followed when creating PHAR archive - shmop can't read beyond 2147483647 bytes - Integer overflow on substrreplace - Heap buffer overflow via strrepeat - Integer Overflow when...

PT-2021-30865

Name of the Vulnerable Software and Affected Versions PHP affected versions not specified Description The issue concerns several security problems in PHP, including integer overflows in mysqli real escape string and substr replace, and a heap buffer overflow via str repeat. Additionally, there ar...

CVE-2021-36218

An issue was discovered in SKALE sgxwallet 1.58.3. sgxdispippsAESGCMEncrypt allows an out-of-bounds write, resulting in a segfault and compromised enclave. This issue describes a buffer overflow, which was resolved prior to v1.77.0 and not reproducible in latest sgxwallet v1.77.0...

PT-2021-7258

Name of the Vulnerable Software and Affected Versions SKALE sgxwallet versions 1.58.3 through 1.76.x Description The issue is related to the sgx disp ippsAES GCMEncrypt function, which allows an out-of-bounds write, resulting in a segfault and compromised enclave. This is a buffer overflow issue...

CVE-2021-36218: Out-of-bounds Write

An issue was discovered in SKALE sgxwallet 1.58.3. sgxdispippsAESGCMEncrypt allows an out-of-bounds write, resulting in a segfault and compromised enclave. This issue describes a buffer overflow, which was resolved prior to v1.77.0 and not reproducible in latest sgxwallet v1.77.0...

SUSE-RU-2021:3185-1 Recommended update for sssd

This update for sssd fixes the following issues: - Fix a dependency loop by moving internal libraries to sssd-common package. bsc1182058 - Moved sssctl command from sssd to sssd-tools package. bsc1184289 - Create timestamp attribute in cache objects if missing. bsc1182637 - Fix watchdog not...

RLSA-2021:3590 Moderate: mysql:8.0 security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. The following packages have been upgraded to a later upstream version: mysql 8.0.26. BZ1996693 Security Fixes: mysql: Server: Stored Procedure multiple...

Moderate: mysql:8.0 security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. The following packages have been upgraded to a later upstream version: mysql 8.0.26. BZ1996693 Security Fixes: mysql: Server: Stored Procedure multiple...

ALSA-2021:3590 Moderate: mysql:8.0 security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. The following packages have been upgraded to a later upstream version: mysql 8.0.26. BZ1996693 Security Fixes: mysql: Server: Stored Procedure multiple...