PT-2026-31670

Affected versions of this crate can leave all SymbolTable variants in an internally inconsistent state if a custom BuildHasher panics during HashMap::insert and the caller recovers with catch unwind. The intern implementations committed a vec.push... before the matching map.insert... completed. I...

CLSA-2024-1724259788 java-1.8.0-openjdk: Fix of 6 CVEs

Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u422-b05. That fixes following CVEs: - CVE-2024-21131: UTF8 size overflow - CVE-2024-21138: Infinite loop vunlerability in SymbolTable - CVE-2024-21140: Int overflow/underflow in Range Check Elimination RCE - CVE-2024-21144: Invalid header...

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.JSONPath.getPropertyValue

Detailed Report: https://oss-fuzz.com/testcase?key=6021531305115648 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: com.alibaba.fastjson.JSONPath.getPropertyValue...

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.parser.SymbolTable.addSymbol

Detailed Report: https://oss-fuzz.com/testcase?key=5936954878328832 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: com.alibaba.fastjson.parser.SymbolTable.addSymbol...

skia:sksl2spirv: Segv on unknown address in sse2::hash_fn

Detailed Report: https://oss-fuzz.com/testcase?key=5139723498684416 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2spirv Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: sse2::hashfn SkSL::SymbolTable::MakeSymbolKey...