CVE-2022-39397 Exposure of sensitive information in aliyun-oss-client

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1...

`aliyun-oss-client` secret exposure

The aliyun-oss-client unintentionally divulges the authentication secret. This bug was fixed in this commit by limiting the concerned traits to be pub only within the crate...

OSV-2022-1181 Heap-use-after-free in template_execute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53469 Crash type: Heap-use-after-free READ 1 Crash state: templateexecute msgpackunpacknext cbstdoutflush...

OSV-2022-1180 Heap-buffer-overflow in json_common_entity_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53468 Crash type: Heap-buffer-overflow READ 8 Crash state: jsoncommonentitydata jsonobjectswrite dwgwritejson...

OSV-2022-1177 Stack-buffer-overflow in FLAC::Decoder::FuzzerDecoder::metadata_callback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53454 Crash type: Stack-buffer-overflow WRITE 8 Crash state: FLAC::Decoder::FuzzerDecoder::metadatacallback FLAC::Decoder::Stream::metadatacallback readmetadata...

Microsoft contributes S2C2F to OpenSSF to improve supply chain security

On August 4, 2022, Microsoft publicly shared a framework.pdf that it has been using to secure its own development practices since 2019, the Secure Supply Chain Consumption Framework S2C2F, previously the Open Source Software-Supply Chain Security OSS-SSC Framework. As a massive consumer of and...

Microsoft contributes S2C2F to OpenSSF to improve supply chain security

On August 4, 2022, Microsoft publicly shared a framework.pdf that it has been using to secure its own development practices since 2019, the Secure Supply Chain Consumption Framework S2C2F, previously the Open Source Software-Supply Chain Security OSS-SSC Framework. As a massive consumer of and...

OSV-2022-1173 Heap-buffer-overflow in parse_content_length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53397 Crash type: Heap-buffer-overflow READ 1 Crash state: parsecontentlength gethdrfield parseheaders...

OSV-2022-1172 UNKNOWN WRITE in instantiate_many::_::run::hb58bf0fc7b8817e5

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53381 Crash type: UNKNOWN WRITE Crash state: instantiatemany::::run::hb58bf0fc7b8817e5...

kernel: ALSA: oss: Fix PCM OSS buffer allocation overflow

In the Linux kernel, the following vulnerability has been resolved: ALSA: oss: Fix PCM OSS buffer allocation overflow We've got syzbot reports hitting INTMAX overflow at vmalloc allocation that is called from sndpcmplugalloc. Although we apply the restrictions to input parameters, it's based only...

OSV-2022-1169 Heap-use-after-free in output_thread

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53324 Crash type: Heap-use-after-free READ 8 Crash state: outputthread stepcallback flbtaskdestroy...

OSV-2022-1168 Heap-buffer-overflow in parse_subrip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53210 Crash type: Heap-buffer-overflow WRITE Crash state: parsesubrip parsewebvtt gstsubparsechain...

OSV-2022-1165 Heap-buffer-overflow in parse_content_length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53199 Crash type: Heap-buffer-overflow READ 1 Crash state: parsecontentlength gethdrfield parseheaders...

OSV-2022-1164 Heap-buffer-overflow in virtio_net_queue_enable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53186 Crash type: Heap-buffer-overflow READ 8 Crash state: virtionetqueueenable virtioqueueenable virtiopcicommonwrite...

OSV-2022-1163 Negative-size-param in mrb_str_format

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53183 Crash type: Negative-size-param Crash state: mrbstrformat mrbfsprintf mrbvmexec...

OSV-2022-1162 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53181 Crash type: Null-dereference READ Crash state: NULL...

OSV-2022-1160 Index-out-of-bounds in str_init_embed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53173 Crash type: Index-out-of-bounds Crash state: strinitembed strnew mrbstrnew...

OSV-2022-1161 UNKNOWN READ in pack_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53161 Crash type: UNKNOWN READ Crash state: packunpack mrbpackunpack mrbvmexec...

OSV-2022-1157 Stack-buffer-overflow in merge_utf16be_ascii

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53149 Crash type: Stack-buffer-overflow WRITE 1 Crash state: mergeutf16beascii probeisoNUMBER superblocksprobe...

OSV-2022-1155 UNKNOWN WRITE in wasmtime_fuzzing::oracles::instantiate_many::h1a28dda90c13f877

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53102 Crash type: UNKNOWN WRITE Crash state: wasmtimefuzzing::oracles::instantiatemany::h1a28dda90c13f877 instantiatemany::::run::he4646225c064edb2...