python-eventlet: patch regression for CVE-2021-21419 in some Red Hat builds

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products...

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-eventlet) security update

An update for python-eventlet is now available for Red Hat OpenStack Platform 17.1 Wallaby. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

python-eventlet: patch regression for CVE-2021-21419 in some Red Hat builds

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products...

jackson-dataformats-binary:CborParserFuzzer: Security exception in java.base/java.util.Arrays.copyOf

Project: https://github.com/FasterXML/jackson-dataformats-binary.git Detailed Report: https://oss-fuzz.com/testcase?key=5142631663337472 Project: jackson-dataformats-binary Fuzzing Engine: libFuzzer Fuzz Target: CborParserFuzzer Job Type: libfuzzerasanjackson-dataformats-binary Platform Id: linux...

CVE-2023-7207

Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames...

CVE-2023-7207

Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames...

CVE-2023-7207

Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames...

icu:time_zone_names_fuzzer: Stack-buffer-overflow in icu_75::TZDBTimeZoneNames::getMetaZoneNames

Project: https://github.com/unicode-org/icu.git Detailed Report: https://oss-fuzz.com/testcase?key=5071816267726848 Project: icu Fuzzing Engine: afl Fuzz Target: timezonenamesfuzzer Job Type: aflasanicu Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7ffd791fa1c1 Cra...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=6662689686355968 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

llvm:llvm-dwarfdump-fuzzer: Heap-buffer-overflow in XXH3_hashLong_64b

Detailed Report: https://oss-fuzz.com/testcase?key=6732252150890496 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x61a000000bb2 Crash State: XXH3hashLong64b...

apache-poi:POIHSSFFuzzer: Security exception with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6121688391548928 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHSSFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State: NULL Sanitizer: address ASAN Recommended...

libxml2:xml: Heap-use-after-free in xmlStaticCopyNode

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=5663442862145536 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: xml Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x604000000aa...

apache-poi:POIHSLFFuzzer: Security exception in org.apache.poi.ddf.EscherContainerRecord.fillFields

Detailed Report: https://oss-fuzz.com/testcase?key=5018229722382336 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHSLFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

llvm:llvm-dis-fuzzer: Global-buffer-overflow in llvm::hashing::detail::hash_short

Detailed Report: https://oss-fuzz.com/testcase?key=6245908811415552 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-dis-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000001bffff9 Crash State:...

libredwg:llvmfuzz: Heap-buffer-overflow in dwg_decode_MINSERT_private

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5006475487215616 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

bitcoin-core:http_request: Use-of-uninitialized-value in evutil_inet_pton

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=5548301348634624 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: httprequest Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

sqlite3:ossfuzz: Heap-buffer-overflow in jsonReturnFromBlob

Detailed Report: https://oss-fuzz.com/testcase?key=5074757078614016 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzerasansqlite3 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x602000000118 Crash State: jsonReturnFromBlob...

openssl:quic-lcidm: Heap-buffer-overflow in OPENSSL_LH_doall_arg

Project: https://github.com/openssl/openssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4614401822687232 Project: openssl Fuzzing Engine: afl Fuzz Target: quic-lcidm Job Type: aflasanopenssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x614000000e00 Crash...

llvm:llvm-isel-fuzzer--aarch64-gisel: Heap-use-after-free in llvm::MetadataTracking::untrack

Detailed Report: https://oss-fuzz.com/testcase?key=5197871150137344 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-isel-fuzzer--aarch64-gisel Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x60b00000c3d8 Crash State:...

llvm:llvm-opt-fuzzer--x86_64-earlycse: Crash in llvm::Intrinsic::getIntrinsicInfoTableEntries

Detailed Report: https://oss-fuzz.com/testcase?key=4884518724829184 Project: llvm Fuzzing Engine: honggfuzz Fuzz Target: llvm-opt-fuzzer--x8664-earlycse Job Type: honggfuzzasanllvm Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0001023217f7 Crash State:...