mysql-server:fuzz_initfile: Heap-buffer-overflow in my_strcasecmp_utf8mb3

Project: https://github.com/mysql/mysql-server.git Detailed Report: https://oss-fuzz.com/testcase?key=6094772701626368 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitfile Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

SUSE-RU-2023:4336-1 Recommended update for slurm_23_02

This update for slurm2302 fixes the following issues: - Updated to version 23.02.5 with the following changes: Bug Fixes: + Revert a change in 23.02 where SLURMNTASKS was no longer set in the job's environment when --ntasks-per-node was requested. The method that is is being set, however, is...

CVE-2023-5625

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products...

CVE-2023-5625

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products...

CVE-2023-5625

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products...

Design/Logic Flaw

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products...

CVE-2023-5625 Python-eventlet: patch regression for cve-2021-21419 in some red hat builds

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products...

CVE-2023-5625 Python-eventlet: patch regression for cve-2021-21419 in some red hat builds

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products...

CVE-2023-5625

CVE-2023-5625 describes a patch regression in Red Hat builds of python-eventlet where the CVE-2021-21419 fix was not applied across all builds/products. Connected sources confirm the issue affects python-eventlet and note a related memory-exhaustion risk via large or highly compressed websocket f...

CVE-2023-5625

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products...

python-eventlet: patch regression for CVE-2021-21419 in some Red Hat builds

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products...

Eventlet Security Vulnerabilities

Eventlet is a concurrent networking library for Python. There is a security vulnerability in python-eventlet that stems from a regression introduced in the Red Hat build version that resulted in patches not being applied to all versions of all products...

PT-2023-7172 · Unknown +1 · Python-Eventlet +1

Name of the Vulnerable Software and Affected Versions: python-eventlet affected versions not specified Description: The issue is related to incorrect cleanup or release of resources in the python-eventlet library of the OpenStack Platform. This could allow a remote attacker to cause a denial of...

SUSE CVE-2023-2319

It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to include the fix for the Webpack issue CVE-2023-28154 for PCS package, which was previously addressed in Red Hat Enterprise Linux 9.1 via erratum RHSA-2023:1591. Th...

igraph:read_pajek: Heap-use-after-free in igraph_pajek_yyparse

Project: https://github.com/igraph/igraph.git Detailed Report: https://oss-fuzz.com/testcase?key=4614971801337856 Project: igraph Fuzzing Engine: libFuzzer Fuzz Target: readpajek Job Type: libfuzzerasanigraph Platform Id: linux Crash Type: Heap-use-after-free READ 11 Crash Address: 0x62900000a215...

USN-6362-2 .Net regressions

USN-6362-1 fixed vulnerabilities in .Net. It was discovered that the fix for CVE-2023-36799 was incomplete. This update fixes the problem. Original advisory details: Kevin Jones discovered that .NET did not properly process certain X.509 certificates. An attacker could possibly use this issue to...

matio:matio_fuzzer: Heap-buffer-overflow in H5MM_xstrdup

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=5375540112261120 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow REA...

bitcoin-core:policy_estimator_io: Crash in FuzzedFileProvider::seek

Detailed Report: https://oss-fuzz.com/testcase?key=5350197397684224 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: policyestimatorio Job Type: libfuzzerasani386bitcoin-core Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffff Crash State: FuzzedFileProvider::seek...

mrab-regex:fuzz_search: Heap-buffer-overflow in bytes4_char_at

Project: https://github.com/mrabarnett/mrab-regex.git Detailed Report: https://oss-fuzz.com/testcase?key=6470459010711552 Project: mrab-regex Fuzzing Engine: libFuzzer Fuzz Target: fuzzsearch Job Type: libfuzzerasanmrab-regex Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Addres...

Ubuntu 18.04 LTS : Linux kernel regression (USN-3878-3)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3878-3 advisory. USN-3878-1 fixed vulnerabilities in the Linux kernel. Unfortunately, that update introduced a regression that could prevent systems with certain graphics chipsets...