kernel: NULL-deref on disconnect regression

A vulnerability was found in the Linux kernel. This flaw occurs due to an unconditional NULL-pointer dereference on every disconnect in the Linux kernel...

httpd: Unexpected URL matching with 'MergeSlashes OFF'

A flaw was found in Apache httpd. A possible regression from an earlier security fix broke behavior of MergeSlashes. The highest threat from this vulnerability is to data integrity...

kernel: NULL-deref on disconnect regression

A vulnerability was found in the Linux kernel. This flaw occurs due to an unconditional NULL-pointer dereference on every disconnect in the Linux kernel...

libbpf:bpf-object-fuzzer: Heap-buffer-overflow in __bpf_object__open

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=6268501392752640 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerasanlibbpf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

CVE-2021-20325

Missing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red Hat Enterprise Linux 8.5.0, causes a security regression compared to the versions shipped in Red Hat Enterprise Linux 8.4. A user who installs or updates to Red Hat Enterprise Linux 8.5.0 would be...

mysql-server:fuzz_initfile: Heap-buffer-overflow in my_casedn_str_utf8

Project: https://github.com/mysql/mysql-server.git Detailed Report: https://oss-fuzz.com/testcase?key=4777935542812672 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitfile Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

dlplibs:macdrawfuzzer: Heap-buffer-overflow in Canvas5Structure::NIBDecoder::decode

Detailed Report: https://oss-fuzz.com/testcase?key=5227580903522304 Project: dlplibs Fuzzing Engine: honggfuzz Fuzz Target: macdrawfuzzer Job Type: honggfuzzasandlplibs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60d00000033a Crash State:...

binutils:fuzz_objcopy: Heap-buffer-overflow in cache_bread

Detailed Report: https://oss-fuzz.com/testcase?key=5295599293956096 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzobjcopy Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x625000002100 Crash State: cachebread bfdbread copyfil...

libbpf:bpf-object-fuzzer: Crash in __bpf_object__open

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=6218051104669696 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerasanlibbpf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6140000542a0 Crash...

qt:qtsvg_svg_qsvgrenderer_render: Crash in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=6032459393794048 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtsvgsvgqsvgrendererrender Job Type: libfuzzerasani386qt Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0fffed80 Crash State:...

[SECURITY] [DLA 2768-2] uwsgi regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2768-2 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler October 20, 2021 https://wiki.debian.org/LTS -...

DLA-2768-2 uwsgi - regression update

Bulletin has no description...

DLA-2618-3 smarty3 - regression update

Bulletin has no description...

libhtp:fuzz_htp: Index-out-of-bounds in htp_validate_hostname

Detailed Report: https://oss-fuzz.com/testcase?key=4798593119158272 Project: libhtp Fuzzing Engine: libFuzzer Fuzz Target: fuzzhtp Job Type: libfuzzerubsanlibhtp Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: htpvalidatehostname htptxstaterequestline...

kimageformats:kimgio_heif_fuzzer: Heap-buffer-overflow in derive_spatial_luma_vector_prediction

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6630247404011520 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgioheiffuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Ubuntu: Security Advisory (USN-5092-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5092-3 linux-azure, linux-azure-5.11 regression

USN-5092-2 fixed vulnerabilities in Linux 5.11-based kernels. Unfortunately, for Linux kernels intended for use within Microsoft Azure environments, that update introduced a regression that could cause the kernel to fail to boot in large Azure instance types. This update fixes the problem. We...

USN-5092-3: Linux kernel (Azure) regression

USN-5092-2 fixed vulnerabilities in Linux 5.11-based kernels. Unfortunately, for Linux kernels intended for use within Microsoft Azure environments, that update introduced a regression that could cause the kernel to fail to boot in large Azure instance types. This update fixes the problem. We...

fwupd:ifd_fuzzer: Crash in g_array_append_vals

Project: https://github.com/fwupd/fwupd.git Detailed Report: https://oss-fuzz.com/testcase?key=5775452292120576 Project: fwupd Fuzzing Engine: libFuzzer Fuzz Target: ifdfuzzer Job Type: libfuzzerasanfwupd Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x602000093160 Crash State:...

ndpi:fuzz_process_packet: Crash in ndpi_search_quic

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4992218834796544 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61a100000687 Crash State:...