DLA-2742-2 ffmpeg - regression update

Bulletin has no description...

c-blosc2:decompress_frame_fuzzer: Crash in blosclz_decompress

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=6715676101312512 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzermsanc-blosc2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x72d0000200...

nginx:http_request_fuzzer: Heap-use-after-free in ngx_http_free_request

Detailed Report: https://oss-fuzz.com/testcase?key=4589016058560512 Project: nginx Fuzzing Engine: libFuzzer Fuzz Target: httprequestfuzzer Job Type: libfuzzerasannginx Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x603000008930 Crash State: ngxhttpfreerequest...

SUSE-RU-2021:2780-1 Recommended update for cpio

This update for cpio fixes the following issues: - A regression in the previous update could lead to crashes bsc1189465...

SUSE-RU-2021:2779-1 Recommended update for cpio

This update for cpio fixes the following issues: - A regression in the previous update could lead to crashes bsc1189465...

harfbuzz:hb-subset-fuzzer: Heap-buffer-overflow in hb_array_t<OT::IntType<unsigned int, 4u> const> hb_array_t<OT::IntType<unsigned

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5443213648330752 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

imagemagick:crop_fuzzer: Use-of-uninitialized-value in LibRaw::copy_bayer

Detailed Report: https://oss-fuzz.com/testcase?key=4695663416836096 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::copybayer LibRaw::raw2imageex...

frr:zebra: Stack-buffer-overflow in netlink_parse_rtattr

Project: https://github.com/FRRouting/frr.git Detailed Report: https://oss-fuzz.com/testcase?key=4825168559079424 Project: frr Fuzzing Engine: libFuzzer Fuzz Target: zebra Job Type: libfuzzerasanfrr Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7ffd93ba90e0 Crash...

USN-3809-2 openssh regression

USN-3809-1 fixed vulnerabilities in OpenSSH. The update for CVE-2018-15473 was incomplete and could introduce a regression in certain environments. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Robert Swiecki discovered that OpenSSH incorrectly...

USN-3809-2: OpenSSH regression

USN-3809-1 fixed vulnerabilities in OpenSSH. The update for CVE-2018-15473 was incomplete and could introduce a regression in certain environments. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Robert Swiecki discovered that OpenSSH incorrectly...

frr:zebra: Heap-buffer-overflow in if_lookup_by_name_all_vrf

Project: https://github.com/FRRouting/frr.git Detailed Report: https://oss-fuzz.com/testcase?key=4881809329487872 Project: frr Fuzzing Engine: libFuzzer Fuzz Target: zebra Job Type: libfuzzerasanfrr Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6060000000b5 Crash State...

Ubuntu 18.04 LTS : OpenSSH regression (USN-3809-2)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3809-2 advisory. USN-3809-1 fixed vulnerabilities in OpenSSH. The update for CVE-2018-15473 was incomplete and could introduce a regression in certain environments. This update...

sudoers:fuzz_policy: Heap-double-free in sudoers_gc_run

Detailed Report: https://oss-fuzz.com/testcase?key=6578829878493184 Project: sudoers Fuzzing Engine: libFuzzer Fuzz Target: fuzzpolicy Job Type: libfuzzerasansudoers Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x602000009df0 Crash State: sudoersgcrun fuzzpolicy.c resolveeditor...

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.parser.DefaultJSONParser.parseObject

Detailed Report: https://oss-fuzz.com/testcase?key=6740618612178944 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

RLSA-2021:3088 Important: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: race condition in net/can/bcm.c leads to local privilege escalation CVE-2021-3609 kernel: Improper handling of VMIO|VMPFNMAP vmas ...

net-snmp:snmp_config_fuzzer: Heap-buffer-overflow in read_config

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5986401836466176 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpconfigfuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type:...

spice-usbredir:usbredirparserfuzz: Heap-use-after-free in usbredirparser_serialize

Project: https://gitlab.freedesktop.org/spice/usbredir.git Detailed Report: https://oss-fuzz.com/testcase?key=6119613912973312 Project: spice-usbredir Fuzzing Engine: libFuzzer Fuzz Target: usbredirparserfuzz Job Type: libfuzzerasanspice-usbredir Platform Id: linux Crash Type: Heap-use-after-free...

libraw:libraw_cr2_fuzzer: Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5715372086001664 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

ghostscript:gstoraster_fuzzer: Heap-use-after-free in gx_pattern_accum_finalize_cw

Detailed Report: https://oss-fuzz.com/testcase?key=5001924767252480 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6230000039a0 Crash State:...

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.parser.DefaultJSONParser.parseObject

Detailed Report: https://oss-fuzz.com/testcase?key=4938553908920320 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...