qt:qtbase_gui_text_qtextdocument_sethtml: Crash with empty stacktrace

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=4920551225294848 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbaseguitextqtextdocumentsethtml Job Type: libfuzzerasanqt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f5b6ee71f60 Crash...

uwebsockets:EpollHelloWorld: Heap-use-after-free in us_socket_close

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=5872969584869376 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: EpollHelloWorld Job Type: libfuzzerasanuwebsockets Platform Id: linux Crash Type: Heap-use-after-free READ 8 Cras...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2021-27219

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function gbytesnew has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption...

qt:qtsvg_svg_qsvgrenderer_render: Crash in qpaintengineex_moveTo

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=6305231065448448 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtsvgsvgqsvgrendererrender Job Type: libfuzzerasani386qt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x26800000 Crash State:...

CVE-2020-16120

The CVE-2020-16120 issue concerns Overlayfs in the Linux kernel where permission checks during copy-up were inadequate when used inside a user namespace. It was introduced in kernel 4.19 (ovl: stack file ops) and fixed in kernel 5.8 by patches that verify permissions in ovl_path_open(), switch to...

USN-4668-3: python-apt regression | Cloud Foundry

Severity Unknown Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Description USN-4668-1 fixed vulnerabilities in python-apt. The update caused a regression when using certain APIs with a file handle. This update fixes the problem. We apologize for the inconvenience. Original...

USN-4660-2: Linux kernel regression | Cloud Foundry

Severity Unknown Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Description USN-4660-1 fixed vulnerabilities in the Linux kernel. Unfortunately, that update introduced a regression in the software raid10 driver when used with fstrim that could lead to data corruption. This updat...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Firefox regression (USN-4717-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4717-2 advisory. USN-4717-1 fixed vulnerabilities in Firefox. The update caused a startup hang in some circumstances. This update fixes the problem. We...

harfbuzz:hb-shape-fuzzer: Use-of-uninitialized-value in _hb_ot_shape_fallback_mark_position_recategorize_marks

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=4936973150191616 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-shape-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

poppler:pdf_draw_fuzzer: Heap-buffer-overflow in cairo_cff_parse_charstring

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5620392213479424 Project: poppler Fuzzing Engine: afl Fuzz Target:...

libusb:libusb_fuzzer: Heap-buffer-overflow in libusb.h

Project: https://github.com/libusb/libusb.git Detailed Report: https://oss-fuzz.com/testcase?key=6206537439772672 Project: libusb Fuzzing Engine: libFuzzer Fuzz Target: libusbfuzzer Job Type: libfuzzerasanlibusb Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

libtsm:libtsm_fuzzer: Global-buffer-overflow in vte_write_debug

Project: git://people.freedesktop.org/dvdhrm/libtsm Detailed Report: https://oss-fuzz.com/testcase?key=4777147526938624 Project: libtsm Fuzzing Engine: libFuzzer Fuzz Target: libtsmfuzzer Job Type: libfuzzerasanlibtsm Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

ndpi:fuzz_ndpi_reader: Crash in reassembly_fragment

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4830951580499968 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerubsanndpi Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000101d387cf Crash State:...

matio:matio_fuzzer: Crash in Mat_H5ReadFieldNames

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=6375994267140096 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerubsanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash...

glibc, nscd security update

CentOS Errata and Security Advisory CESA-2021:0348 An update for glibc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

matio:matio_fuzzer: Use-of-uninitialized-value in H5G_visit_cb

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=5719600757080064 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

Simple Trend and Anomaly Detection with SQL

Introduction Have you ever wondered if you can detect highlights based on your data using only your database engine? Well, the answer is yes. Simple trend detection and anomaly detection can be done with SQL. In fact, in many cases it may be enough for your needs, and save you the trouble of usin...

Moderate: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

USN-4712-1: Linux kernel regression

USN-4576-1 fixed a vulnerability in the overlay file system implementation in the Linux kernel. Unfortunately, that fix introduced a regression that could incorrectly deny access to overlay files in some situations. This update fixes the problem. We apologize for the inconvenience. Original...