Debian DSA-4118-1 : tomcat-native - security update

Jonas Klempel reported that tomcat-native, a library giving Tomcat access to the Apache Portable Runtime APR library's network connection socket implementation and random-number generator, does not properly handle fields longer than 127 bytes when parsing the AIA-Extension field of a client...

libreoffice/pptfuzzer: Heap-use-after-free in SdrObject::RemoveListener

Detailed report: https://oss-fuzz.com/testcase?key=5653960519057408 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61500015b3d8 Crash State:...

chakra: Stack-use-after-scope in char16_t const* PlatformAgnostic::Intl::FormatNumber<int>

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=6197060945575936 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: Stack-use-after-scope READ 3 Crash Address: 0x7f3d2ffda0c0 Crash State: char16t const...

Stable Channel Update for Desktop

The stable channel has been updated to 64.0.3282.167 for Mac & Linux, and 64.0.3282.167/168 for Windows, which will roll out over the coming days/weeks. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We wil...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in pdf_parse_file_spec

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5996991491342336 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

imagemagick/encoder_mpc_fuzzer: Use-of-uninitialized-value in GetEXIFProperty

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5736450319450112 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermpcfuzzer Fuzz target binary: encodermpcfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

graphicsmagick/coder_PICT_fuzzer: Unknown signal in DestroyCacheInfo

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=6624475274543104 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPICTfuzzer Fuzz target binary: coderPICTfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

skia/image_filter_deserialize: Crash in void add_coverage_delta_segment<true, SkCoverageDeltaList>

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=6370761758474240 Project: skia Fuzzer: aflskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: aflasanskia Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

graphicsmagick/coder_PICT_fuzzer: Unknown signal in _int_free

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5537542532235264 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPICTfuzzer Fuzz target binary: coderPICTfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

[SECURITY] [DSA 4108-1] mailman security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4108-1 [email protected] https://www.debian.org/security/ Thijs Kinkhorst February 09, 2018 https://www.debian.org/security/faq -...

yara/dex_fuzzer: Heap-buffer-overflow in dex_parse

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=5104899873308672 Project: yara Fuzzer: aflyaradexfuzzer Fuzz target binary: dexfuzzer Job Type: aflasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x62e0000178f8...

imagemagick/encoder_mvg_fuzzer: Heap-buffer-overflow in FileToBlob

Detailed report: https://oss-fuzz.com/testcase?key=4892658276237312 Project: imagemagick Fuzzer: aflimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE \ Crash Address: 0x63200002c801 Crash State:...

graphicsmagick/coder_PCD_fuzzer: Unknown signal in AllocateThreadViewDataSet

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=6010870208397312 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPCDfuzzer Fuzz target binary: coderPCDfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

libreoffice/htmlfuzzer: Heap-use-after-free in SwTextFootnote::GetTextNode

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4530720392347648 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

graphicsmagick/coder_PCT_fuzzer: Unknown signal in _int_free

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4950737256710144 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPCTfuzzer Fuzz target binary: coderPCTfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

graphicsmagick/coder_PCT_fuzzer: Unknown signal in cfree

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=6411297525596160 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPCTfuzzer Fuzz target binary: coderPCTfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

graphicsmagick/coder_PCT_fuzzer: Unknown signal in _int_memalign

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4832092207710208 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPCTfuzzer Fuzz target binary: coderPCTfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

graphicsmagick/coder_ICB_fuzzer: Unknown signal in ReadTGAImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=6292642611593216 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderICBfuzzer Fuzz target binary: coderICBfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

chakra: Heap-use-after-free in WScriptJsrt::LoadScript

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=5682962172477440 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x611000044bc0 Crash State: WScriptJsrt::LoadScri...

KLA11188 Unspecified vulnerability in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service and perform unspecified attacks. Below is a complete list of vulnerabilities: 1. A data validation vulnerability in the...