DLA-1963-2 poppler - regression update

Bulletin has no description...

[SECURITY] [DLA 1714-2] libsdl2 regression update

Package : libsdl2 Version : 2.0.2+dfsg1-6+deb8u2 CVE ID : CVE-2019-7572 CVE-2019-7573 CVE-2019-7574 CVE-2019-7575 CVE-2019-7576 CVE-2019-7577 CVE-2019-7578 CVE-2019-7635 CVE-2019-7636 CVE-2019-7637 CVE-2019-7638 The update of libsdl2 released as DLA 1714-1 led to several regressions, as reported ...

mysql-server:fuzz_stmt_fetch: Heap-buffer-overflow in net_field_length_size

Project: https://github.com/mysql/mysql-server.git Detailed Report: https://oss-fuzz.com/testcase?key=5693050621263872 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzstmtfetch Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

DLA-1714-2 libsdl2 - regression update

Bulletin has no description...

envoy:server_fuzz_test: Heap-use-after-free in Envoy::Config::DeltaSubscriptionState::getNextRequestAckless

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5707079628619776 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: serverfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

open62541:fuzz_mdns_message: Stack-buffer-overflow in _label

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=6309580862128128 Project: open62541 Fuzzing Engine: afl Fuzz Target: fuzzmdnsmessage Job Type: aflasanopen62541 Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

open62541:fuzz_json_decode_encode: Heap-buffer-overflow in Variant_decodeJson

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5744010112532480 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsondecodeencode Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

binutils:fuzz_disassemble: Global-buffer-overflow in exg_sex_discrim

Detailed Report: https://oss-fuzz.com/testcase?key=5752218594050048 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisassemble Job Type: aflasanbinutils Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000001977e78 Crash State: exgsexdiscrim decodeoperation...

binutils:fuzz_disassemble: Global-buffer-overflow in ripBits

Detailed Report: https://oss-fuzz.com/testcase?key=5701610390421504 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000002002470 Crash State: ripBits printinsn...

binutils:fuzz_disassemble: Stack-buffer-overflow in get_indirect_operand

Detailed Report: https://oss-fuzz.com/testcase?key=5663912053178368 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisassemble Job Type: aflasanbinutils Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7f4f3e03ae5a Crash State: getindirectoperand printtwoopera...

binutils:fuzz_disassemble: Global-buffer-overflow in print_insn_rx

Detailed Report: https://oss-fuzz.com/testcase?key=5640651852480512 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisassemble Job Type: aflasanbinutils Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x000001c0ae80 Crash State: printinsnrx fuzzdisassemble.c...

imagemagick:ping_mvg_fuzzer: Use-of-uninitialized-value in ClampToQuantum

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5665950904352768 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

[SECURITY] [DLA 1953-2] clamav regression update

Package : clamav Version : 0.101.4+dfsg-0+deb8u2 CVE ID : CVE-2019-12625 CVE-2019-12900 Debian Bug : 942172 The update of clamav released as DLA 1953-1 led to permission issues on /var/run/clamav. This caused several users to experience issues restarting the clamav daemon. This regression is caus...

imagemagick:encoder_pict_fuzzer: Use-of-uninitialized-value in ConstrainColormapIndex

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5702521957384192 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpictfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

imagemagick:encoder_xpm_fuzzer: Use-of-uninitialized-value in ParseXPMColor

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5736863532318720 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderxpmfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

imagemagick:ping_gif_fuzzer: Use-of-uninitialized-value in InterpretLocaleValue

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5117184281411584 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pinggiffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

DLA-1713-2 libsdl1.2 - regression update

Bulletin has no description...

DLA-1953-2 clamav - regression update

Bulletin has no description...

imagemagick:encoder_mvg_fuzzer: Use-of-uninitialized-value in DrawPrimitive

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5033441388658688 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

imagemagick:ping_ptif_fuzzer: Heap-buffer-overflow in TIFFGetProfiles

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5638770103156736 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingptiffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...