SUSE-SU-2019:0931-1 Security update for openldap2

This update for openldap2 fixes the following issues: Security issues fixed: - CVE-2017-9287: A double free vulnerability in the mdb backend during search with page size 0 was fixed bsc1041764. - CVE-2017-17740: Fixed a denial of service slapd crash via a member MODDN operation that could have be...

capstone/fuzz_disasmnext: Index-out-of-bounds in printVectorIndex

Detailed report: https://oss-fuzz.com/testcase?key=4786506255826944 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzerubsancapstone Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: printVectorIndex csdisas...

capstone/fuzz_disasmnext: Index-out-of-bounds in printVectorIndex

Detailed report: https://oss-fuzz.com/testcase?key=5644198205718528 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzerubsancapstone Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: printVectorIndex...

Grasp the window of opportunity: see how do I get Chrome 1-day vulnerabilities and achieve the use-vulnerability warning-the black bar safety net

Overview For Chrome to say, when the discovery of a vulnerability, the first in the v8 source tree to be repaired, and then re-release a new stable version of Chrome, and in both during the process, the attacker can completely for a particular vulnerability, the development of a usable exploit...

systemd/fuzz-netdev-parser: Use-of-uninitialized-value in explicit_bzero_safe

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5189307683307520 Project: systemd Fuzzer: libFuzzersystemdfuzz-netdev-parser Fuzz target binary: fuzz-netdev-parser Job Type: libfuzzermsansystemd Platform Id: linux Crash Type:...

lwan/request_fuzzer: Global-buffer-overflow in parse_headers

Project: git://github.com/lpereira/lwan Detailed report: https://oss-fuzz.com/testcase?key=5673683021987840 Project: lwan Fuzzer: afllwanrequestfuzzer Fuzz target binary: requestfuzzer Job Type: aflasanlwan Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x0000012320ff...

Debian DLA-1753-3 : proftpd-dfsg regression update

The update of proftpd-dfsg issued as DLA-1753-1 caused a regression when the creation of a directory failed during sftp transfer. The sftp session would be terminated instead of failing gracefully due to a non-existing debug logging function. For Debian 8 'Jessie', this problem has been fixed in...

radare2/ia_fuzz: Heap-buffer-overflow in r_buf_cpy

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5651817880354816 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

opencv/imdecode_fuzzer: Incorrect-function-pointer-type in cv::Mat::convertTo

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5643625308880896 Project: opencv Fuzzer: libFuzzerimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: libfuzzerubsanopencv Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash...

gdal/srp_fuzzer: Heap-use-after-free in Curl_llist_remove

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5145526598631424 Project: gdal Fuzzer: aflgdalsrpfuzzer Fuzz target binary: srpfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61b0000012e0 Crash...

libreoffice/slkfuzzer: Global-buffer-overflow in ScAttrArray::GetDoc

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5673715972440064 Project: libreoffice Fuzzer: libFuzzerlibreofficeslkfuzzer Fuzz target binary: slkfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

libreoffice/slkfuzzer: Heap-buffer-overflow in std::__1::vector<mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5754291572178944 Project: libreoffice Fuzzer: libFuzzerlibreofficeslkfuzzer Fuzz target binary: slkfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

libreoffice/qpwfuzzer: Global-buffer-overflow in std::__1::unique_ptr<ScAttrArray, std::__1::default_delete<ScAttrArray> >::opera

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5728133946277888 Project: libreoffice Fuzzer: afllibreofficeqpwfuzzer Fuzz target binary: qpwfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Global-buffer-overflow READ 8...

libreoffice/slkfuzzer: Global-buffer-overflow in mdds::multi_type_vector<mdds::mtv::custom_block_func1<mdds::mtv::noncopyable_man

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5665026985164800 Project: libreoffice Fuzzer: libFuzzerlibreofficeslkfuzzer Fuzz target binary: slkfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

libreoffice/diffuzzer: Heap-buffer-overflow in std::__1::unique_ptr<ScColumn, std::__1::default_delete<ScColumn> >::operator*

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5661196948078592 Project: libreoffice Fuzzer: libFuzzerlibreofficediffuzzer Fuzz target binary: diffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

CVE-2019-10871

An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc...

OPENSUSE-SU-2019:1141-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2019-7175: Fixed multiple memory leaks in DecodeImage function bsc1128649. - CVE-2018-18544: Fixed a memory leak in the function WriteMSLImage bsc1113064. - CVE-2018-20467: Fixed an infinite loop in coders/bmp.c...

php/php-fuzz-exif: Heap-buffer-overflow in _estrndup

Detailed report: https://oss-fuzz.com/testcase?key=5740255098961920 Project: php Fuzzer: libFuzzerphpphp-fuzz-exif Fuzz target binary: php-fuzz-exif Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6120000032e0 Crash State: estrndup...

Security update for ImageMagick (moderate)

openSUSE Security Update: Security update for ImageMagick Announcement ID: openSUSE-SU-2019:1141-1 Rating: moderate References: 1106415 1106996 1113064 1120381 1124365 1124366 1124367 1124368 1128649 Cross-References: CVE-2018-16412 CVE-2018-18544 CVE-2018-20467 CVE-2019-7175 CVE-2019-7395...

kimageformats/kimgio_fuzzer: Use-of-uninitialized-value in QPngHandlerPrivate::readPngImage

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5660050997116928 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...