opencv/imread_fuzzer: Use-of-uninitialized-value in Imf::copyIntoFrameBuffer

Detailed report: https://oss-fuzz.com/testcase?key=5141671744897024 Project: opencv Fuzzer: libFuzzeropencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzermsanopencv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Imf::copyIntoFrameBuffer...

perfetto/trace_processor_fuzzer: Global-buffer-overflow in perfetto::trace_processor::ParseSystraceTracePoint

Project: https://android.googlesource.com/platform/external/perfetto/ Detailed report: https://oss-fuzz.com/testcase?key=5678248283865088 Project: perfetto Fuzzer: libFuzzerperfettotraceprocessorfuzzer Fuzz target binary: traceprocessorfuzzer Job Type: libfuzzerasanperfetto Platform Id: linux Cra...

capstone/fuzz_disasmnext: Use-of-uninitialized-value in X86_Intel_printInst

Detailed report: https://oss-fuzz.com/testcase?key=5755434785308672 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: X86IntelprintInst...

Debian DLA-1698-2 : file regression update

This update fixes a regression in introduced in 1:5.22+15-2+deb8u5 causing truncated output of the interpreter name, thanks to Christoph Biedl for reporting the problem and cause. For Debian 8 'Jessie', this problem has been fixed in version 1:5.22+15-2+deb8u7. We recommend that you upgrade your...

gdal/gdal_filesystem_fuzzer: Heap-buffer-overflow in CSLTokenizeString2

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5709319226523648 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

file/magic_fuzzer: Use-of-uninitialized-value in mprint

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=5634761748381696 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzermsanfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

graphicsmagick/coder_MAT_fuzzer: Use-of-uninitialized-value in IsGrayImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5717091647225856 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMATfuzzer Fuzz target binary: coderMATfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

[SECURITY] [DSA 4395-2] chromium regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4395-2 [email protected] https://www.debian.org/security/ Michael Gilbert February 26, 2019 https://www.debian.org/security/faq -...

capstone/fuzz_disasmnext: Global-buffer-overflow in is64Bit

Detailed report: https://oss-fuzz.com/testcase?key=5753298550784000 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzerasancapstone Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000000b9e194 Crash State:...

capstone/fuzz_disasmnext: Use-of-uninitialized-value in printOperand

Detailed report: https://oss-fuzz.com/testcase?key=5677996566904832 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: printOperand...

Ubuntu: Security Advisory (USN-3866-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3866-3 ghostscript regression

USN-3866-2 fixed a regression in Ghostscript. The Ghostscript update introduced a new regression that resulted in certain pages being printed with a blue background. This update fixes the problem. Original advisory details: Tavis Ormandy discovered that Ghostscript incorrectly handled certain...

USN-3866-3: Ghostscript regression

USN-3866-2 fixed a regression in Ghostscript. The Ghostscript update introduced a new regression that resulted in certain pages being printed with a blue background. This update fixes the problem. Original advisory details: Tavis Ormandy discovered that Ghostscript incorrectly handled certain...

skia/image_filter_deserialize: Heap-buffer-overflow in update_tricolor_matrix

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5680220990865408 Project: skia Fuzzer: aflskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

skia/image_filter_deserialize_width: Use-of-uninitialized-value in SkBaseShadowTessellator::stitchConcaveRings

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5686966203449344 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserializewidth Fuzz target binary: imagefilterdeserializewidth Job Type: libfuzzermsanskia Platform Id: linux Crash Type:...

openthread/radio-receive-done-fuzzer: Crash in ot::Buffer::GetNextBuffer

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5727516331868160 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux...

DSA-4395-2 chromium - regression update

Bulletin has no description...

openthread/radio-receive-done-fuzzer: Crash in ot::Ip6::UdpSocket::GetNext

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5735423085641728 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux...

openthread/radio-receive-done-fuzzer: Crash in ot::Timer::GetFireTime

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5676787198066688 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux...

openthread/radio-receive-done-fuzzer: Crash in ot::TimerScheduler::Remove

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5184402940755968 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux...