USN-3722-5 clamav regression

USN-3722-1 fixed vulnerabilities in ClamAV. The new package introduced an issue which caused dpkg-reconfigure to enter an infinite loop. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that ClamAV incorrectly handled parsing certain...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : ClamAV regression (USN-3722-5)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3722-5 advisory. USN-3722-1 fixed vulnerabilities in ClamAV. The new package introduced an issue which caused dpkg- reconfigure to enter an infinite loop...

USN-3761-3: Firefox regressions

USN-3761-1 fixed vulnerabilities in Firefox. The update caused several regressions affecting spellchecker dictionaries and search engines, which were partially fixed by USN-3761-2. This update contains the remaining fix. We apologize for the inconvenience. Original advisory details: Multiple...

skia/region_set_path: Heap-buffer-overflow in SkRgnBuilder::blitH

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5727543865376768 Project: skia Fuzzer: aflskiaregionsetpath Fuzz target binary: regionsetpath Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

imagemagick/encoder_icon_fuzzer: Use-of-uninitialized-value in PushColormapIndex

Detailed report: https://oss-fuzz.com/testcase?key=5657487311634432 Project: imagemagick Fuzzer: libFuzzerimagemagickencodericonfuzzer Fuzz target binary: encodericonfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

skia/api_image_filter: Use-of-uninitialized-value in SkPoint::Length

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5764004446732288 Project: skia Fuzzer: libFuzzerskiaapiimagefilter Fuzz target binary: apiimagefilter Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

skia/api_image_filter: Use-of-uninitialized-value in SkDescriptor::operator==

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5716699072954368 Project: skia Fuzzer: libFuzzerskiaapiimagefilter Fuzz target binary: apiimagefilter Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

harfbuzz/hb-shape-fuzzer: Use-of-uninitialized-value in int OT::IntType<unsigned int, 4u>::cmp<OT::Tag>

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5674361600606208 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type:...

skia/api_raster_n32_canvas: Heap-buffer-overflow in SkPath::Iter::doNext

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5758855720468480 Project: skia Fuzzer: aflskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address...

skia/api_null_canvas: Use-of-uninitialized-value in SkPath::Iter::consumeDegenerateSegments

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5690157047480320 Project: skia Fuzzer: libFuzzerskiaapinullcanvas Fuzz target binary: apinullcanvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Addres...

skia/api_mock_gpu_canvas: Use-of-uninitialized-value in SkRect::setBoundsCheck

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5695147799478272 Project: skia Fuzzer: libFuzzerskiaapimockgpucanvas Fuzz target binary: apimockgpucanvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

harfbuzz/hb-subset-get-codepoints-fuzzer: Heap-buffer-overflow in OT::TableRecord::cmp

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5630904853069824 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-subset-get-codepoints-fuzzer Fuzz target binary: hb-subset-get-codepoints-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux...

harfbuzz/hb-subset-get-codepoints-fuzzer: Use-of-uninitialized-value in OT::OffsetTo<OT::ArrayOfM1<OT::ResourceTypeRecord, OT::IntType<unsigned short, 2

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5736539338833920 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-subset-get-codepoints-fuzzer Fuzz target binary: hb-subset-get-codepoints-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux...

harfbuzz/hb-shape-fuzzer: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5696686572175360 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow...

skia/api_image_filter: Heap-buffer-overflow in SkPathRef::Iter::next

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5728987444150272 Project: skia Fuzzer: aflskiaapiimagefilter Fuzz target binary: apiimagefilter Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

skia/api_raster_n32_canvas: Global-buffer-overflow in SkPathPriv::OppositeFirstDirection

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5765837659570176 Project: skia Fuzzer: aflskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: aflasanskia Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash...

skia/api_raster_n32_canvas: Heap-use-after-free in SkPath::reverseAddPath

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5721515274797056 Project: skia Fuzzer: aflskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: aflasanskia Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

skia/api_image_filter: Use-of-uninitialized-value in pts_in_verb

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5648626592776192 Project: skia Fuzzer: libFuzzerskiaapiimagefilter Fuzz target binary: apiimagefilter Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

xmlsec/xmlsec_fuzzer: Heap-use-after-free in xmlStrndup

Project: https://github.com/lsh123/xmlsec.git Detailed report: https://oss-fuzz.com/testcase?key=5630952466808832 Project: xmlsec Fuzzer: libFuzzerxmlsecfuzzer Fuzz target binary: xmlsecfuzzer Job Type: libfuzzerasanxmlsec Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

Ubuntu 18.04 LTS : OpenJDK 10 regression (USN-3747-2)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3747-2 advisory. USN-3747-1 fixed vulnerabilities in OpenJDK 10 for Ubuntu 18.04 LTS. Unfortunately, that update introduced a regression around accessability support that prevente...