libaom/av1_dec_fuzzer_threaded: Index-out-of-bounds in decode_block

Detailed report: https://oss-fuzz.com/testcase?key=5701398971809792 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzerthreaded Fuzz target binary: av1decfuzzerthreaded Job Type: libfuzzerubsanlibaom Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: decodeblock...

librawspeed/TiffDecoderFuzzer-ArwDecoder: Use-of-uninitialized-value in rawspeed::TiffIFD::TiffIFD

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5961764976984064 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-ArwDecoder Fuzz target binary: TiffDecoderFuzzer-ArwDecoder Job Type: libfuzzermsanlibrawspeed Platform Id:...

capstone/fuzz_disasmmaster: Use-of-uninitialized-value in update_pub_insn

Detailed report: https://oss-fuzz.com/testcase?key=5956930588639232 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmmaster Fuzz target binary: fuzzdisasmmaster Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: updatepubinsn...

CVE-2018-8016

The default configuration in Apache Cassandra 3.8 through 3.11.1 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request. This issue is a regression of CVE-2015-0225. The regression was introduced in...

Default configuration

The default configuration in Apache Cassandra 3.8 through 3.11.1 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request. This issue is a regression of CVE-2015-0225. The regression was introduced in...

CVE-2018-8016

The default configuration in Apache Cassandra 3.8 through 3.11.1 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request. This issue is a regression of CVE-2015-0225. The regression was introduced in...

Security update for MozillaFirefox (important)

This security update for MozillaFirefox to version 60.1.0esr fixes multiple issues. Security issues fixed MFSA 2018-16, boo1098998: - CVE-2018-12359: Buffer overflow using computed size of canvas element - CVE-2018-12360: Use-after-free when using focus - CVE-2018-12361: Integer overflow in...

gdal/gdal_filesystem_fuzzer: Heap-double-free in RMFDataset::~RMFDataset

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6231231090917376 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-double-free Crash Address:...

Debian DLA-1400-2 : tomcat7 regression update

The security update of Tomcat 7 announced as DLA-1400-1 introduced a regression for applications that make use of the Equinox OSGi framework. The MANIFEST file of tomcat-jdbc.jar in libtomcat7-java contains an invalid version number which was automatically derived from the Debian package version...

CVE-2018-8016

The default configuration in Apache Cassandra 3.8 through 3.11.1 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request. This issue is a regression of CVE-2015-0225. The regression was introduced in...

libwebp/fuzz_demux_api: Heap-buffer-overflow in GetLE24

Project: https://chromium.googlesource.com/webm/libwebp Detailed report: https://oss-fuzz.com/testcase?key=5095485239984128 Project: libwebp Fuzzer: libFuzzerlibwebpfuzzdemuxapi Fuzz target binary: fuzzdemuxapi Job Type: libfuzzerasanlibwebp Platform Id: linux Crash Type: Heap-buffer-overflow REA...

skia/api_draw_functions: Use-of-uninitialized-value in sse2::store_bgra

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5682031139749888 Project: skia Fuzzer: libFuzzerskiaapidrawfunctions Fuzz target binary: apidrawfunctions Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libwebp/fuzz_demux_api: Heap-buffer-overflow in PutLE16

Project: https://chromium.googlesource.com/webm/libwebp Detailed report: https://oss-fuzz.com/testcase?key=6323357770317824 Project: libwebp Fuzzer: libFuzzerlibwebpfuzzdemuxapi Fuzz target binary: fuzzdemuxapi Job Type: libfuzzerasanlibwebp Platform Id: linux Crash Type: Heap-buffer-overflow WRI...

graphicsmagick/coder_JPEG_fuzzer: Use-of-uninitialized-value in ReadJPEGImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=6507454866128896 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderJPEGfuzzer Fuzz target binary: coderJPEGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

libwebp/fuzz_advanced_api: Heap-buffer-overflow in ApplyFilter

Project: https://chromium.googlesource.com/webm/libwebp Detailed report: https://oss-fuzz.com/testcase?key=5091562122903552 Project: libwebp Fuzzer: libFuzzerlibwebpfuzzadvancedapi Fuzz target binary: fuzzadvancedapi Job Type: libfuzzerasanlibwebp Platform Id: linux Crash Type: Heap-buffer-overfl...

libaom/av1_dec_fuzzer_threaded: Crash in av1_read_coeffs_txb

Detailed report: https://oss-fuzz.com/testcase?key=6316906746216448 Project: libaom Fuzzer: afllibaomav1decfuzzerthreaded Fuzz target binary: av1decfuzzerthreaded Job Type: aflasanlibaom Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x3fe0c39ced34 Crash State: av1readcoeffstxb...

freetype2/ftfuzzer: Crash in [heap]

Project: https://github.com/freetype/freetype2-testing.git Detailed report: https://oss-fuzz.com/testcase?key=6207154074681344 Project: freetype2 Fuzzer: libFuzzerfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: libfuzzerubsanfreetype2 Platform Id: linux Crash Type: UNKNOWN READ Crash...

freetype2/ftfuzzer: Crash in TT_Load_Glyph_Header

Project: https://github.com/freetype/freetype2-testing.git Detailed report: https://oss-fuzz.com/testcase?key=6025339888205824 Project: freetype2 Fuzzer: libFuzzerfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: libfuzzerubsanfreetype2 Platform Id: linux Crash Type: UNKNOWN READ Crash...

samba security and bug fix update

3.6.23-51.0.1 - Remove use-after-free talloctos inlined function problem John Haxby orabug 18253258 3.6.24-51 - resolves: 1513877 - Fix memory leak in winbind 3.6.24-50 - resolves: 1553018 - Fix CVE-2018-1050 3.6.24-49 - resolves: 1536053 - Fix regression with non-wide symlinks to directories...

poppler/pdf_fuzzer: Use-of-uninitialized-value in SplashOutputDev::updateLineDash

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5837508351885312 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...