USN-3522-3 linux regression

USN-3522-1 fixed a vulnerability in the Linux kernel to address Meltdown CVE-2017-5754. Unfortunately, that update introduced a regression where a few systems failed to boot successfully. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Jann Horn...

curl/curl_fuzzer_pop3: Heap-buffer-overflow in pop3_get_message

Project: https://github.com/curl/curl.git Detailed report: https://oss-fuzz.com/testcase?key=5702643004473344 Project: curl Fuzzer: aflcurlfuzzerpop3 Fuzz target binary: curlfuzzerpop3 Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x629000013852...

libreoffice/htmlfuzzer: Negative-size-param in SwHTMLParser::DeregisterHTMLTable

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4867625260679168 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

gdal/srp_fuzzer: Heap-buffer-overflow in SRPRasterBand::IReadBlock

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6120214119841792 Project: gdal Fuzzer: libFuzzergdalsrpfuzzer Fuzz target binary: srpfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

proj4/standard_fuzzer: Stack-use-after-return in forward_4d

Detailed report: https://oss-fuzz.com/testcase?key=5020564482686976 Project: proj4 Fuzzer: libFuzzerproj4standardfuzzer Fuzz target binary: standardfuzzer Job Type: libfuzzerasanproj4 Platform Id: linux Crash Type: Stack-use-after-return READ 8 Crash Address: 0x7fe98cc70c20 Crash State: forward4d...

imagemagick/encoder_b_fuzzer: Use-of-uninitialized-value in ReadBlobString

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4831902440620032 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderbfuzzer Fuzz target binary: encoderbfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

gdal/gtiff_mmap: Stack-buffer-overflow in CPLvsnprintf

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4829988999135232 Project: gdal Fuzzer: aflgdalgtiffmmap Fuzz target binary: gtiffmmap Job Type: aflasangdal Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f176f3570c0 Crash...

Debian DLA-1234-2 : gdk-pixbuf regression update

The patch introduced in DLA-1234-1 had a problem that caused gdk-pixbuf's gif module to fail to load. For Debian 7 'Wheezy', these problems have been fixed in version 2.26.1-1+deb7u8. We recommend that you upgrade your gdk-pixbuf packages. NOTE: Tenable Network Security has extracted the precedin...

DLA-1234-2 gdk-pixbuf - regression update

Bulletin has no description...

libxml2/libxml2_xml_read_memory_fuzzer: Global-buffer-overflow in xmlParseQName

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://oss-fuzz.com/testcase?key=6683819592646656 Project: libxml2 Fuzzer: libFuzzerlibxml2xmlreadmemoryfuzzer Fuzz target binary: libxml2xmlreadmemoryfuzzer Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type:...

gdal/dxf_fuzzer: Container-overflow in OGRDXFLayer::TranslateMLEADER

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5582552531206144 Project: gdal Fuzzer: libFuzzergdaldxffuzzer Fuzz target binary: dxffuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Container-overflow READ 8 Crash Address:...

open62541/fuzz_binary_message: Heap-buffer-overflow in UA_Variant_setRangeCopy

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=6288198041862144 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type:...

llvm/llvm-isel-fuzzer--x86_64-O2: Use-after-poison in DAGCombiner::useDivRem

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=6607743608684544 Project: llvm Fuzzer: libFuzzerllvmllvm-isel-fuzzer--x8664-O2 Fuzz target binary: llvm-isel-fuzzer--x8664-O2 Job Type: libfuzzerasanllvm Platform Id: linux Crash Type:...

gdal/cad_fuzzer: Heap-buffer-overflow in DWGFileRNUMBER::GetGeometry

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5723062755393536 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

llvm/clang-fuzzer: Heap-use-after-free in clang::APValue::swap

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=6747068086353920 Project: llvm Fuzzer: libFuzzerllvmclang-fuzzer Fuzz target binary: clang-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Addres...

libreoffice/wmffuzzer: Heap-buffer-overflow in tools::Polygon emfio::EmfReader::ReadPolygon<short>

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6236945156931584 Project: libreoffice Fuzzer: libFuzzerlibreofficewmffuzzer Fuzz target binary: wmffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

SUSE-RU-2018:0028-1 Recommended update for icu

This update for icu fixes the following issue: - Fix international date/time format output a regression caused by the fix for CVE-2014-9911 bsc1037416...

gdal/cad_fuzzer: Bad-cast to CADAttdef from CADAttrib in CADLayer::addHandle

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6413960052998144 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000008164350 Crash State:...

Debian DSA-4078-1 : linux - security update (Meltdown)

Multiple researchers have discovered a vulnerability in Intel processors, enabling an attacker controlling an unprivileged process to read memory from arbitrary addresses, including from the kernel and all other processes running on the system. This specific attack has been named Meltdown and is...

USN-3430-3: Dnsmasq regression

USN-3430-2 fixed several vulnerabilities. The update introduced a new regression that breaks DNS resolution. This update addresses the problem. We apologize for the inconvenience. Original advisory details: Felix Wilhelm, Fermin J. Serna, Gabriel Campana and Kevin Hamacher discovered that Dnsmasq...