Google Chrome Security Updates (stable-channel-update-for-desktop-2019-02) - Linux

Google Chrome is prone to an unspecified remote security vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

KLA11423 ACE vulnerability in Google Chrome

Inappropriate implementation vulnerability was found in V8 component of Google Chrome. Malicious users can exploit these vulnerability to execute arbitrary code. Original advisories Stable Channel Update for Desktop Exploitation Public exploits exist for this vulnerability. Related products...

Debian: Security Advisory (DSA-4386-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-7309

In the GNU C Library aka glibc or libc6 through 2.29, the memcmp function for the x32 architecture can incorrectly return zero indicating that the inputs are equal because the RDX most significant bit is mishandled...

Debian: Security Advisory (DSA-4382-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-6110

In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server or Man-in-The-Middle attacker can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred...

kimageformats/kimgio_fuzzer: Use-of-uninitialized-value in destStore64ARGB32_sse4

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5090193118330880 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...

kimageformats/kimgio_fuzzer: Use-of-uninitialized-value in XCFImageFormat::copyLayerToImage

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5650960263675904 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 72 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 72.0.3626.81 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

ResourceSpace 8.6 - 'collection_edit.php' SQL Injection

Exploit Title: ResourceSpace &redirect=yes&ref=3620&submitted=true&name=PWNED&keywords=&copy=&save=%C2%A0%C2%A0Save%C2%A0%C2%A0'...

openthread/cli-uart-received-fuzzer: Index-out-of-bounds in ot::RouterTable::IsAllocated

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5744891089387520 Project: openthread Fuzzer: libFuzzeropenthreadcli-uart-received-fuzzer Fuzz target binary: cli-uart-received-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux Cras...

imagemagick/ping_dng_fuzzer: Use-of-uninitialized-value in std::__1::basic_streambuf<char, std::__1::char_traits<char> >::xsgetn

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5662852382195712 Project: imagemagick Fuzzer: libFuzzerimagemagickpingdngfuzzer Fuzz target binary: pingdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

openh264/decoder_fuzzer: Use-of-uninitialized-value in WelsDec::CWelsDecoder::ReorderPicturesInDisplay

Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=5654741512617984 Project: openh264 Fuzzer: libFuzzeropenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: libfuzzermsanopenh264 Platform Id: linux Crash Type: Use-of-uninitialized-value...

libxls/fuzz_xls: Heap-buffer-overflow in xls_isCellTooSmall

Project: https://github.com/libxls/libxls.git Detailed report: https://oss-fuzz.com/testcase?key=5085850579238912 Project: libxls Fuzzer: afllibxlsfuzzxls Fuzz target binary: fuzzxls Job Type: aflasanlibxls Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603000002008...

readstat/fuzz_format_por: Index-out-of-bounds in read_missing_value_record

Project: https://github.com/WizardMac/ReadStat.git Detailed report: https://oss-fuzz.com/testcase?key=5652147318816768 Project: readstat Fuzzer: libFuzzerreadstatfuzzformatpor Fuzz target binary: fuzzformatpor Job Type: libfuzzerubsanreadstat Platform Id: linux Crash Type: Index-out-of-bounds Cra...

skia/api_raster_n32_canvas: Use-of-uninitialized-value in float const& SkTMin<float>

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5698138449379328 Project: skia Fuzzer: libFuzzerskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value...

Packabit project: building Nmap deb packages for Ubuntu

During the long New Year holidays 30 dec - 8 jan I started a new project: Vagrant-based Linux package builder called Packabit. I thought it might be nice to have scripts that will automatically build a Linux packages from sources and will NOT litter main system with unnecessary packages. Somethin...

Fedora 28 : kernel / kernel-headers / kernel-tools (2018-3857a8b41a)

The v4.19.5 stable update contains important fixes across the tree Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

clamav/clamav_scanmap_OLE2_fuzzer: Heap-buffer-overflow in uniq_add

Detailed report: https://oss-fuzz.com/testcase?key=5744082379341824 Project: clamav Fuzzer: aflclamavscanmapOLE2fuzzer Fuzz target binary: clamavscanmapOLE2fuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x60c000000e48 Crash State: uniqadd...

Google Chrome Security Updates (stable-channel-update-for-desktop_12-2018-12) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...