SUSE SLES11 Security Update : xen (SUSE-SU-2019:14063-1) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)

This update for xen fixes the following issues : Four new speculative execution information leak issues have been identified in Intel CPUs. bsc1111331 CVE-2018-12126: Microarchitectural Store Buffer Data Sampling MSBDS CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling MFBDS...

SUSE SLES12 Security Update : xen (SUSE-SU-2019:1349-1) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)

This update for xen fixes the following issues : Four new speculative execution information leak issues have been identified in Intel CPUs. bsc1111331 CVE-2018-12126: Microarchitectural Store Buffer Data Sampling MSBDS CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling MFBDS...

gdal/gtiff_mmap: Crash in DumpModeDecode

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5743325837000704 Project: gdal Fuzzer: libFuzzergdalgtiffmmap Fuzz target binary: gtiffmmap Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000a30fc38 Crash...

karchive/karchive_fuzzer: Heap-buffer-overflow in KGzipFilter::uncompress_noop

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5658355747520512 Project: karchive Fuzzer: libFuzzerkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: libfuzzerasankarchive Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Addres...

karchive/karchive_fuzzer: Heap-buffer-overflow in inflate_fast

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5726433327972352 Project: karchive Fuzzer: aflkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: aflasankarchive Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

hostap/p2p-fuzzer-action: Use-of-uninitialized-value in p2p_send_action

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5679294988156928 Project: hostap Fuzzer: libFuzzerhostapp2p-fuzzer-action Fuzz target binary: p2p-fuzzer-action Job Type: libfuzzermsanhostap Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

hostap/ap-mgmt-fuzzer: Heap-buffer-overflow in ssid_match

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5206623624101888 Project: hostap Fuzzer: libFuzzerhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: libfuzzerasanhostap Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

Design/Logic Flaw

DISPUTED It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory...

harfbuzz/hb-subset-fuzzer: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5761434614497280 Project: harfbuzz Fuzzer: aflharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Cra...

CVE-2019-10143

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally...

CVE-2019-10143

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally...

gdal/gdal_translate_fuzzer: Heap-buffer-overflow in GTiffRasterBand::IReadBlock

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5764371029950464 Project: gdal Fuzzer: libFuzzergdaltranslatefuzzer Fuzz target binary: gdaltranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

imagemagick/encoder_ptif_fuzzer: Heap-buffer-overflow in PushShortPixel

Detailed report: https://oss-fuzz.com/testcase?key=5722372625137664 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderptiffuzzer Fuzz target binary: encoderptiffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61d000004e84...

Virtuozzo Linux Errata and Security Advisory 2019:1228 Important

Upstream security update. Follow RHSA-2019:1228 for details...

kimageformats/kimgio_kra_fuzzer: Use-of-uninitialized-value in QString::vasprintf

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5763219051773952 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgiokrafuzzer Fuzz target binary: kimgiokrafuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...

imagemagick/encoder_tiff_fuzzer: Use-of-uninitialized-value in HalfToSinglePrecision

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5640152724013056 Project: imagemagick Fuzzer: libFuzzerimagemagickencodertifffuzzer Fuzz target binary: encodertifffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

openthread/ncp-uart-received-fuzzer: Stack-buffer-overflow in ot::Ip6::OptionPadN::Init

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5768121945686016 Project: openthread Fuzzer: libFuzzeropenthreadncp-uart-received-fuzzer Fuzz target binary: ncp-uart-received-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash...

harfbuzz/hb-subset-fuzzer: Stack-use-after-return in bool OT::Coverage::serialize<hb_map_iter_t<hb_map_iter_t<hb_filter_iter_t<OT::Co

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5634197349203968 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type:...

sqlite3/ossfuzz: Use-of-uninitialized-value in sqlite3VdbeMemValidStrRep

Detailed report: https://oss-fuzz.com/testcase?key=5678870243573760 Project: sqlite3 Fuzzer: libFuzzersqlite3ossfuzz Fuzz target binary: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: sqlite3VdbeMemValidStrRep...

gdal/mrf_fuzzer: Heap-buffer-overflow in ExpandPacked8ToByte1

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5645695916179456 Project: gdal Fuzzer: aflgdalmrffuzzer Fuzz target binary: mrffuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x7f4b21b43800 Crash...