gdal/gdal_fuzzer: Heap-use-after-free in GDALDataset::Reference

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5764663096115200 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x6160000060...

wireshark/fuzzshark_ip: Crash in wmem_strdup_printf

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5743803647918080 Project: wireshark Fuzzer: aflwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: aflasanwireshark Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

perfetto/trace_processor_fuzzer: Crash in perfetto::trace_processor::ProtoTraceParser::ParseTypedFtraceToRaw

Project: https://android.googlesource.com/platform/external/perfetto/ Detailed report: https://oss-fuzz.com/testcase?key=5740416861732864 Project: perfetto Fuzzer: libFuzzerperfettotraceprocessorfuzzer Fuzz target binary: traceprocessorfuzzer Job Type: libfuzzerasanperfetto Platform Id: linux Cra...

Fedora 28 : firefox (2019-0a381a82de)

Updated to latest upstream 65.0.2 - Disabled Mozilla Crashreporter to get Wayland crashes by ABRT ---- - new upstream version with skia and other security fixes - details at https://www.mozilla.org/en-US/security/advisories/mfsa20 19-05/ Note that Tenable Network Security has extracted the...

Updated kernel packages fix security vulnerability

This kernel update is based on the upstream 4.14.104 and fixes at least the following security issue: Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware...

radare2/ia_fuzz: Heap-use-after-free in sdb_free

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5637729364213760 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

imagemagick/encoder_mat_fuzzer: Heap-use-after-free in ReadImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5721754591297536 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermatfuzzer Fuzz target binary: encodermatfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

[SECURITY] [DLA 1707-1] symfony security update

Package : symfony Version : 2.3.21+dfsg-4+deb8u4 CVE ID : CVE-2017-16652 CVE-2017-16654 CVE-2018-11385 CVE-2018-11408 CVE-2018-14773 CVE-2018-19789 CVE-2018-19790 Several security vulnerabilities have been discovered in symfony, a PHP web application framework. Numerous symfony components are...

openthread/ip6-send-fuzzer: Stack-buffer-overflow in ot::MeshCoP::ChannelMaskEntry::GetMask

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5629736728920064 Project: openthread Fuzzer: aflopenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow...

polkit security update

CentOS Errata and Security Advisory CESA-2019:0230 An update for polkit is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

libheif/file-fuzzer: Heap-buffer-overflow in derive_spatial_luma_vector_prediction

Detailed report: https://oss-fuzz.com/testcase?key=5639769940295680 Project: libheif Fuzzer: afllibheiffile-fuzzer Fuzz target binary: file-fuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x61b000000640 Crash State:...

tesseract-ocr/fuzzer-api: Index-out-of-bounds in IntegerMatcher::UpdateTablesForFeature

Detailed report: https://oss-fuzz.com/testcase?key=5758158432108544 Project: tesseract-ocr Fuzzer: libFuzzertesseract-ocrfuzzer-api Fuzz target binary: fuzzer-api Job Type: libfuzzerubsantesseract-ocr Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

libheif/file-fuzzer: Index-out-of-bounds in decoder_context::has_sps

Project: https://github.com/strukturag/libheif.git Detailed report: https://oss-fuzz.com/testcase?key=5687672851398656 Project: libheif Fuzzer: libFuzzerlibheiffile-fuzzer Fuzz target binary: file-fuzzer Job Type: libfuzzerubsanlibheif Platform Id: linux Crash Type: Index-out-of-bounds Crash...

ffmpeg/ffmpeg_AV_CODEC_ID_MPEG4_fuzzer: Heap-buffer-overflow in mpeg4_decode_studio_block

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5769760178962432 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDMPEG4fuzzer Fuzz target binary: ffmpegAVCODECIDMPEG4fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

opencv/imread_fuzzer: Use-of-uninitialized-value in Imf::copyIntoFrameBuffer

Detailed report: https://oss-fuzz.com/testcase?key=5141671744897024 Project: opencv Fuzzer: libFuzzeropencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzermsanopencv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Imf::copyIntoFrameBuffer...

perfetto/trace_processor_fuzzer: Global-buffer-overflow in perfetto::trace_processor::ParseSystraceTracePoint

Project: https://android.googlesource.com/platform/external/perfetto/ Detailed report: https://oss-fuzz.com/testcase?key=5678248283865088 Project: perfetto Fuzzer: libFuzzerperfettotraceprocessorfuzzer Fuzz target binary: traceprocessorfuzzer Job Type: libfuzzerasanperfetto Platform Id: linux Cra...

openh264/decoder_fuzzer: Heap-use-after-free in WelsDec::MapColToList0

Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=5730627922427904 Project: openh264 Fuzzer: libFuzzeropenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: Heap-use-after-free READ 4...

gdal/gdal_filesystem_fuzzer: Heap-buffer-overflow in CSLTokenizeString2

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5709319226523648 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

Moderate: Red Hat Security Advisory: ansible security and bug fix update

An update for ansible is now available for Ansible Engine 2.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Moderate: Red Hat Security Advisory: ansible security and bug fix update

An update for ansible is now available for Ansible Engine 2.7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...