Fedora 28 : nss (2018-2575edf8d3)

Updates the nss package to upstream NSS 3.40.1. This is a point release after 3.40, with a security fix for CVE-2018-12404. For details about other new functionality and a list of bugs fixed in this release please see the upstream release notes...

Fedora 29 : pdns-recursor (2018-e14840a7f5)

Fixes CVE-2018-16855 Crafted query can cause a denial of service ---- New upstream release with security fixes for CVE-2018-10851, CVE-2018-14626 and CVE-2018-14644 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...

Fedora 28 : zsh (2018-a5e9a619f6)

update to latest upstream release, which fixes the following vulnerabilities : - CVE-2018-1100 - stack-based buffer overflow in utils.c:checkmailpath - CVE-2018-1083 - stack-based buffer overflow in compctl.c:genmatchesfiles - CVE-2018-1071 - stack-based buffer overflow in exec.c:hashcmd Note tha...

Fedora 28 : pcs (2018-bbfb0f5bc9)

Security fix for CVE-2018-1086 and CVE-2018-1079 Rebased to latest upstream sources Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible witho...

CVE-2018-20657

The demangletemplate function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service memory consumption, as demonstrated by cxxfilt, a related issue to CVE-2018-12698...

SUSE SLES12 Security Update : nodejs4, nodejs6 (SUSE-SU-2017:2168-1)

This update for nodejs4 and nodejs6 fixes the following issues: Security issues fixed : - CVE-2017-1000381: The c-ares function aresparsenaptrreply could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way. bsc1044946 ...

SUSE SLES12 Security Update : nodejs6 (SUSE-SU-2018:1183-1)

This update for nodejs6 fixes the following issues : - Fix some node-gyp permissions - New upstream LTS release 6.14.1 : - Security fixes : + CVE-2018-7160: Fix for inspector DNS rebinding vulnerability bsc1087463 + CVE-2018-7158: Fix for 'path' module regular expression denial of service...

poppler/pdf_fuzzer: Use-of-uninitialized-value in JBIG2Stream::readTextRegionSeg

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5747049128001536 Project: poppler Fuzzer: libFuzzerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type: Use-of-uninitialized-value...

harfbuzz/hb-subset-fuzzer: Heap-double-free in hb_vector_t<CFF::op_str_t, 8u>::fini

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5695865298092032 Project: harfbuzz Fuzzer: libFuzzerhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-double-free Crash...

clamav/clamav_scanmap_OLE2_fuzzer: Heap-buffer-overflow in uniq_add

Detailed report: https://oss-fuzz.com/testcase?key=5744082379341824 Project: clamav Fuzzer: aflclamavscanmapOLE2fuzzer Fuzz target binary: clamavscanmapOLE2fuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x60c000000e48 Crash State: uniqadd...

Updated kernel packages fix security vulnerabilities

This kernel update is based on the upstream 4.14.89 and fixes at least the following security issues: Cross-hyperthread Spectre v2 mitigation is now provided by the Single Thread Indirect Branch Predictors STIBP support. Note that STIBP also requires the functionality be supported by the Intel...

h2o/h2o-fuzzer-http2: Heap-buffer-overflow in emit_writereq_of_openref

Project: https://github.com/h2o/h2o.git Detailed report: https://oss-fuzz.com/testcase?key=5130696692072448 Project: h2o Fuzzer: aflh2o-fuzzer-http2 Fuzz target binary: h2o-fuzzer-http2 Job Type: aflasanh2o Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60b0000001c8...

graphicsmagick/coder_PICT_fuzzer: Heap-buffer-overflow in ExpandBuffer

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5748073695805440 Project: graphicsmagick Fuzzer: aflcoderPICTfuzzer Fuzz target binary: coderPICTfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ ...

imagemagick/ping_mvg_fuzzer: Use-of-uninitialized-value in StringInfoToHexString

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5717227240685568 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

Low: Red Hat Security Advisory: ansible security and bug fix update

An update for ansible is now available for Ansible Engine 2. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in...

harfbuzz/hb-shape-fuzzer: Stack-buffer-overflow in hb_array_t<char const>::cmp

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5642666339991552 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Stack-buffer-overflow...

openvswitch/ofctl_parse_target: Heap-buffer-overflow in learn_check

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5640179956580352 Project: openvswitch Fuzzer: libFuzzeropenvswitchofctlparsetarget Fuzz target binary: ofctlparsetarget Job Type: libfuzzerasanopenvswitch Platform Id: linux Crash Type:...

ctdb, libsmbclient, libwbclient, samba security update

CentOS Errata and Security Advisory CESA-2018:3056 An update for samba is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

skia/image_filter_deserialize: Heap-buffer-overflow in Convexicator::BySign

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5700664101961728 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2018:4070-1)

This update for xen fixes the following issues : Security issues fixed : CVE-2018-18849: Fixed an out of bounds memory access issue was found in the LSI53C895A SCSI Host Bus Adapter emulation while writing a message in lsidomsgin bsc1114423. CVE-2018-18883: Fixed a NULL pointer dereference that...