CVE-2019-10143

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally...

gdal/gdal_translate_fuzzer: Heap-buffer-overflow in GTiffRasterBand::IReadBlock

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5764371029950464 Project: gdal Fuzzer: libFuzzergdaltranslatefuzzer Fuzz target binary: gdaltranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

imagemagick/encoder_ptif_fuzzer: Heap-buffer-overflow in PushShortPixel

Detailed report: https://oss-fuzz.com/testcase?key=5722372625137664 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderptiffuzzer Fuzz target binary: encoderptiffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61d000004e84...

Virtuozzo Linux Errata and Security Advisory 2019:1228 Important

Upstream security update. Follow RHSA-2019:1228 for details...

kimageformats/kimgio_kra_fuzzer: Use-of-uninitialized-value in QString::vasprintf

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5763219051773952 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgiokrafuzzer Fuzz target binary: kimgiokrafuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...

imagemagick/encoder_tiff_fuzzer: Use-of-uninitialized-value in HalfToSinglePrecision

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5640152724013056 Project: imagemagick Fuzzer: libFuzzerimagemagickencodertifffuzzer Fuzz target binary: encodertifffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

openthread/ncp-uart-received-fuzzer: Stack-buffer-overflow in ot::Ip6::OptionPadN::Init

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5768121945686016 Project: openthread Fuzzer: libFuzzeropenthreadncp-uart-received-fuzzer Fuzz target binary: ncp-uart-received-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash...

harfbuzz/hb-subset-fuzzer: Stack-use-after-return in bool OT::Coverage::serialize<hb_map_iter_t<hb_map_iter_t<hb_filter_iter_t<OT::Co

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5634197349203968 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type:...

sqlite3/ossfuzz: Use-of-uninitialized-value in sqlite3VdbeMemValidStrRep

Detailed report: https://oss-fuzz.com/testcase?key=5678870243573760 Project: sqlite3 Fuzzer: libFuzzersqlite3ossfuzz Fuzz target binary: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: sqlite3VdbeMemValidStrRep...

gdal/mrf_fuzzer: Heap-buffer-overflow in ExpandPacked8ToByte1

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5645695916179456 Project: gdal Fuzzer: aflgdalmrffuzzer Fuzz target binary: mrffuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x7f4b21b43800 Crash...

Virtuozzo Linux Errata and Security Advisory 2019:1131 Important

Upstream security update. Follow RHSA-2019:1131 for details...

Virtuozzo Linux Errata and Security Advisory 2019:1180 Important

Upstream security update. Follow RHSA-2019:1180 for details...

Virtuozzo Linux Errata and Enhancement Advisory 2019:1212

Upstream security update. Follow RHEA-2019:1212 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2019:1227

Upstream security update. Follow RHBA-2019:1227 for details...

libical/libical_fuzzer: Use-of-uninitialized-value in pvl_pop

Detailed report: https://oss-fuzz.com/testcase?key=5739308486492160 Project: libical Fuzzer: libFuzzerlibicalfuzzer Fuzz target binary: libicalfuzzer Job Type: libfuzzermsanlibical Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pvlpop icalcomponentfree...

libical/libical_fuzzer: Use-of-uninitialized-value in parser_get_next_char

Project: https://github.com/libical/libical.git Detailed report: https://oss-fuzz.com/testcase?key=5695048311635968 Project: libical Fuzzer: libFuzzerlibicalfuzzer Fuzz target binary: libicalfuzzer Job Type: libfuzzermsanlibical Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libical/libical_fuzzer: Use-of-uninitialized-value in icalcomponent_remove_component

Project: https://github.com/libical/libical.git Detailed report: https://oss-fuzz.com/testcase?key=5677236176289792 Project: libical Fuzzer: libFuzzerlibicalfuzzer Fuzz target binary: libicalfuzzer Job Type: libfuzzermsanlibical Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

Virtuozzo Linux Errata and Bugfix Advisory 2019:1015

Upstream security update. Follow RHBA-2019:1015 for details...

keystone/fuzz_asm_sparc64be: Crash in llvm_ks::SmallVectorBase::grow_pod

Detailed report: https://oss-fuzz.com/testcase?key=5688354168897536 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmsparc64be Fuzz target binary: fuzzasmsparc64be Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7180004447e0 Crash State:...

systemd/fuzz-varlink: Heap-buffer-overflow in varlink_enqueue_json

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5692571826782208 Project: systemd Fuzzer: libFuzzersystemdfuzz-varlink Fuzz target binary: fuzz-varlink Job Type: libfuzzerasansystemd Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...