libreoffice/ww6fuzzer: Heap-use-after-free in SwIndex::Remove

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5733739670274048 Project: libreoffice Fuzzer: afllibreofficeww6fuzzer Fuzz target binary: ww6fuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Cra...

libpcap/fuzz_both: Use-of-uninitialized-value in pcap_filter_with_aux_data

Project: https://github.com/the-tcpdump-group/libpcap.git Detailed report: https://oss-fuzz.com/testcase?key=5699403956879360 Project: libpcap Fuzzer: libFuzzerlibpcapfuzzboth Fuzz target binary: fuzzboth Job Type: libfuzzermsanlibpcap Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

Virtuozzo Linux Errata and Security Advisory 2018:2918 Important

Upstream security update. Follow RHSA-2018:2918 for details...

harfbuzz/hb-shape-fuzzer: Use-of-uninitialized-value in OT::hmtxvmtx<OT::hmtx, OT::hhea>::accelerator_t::get_advance

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5719982789361664 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type:...

Scientific Linux Security Update : glusterfs on SL6.x x86_64 (20181009)

The glusterfs packages have been upgraded to upstream version 3.12.2, which provides a number of bug fixes over the previous version. Security Fixes : - glusterfs: Improper deserialization in dict.c:dictunserialize can allow attackers to read arbitrary memory CVE-2018-10911 C Tenable Network...

gdal/gtiff_fuzzer: Heap-buffer-overflow in TWebPDecode

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5728607687671808 Project: gdal Fuzzer: libFuzzergdalgtifffuzzer Fuzz target binary: gtifffuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

CentOS 6 : glusterfs (CESA-2018:2892)

An update for glusterfs is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2018:2846 An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

glusterfs, python2 security update

CentOS Errata and Security Advisory CESA-2018:2892 An update for glusterfs is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

firefox security update

CentOS Errata and Security Advisory CESA-2018:2884 An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

openvswitch/odp_target: Stack-buffer-overflow in nullable_memcpy

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5734833108549632 Project: openvswitch Fuzzer: libFuzzeropenvswitchodptarget Fuzz target binary: odptarget Job Type: libfuzzerasanopenvswitch Platform Id: linux Crash Type: Stack-buffer-overflow READ...

wpantund/wpantund-fuzz: Heap-use-after-free in TunnelIPv6Interface::remove_address

Project: https://github.com/openthread/wpantund.git Detailed report: https://oss-fuzz.com/testcase?key=5656107263983616 Project: wpantund Fuzzer: aflwpantundwpantund-fuzz Fuzz target binary: wpantund-fuzz Job Type: aflasanwpantund Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash...

openvswitch/odp_target: Use-of-uninitialized-value in ds_put_hex

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5646356010500096 Project: openvswitch Fuzzer: libFuzzeropenvswitchodptarget Fuzz target binary: odptarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type: Use-of-uninitialized-value...

Virtuozzo Linux Errata and Security Advisory 2018:2892 Moderate

Upstream security update. Follow RHSA-2018:2892 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2018:2900

Upstream security update. Follow RHBA-2018:2900 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2018:2894

Upstream security update. Follow RHBA-2018:2894 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2018:2901

Upstream security update. Follow RHBA-2018:2901 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2018:2895

Upstream security update. Follow RHBA-2018:2895 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2018:2896

Upstream security update. Follow RHBA-2018:2896 for details...

CVE-2018-18064

cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c the generate and renderrows functions and cairo-image-compositor.c the cairoimagespansandzero function...