graphicsmagick/coder_DPX_fuzzer: Use-of-uninitialized-value in WriteDPXImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5663630031847424 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderDPXfuzzer Fuzz target binary: coderDPXfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

icu/number_format_fuzzer: Crash in __msan_memset

Project: https://github.com/unicode-org/icu.git Detailed report: https://oss-fuzz.com/testcase?key=6252124296970240 Project: icu Fuzzer: libFuzzericunumberformatfuzzer Fuzz target binary: numberformatfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

graphicsmagick/coder_DPX_fuzzer: Unknown signal in TentUpsampleChroma

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5174667594694656 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderDPXfuzzer Fuzz target binary: coderDPXfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

USN-3629-1: MySQL vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 5.5.60 in Ubuntu 14.04 LTS. Ubuntu 16.04 LTS, and Ubuntu 17.10 have been updated to MySQL 5.7.22. In addition to security fixes, the updated packag...

openSUSE Security Update : cfitsio (openSUSE-2018-383)

This update for cfitsio fixes the following issues : Security issues fixed : - CVE-2018-1000166: Unsafe use of sprintf can allow a remote unauthenticated attacker to execute arbitrary code boo1088590 This update to version 3.430 also contains a number of upstream bug fixes. The following tracked...

Debian DSA-4176-1 : mysql-5.5 - security update

Several issues have been discovered in the MySQL database server. The vulnerabilities are addressed by upgrading MySQL to the new upstream version 5.5.60, which includes additional changes. Please see the MySQL 5.5 Release Notes and Oracle's Critical Patch Update advisory for further details : C...

graphicsmagick/coder_PDB_fuzzer: Use-of-uninitialized-value in ReadPDBImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5868752529784832 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPDBfuzzer Fuzz target binary: coderPDBfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

graphicsmagick/coder_DPX_fuzzer: Heap-buffer-overflow in ReadDPXImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4796548471848960 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderDPXfuzzer Fuzz target binary: coderDPXfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type:...

imagemagick/enhance_fuzzer: Use-of-uninitialized-value in EnhanceImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5651741958733824 Project: imagemagick Fuzzer: libFuzzerimagemagickenhancefuzzer Fuzz target binary: enhancefuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

CVE-2018-10126

ijg-libjpeg before 9d, as used in tiff2pdf from LibTIFF and other products, does not check for a NULL pointer at a certain place in jpegfdct16x16 in jfdctint.c...

imagemagick/encoder_jpg_fuzzer: Use-of-uninitialized-value in ConstrainColormapIndex

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5194510259716096 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderjpgfuzzer Fuzz target binary: encoderjpgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

Security update for cfitsio (important)

This update for cfitsio fixes the following issues: Security issues fixed: - CVE-2018-1000166: Unsafe use of sprintf can allow a remote unauthenticated attacker to execute arbitrary code boo1088590 This update to version 3.430 also contains a number of upstream bug fixes. The following tracked...

imagemagick/ping_heic_fuzzer: Index-out-of-bounds in ReadHEICImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6265219987800064 Project: imagemagick Fuzzer: libFuzzerimagemagickpingheicfuzzer Fuzz target binary: pingheicfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type:...

graphicsmagick/coder_MAT_fuzzer: Use-of-uninitialized-value in IsGrayImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5321278484381696 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMATfuzzer Fuzz target binary: coderMATfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

graphicsmagick/coder_GIF_fuzzer: Heap-buffer-overflow in DecodeImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=6043228022243328 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderGIFfuzzer Fuzz target binary: coderGIFfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type:...

CVE-2014-1686

MediaWiki 1.18.0 allows remote attackers to obtain the installation path via vectors related to thumbnail creation...

imagemagick/ping_pcl_fuzzer: Use-of-uninitialized-value in LocaleNCompare

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4918731349164032 Project: imagemagick Fuzzer: libFuzzerimagemagickpingpclfuzzer Fuzz target binary: pingpclfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

openssl/asn1: Heap-buffer-overflow in asn1_ex_i2c

Project: https://github.com/openssl/openssl.git Detailed report: https://oss-fuzz.com/testcase?key=5721463706353664 Project: openssl Fuzzer: aflopensslasn1 Fuzz target binary: asn1 Job Type: aflasanopenssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6030000029f1...

systemd/fuzz-unit-file: Use-of-uninitialized-value in streq_ptr

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=4908210742886400 Project: systemd Fuzzer: libFuzzersystemdfuzz-unit-file Fuzz target binary: fuzz-unit-file Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value...

imagemagick/encoder_icon_fuzzer: Use-of-uninitialized-value in png_calculate_crc

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4899777306165248 Project: imagemagick Fuzzer: libFuzzerimagemagickencodericonfuzzer Fuzz target binary: encodericonfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...