freetype2/ftfuzzer: Heap-buffer-overflow in pcf_get_encodings

Detailed report: https://oss-fuzz.com/testcase?key=6409167655927808 Project: freetype2 Fuzzer: libFuzzerfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60500000340f Crash State:...

Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2018-2242)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2242 advisory. 1:1.8.0.181-7.b13 - Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13. - Remove 8187577/PR3578 now applied upstream. - Resolves: rhbz1594249...

Scientific Linux Security Update : java-1.8.0-openjdk on SL7.x x86_64 (20180723)

Security Fixes : - OpenJDK: insufficient index validation in PatternSyntaxException getMessage Concurrency, 8199547 CVE-2018-2952 Note: If the web browser plug-in provided by the icedtea-web package was installed, the issues exposed via Java applets could have been exploited without user...

MGASA-2018-0319 Updated ffmpeg packages fix security vulnerabilities

This update provides ffmpeg version 3.3.8, which fixes several security vulnerabilities and other bugs which were corrected upstream...

pcre2/pcre2_fuzzer: Heap-buffer-overflow in get_chr_property_list

Project: svn://vcs.exim.org/pcre2/code/trunk https://github.com/PCRE2Project/pcre2.git Detailed report: https://oss-fuzz.com/testcase?key=5841302817079296 Project: pcre2 Fuzzer: aflpcre2fuzzer Fuzz target binary: pcre2fuzzer Job Type: aflasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overfl...

graphicsmagick/graphicsmagick_coder_MVG_fuzzer: Heap-buffer-overflow in AcquireCacheNexus

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5265209760415744 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMVGfuzzer Fuzz target binary: graphicsmagickcoderMVGfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux...

gdal/gdal_filesystem_fuzzer: Heap-buffer-overflow in VSIUnixStdioHandle::Read

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6701586108645376 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

gdal/gdal_fuzzer: Crash in void GDALFastCopy<unsigned char>

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5598766517190656 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f43b3589ffe Crash Stat...

libwebp/fuzz_advanced_api: Use-of-uninitialized-value in ReadSymbol

Project: https://chromium.googlesource.com/webm/libwebp Detailed report: https://oss-fuzz.com/testcase?key=5760292385456128 Project: libwebp Fuzzer: libFuzzerlibwebpfuzzadvancedapi Fuzz target binary: fuzzadvancedapi Job Type: libfuzzermsanlibwebp Platform Id: linux Crash Type:...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in void add_residual_fallback<unsigned char>

Detailed report: https://oss-fuzz.com/testcase?key=5086254713536512 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: voi...

gdal/gdal_filesystem_fuzzer: Heap-buffer-overflow in NITFUncompressVQTile

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5178658988752896 Project: gdal Fuzzer: aflgdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

skia/api_mock_gpu_canvas: Use-of-uninitialized-value in SkDashPath::InternalFilter

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=6243210069278720 Project: skia Fuzzer: libFuzzerskiaapimockgpucanvas Fuzz target binary: apimockgpucanvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

openvswitch/ofp_print_fuzzer: Heap-buffer-overflow in parse_intel_port_custom_property

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5072291707748352 Project: openvswitch Fuzzer: aflopenvswitchofpprintfuzzer Fuzz target binary: ofpprintfuzzer Job Type: aflasanopenvswitch Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

imagemagick/ping_dcm_fuzzer: Crash in ReadDCMPixels

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5768274380849152 Project: imagemagick Fuzzer: aflimagemagickpingdcmfuzzer Fuzz target binary: pingdcmfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type: UNKNOWN READ Crash...

poppler/pdf_fuzzer: Use-of-uninitialized-value in clip01

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5664576019365888 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

poppler/pdf_fuzzer: Use-of-uninitialized-value in SampledFunction::transform

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=4888468869087232 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

gnupg2 security update

CentOS Errata and Security Advisory CESA-2018:2180 An update for gnupg2 is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

imagemagick/rotate_fuzzer: Index-out-of-bounds in LibRaw::subtract_black_internal

Detailed report: https://oss-fuzz.com/testcase?key=6320707435757568 Project: imagemagick Fuzzer: libFuzzerimagemagickrotatefuzzer Fuzz target binary: rotatefuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

firefox security update

CentOS Errata and Security Advisory CESA-2018:2112 An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

imagemagick/encoder_tiff_fuzzer: Stack-buffer-overflow in _TIFFVGetField

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5646197065777152 Project: imagemagick Fuzzer: aflimagemagickencodertifffuzzer Fuzz target binary: encodertifffuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...