qpid-proton/fuzz-connection-driver: Crash in __msan_memmove.part.53

Project: https://github.com/apache/qpid-proton.git Detailed report: https://oss-fuzz.com/testcase?key=6266408911503360 Project: qpid-proton Fuzzer: libFuzzerqpid-protonfuzz-connection-driver Fuzz target binary: fuzz-connection-driver Job Type: libfuzzermsanqpid-proton Platform Id: linux Crash Typ...

imagemagick/encoder_dng_fuzzer: Stack-buffer-overflow in LibRaw::kodak_radc_load_raw

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5751921557110784 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

qpid-proton/fuzz-connection-driver: Heap-use-after-free in pni_sniff_header

Project: https://github.com/apache/qpid-proton.git Detailed report: https://oss-fuzz.com/testcase?key=5972719047802880 Project: qpid-proton Fuzzer: aflqpid-protonfuzz-connection-driver Fuzz target binary: fuzz-connection-driver Job Type: aflasanqpid-proton Platform Id: linux Crash Type:...

CVE-2018-11037

In Exiv2 0.26, the Exiv2::PngImage::printStructure function in pngimage.cpp allows remote attackers to cause an information leak via a crafted file...

gdal/dxf_fuzzer: Crash in OGRSimpleCurve::getPoint

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6213050452410368 Project: gdal Fuzzer: libFuzzergdaldxffuzzer Fuzz target binary: dxffuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Cras...

skia/api_mock_gpu_canvas: Use-of-uninitialized-value in sse2::store_bgra

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=6083875636772864 Project: skia Fuzzer: libFuzzerskiaapimockgpucanvas Fuzz target binary: apimockgpucanvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

graphicsmagick/coder_PTIF_fuzzer: Heap-double-free in Magick::BlobRef::~BlobRef

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5669995324375040 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPTIFfuzzer Fuzz target binary: coderPTIFfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type:...

imagemagick/encoder_mvg_fuzzer: Use-of-uninitialized-value in ClipPixelCacheNexus

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5736248416141312 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

tor/oss-fuzz-iptsv2: Use-of-uninitialized-value in DES_set_key_unchecked

Project: https://git.torproject.org/tor.git Detailed report: https://oss-fuzz.com/testcase?key=6036313756139520 Project: tor Fuzzer: libFuzzertoross-fuzz-iptsv2 Fuzz target binary: oss-fuzz-iptsv2 Job Type: libfuzzermsantor Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

libreoffice/mtpfuzzer: Crash in rtl_uStringbuffer_insert_ascii

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6306492968861696 Project: libreoffice Fuzzer: libFuzzerlibreofficemtpfuzzer Fuzz target binary: mtpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: UNKNOWN WRITE Cras...

openssl/server: Heap-use-after-free in ssl_get_prev_session

Project: https://github.com/openssl/openssl.git Detailed report: https://oss-fuzz.com/testcase?key=5673171989561344 Project: openssl Fuzzer: aflopensslserver Fuzz target binary: server Job Type: aflasanopenssl Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x616000001e80...

imagemagick/ping_jng_fuzzer: Use-of-uninitialized-value in LibRaw::canon_has_lowbits

Detailed report: https://oss-fuzz.com/testcase?key=4909191931101184 Project: imagemagick Fuzzer: libFuzzerimagemagickpingjngfuzzer Fuzz target binary: pingjngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

openSUSE Security Update : nodejs6 (openSUSE-2018-444)

This update for nodejs6 fixes the following issues : - Fix some node-gyp permissions - New upstream LTS release 6.14.1 : - Security fixes : + CVE-2018-7160: Fix for inspector DNS rebinding vulnerability bsc1087463 + CVE-2018-7158: Fix for 'path' module regular expression denial of service...

389 security update

CentOS Errata and Security Advisory CESA-2018:1364 An update for 389-ds-base is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2018-10801

TIFFClientOpen in tifunix.c in LibTIFF 3.8.2 has memory leaks, as demonstrated by bmp2tiff...

imagemagick/encoder_label_fuzzer: Use-of-uninitialized-value in FxEvaluateSubexpression

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6312993015988224 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderlabelfuzzer Fuzz target binary: encoderlabelfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_label_fuzzer: Use-of-uninitialized-value in ScaleQuantumToChar

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5701174052257792 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderlabelfuzzer Fuzz target binary: encoderlabelfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

gstreamer/gst-discoverer: Heap-buffer-overflow in tap_type_find

Project: https://anongit.freedesktop.org/git/gstreamer/gstreamer https://gitlab.freedesktop.org/gstreamer/gstreamer.git Detailed report: https://oss-fuzz.com/testcase?key=5192041649668096 Project: gstreamer Fuzzer: libFuzzergstreamergst-discoverer Fuzz target binary: gst-discoverer Job Type:...

DLA-1372-1 libdatetime-timezone-perl - new upstream version

Bulletin has no description...

graphicsmagick/coder_DPX_fuzzer: Use-of-uninitialized-value in RGBTransformPackets

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5966363016298496 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderDPXfuzzer Fuzz target binary: coderDPXfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...