OPENSUSE-SU-2021:0752-1 Security update for jhead

This update for jhead fixes the following issues: jhead was updated to 3.06.0.1 lot of fuzztest fixes Apply a whole bunch of patches from Debian. Spell check and fuzz test stuff from Debian, nothing useful to human users. Add option to set exif date from date from another file. Bug fixes relating...

assimp:assimp_fuzzer: Stack-buffer-overflow in std::__1::list<Assimp::LWO::Envelope, std::__1::allocator<Assimp::LWO::Envelope>

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4770312630697984 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address:...

libredwg:llvmfuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5592380058238976 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerubsanlibredwg Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000002da7a30 Crash State: NULL Sanitizer: undefined UBSAN Recommende...

OSV-2021-771 Heap-use-after-free in dwg_free_TABLEGEOMETRY_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34377 Crash type: Heap-use-after-free READ 8 Crash state: dwgfreeTABLEGEOMETRYprivate dwgfreeTABLEGEOMETRY dwgfreevariablenoclass...

assimp:assimp_fuzzer: Heap-buffer-overflow in _m3d_safestr

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4797641239166976 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

caddy:fuzz-tokenize: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5075254369189888 Project: caddy Fuzzing Engine: libFuzzer Fuzz Target: fuzz-tokenize Job Type: libfuzzerasancaddy Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

tinygltf:fuzz_gltf: Crash in tinygltf::ExpandFilePath

Project: https://github.com/syoyo/tinygltf.git Detailed Report: https://oss-fuzz.com/testcase?key=4735128258609152 Project: tinygltf Fuzzing Engine: libFuzzer Fuzz Target: fuzzgltf Job Type: libfuzzerasantinygltf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ffb65011738 Crash Stat...

libredwg:llvmfuzz: Heap-use-after-free in dwg_free_TABLEGEOMETRY_private

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4527517710024704 Project: libredwg Fuzzing Engine: honggfuzz Fuzz Target: llvmfuzz Job Type: honggfuzzasanlibredwg Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

apache-commons:CompressSevenZFuzzer: Uncaught exception in org.apache.commons.compress.archivers.sevenz.SevenZFile.readEncodedHeader

Detailed Report: https://oss-fuzz.com/testcase?key=6009627423670272 Project: apache-commons Fuzzing Engine: libFuzzer Fuzz Target: CompressSevenZFuzzer Job Type: libfuzzerasanapache-commons Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

OSV-2021-769 Stack-buffer-overflow in TranslateClause

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34332 Crash type: Stack-buffer-overflow READ 16 Crash state: TranslateClause SpeakNextClause Synthesize...

libyang:lyd_parse_mem_json: Use-of-uninitialized-value in lyht_find_first

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=4851715951165440 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lydparsememjson Job Type: libfuzzermsanlibyang Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in TranslateClause

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=6060397091225600 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow READ 16 Crash Address...

OSV-2021-767 Heap-buffer-overflow in string_decoder_getc_utf_8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34299 Crash type: Heap-buffer-overflow READ 1 Crash state: stringdecodergetcutf8 textdecodergetc GetC...

OSV-2021-766 Negative-size-param in frame_get_vlmetalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34259 Crash type: Negative-size-param Crash state: framegetvlmetalayers frametoschunk blosc2schunkfrombuffer...

OSV-2021-765 Heap-use-after-free in LookupDict2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34298 Crash type: Heap-use-after-free READ 4 Crash state: LookupDict2 LookupDictList Lookup...

OSV-2021-764 Stack-buffer-overflow in TranslateNumber_1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34285 Crash type: Stack-buffer-overflow READ 1 Crash state: TranslateNumber1 TranslateNumber TranslateWord3...

libyal:libesedb_record_fuzzer: Heap-use-after-free in libesedb_data_definition_read_record

Detailed Report: https://oss-fuzz.com/testcase?key=5484900280041472 Project: libyal Fuzzing Engine: afl Fuzz Target: libesedbrecordfuzzer Job Type: aflasanlibyal Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x62d0000508d4 Crash State: libesedbdatadefinitionreadrecord...

duckdb:parse_fuzz_test: Segv on unknown address in duckdb::Transformer::TransformFuncCall

Project: https://github.com/duckdb/duckdb.git Detailed Report: https://oss-fuzz.com/testcase?key=6131030948970496 Project: duckdb Fuzzing Engine: libFuzzer Fuzz Target: parsefuzztest Job Type: libfuzzerasanduckdb Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

zeek:zeek-packet-fuzzer: Heap-buffer-overflow in zeek::IPv6_Hdr_Chain::ProcessDstOpts

Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=6364419002073088 Project: zeek Fuzzing Engine: honggfuzz Fuzz Target: zeek-packet-fuzzer Job Type: honggfuzzasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6040011f2e4...

jsoup:XmlFuzzer: Uncaught exception in org.jsoup.parser.XmlTreeBuilder.process

Project: https://github.com/jhy/jsoup.git Detailed Report: https://oss-fuzz.com/testcase?key=5288915671056384 Project: jsoup Fuzzing Engine: libFuzzer Fuzz Target: XmlFuzzer Job Type: libfuzzerasanjsoup Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...