ffmpeg:ffmpeg_DEMUXER_fuzzer: Heap-buffer-overflow in decode_block

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5762455661182976 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegDEMUXERfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0x60a000000046 Cras...

EulerOS 2.0 SP5 : python (EulerOS-SA-2019-1797)

According to the version of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A security regression of CVE-2019-9636 was discovered in python, since commit d537ab0ff9767ef024f26246899728f0116b1ec3, which still allows an...

[SECURITY] [DLA 1886-2] openjdk-7 regression update

Package : openjdk-7 Version : 7u231-2.6.19-1deb8u2 Debian Bug : 935082 750400 The latest security update of openjdk-7 caused a regression when applications relied on elliptic curve algorithms to establish SSL connections. Several duplicate classes were removed from rt.jar by the upstream develope...

ffmpeg:ffmpeg_AV_CODEC_ID_VC1IMAGE_fuzzer: Index-out-of-bounds in ff_vc1_pred_mv

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5656105392275456 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVC1IMAGEfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cras...

postgis:wkb_import_fuzzer: Heap-buffer-overflow in byte_from_wkb_state

Project: https://git.osgeo.org/gitea/postgis/postgis.git Detailed Report: https://oss-fuzz.com/testcase?key=5686969597689856 Project: postgis Fuzzing Engine: afl Fuzz Target: wkbimportfuzzer Job Type: aflasanpostgis Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

DLA-1886-2 openjdk-7 - regression update

Bulletin has no description...

cryptofuzz:cryptofuzz-openssl: Heap-buffer-overflow in aria_set_encrypt_key

Detailed Report: https://oss-fuzz.com/testcase?key=5181934937833472 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x615000177988 Crash State: ariasetencryptk...

cryptofuzz:cryptofuzz-openssl-noasm: Heap-buffer-overflow in aria_set_encrypt_key

Detailed Report: https://oss-fuzz.com/testcase?key=5665634448310272 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzerasani386cryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf5519c21 Crash State:...

SUSE SLES12 Security Update : python3 (SUSE-SU-2019:2053-2)

This update for python3 fixes the following issues : CVE-2019-10160: Fixed a regression in urlparse and urlsplit introduced by the fix for CVE-2019-9636 bsc1138459. CVE-2018-14647: Fixed a denial of service vulnerability caused by a crafted XML document bsc1109847. CVE-2018-1000802: Fixed a comma...

openSUSE Security Update : bzip2 (openSUSE-2019-1918)

This update for bzip2 fixes the following issues : - Fixed a regression with the fix for CVE-2019-12900, which caused incompatibilities with files that used many selectors bsc1139083. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The...

Debian DLA-1886-2 : openjdk-7 regression update

The latest security update of openjdk-7 caused a regression when applications relied on elliptic curve algorithms to establish SSL connections. Several duplicate classes were removed from rt.jar by the upstream developers of OpenJDK because they were also present in sunec.jar. However Debian neve...

imagemagick:encoder_mvg_fuzzer: Heap-use-after-free in TraceBezier

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5665525908111360 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermvgfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-use-after-free READ 8 Cra...

aspell:aspell_fuzzer: Heap-buffer-overflow in aspeller::Dictionary::Id::Id

Project: https://github.com/gnuaspell/aspell.git Detailed Report: https://oss-fuzz.com/testcase?key=5176071032406016 Project: aspell Fuzzing Engine: libFuzzer Fuzz Target: aspellfuzzer Job Type: libfuzzerasanaspell Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

flac:fuzzer_decoder: Use-of-uninitialized-value in FLAC::Decoder::FuzzerStream::write_callback

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5735564778668032 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdecoder Job Type: libfuzzermsanflac Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

openSUSE: Security Advisory for bzip2 (openSUSE-SU-2019:1918-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

freeimage:load_from_memory_fuzzer: Stack-buffer-overflow in strncpy

Detailed Report: https://oss-fuzz.com/testcase?key=5131488567230464 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f152a437530 Crash State: strncpy...

OPENSUSE-SU-2019:1918-1 Security update for bzip2

This update for bzip2 fixes the following issues: - Fixed a regression with the fix for CVE-2019-12900, which caused incompatibilities with files that used many selectors bsc1139083. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:1906-1 Security update for python

This update for python fixes the following issues: Security issue fixed: - CVE-2019-10160: Fixed a regression in urlparse and urlsplit introduced by the fix for CVE-2019-9636 bsc1138459. This update was imported from the SUSE:SLE-15:Update update project...

Security update for bzip2 (important)

openSUSE Security Update: Security update for bzip2 Announcement ID: openSUSE-SU-2019:1918-1 Rating: important References: 1139083 Cross-References: CVE-2019-12900 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This...

OPENSUSE-SU-2019:1894-1 Security update for irssi

This update for irssi fixes the following issues: irssi was updated to 1.1.3: - CVE-2019-13045: Fix a use after free issue when sending the SASL login on automatic and manual reconnects 1055, 1058 boo1139802 - Fix regression of 779 where autologignoretargets would not matching itemless windows...