libheif:file-fuzzer: Heap-buffer-overflow in RegionItem::parse

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=6317581706592256 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: file-fuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

[SECURITY] [DSA 5389-1] rails security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5389-1 [email protected] https://www.debian.org/security/ Aron Xu April 14, 2023 https://www.debian.org/security/faq - -------------------------------------------------------------------------...

systemd:fuzz-udev-rule-parse-value: Crash in udev_rule_parse_value

Detailed Report: https://oss-fuzz.com/testcase?key=6367779711483904 Project: systemd Fuzzing Engine: centipede Fuzz Target: fuzz-udev-rule-parse-value Job Type: centipedeasansystemd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x1e667ad798bb Crash State: udevruleparsevalue...

binutils:fuzz_objdump_safe: Heap-double-free in cache_bclose

Detailed Report: https://oss-fuzz.com/testcase?key=4511589348016128 Project: binutils Fuzzing Engine: centipede Fuzz Target: fuzzobjdumpsafe Job Type: centipedeasanbinutils Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x61500007b280 Crash State: cachebclose bfdclosealldone...

[SECURITY] [DLA 3387-2] udisks2 regression update

Debian LTS Advisory DLA-3387-2 [email protected] https://www.debian.org/lts/security/ Tobias Frost April 10, 2023 https://wiki.debian.org/LTS Package : udisks2 Version : 2.8.1-4+deb10u2 Debian Bug : 1034124 A regression was reported that the fix for CVE-2021-3802 broken mounting...

DLA-3387-2 udisks2 - regression update

Bulletin has no description...

ffmpeg:ffmpeg_AV_CODEC_ID_MPEG2VIDEO_fuzzer: Heap-buffer-overflow in ff_add_pixels_clamped_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4526419991724032 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDMPEG2VIDEOfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

mapserver:mapfuzzer: Heap-use-after-free in msyy_switch_to_buffer

Project: https://github.com/MapServer/MapServer.git Detailed Report: https://oss-fuzz.com/testcase?key=4592302307016704 Project: mapserver Fuzzing Engine: afl Fuzz Target: mapfuzzer Job Type: aflasanmapserver Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x606000005f1c...

ruby:fuzz_ruby_gems: Use-after-poison in str_new_frozen_buffer

Detailed Report: https://oss-fuzz.com/testcase?key=4621390258241536 Project: ruby Fuzzing Engine: centipede Fuzz Target: fuzzrubygems Job Type: centipedeasanruby Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x7fcb77410010 Crash State: strnewfrozenbuffer fstrupdatecallback...

assimp:assimp_fuzzer: Heap-use-after-free in aiScene::~aiScene

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5751898438500352 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61a000000c...

cyclonedds:fuzz_type_object: Heap-buffer-overflow in add_complete_typeobj

Project: https://github.com/eclipse-cyclonedds/cyclonedds.git Detailed Report: https://oss-fuzz.com/testcase?key=6189139925270528 Project: cyclonedds Fuzzing Engine: libFuzzer Fuzz Target: fuzztypeobject Job Type: libfuzzerasancyclonedds Platform Id: linux Crash Type: Heap-buffer-overflow READ 8...

USN-5855-3 imagemagick regression

USN-5855-2 fixed vulnerabilities in ImageMagick. Unfortunately an additional mitigation caused a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that ImageMagick incorrectly handled certain PNG images. If a user or...

SUSE-SU-2023:1714-1 Security update for flatpak

This update for flatpak fixes the following issues: - CVE-2023-28101: Fixed misleading terminal output with metadata with ANSI control codes bsc1209410. - CVE-2023-28100: Fixed unsandboxed TIOCLINUX commands bsc1209411. Update to version 1.10.8: - If an app update is blocked by parental controls...

janino:ExpressionEvaluatorFuzzer: Security exception in org.codehaus.janino.Parser.parseUnaryExpression

Project: https://github.com/janino-compiler/janino.git Detailed Report: https://oss-fuzz.com/testcase?key=5685625172131840 Project: janino Fuzzing Engine: libFuzzer Fuzz Target: ExpressionEvaluatorFuzzer Job Type: libfuzzerasanjanino Platform Id: linux Crash Type: Security exception Crash Address...

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-5985-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5985-1 advisory. It was discovered that the System V IPC implementation in the Linux kernel did not properly handle large shared memory counts. A local attacker could use...

SUSE: Security Advisory (SUSE-SU-2023:0655-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

wolfssl:fuzzer-wolfssl-server-randomize: Use-of-uninitialized-value in fuzzer_send

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5401296500031488 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssl-server-randomize Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...

libdwarf:fuzz_srcfiles: Heap-double-free in _dwarf_read_line_table_header

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=6015429578719232 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzsrcfiles Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: Heap-double-free Crash Address:...

libraw:libraw_fuzzer: Index-out-of-bounds in AAHD::make_ahd_rb_hv

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=4975650594488320 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

USN-5966-2: amanda regression

USN-5966-1 fixed vulnerabilities in amanda. Unfortunately it introduced a regression in GNUTAR-based backups. This update reverts all of the changes in amanda until a better fix is provided. We apologize for the inconvenience. Original advisory details: Maher Azzouzi discovered an information...