[SECURITY] [DSA 4714-2] chromium regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4714-2 [email protected] https://www.debian.org/security/ Michael Gilbert July 04, 2020 https://www.debian.org/security/faq -...

leptonica:pageseg_fuzzer: Heap-buffer-overflow in rasteropGeneralLow

Detailed Report: https://oss-fuzz.com/testcase?key=4988284873998336 Project: leptonica Fuzzing Engine: afl Fuzz Target: pagesegfuzzer Job Type: aflasanleptonica Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x606000000418 Crash State: rasteropGeneralLow rasteropLow...

DSA-4714-2 chromium - regression update

Bulletin has no description...

matio:matio_fuzzer: Crash in H5T__bit_find

Detailed Report: https://oss-fuzz.com/testcase?key=5443759545516032 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x60200001003b Crash State: H5Tbitfind H5Tconvii H5Tconvert Sanitizer: address ASAN...

binutils:fuzz_readelf: Stack-buffer-overflow in print_dynamic_symbol

Detailed Report: https://oss-fuzz.com/testcase?key=5953247323095040 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzreadelf Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f67ff9a3340 Crash State: printdynamicsymbol...

cascadia:fuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5653697917616128 Project: cascadia Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasancascadia Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000007e61 Crash State: NULL Sanitizer: address ASAN Recommended Securit...

libraw:libraw_cr2_fuzzer: Index-out-of-bounds in DHT::get_hv_rbg

Detailed Report: https://oss-fuzz.com/testcase?key=5647329419067392 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: DHT::gethvrbg DHT::makehvdline DHT::makehvdirs...

arrow:arrow-ipc-file-fuzz: Heap-buffer-overflow in void arrow::internal::TransferBitmap<

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5696379421982720 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-file-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60a000000100 Cras...

leptonica:dewarp_fuzzer: Heap-buffer-overflow in rasteropGeneralLow

Detailed Report: https://oss-fuzz.com/testcase?key=5476428945817600 Project: leptonica Fuzzing Engine: libFuzzer Fuzz Target: dewarpfuzzer Job Type: libfuzzerasanleptonica Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6020000002c0 Crash State: rasteropGeneralLow...

arrow:arrow-ipc-file-fuzz: Heap-buffer-overflow in arrow::ConcatenateBuffers

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5760568177983488 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-file-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60a000000080 Crash...

libraw:libraw_raf_fuzzer: Index-out-of-bounds in DHT::hide_hots

Detailed Report: https://oss-fuzz.com/testcase?key=6229491834945536 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawraffuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: DHT::hidehots LibRaw::dhtinterpolate...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_search_setup_iax

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5660728708300800 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6040000000bd...

c-blosc2:decompress_fuzzer: Use-of-uninitialized-value in blosc_run_decompression_with_context

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=4799687189331968 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzermsanc-blosc2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...

glib:fuzz_uri_escape: Heap-buffer-overflow in uri_decoder

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed Report: https://oss-fuzz.com/testcase?key=4881440516079616 Project: glib Fuzzing Engine: libFuzzer Fuzz Target: fuzzuriescape Job Type: libfuzzerasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

glib:fuzz_uri_parse_params: Heap-buffer-overflow in uri_decoder

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed Report: https://oss-fuzz.com/testcase?key=4815738421641216 Project: glib Fuzzing Engine: afl Fuzz Target: fuzzuriparseparams Job Type: aflasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000000d2 Cra...

mruby:mruby_proto_fuzzer: Heap-double-free in mrb_default_allocf

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4894663076216832 Project: mruby Fuzzing Engine: honggfuzz Fuzz Target: mrubyprotofuzzer Job Type: honggfuzzasanmruby Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x60300001c8a0 Crash...

DLA-2268-2 mutt - regression update

Bulletin has no description...

opensc:fuzz_pkcs15_reader: Memcpy-param-overlap in authentic_set_current_files

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5161383229652992 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

augeas:augeas_api_fuzzer: Crash in eval_expr

Detailed Report: https://oss-fuzz.com/testcase?key=5971328632094720 Project: augeas Fuzzing Engine: libFuzzer Fuzz Target: augeasapifuzzer Job Type: libfuzzerasanaugeas Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x60340000aa1c Crash State: evalexpr evalbinary evalexpr Sanitizer:...

imagemagick:ping_dng_fuzzer: Global-buffer-overflow in LibRaw::parseCanonMakernotes

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5655361509130240 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Cra...