gdal/gdal_translate_fuzzer: Heap-buffer-overflow in GDALResampleChunk32R_Gauss

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6302520631623680 Project: gdal Fuzzer: libFuzzergdaltranslatefuzzer Fuzz target binary: gdaltranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

Recommended update for enigmail (moderate)

This update for enigmail to 2.0.8 fixes the following issues: The enigmail 2.0.8 release addresses a security issue and solves a few regression bugs. A security issue has been fixed that allows an attacker to prepare a plain, unauthenticated HTML message in a way that it looks like it's signed...

Recommended update for enigmail (moderate)

This update for enigmail to 2.0.8 fixes the following issues: The enigmail 2.0.8 release addresses a security issue and solves a few regression bugs. A security issue has been fixed that allows an attacker to prepare a plain, unauthenticated HTML message in a way that it looks like it's signed...

[SECURITY] [DLA 1437-2] slurm-llnl regression update

Package : slurm-llnl Version : 14.03.9-5+deb8u4 CVE ID : CVE-2018-10995 Debian Bug : 893044 The security update for slurm-llnl introduced a regression in the fix for CVE-2018-10995 which broke accounting. For Debian 8 "Jessie", this problem has been fixed in version 14.03.9-5+deb8u4. We recommend...

chakra: Crash in bool TTD::MarkTable::MarkAndTestAddr<

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=5714440556118016 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x556b0f9f8970 Crash State: bool TTD::MarkTable::MarkAndTestAdd...

libgit2/download_refs_fuzzer: Heap-buffer-overflow in ok_pkt

Project: https://github.com/libgit2/libgit2.git Detailed report: https://oss-fuzz.com/testcase?key=5197446534660096 Project: libgit2 Fuzzer: afllibgit2downloadrefsfuzzer Fuzz target binary: downloadrefsfuzzer Job Type: aflasanlibgit2 Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

libreoffice/scrtffuzzer: Heap-use-after-free in ScCompiler::ReplaceDoubleRefII

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6213948473868288 Project: libreoffice Fuzzer: libFuzzerlibreofficescrtffuzzer Fuzz target binary: scrtffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

imagemagick/encoder_wpg_fuzzer: Use-of-uninitialized-value in SetPixelViaPixelInfo

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5701749124890624 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderwpgfuzzer Fuzz target binary: encoderwpgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

wireshark/fuzzshark_ip_proto-udp: Crash in ieeeNUMBER_radiotap_iterator_next

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=4830306396798976 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: libfuzzerubsanwireshark Platform Id: linux Crash Type:...

graphicsmagick/coder_MVG_fuzzer: Unknown signal in MagickRealloc

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5633943205314560 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMVGfuzzer Fuzz target binary: coderMVGfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

DLA-1445-3 busybox - regression update

Bulletin has no description...

libreoffice/ww6fuzzer: Heap-use-after-free in SwNode::IsTableNode

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5019677544677376 Project: libreoffice Fuzzer: libFuzzerlibreofficeww6fuzzer Fuzz target binary: ww6fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in jbig2_decode_symbol_dict

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5362428123545600 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in jbig2_huffman_get

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=6313924507992064 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in jbig2_immediate_generic_region

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5819198591729664 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in jbig2_arith_bytein

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5705474702835712 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

[SECURITY] [DLA 1445-2] busybox regression update

Package : busybox Version : 1:1.22.0-9+deb8u3 The security update of busybox announced as DLA-1445-1 introduced a regression due to an incomplete fix for CVE-2015-9261. It was no longer possible to decompress gzip archives which exceeded a certain file size. For Debian 8 "Jessie", this problem ha...

DLA-1445-2 busybox - regression update

Bulletin has no description...

glib/fuzz_bookmark: Heap-buffer-overflow in fuzz_bookmark.c

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed report: https://oss-fuzz.com/testcase?key=5131520774766592 Project: glib Fuzzer: libFuzzerglibfuzzbookmark Fuzz target binary: fuzzbookmark Job Type: libfuzzerasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

imagemagick/encoder_heic_fuzzer: Index-out-of-bounds in decoder_context::has_sps

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6029065365487616 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type:...