llvm/clang-fuzzer: Heap-use-after-free in clang::APValue::swap

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=6747068086353920 Project: llvm Fuzzer: libFuzzerllvmclang-fuzzer Fuzz target binary: clang-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Addres...

libreoffice/wmffuzzer: Heap-buffer-overflow in tools::Polygon emfio::EmfReader::ReadPolygon<short>

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6236945156931584 Project: libreoffice Fuzzer: libFuzzerlibreofficewmffuzzer Fuzz target binary: wmffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

SUSE-RU-2018:0028-1 Recommended update for icu

This update for icu fixes the following issue: - Fix international date/time format output a regression caused by the fix for CVE-2014-9911 bsc1037416...

gdal/cad_fuzzer: Bad-cast to CADAttdef from CADAttrib in CADLayer::addHandle

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6413960052998144 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000008164350 Crash State:...

Debian DSA-4078-1 : linux - security update (Meltdown)

Multiple researchers have discovered a vulnerability in Intel processors, enabling an attacker controlling an unprivileged process to read memory from arbitrary addresses, including from the kernel and all other processes running on the system. This specific attack has been named Meltdown and is...

USN-3430-3: Dnsmasq regression

USN-3430-2 fixed several vulnerabilities. The update introduced a new regression that breaks DNS resolution. This update addresses the problem. We apologize for the inconvenience. Original advisory details: Felix Wilhelm, Fermin J. Serna, Gabriel Campana and Kevin Hamacher discovered that Dnsmasq...

libreoffice/lwpfuzzer: Heap-buffer-overflow in LwpSilverBullet::IsLesserLevel

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5741892999315456 Project: libreoffice Fuzzer: afllibreofficelwpfuzzer Fuzz target binary: lwpfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

gdal/cad_fuzzer: Heap-buffer-overflow in CADBuffer::ReadBIT

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5458540048154624 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

USN-3480-3: Apport regression

USN-3480-2 fixed regressions in Apport. The update introduced a new regression in the container support. This update addresses the problem. We apologize for the inconvenience. Original advisory details: Sander Bos discovered that Apport incorrectly handled core dumps for setuid binaries. A local...

libreoffice/ww8fuzzer: Index-out-of-bounds in WW8TabDesc::StartMiserableHackForUnsupportedDirection

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4617455260401664 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Index-out-of-boun...

USN-3477-4: Firefox regression

USN-3477-1 fixed vulnerabilities in Firefox. The update introduced a crash reporting issue where background tab crash reports were sent to Mozilla without user opt-in. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were...

USN-3477-4 firefox regression

USN-3477-1 fixed vulnerabilities in Firefox. The update introduced a crash reporting issue where background tab crash reports were sent to Mozilla without user opt-in. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were...

librawspeed/TiffDecoderFuzzer-IiqDecoder: Heap-buffer-overflow in rawspeed::Spline::calculateCurve

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6121879761846272 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-IiqDecoder Fuzz target binary: TiffDecoderFuzzer-IiqDecoder Job Type: libfuzzerasanlibrawspeed Platform Id:...

libreoffice/htmlfuzzer: Crash in __dynamic_cast

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5981969591566336 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Cra...

libreoffice/htmlfuzzer: NULL

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5415327040012288 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ...

libreoffice/htmlfuzzer: Stack-use-after-return in SwIndex::Init

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6725564527280128 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

dlplibs/pubfuzzer: Global-buffer-overflow in getPosixID

Detailed report: https://oss-fuzz.com/testcase?key=5692113388830720 Project: dlplibs Fuzzer: afldlplibspubfuzzer Fuzz target binary: pubfuzzer Job Type: aflasandlplibs Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x0000008d0ae0 Crash State: getPosixID...

librawspeed/FujiDecompressorFuzzer: Unknown-crash in rawspeed::FujiDecompressor::copy_line_to_xtrans

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=4838595543171072 Project: librawspeed Fuzzer: afllibrawspeedFujiDecompressorFuzzer Fuzz target binary: FujiDecompressorFuzzer Job Type: aflasanlibrawspeed Platform Id: linux Crash Type:...

librawspeed/TiffDecoderFuzzer-DcrDecoder: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6168972937396224 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-DcrDecoder Fuzz target binary: TiffDecoderFuzzer-DcrDecoder Job Type: libfuzzermsanlibrawspeed Platform Id:...

libreoffice/htmlfuzzer: Bad-cast to SdrObject from SwTextFormatColl in SwHTMLParser::ResizeDrawObject

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6745890124464128 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...