Google Chrome Security Updates (stable-channel-update-for-desktop-2018-06) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

KLA11260 SB vulnerability in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Vulnerability related to Content Security Policy can be exploited via a crafted HTML pag...

Stable Channel Update for Desktop

The stable channel has been updated to 67.0.3396.79 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictio...

poppler/pdf_fuzzer: Use-of-uninitialized-value in JBIG2Bitmap::getSlice

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5086816502808576 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

[SECURITY] [DSA 4191-2] redmine regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4191-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 03, 2018 https://www.debian.org/security/faq -...

systemd/fuzz-journal-remote: Use-of-uninitialized-value in ascii_is_valid

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5661112182767616 Project: systemd Fuzzer: libFuzzersystemdfuzz-journal-remote Fuzz target binary: fuzz-journal-remote Job Type: libfuzzermsansystemd Platform Id: linux Crash Type:...

poppler/pdf_fuzzer: Use-of-uninitialized-value in JBIG2Bitmap::getPixelPtr

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=4544550004588544 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

graphicsmagick/coder_MNG_fuzzer: Heap-buffer-overflow in mng_get_long

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4655694362968064 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderMNGfuzzer Fuzz target binary: coderMNGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type:...

poppler/pdf_fuzzer: Use-of-uninitialized-value in CMap::addCIDs

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=4571071134040064 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 67 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 67.0.3396.62 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

graphicsmagick/coder_DCM_fuzzer: Use-of-uninitialized-value in DCM_PostRescaleImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=6591948298125312 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderDCMfuzzer Fuzz target binary: coderDCMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

poppler/pdf_fuzzer: Use-of-uninitialized-value in isSameGfxColor

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5734074458046464 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

graphicsmagick/coder_PCD_fuzzer: Unknown signal in RenderFreetype

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5691209342255104 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPCDfuzzer Fuzz target binary: coderPCDfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

poppler/pdf_fuzzer: Use-of-uninitialized-value in JBIG2Stream::readTextRegion

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=6272638929338368 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

poppler/pdf_fuzzer: Use-of-uninitialized-value in FT_Set_Transform

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=6193455704309760 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

poppler/pdf_fuzzer: Use-of-uninitialized-value in FT_Set_Transform

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=4901114272022528 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

qcms/fuzz: Heap-buffer-overflow in qcms_transform_module_clut_only

Detailed report: https://oss-fuzz.com/testcase?key=5982351954804736 Project: qcms Fuzzer: aflqcmsfuzz Fuzz target binary: fuzz Job Type: aflasanqcms Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6090000002b4 Crash State: qcmstransformmoduleclutonly...

Protected Pages - Critical - Unsupported - SA-CONTRIB-2018-028

Update: 2018-06-03 A new maintainer has stepped forward and this project now has a stable release. The security team is marking this module unsupported. There is a known security issue with the module that has not been fixed by the maintainer. If you would like to maintain this module, please rea...

poppler/pdf_fuzzer: Use-of-uninitialized-value in JBIG2Stream::readSymbolDictSeg

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5760120146362368 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

poppler/pdf_fuzzer: Heap-buffer-overflow in Splash::fillGlyph2

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5133947200602112 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzerasanpoppler Platform Id: linux Crash Type: Heap-buffer-overflow...