imagemagick/ping_dng_fuzzer: Use-of-uninitialized-value in std::__1::basic_streambuf<char, std::__1::char_traits<char> >::xsgetn

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5662852382195712 Project: imagemagick Fuzzer: libFuzzerimagemagickpingdngfuzzer Fuzz target binary: pingdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

openh264/decoder_fuzzer: Use-of-uninitialized-value in WelsDec::CWelsDecoder::ReorderPicturesInDisplay

Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=5654741512617984 Project: openh264 Fuzzer: libFuzzeropenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: libfuzzermsanopenh264 Platform Id: linux Crash Type: Use-of-uninitialized-value...

libxls/fuzz_xls: Heap-buffer-overflow in xls_isCellTooSmall

Project: https://github.com/libxls/libxls.git Detailed report: https://oss-fuzz.com/testcase?key=5085850579238912 Project: libxls Fuzzer: afllibxlsfuzzxls Fuzz target binary: fuzzxls Job Type: aflasanlibxls Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603000002008...

readstat/fuzz_format_por: Index-out-of-bounds in read_missing_value_record

Project: https://github.com/WizardMac/ReadStat.git Detailed report: https://oss-fuzz.com/testcase?key=5652147318816768 Project: readstat Fuzzer: libFuzzerreadstatfuzzformatpor Fuzz target binary: fuzzformatpor Job Type: libfuzzerubsanreadstat Platform Id: linux Crash Type: Index-out-of-bounds Cra...

skia/api_raster_n32_canvas: Use-of-uninitialized-value in float const& SkTMin<float>

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5698138449379328 Project: skia Fuzzer: libFuzzerskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value...

Packabit project: building Nmap deb packages for Ubuntu

During the long New Year holidays 30 dec - 8 jan I started a new project: Vagrant-based Linux package builder called Packabit. I thought it might be nice to have scripts that will automatically build a Linux packages from sources and will NOT litter main system with unnecessary packages. Somethin...

Fedora 28 : kernel / kernel-headers / kernel-tools (2018-3857a8b41a)

The v4.19.5 stable update contains important fixes across the tree Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

clamav/clamav_scanmap_OLE2_fuzzer: Heap-buffer-overflow in uniq_add

Detailed report: https://oss-fuzz.com/testcase?key=5744082379341824 Project: clamav Fuzzer: aflclamavscanmapOLE2fuzzer Fuzz target binary: clamavscanmapOLE2fuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x60c000000e48 Crash State: uniqadd...

Google Chrome Security Updates (stable-channel-update-for-desktop_12-2018-12) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Stable Channel Update for Desktop

The stable channel has been updated to 71.0.3578.98 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. Security Fixes and Rewards We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever...

imagemagick/ping_mvg_fuzzer: Heap-buffer-overflow in CopyMagickString

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5763296301416448 Project: imagemagick Fuzzer: aflimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow...

skia/api_mock_gpu_canvas: Heap-use-after-free in SkGlyphRun::eachGlyphToGlyphRun

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5757635266084864 Project: skia Fuzzer: libFuzzerskiaapimockgpucanvas Fuzz target binary: apimockgpucanvas Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash...

FreeBSD Code Execution Vulnerability

FreeBSD is a set of Unix-like free operating systems in the FreeBSD project, headed by the Core Team team, and is an important branch of Unix-like systems that have evolved through BSD, 386BSD, and 4.4BSD. A security vulnerability exists in FreeBSD versions prior to 11.2-STABLE r341486 and prior ...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 71 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 71.0.3578.80 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

keystone/fuzz_asm_sparc64be: Heap-buffer-overflow in ELFSparcAsmBackend::applyFixup

Detailed report: https://oss-fuzz.com/testcase?key=5642078139187200 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmsparc64be Fuzz target binary: fuzzasmsparc64be Job Type: libfuzzerasankeystone Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6070000003e1 Crash State...

Debian DSA-4349-1 : tiff - security update

Multiple vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service or the execution of arbitrary code if malformed image files are processed. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

skia/api_mock_gpu_canvas: Heap-use-after-free in void SkGlyphRunListPainter::drawGlyphRunAsBMPWithPathFallback<GrTextBlob::genera

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5737185492336640 Project: skia Fuzzer: aflskiaapimockgpucanvas Fuzz target binary: apimockgpucanvas Job Type: aflasanskia Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address:...

harfbuzz/hb-shape-fuzzer: Use-of-uninitialized-value in void hb_sanitize_context_t::set_object<AAT::ChainSubtable<AAT::ExtendedTypes> >

Detailed report: https://oss-fuzz.com/testcase?key=5657878543728640 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void...

skia/api_image_filter: Heap-buffer-overflow in make_fuzz_textblob

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5656916177453056 Project: skia Fuzzer: aflskiaapiimagefilter Fuzz target binary: apiimagefilter Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

Debian: Security Advisory (DSA-4343-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...