gdal/gdal_fuzzer: NULL

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5144842333061120 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000...

samba4 security update

CentOS Errata and Security Advisory CESA-2018:1883 An update for samba4 is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

gdal/gdal_fuzzer: NULL

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5691369438838784 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000...

graphicsmagick/coder_MAT_fuzzer: Use-of-uninitialized-value in WriteBlob

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5710480829054976 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMATfuzzer Fuzz target binary: coderMATfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

Moderate: Red Hat Security Advisory: ansible security and bug fix update

An update for ansible is now available for Red Hat Ansible Engine 2.5 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2018:1852 An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

libtsm/libtsm_fuzzer: Global-buffer-overflow in vte_write_debug

Project: git://people.freedesktop.org/dvdhrm/libtsm Detailed report: https://oss-fuzz.com/testcase?key=4610447732899840 Project: libtsm Fuzzer: libFuzzerlibtsmfuzzer Fuzz target binary: libtsmfuzzer Job Type: libfuzzerasanlibtsm Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash...

yara/dex_fuzzer: Heap-buffer-overflow in dex_parse

Detailed report: https://oss-fuzz.com/testcase?key=4621856041598976 Project: yara Fuzzer: libFuzzeryaradexfuzzer Fuzz target binary: dexfuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6120000008c5 Crash State: dexparse dexload...

skia/skottie_json: Heap-buffer-overflow in char const* skjson::DOMParser::matchString<skjson::DOMParser::parse

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5233264133406720 Project: skia Fuzzer: libFuzzerskiaskottiejson Fuzz target binary: skottiejson Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

imagemagick/encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4845879373594624 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

Node.js: Your page has 2 blocking CSS resources. This causes a delay in rendering your page.

This report was not deemed to be a security vulnerability and the reporter was asked to open an issue upstream to fix publicly...

plexus security update

CentOS Errata and Security Advisory CESA-2018:1836 An update for plexus-archiver is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

capstone/fuzz_disasmnext: Index-out-of-bounds in set_mem_access

Detailed report: https://oss-fuzz.com/testcase?key=6216506651181056 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzerubsancapstone Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: setmemaccess...

capstone/fuzz_disasmmaster: Use-of-uninitialized-value in isPrefixAtLocation

Detailed report: https://oss-fuzz.com/testcase?key=5120790969188352 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmmaster Fuzz target binary: fuzzdisasmmaster Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

poppler/pdf_fuzzer: Use-of-uninitialized-value in clip01

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5669907504037888 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

imagemagick/encoder_mvg_fuzzer: Heap-buffer-overflow in CheckPrimitiveExtent

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5137949766189056 Project: imagemagick Fuzzer: aflimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

sqlite3/ossfuzz: Use-of-uninitialized-value in whereLoopAddAll

Detailed report: https://oss-fuzz.com/testcase?key=6257131337547776 Project: sqlite3 Fuzzer: libFuzzersqlite3ossfuzz Fuzz target binary: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: whereLoopAddAll sqlite3WhereBegin...

poppler/pdf_fuzzer: Use-of-uninitialized-value in FT_Set_Transform

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=4854502862618624 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

libcoap/pdu_parse_fuzzer: Heap-buffer-overflow in coap_opt_parse

Project: https://github.com/obgm/libcoap.git Detailed report: https://oss-fuzz.com/testcase?key=5676475918319616 Project: libcoap Fuzzer: libFuzzerlibcoappduparsefuzzer Fuzz target binary: pduparsefuzzer Job Type: libfuzzerasanlibcoap Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cra...

envoy/h1_capture_fuzz_test: Heap-use-after-free in Envoy::IntegrationUtil::makeSingleRequest

Detailed report: https://oss-fuzz.com/testcase?key=5090066358599680 Project: envoy Fuzzer: libFuzzerenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60b006c81240 Crash State:...