tor/oss-fuzz-iptsv2: Use-of-uninitialized-value in DES_set_key_unchecked

Project: https://git.torproject.org/tor.git Detailed report: https://oss-fuzz.com/testcase?key=6036313756139520 Project: tor Fuzzer: libFuzzertoross-fuzz-iptsv2 Fuzz target binary: oss-fuzz-iptsv2 Job Type: libfuzzermsantor Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

libreoffice/mtpfuzzer: Crash in rtl_uStringbuffer_insert_ascii

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6306492968861696 Project: libreoffice Fuzzer: libFuzzerlibreofficemtpfuzzer Fuzz target binary: mtpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: UNKNOWN WRITE Cras...

openssl/server: Heap-use-after-free in ssl_get_prev_session

Project: https://github.com/openssl/openssl.git Detailed report: https://oss-fuzz.com/testcase?key=5673171989561344 Project: openssl Fuzzer: aflopensslserver Fuzz target binary: server Job Type: aflasanopenssl Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x616000001e80...

imagemagick/ping_jng_fuzzer: Use-of-uninitialized-value in LibRaw::canon_has_lowbits

Detailed report: https://oss-fuzz.com/testcase?key=4909191931101184 Project: imagemagick Fuzzer: libFuzzerimagemagickpingjngfuzzer Fuzz target binary: pingjngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

openSUSE Security Update : nodejs6 (openSUSE-2018-444)

This update for nodejs6 fixes the following issues : - Fix some node-gyp permissions - New upstream LTS release 6.14.1 : - Security fixes : + CVE-2018-7160: Fix for inspector DNS rebinding vulnerability bsc1087463 + CVE-2018-7158: Fix for 'path' module regular expression denial of service...

389 security update

CentOS Errata and Security Advisory CESA-2018:1364 An update for 389-ds-base is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2018-10801

TIFFClientOpen in tifunix.c in LibTIFF 3.8.2 has memory leaks, as demonstrated by bmp2tiff...

imagemagick/encoder_label_fuzzer: Use-of-uninitialized-value in FxEvaluateSubexpression

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6312993015988224 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderlabelfuzzer Fuzz target binary: encoderlabelfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_label_fuzzer: Use-of-uninitialized-value in ScaleQuantumToChar

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5701174052257792 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderlabelfuzzer Fuzz target binary: encoderlabelfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

gstreamer/gst-discoverer: Heap-buffer-overflow in tap_type_find

Project: https://anongit.freedesktop.org/git/gstreamer/gstreamer Detailed report: https://oss-fuzz.com/testcase?key=5192041649668096 Project: gstreamer Fuzzer: libFuzzergstreamergst-discoverer Fuzz target binary: gst-discoverer Job Type: libfuzzerasangstreamer Platform Id: linux Crash Type:...

DLA-1372-1 libdatetime-timezone-perl - new upstream version

Bulletin has no description...

graphicsmagick/coder_DPX_fuzzer: Use-of-uninitialized-value in RGBTransformPackets

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5966363016298496 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderDPXfuzzer Fuzz target binary: coderDPXfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

Moderate: Red Hat Security Advisory: go-toolset-7 and go-toolset-7-golang security and bug fix update

An update for go-toolset-7 and go-toolset-7-golang is now available for Red Hat Developer Tools. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

gdal/gdal_fuzzer: Heap-buffer-overflow in PCIDSK::CPCIDSKGeoref::Load

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5443800485855232 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address:...

imagemagick/enhance_fuzzer: Use-of-uninitialized-value in EnhanceImage

Detailed report: https://oss-fuzz.com/testcase?key=5747783507116032 Project: imagemagick Fuzzer: libFuzzerimagemagickenhancefuzzer Fuzz target binary: enhancefuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: EnhanceImag...

Ubuntu 18.04 LTS : MySQL vulnerabilities (USN-3629-3)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3629-3 advisory. USN-3629-1 fixed vulnerabilities in MySQL. This update provides the corresponding updates for Ubuntu 18.04 LTS. Tenable has extracted the preceding...

Moderate: Red Hat Security Advisory: openvswitch security and bug fix update

An update for openvswitch is now available for Fast Datapath for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

openSUSE Security Update : mysql-community-server (openSUSE-2018-405)

This update for mysql-community-server to version 5.6.40 fixes the following issues : Security issues fixed : - CVE-2018-2755: Unspecified vulnerability in the Replication component - CVE-2018-2819: Unspecified vulnerability in the InnoDB component - CVE-2018-2817: Unspecified vulnerability in th...

imagemagick/encoder_dcm_fuzzer: Use-of-uninitialized-value in read_markers

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5165251019407360 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdcmfuzzer Fuzz target binary: encoderdcmfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

graphicsmagick/coder_DPX_fuzzer: Use-of-uninitialized-value in WriteDPXImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5665839926738944 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderDPXfuzzer Fuzz target binary: coderDPXfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...