SUSE SLED15 / SLES15 Security Update : libssh2_org (SUSE-SU-2019:1059-1)

This update for libssh2org fixes the following issues : - Incorrect upstream fix for CVE-2019-3859 broke public key authentication bsc1133528, bsc1130103 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempte...

libvpx/vpx_dec_fuzzer_vp8: Crash in subpixel_ssse3.asm:1165

Project: https://chromium.googlesource.com/webm/libvpx Detailed report: https://oss-fuzz.com/testcase?key=5145943336288256 Project: libvpx Fuzzer: libFuzzerlibvpxvpxdecfuzzervp8 Fuzz target binary: vpxdecfuzzervp8 Job Type: libfuzzerasanlibvpx Platform Id: linux Crash Type: UNKNOWN READ Crash...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2019:1033-1)

This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2019-9956: Fixed a stack-based buffer overflow in PopHexPixel bsc1130330. CVE-2019-10650: Fixed a heap-based buffer over-read in WriteTIFFImage bsc1131317. CVE-2019-7175: Fixed multiple memory leaks in DecodeImag...

Fedora 29 : hostapd (2019-f409af9fbe)

Update to version 2.7 from upstream Security fix for CVE-2019-9494 cache attack against SAE Security fix for CVE-2019-9495 cache attack against EAP-pwd Security fix for CVE-2019-9496 SAE confirm missing state validation in hostapd/AP Security fix for CVE-2019-9497 EAP-pwd server not checking for...

CVE-2019-11486

The Siemens R3964 line discipline driver in drivers/tty/nr3964.c in the Linux kernel before 5.0.8 has multiple race conditions...

Supply Chain Hackers Snuck Malware Into Videogames

An aggressive group of supply chain hackers strikes again, this time further upstream...

skia/sksl2glsl: Crash in SkSL::Constructor::getVecComponent

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5656782862548992 Project: skia Fuzzer: libFuzzerskiasksl2glsl Fuzz target binary: sksl2glsl Job Type: libfuzzermsanskia Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000300000037 Cras...

kimageformats/kimgio_xcf_fuzzer: Negative-size-param in QImage::fill

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5753651588497408 Project: kimageformats Fuzzer: aflkimageformatskimgioxcffuzzer Fuzz target binary: kimgioxcffuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Negative-size-param Cra...

zstd/stream_decompress: Heap-buffer-overflow in MEM_read32

Project: https://github.com/facebook/zstd.git Detailed report: https://oss-fuzz.com/testcase?key=5648063105859584 Project: zstd Fuzzer: libFuzzerzstdstreamdecompress Fuzz target binary: streamdecompress Job Type: libfuzzerasanzstd Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

cryptofuzz/cryptofuzz-openssl-noasm: Use-of-uninitialized-value in bool std::__1::equal<std::__1::__wrap_iter<unsigned char const*>, std::__1::__wr

Project: https://github.com/guidovranken/cryptofuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5734873723043840 Project: cryptofuzz Fuzzer: libFuzzercryptofuzzcryptofuzz-openssl-noasm Fuzz target binary: cryptofuzz-openssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Cra...

Virtuozzo Linux Errata and Security Advisory 2019:0774 Important

Upstream security update. Follow RHSA-2019:0774 for details...

opencv/imread_fuzzer: Crash in _TIFFmemset

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5760646009847808 Project: opencv Fuzzer: aflopencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fe0ecdf77d0 Crash...

karchive/karchive_fuzzer: Heap-buffer-overflow in QBuffer::readData

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5691157767520256 Project: karchive Fuzzer: aflkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: aflasankarchive Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

karchive/karchive_fuzzer: Use-of-uninitialized-value in QByteArray::QByteArray

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5657295809150976 Project: karchive Fuzzer: libFuzzerkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

mod_auth_mellon security update

CentOS Errata and Security Advisory CESA-2019:0766 An update for modauthmellon is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Virtuozzo Linux Errata and Security Advisory 2019:0766 Important

Upstream security update. Follow RHSA-2019:0766 for details...

imagemagick/ping_jps_fuzzer: Use-of-uninitialized-value in LocaleNCompare

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5767189224751104 Project: imagemagick Fuzzer: libFuzzerimagemagickpingjpsfuzzer Fuzz target binary: pingjpsfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

kimageformats/kimgio_fuzzer: Heap-use-after-free in void qDeleteAll<QHash<QString, KArchiveEntry*>::const_iterator>

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=6207244191924224 Project: kimageformats Fuzzer: aflkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Heap-use-after-free READ 8...

lwan/request_fuzzer: Global-buffer-overflow in parse_headers

Project: git://github.com/lpereira/lwan Detailed report: https://oss-fuzz.com/testcase?key=5717480481226752 Project: lwan Fuzzer: afllwanrequestfuzzer Fuzz target binary: requestfuzzer Job Type: aflasanlwan Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x0000011fc1bf...

libressl/asn1: Heap-buffer-overflow in asn1_item_ex_d2i

Project: https://github.com/libressl-portable/portable.git Detailed report: https://oss-fuzz.com/testcase?key=5666378322804736 Project: libressl Fuzzer: libFuzzerlibresslasn1 Fuzz target binary: asn1 Job Type: libfuzzerasanlibressl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...