tomcat security update

CentOS Errata and Security Advisory CESA-2019:0485 An update for tomcat is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Virtuozzo Linux Errata and Bugfix Advisory 2019:0508

Upstream security update. Follow RHBA-2019:0508 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2019:0515

Upstream security update. Follow RHBA-2019:0515 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2019:0497

Upstream security update. Follow RHBA-2019:0497 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2019:0509

Upstream security update. Follow RHBA-2019:0509 for details...

openthread/ip6-send-fuzzer: Stack-use-after-return in ot::MeshCoP::ChannelMaskEntryBase::GetChannelPage

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5153373483958272 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type:...

harfbuzz/hb-subset-fuzzer: Heap-buffer-overflow in BEInt<unsigned char, 1>::set

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5760768497156096 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflo...

gdal/gdal_fuzzer: Heap-use-after-free in GDALDataset::Reference

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5764663096115200 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x6160000060...

wireshark/fuzzshark_ip: Crash in wmem_strdup_printf

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5743803647918080 Project: wireshark Fuzzer: aflwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: aflasanwireshark Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

perfetto/trace_processor_fuzzer: Crash in perfetto::trace_processor::ProtoTraceParser::ParseTypedFtraceToRaw

Project: https://android.googlesource.com/platform/external/perfetto/ Detailed report: https://oss-fuzz.com/testcase?key=5740416861732864 Project: perfetto Fuzzer: libFuzzerperfettotraceprocessorfuzzer Fuzz target binary: traceprocessorfuzzer Job Type: libfuzzerasanperfetto Platform Id: linux Cra...

Fedora 28 : firefox (2019-0a381a82de)

Updated to latest upstream 65.0.2 - Disabled Mozilla Crashreporter to get Wayland crashes by ABRT ---- - new upstream version with skia and other security fixes - details at https://www.mozilla.org/en-US/security/advisories/mfsa20 19-05/ Note that Tenable Network Security has extracted the...

Updated kernel packages fix security vulnerability

This kernel update is based on the upstream 4.14.104 and fixes at least the following security issue: Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware...

radare2/ia_fuzz: Heap-use-after-free in sdb_free

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5637729364213760 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

imagemagick/encoder_mat_fuzzer: Heap-use-after-free in ReadImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5721754591297536 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermatfuzzer Fuzz target binary: encodermatfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

[SECURITY] [DLA 1707-1] symfony security update

Package : symfony Version : 2.3.21+dfsg-4+deb8u4 CVE ID : CVE-2017-16652 CVE-2017-16654 CVE-2018-11385 CVE-2018-11408 CVE-2018-14773 CVE-2018-19789 CVE-2018-19790 Several security vulnerabilities have been discovered in symfony, a PHP web application framework. Numerous symfony components are...

openthread/ip6-send-fuzzer: Stack-buffer-overflow in ot::MeshCoP::ChannelMaskEntry::GetMask

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5629736728920064 Project: openthread Fuzzer: aflopenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow...

polkit security update

CentOS Errata and Security Advisory CESA-2019:0230 An update for polkit is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

libheif/file-fuzzer: Heap-buffer-overflow in derive_spatial_luma_vector_prediction

Detailed report: https://oss-fuzz.com/testcase?key=5639769940295680 Project: libheif Fuzzer: afllibheiffile-fuzzer Fuzz target binary: file-fuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x61b000000640 Crash State:...

tesseract-ocr/fuzzer-api: Index-out-of-bounds in IntegerMatcher::UpdateTablesForFeature

Detailed report: https://oss-fuzz.com/testcase?key=5758158432108544 Project: tesseract-ocr Fuzzer: libFuzzertesseract-ocrfuzzer-api Fuzz target binary: fuzzer-api Job Type: libfuzzerubsantesseract-ocr Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

libheif/file-fuzzer: Index-out-of-bounds in decoder_context::has_sps

Project: https://github.com/strukturag/libheif.git Detailed report: https://oss-fuzz.com/testcase?key=5687672851398656 Project: libheif Fuzzer: libFuzzerlibheiffile-fuzzer Fuzz target binary: file-fuzzer Job Type: libfuzzerubsanlibheif Platform Id: linux Crash Type: Index-out-of-bounds Crash...