ROS-20240412-06

A vulnerability in the OpenSSL library’s implementation of the SM2 cryptographic algorithm is related to buffer copying
without checking the size of the input data. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code by transmitting specially crafted data for decoding.
remotely to execute arbitrary code by passing specially crafted data for decoding in
applications that use the EVP_PKEY_decrypt() function to decrypt SM2 data

A vulnerability in the libseccomp library is related to flaws in the access delimitation of some functions.
Exploitation of the vulnerability could allow an attacker acting remotely to gain access to sensitive data, compromise its integrity, and destroy its integrity.
sensitive data, compromise its integrity, and cause a denial of service.

Vulnerability in the golang.org/x/crypto/ssh component of the library for the Go crypto programming language is related to
The use of cryptographic algorithms containing flaws. Exploitation of the vulnerability could allow an
an attacker to cause a denial of service to SSH servers

The FTP and HTTP protocols vulnerability in libfetch is related to the lack of end-of-line checking. Exploitation
exploitation of the vulnerability could allow an attacker acting remotely to gain access to confidential
information