AZL-37087 CVE-2024-2004 affecting package cmake for versions less than 3.30.3-2

When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic for removing protocols. The below command would perform a request to curl.se with a plaintext protocol which has been...

CVE-2023-27537 affecting package cmake for versions less than 3.28.2-1

CVE-2023-27537 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-23915 affecting package cmake for versions less than 3.28.2-1

CVE-2023-23915 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-28322 affecting package cmake for versions less than 3.21.4-10

CVE-2023-28322 affecting package cmake for versions less than 3.21.4-10. A patched version of the package is available...

CVE-2022-43552 affecting package cmake for versions less than 3.28.2-1

CVE-2022-43552 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-43551 affecting package cmake for versions less than 3.21.4-10

CVE-2022-43551 affecting package cmake for versions less than 3.21.4-10. A patched version of the package is available...

CVE-2023-38545 affecting package cmake for versions less than 3.21.4-10

CVE-2023-38545 affecting package cmake for versions less than 3.21.4-10. A patched version of the package is available...

CVE-2023-38546 affecting package cmake for versions less than 3.21.4-10

CVE-2023-38546 affecting package cmake for versions less than 3.21.4-10. A patched version of the package is available...

CVE-2023-27538 affecting package cmake for versions less than 3.28.2-1

CVE-2023-27538 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-27535 affecting package cmake for versions less than 3.28.2-1

CVE-2023-27535 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-27533 affecting package cmake for versions less than 3.28.2-1

CVE-2023-27533 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-27536 affecting package cmake for versions less than 3.28.2-1

CVE-2023-27536 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-28320 affecting package cmake for versions less than 3.28.2-1

CVE-2023-28320 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-23914 affecting package cmake for versions less than 3.21.4-10

CVE-2023-23914 affecting package cmake for versions less than 3.21.4-10. A patched version of the package is available...

CVE-2023-27534 affecting package cmake for versions less than 3.28.2-1

CVE-2023-27534 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-23916 affecting package cmake for versions less than 3.28.2-1

CVE-2023-23916 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

AZL-35782 CVE-2024-24806 affecting package cmake for versions less than 3.28.2-6

libuv is a multi-platform support library with a focus on asynchronous I/O. The uvgetaddrinfo function in src/unix/getaddrinfo.c and its windows counterpart src/win/getaddrinfo.c, truncates hostnames to 256 characters before calling getaddrinfo. This behavior can be exploited to create addresses...

CVE-2023-52426

libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time...

CVE-2023-52425

libexpat through 2.5.0 allows a denial of service resource consumption because many full reparsings are required in the case of a large token for which multiple buffer fills are needed...

AZL-35781 CVE-2023-46219 affecting package cmake for versions less than 3.29.6-1

When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use...