CLSA-2023-1697465384 python2: Fix of CVE-2022-48566

CVE-2022-48566: Make comparedigest more constant-time...

CLSA-2023-1697462566 Fix CVE(s): CVE-2022-48566

SECURITY UPDATE: Constant-time-defeating optimisations issue - debian/patches/CVE-2022-48566.patch: Make comparedigest more constant-time - CVE-2022-48566...

CLSA-2023-1697135570 bind: Fix of CVE-2023-3341

CVE-2023-3341: Limit iscccccfromwire recursion depth...

CLSA-2023-1697135138 bind: Fix of CVE-2023-3341

Limit iscccccfromwire recursion depth CVE-2023-3341...

CLSA-2023-1697134824 bind: Fix of CVE-2023-3341

CVE-2023-3341: Limit iscccccfromwire recursion depth...

CLSA-2023-1697134618 bind: Fix of CVE-2023-3341

CVE-2023-3341: Limit iscccccfromwire recursion depth...

CLSA-2023-1695063445 vim: Fix of CVE-2023-4733

CVE-2023-4733: verify oldwin pointer after resetVIsual...

CLSA-2023-1692294845 amanda: Fix of 2 CVEs

CVE-2022-37705: fix tar option filtering - CVE-2023-30577: introduce tar option allow list...

CLSA-2023-1692293872 samba: Fix of CVE-2022-2127

CVE-2022-2127: Fix oud-of-bounds read triggered by maliciously request...

CLSA-2023-1692293040 amanda: Fix of 2 CVEs

CVE-2022-37705: fix tar option filtering - CVE-2023-30577: introduce tar option allow list...

CLSA-2023-1689008977 cups: Fix of CVE-2023-34241

CVE-2023-34241: Fix use-after-free for CupsAcceptClient...

CLSA-2023-1689008238 bind: Fix of CVE-2023-2828

CVE-2023-2828: fix possible DoS due to cache size limit exceeded...

CLSA-2023-1685629885 git: Fix of 2 CVEs

CVE-2022-24765: fix safe.directory key not being checked in setup.c - CVE-2022-29178: avoid failing dir ownership check - some unstable tests were disabled...

CLSA-2023-1685377319 vim: Fix of CVE-2023-2610

CVE-2023-2610: limit the text length to MAXCOL...

CLSA-2023-1684174277 Fix CVE(s): CVE-2023-21980, CVE-2023-21912

SECURITY UPDATE: Update to 5.7.42 to fix security issues - CVE-2023-21912, CVE-2023-21980...

CLSA-2023-1683815557 git: Fix of 2 CVEs

CVE-2023-25652: removing a link instead of writing into - CVE-2023-29007: restrict the config file line length to parse it whole...

CLSA-2023-1683815235 git: Fix of 2 CVEs

CVE-2023-25652: removing a link instead of writing into - CVE-2023-29007: restrict the config file line length to parse it whole...

CLSA-2023-1681327693 nss: Fix of CVE-2023-0767

CVE-2023-0767: nss: improve handling of unknown PKCS12 safe bag types...

CLSA-2023-1677784062 Fix CVE(s): CVE-2022-34480

SECURITY UPDATE: Within the lginit function, if several allocations succeed but then one fails, an uninitialized pointer would have been freed despite never being allocated. - debian/patches/CVE-2022-34480.patch: avoid using uninitialized pointer - CVE-2022-34480...

UBUNTU-CVE-2023-25566

GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, a memory leak can be triggered when parsing usernames which can trigger a denial-of-service. The domain portion of a username may be overridden causing an allocated memory area the...