171 matches found
CLSA-2023-1685377319 vim: Fix of CVE-2023-2610
CVE-2023-2610: limit the text length to MAXCOL...
CLSA-2023-1684174277 Fix CVE(s): CVE-2023-21980, CVE-2023-21912
SECURITY UPDATE: Update to 5.7.42 to fix security issues - CVE-2023-21912, CVE-2023-21980...
CLSA-2023-1683815557 git: Fix of 2 CVEs
CVE-2023-25652: removing a link instead of writing into - CVE-2023-29007: restrict the config file line length to parse it whole...
CLSA-2023-1683815235 git: Fix of 2 CVEs
CVE-2023-25652: removing a link instead of writing into - CVE-2023-29007: restrict the config file line length to parse it whole...
CLSA-2023-1681327693 nss: Fix of CVE-2023-0767
CVE-2023-0767: nss: improve handling of unknown PKCS12 safe bag types...
CLSA-2023-1677784062 Fix CVE(s): CVE-2022-34480
SECURITY UPDATE: Within the lginit function, if several allocations succeed but then one fails, an uninitialized pointer would have been freed despite never being allocated. - debian/patches/CVE-2022-34480.patch: avoid using uninitialized pointer - CVE-2022-34480...
UBUNTU-CVE-2023-25566
GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, a memory leak can be triggered when parsing usernames which can trigger a denial-of-service. The domain portion of a username may be overridden causing an allocated memory area the...
CLSA-2023-1675373662 vim: Fix of CVE-2023-0433
CVE-2023-0433: check for not going over the end of the line...
CLSA-2022-1669237532 python3: Fix of CVE-2022-45061
CVE-2022-45061: Fix quadratic time idna decoding...
CLSA-2022-1664475836 Fixed CVE-2022-2795 in bind
CVE-2022-2795: fix possible resolver performance degradation when processing large delegations...
CLSA-2022-1659637689 Fixed CVE-2021-21702 in php
CVE-2021-21702: fix null pointer dereference in Soap Client...
CLSA-2022-1658854080 Fixed CVEs in vim: CVE-2022-2289, CVE-2022-2304
CVE-2022-2289: bail out when diff pointer is no longer valid to avoid accessing freed memory with diff put - CVE-2022-2304: limit the word length to avoid out of bound accesing...
CLSA-2022-1650376937 Fix of CVE: CVE-2022-28391
CVE-2022-28391: fix possible terminal injection attacks from DNS query results...
CLSA-2022-1649869347 Fix of CVE: CVE-2022-1154
CVE-2022-1154: fix buffer usage after free...
CLSA-2022-1649696379 Fix of CVE: CVE-2021-3618
CVE-2021-3618: drop the connection after reaching the specified number of invalid protocol commmands...
CLSA-2022-1649696332 Fix of CVE: CVE-2021-3618
CVE-2021-3618: drop the connection after reaching the specified number of invalid protocol commmands...
CLSA-2022-1649695840 Fix of CVE: CVE-2021-41617
CVE-2021-41617: add missing initgroups required before setresgid...
CLSA-2022-1649170853 Fixed CVE-2022-0943 in vim
CVE-2022-0943: fix heap-based buffer overflow...