SUSE CVE-2010-1194

The matchcomponent function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if one is a substring of the other, which allows remote attackers to spoof trusted certificates via a crafted subjectAltName...

SUSE CVE-2012-5662

x3270 before 3.3.12ga12 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

SUSE CVE-2013-0308

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

SUSE CVE-2013-6444

PyWBEM 0.7 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

SUSE CVE-2014-3577

org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows...

SUSE CVE-2014-3596

The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subjec...

SUSE CVE-2016-5254

Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service heap memory corruption and application crash by leveraging keyboard access to use the Alt...

SUSE CVE-2018-20961

In the Linux kernel before 4.16.4, a double free vulnerability in the fmidisetalt function of drivers/usb/gadget/function/fmidi.c in the fmidi driver may allow attackers to cause a denial of service or possibly have unspecified other impact...

SUSE CVE-2020-36477

An issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when matching the expected common name the cn argument of mbedtlsx509crtverify with the actual certificate name is mishandled: when the subjecAltName extension is present, the expected name is compared to an...

SUSE CVE-2021-29946

Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking restrictions when used in the Alt-Svc header. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...

SUSE CVE-2021-41182

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the altField option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the altField option is now...

SUSE CVE-2021-44532

Node.js 12.22.9, 14.18.3, 16.13.2, and 17.3.1 converts SANs Subject Alternative Names to a string format. It uses this string to check peer certificates against hostnames when validating connections. The string format was subject to an injection vulnerability when name constraints were used withi...

SUSE CVE-2022-32207

When curl 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally widen the permissions for the target file, leaving the...

Security fix for the ALT Linux 10 package java-17-openjdk version 0:17.0.6.0.10-alt1

0:17.0.6.0.10-alt1 built Feb. 15, 2023 Andrey Cherepanov in task 314967 Feb. 8, 2023 Andrey Cherepanov - New version. - Security fixes: + CVE-2023-21835 + CVE-2023-21843...

Security fix for the ALT Linux 10 package xorg-server version 2:1.20.14-alt7

2:1.20.14-alt7 built Feb. 15, 2023 Valery Inozemtsev in task 314787 Feb. 7, 2023 Valery Inozemtsev - cherry pick upstream fixes for CVE-2023-0494...

Security fix for the ALT Linux 9 package libxml2 version 1:2.9.10-alt6.p9.1

1:2.9.10-alt6.p9.1 built Feb. 13, 2023 Andrey Cherepanov in task 314487 Feb. 1, 2023 Andrey Cherepanov - Applied security fixes from upstream Fixes: CVE-2022-40303, CVE-2022-40304...

Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1t-alt1

1.1.1t-alt1 built Feb. 10, 2023 Gleb Fotengauer-Malinovskiy in task 314825 Feb. 7, 2023 Gleb Fotengauer-Malinovskiy - Updated to 1.1.1t fixes CVE-2023-0286, CVE-2023-0215, CVE-2022-4450, CVE-2022-4304...

Security fix for the ALT Linux 10 package thunderbird version 102.7.1-alt1

102.7.1-alt1 built Feb. 9, 2023 Pavel Vasenkov in task 314605 Feb. 3, 2023 Pavel Vasenkov - New version. - Security fixes: + CVE-2023-0430 Revocation status of S/Mime signature certificates was not checked...

CLSA-2023-1675774889 Update of alt-php

Initial build for Ubuntu 18.04...

Security fix for the ALT Linux 10 package libXpm version 3.5.15-alt1

3.5.15-alt1 built Feb. 7, 2023 Valery Inozemtsev in task 313642 Jan. 18, 2023 Valery Inozemtsev - 3.5.15 fixes: CVE-2022-46285, CVE-2022-44617, CVE-2022-4883...