CVE-2024-6197 affecting package cmake for versions less than 3.30.3-2

CVE-2024-6197 affecting package cmake for versions less than 3.30.3-2. A patched version of the package is available...

CVE-2024-8096 affecting package cmake for versions less than 3.30.3-2

CVE-2024-8096 affecting package cmake for versions less than 3.30.3-2. A patched version of the package is available...

CVE-2024-2466 affecting package cmake for versions less than 3.30.3-2

CVE-2024-2466 affecting package cmake for versions less than 3.30.3-2. An upgraded version of the package is available that resolves this issue...

CVE-2023-27534 affecting package cmake for versions less than 3.21.4-12

CVE-2023-27534 affecting package cmake for versions less than 3.21.4-12. A patched version of the package is available...

CVE-2023-27533 affecting package cmake for versions less than 3.21.4-12

CVE-2023-27533 affecting package cmake for versions less than 3.21.4-12. A patched version of the package is available...

AZL-49099 CVE-2024-8096 affecting package cmake for versions less than 3.21.4-18

When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine. If the returned status reports another error tha...

AZL-49041 CVE-2024-8096 affecting package cmake for versions less than 3.30.3-2

When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine. If the returned status reports another error tha...

CVE-2024-45491

An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms where UINTMAX equals SIZEMAX...

CVE-2024-45490

An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XMLParseBuffer...

CVE-2023-28320 affecting package cmake for versions less than 3.21.4-11

CVE-2023-28320 affecting package cmake for versions less than 3.21.4-11. A patched version of the package is available...

AZL-47282 CVE-2024-7264 affecting package cmake for versions less than 3.30.3-4

libcurl's ASN1 parser code has the GTime2str function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the time fraction, leading to a strlen getting performed on a pointer to a heap buffer area that i...

AZL-49664 CVE-2024-6874 affecting package cmake for versions less than 3.30.3-2

libcurl's URL API function curlurlget offers punycode conversions, to and from IDN. Asking to convert a name that is exactly 256 bytes, libcurl ends up reading outside of a stack based buffer when built to use the macidn IDN backend. The conversion function then fills up the provided buffer exact...

AZL-47028 CVE-2024-6197 affecting package cmake for versions less than 3.30.3-2

libcurl's ASN1 parser has this utf8asn1str function used for parsing an ASN.1 UTF-8 string. Itcan detect an invalid field and return error. Unfortunately, when doing so it also invokes free on a 4 byte localstack buffer. Most modern malloc implementations detect this error and immediately abort...

Photon OS 4.0: Cmake PHSA-2023-4.0-0420

An update of the cmake package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0420. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Cmake PHSA-2023-5.0-0035

An update of the cmake package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0035. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Cmake PHSA-2023-3.0-0603

An update of the cmake package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0603. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2024-28182 affecting package cmake for versions less than 3.29.6-1

CVE-2024-28182 affecting package cmake for versions less than 3.29.6-1. A patched version of the package is available...

CVE-2024-24806 affecting package cmake for versions less than 3.28.2-6

CVE-2024-24806 affecting package cmake for versions less than 3.28.2-6. An upgraded version of the package is available that resolves this issue...

CVE-2023-46219 affecting package cmake for versions less than 3.29.6-1

CVE-2023-46219 affecting package cmake for versions less than 3.29.6-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-46218 affecting package cmake for versions less than 3.29.6-1

CVE-2023-46218 affecting package cmake for versions less than 3.29.6-1. An upgraded version of the package is available that resolves this issue...