CVE-2023-23915 affecting package cmake for versions less than 3.28.2-1

CVE-2023-23915 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-38545 affecting package cmake for versions less than 3.21.4-10

CVE-2023-38545 affecting package cmake for versions less than 3.21.4-10. A patched version of the package is available...

CVE-2023-38546 affecting package cmake for versions less than 3.21.4-10

CVE-2023-38546 affecting package cmake for versions less than 3.21.4-10. A patched version of the package is available...

CVE-2023-27534 affecting package cmake for versions less than 3.28.2-1

CVE-2023-27534 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-27536 affecting package cmake for versions less than 3.28.2-1

CVE-2023-27536 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-27533 affecting package cmake for versions less than 3.28.2-1

CVE-2023-27533 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-43551 affecting package cmake for versions less than 3.21.4-10

CVE-2022-43551 affecting package cmake for versions less than 3.21.4-10. A patched version of the package is available...

CVE-2023-23916 affecting package cmake for versions less than 3.28.2-1

CVE-2023-23916 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-27535 affecting package cmake for versions less than 3.28.2-1

CVE-2023-27535 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-23914 affecting package cmake for versions less than 3.21.4-10

CVE-2023-23914 affecting package cmake for versions less than 3.21.4-10. A patched version of the package is available...

CVE-2023-28320 affecting package cmake for versions less than 3.28.2-1

CVE-2023-28320 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-27537 affecting package cmake for versions less than 3.28.2-1

CVE-2023-27537 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-28322 affecting package cmake for versions less than 3.21.4-10

CVE-2023-28322 affecting package cmake for versions less than 3.21.4-10. A patched version of the package is available...

CVE-2022-43552 affecting package cmake for versions less than 3.28.2-1

CVE-2022-43552 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

AZL-35782 CVE-2024-24806 affecting package cmake for versions less than 3.28.2-6

libuv is a multi-platform support library with a focus on asynchronous I/O. The uvgetaddrinfo function in src/unix/getaddrinfo.c and its windows counterpart src/win/getaddrinfo.c, truncates hostnames to 256 characters before calling getaddrinfo. This behavior can be exploited to create addresses...

CVE-2023-52425

libexpat through 2.5.0 allows a denial of service resource consumption because many full reparsings are required in the case of a large token for which multiple buffer fills are needed...

CVE-2023-52426

libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time...

AZL-35781 CVE-2023-46219 affecting package cmake for versions less than 3.29.6-1

When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use...

AZL-32119 CVE-2023-46218 affecting package cmake for versions less than 3.21.4-13

This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or possible. This allows a site to set cookies that then would get sent to different and unrelated sites and domains. It could do this by exploiting a...

AZL-34618 CVE-2023-46218 affecting package cmake for versions less than 3.29.6-1

This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or possible. This allows a site to set cookies that then would get sent to different and unrelated sites and domains. It could do this by exploiting a...