CLSA-2023-1679924984 vim: Fix of CVE-2023-1170

CVE-2023-1170: adjust the cursor column if needed...

CLSA-2023-1678820960 vim: Fix of CVE-2023-1175

CVE-2023-1175: make sure "startspaces" is not negative...

CLSA-2023-1675985375 Fix CVE(s): CVE-2023-22809

SECURITY UPDATE: edit a file not permitted by the security policy - debian/patches/CVE-2023-22809.patch: do not permit editor arguments to include "--" - CVE-2023-22809...

CLSA-2022-1671124649 Fix CVE(s): CVE-2022-3591

SECURITY UPDATE: Dummy buffer ends up in a window - debian/patches/CVE-2022-3591.patch: Disallow navigating to a dummy buffer - CVE-2022-3591...

CLSA-2022-1671124508 Fix CVE(s): CVE-2021-23222

SECURITY UPDATE: A man-in-the-middle attacker can inject false responses - debian/patches/CVE-2021-23222.patch: libpq: reject extraneous data after SSL or GSS encryption handshake - CVE-2021-23222...

CLSA-2022-1667495485 expat: Fix of CVE-2022-43680

CVE-2022-43680: Fix overeager DTD destruction...

CLSA-2022-1666011324 Fix CVE(s): CVE-2019-1010204, CVE-2017-17122

SECURITY UPDATE: integer overflow - debian/patches/CVE-2017-17122-pre1.patch: change bfdgetsize/bfdgetfilesize to ufileptr. - debian/patches/CVE-2017-17122.patch: stop objdump from attempting to allocate a huge chunk of memory when parsing relocs in a corrupt file. - CVE-2017-17122 SECURITY UPDAT...

CLSA-2022-1665428667 Fix CVE(s): CVE-2021-32027

SECURITY UPDATE: Buffer overrun from integer overflow - debian/patches/CVE-2021-32027.patch: Prevent integer overflows in array subscripting calculations - CVE-2021-32027...

CLSA-2022-1664475166 Fix CVE(s): CVE-2022-38177, CVE-2022-2795

SECURITY UPDATE: degrade resolver performance - debian/patches/CVE-2022-2795.patch: adds limits in fctxgetaddresses to avoid spending excessive amounts of time on processing large delegations in resolver code in lib/dns/resolver.c. - CVE-2022-2795 SECURITY UPDATE: memory leak -...

CLSA-2022-1659636700 Fix CVE(s): CVE-2022-21515

SECURITY UPDATE: Update to 5.7.39 to fix security issues - CVE-2022-21515 - debian/patches/disabletests.patch: added new failing test with 5.7.39...

CLSA-2022-1658856539 Fix CVE(s): CVE-2022-2289, CVE-2022-2304

SECURITY UPDATE: Accessing freed memory with diff put - debian/patches/CVE-2022-2289.patch: Bail out when diff pointer is no longer valid - CVE-2022-2289 SECURITY UPDATE: Spell dump may go beyond end of an array - debian/patches/CVE-2022-2304.patch: Limit the word length - CVE-2022-2304...

CLSA-2022-1657814447 Fix CVE(s): CVE-2021-23214

SECURITY UPDATE: MITM attack introducing arbitrary SQL quieries - debian/patches/CVE-2021-23214.patch: Raise error if data was received during SSL handshake - CVE-2021-23214...

CLSA-2022-1649348075 Fix CVE(s): CVE-2021-4189

SECURITY UPDATE: Expose sensitive information - debian/patches/CVE-2021-4189.patch: alters ftplib.FTP class behavior to not trust the IPv4 address sent from the remote server when setting up a passive data channel in resposne in Lib/ftplib.py, Lib/test/testftplib.py. - CVE-2021-4189...

CLSA-2022-1649331579 Fix of CVE: CVE-2021-25220

CVE-2021-25220: fix possible cache poisoning from forwarder responses...

CLSA-2022-1649170553 Fix CVE(s): CVE-2021-4189

SECURITY UPDATE: Expose sensitive information - debian/patches/CVE-2021-4189.patch: alters ftplib.FTP class behavior to not trust the IPv4 address sent from the remote server when setting up a passive data channel in resposne in Lib/ftplib.py, Lib/test/testftplib.py. - CVE-2021-4189...

CLSA-2022-1647550603 Fix CVE(s): CVE-2022-0778

SECURITY UPDATE: Infinite loop in BNmodsqrt - debian/patches/CVE-2022-0778.patch: fix infinite loop in crypto/bn/bnsqrt.c. - CVE-2022-0778...

CLSA-2022-1642429251 Fix CVE(s):

Security update for Ubuntu 16.04...

CLSA-2021-1639681859 Fix CVE(s): CVE-2021-3927, CVE-2021-3928

SECURITY UPDATE: Fix heap-based buffer overflow when reading character past end of line - debian/patches/CVE-2021-3927.patch: Correct the cursor column in src/exdocmd.c. - CVE-2021-3927 SECURITY UPDATE: Fix stack-based buffer overflow when reading uninitialized memory when giving spell suggestion...

CLSA-2021-1635459213 Fix CVE(s): CVE-2021-33574, CVE-2021-38604, CVE-2021-35942

debian/patches/any/add-pthread-attr-copy.patch: adopt pthreadattrcopy functionality. debian/patches/any/add-test-for-pthread-attr-copy.patch: add test case for it. SECURITY UPDATE: Use-after-free in mqnotify - debian/patches/any/CVE-2021-33574.patch: use pthreadattrcopy to completely duplicate...

CLSA-2021-1635430310 Fix CVE(s): CVE-2017-20005

SECURITY UPDATE: Fix buffer overflow for years that exceed four digits. - debian/patches/CVE-2017-20005.patch - CVE-2017-20005...