9680 matches found
CLSA-2024-1735064231 Fix CVE(s): CVE-2024-11234
SECURITY UPDATE: Security vulnerability - debian/patches/CVE-2024-11234.patch: Fix stream HTTP fulluri CRLF injection issue - CVE-2024-11234...
CLSA-2024-1735046232 php: Fix of CVE-2024-11234
CVE-2024-11234: fix HTTP fulluri CRLF injection...
CLSA-2024-1734708244 Fix of 15 CVEs
OpenJDK 11.0.25 release, build 9. - CVE-2024-21131, CVE-2024-21138, CVE-2024-21140, CVE-2024-21144, CVE-2024-21145, CVE-2024-21147, CVE-2024-21208, CVE-2024-21210, CVE-2024-21217, CVE-2024-21235. - Release notes: https://mail.openjdk.org/pipermail/jdk-updates-dev/2024-October/038512.html -...
CLSA-2024-1734705832 Fix CVE(s): CVE-2024-6923
SECURITY UPDATE: Improper quoting of newlines for email headers allows for header injection - debian/patches/CVE-2024-6923.patch: Encode newlines in headers and verify headers are safe - CVE-2024-6923...
CLSA-2024-1734704732 Fix CVE(s): CVE-2024-11234
SECURITY UPDATE: improper sanitization of URIs leading to HTTP request smuggling - debian/patches/CVE-2024-11234.patch: Fix HTTP wrapper full URI path to disallow CR or LF characters - CVE-2024-11234...
CLSA-2024-1734643401 Fix CVE(s): CVE-2024-6923
SECURITY UPDATE: Improper quoting of newlines in email headers - debian/patches/CVE-2024-6923.patch: Fix serialization of display name in originator or destination address fields with both encoded words and special chars - CVE-2024-6923...
CLSA-2024-1734643101 Fix CVE(s): CVE-2024-6923
SECURITY UPDATE: Improper newline quoting in email module header serialization - debian/patches/CVE-2024-6923.patch: Encode newlines in headers and verify headers to be sound - CVE-2024-6923...
CLSA-2024-1734642829 python3.9: Fix of CVE-2024-0450
CVE-2024-0450: Reject zip archives with overlapping entries to prevent quoted- overlap zip-bombs...
CLSA-2024-1734635951 Update of python3
Update version to 3.6.8-21.0.1.tuxcare.els1...
CLSA-2024-1734543983 php: Fix of CVE-2024-11233
CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode filter...
CLSA-2024-1734543883 python3: Fix of CVE-2024-9287
CVE-2024-9287: fix path names quoting to prevent command injection in virtual environment activation scripts...
CLSA-2024-1734543773 python3: Fix of CVE-2024-9287
CVE-2024-9287: fix path names quoting to prevent command injection in virtual environment activation scripts...
CLSA-2024-1734542622 squid: Fix of CVE-2024-23638
CVE-2024-23638: Do not update StoreEntry expiration after errorAppendEntry...
CLSA-2024-1734542452 php: Fix of CVE-2023-0568
CVE-2023-0568: fix array overrun when appending slash to paths...
CLSA-2024-1734535703 php: Fix of CVE-2023-3823
CVE-2023-3823: Fix external entity loading in XML without enabling by sanitizing libxml2 globals before parsing...
CLSA-2024-1734532539 Fix CVE(s): CVE-2022-38076
CVE-2022-38076 - linux-firmware: Update for Intel Dual Band Wireless AC 3168 - linux-firmware: Upadte for Intel Wireless 7265 Rev D Family - linux-firmware: Update for Intel Dual Band Wireless AC 3165 - linux-firmware: Update for Intel Dual Band Wireless AC 8265 - linux-firmware: Update for Intel...
CLSA-2024-1734532058 unbound: Fix of 2 CVEs
CVE-2023-50387: Evaluate DNSSEC responses to prevent KeyTrap denial of service issue. - CVE-2023-50868: Fix Closest Encloser Proof aspect to prevent CPU consumption for SHA-1 computations in random subdomain attacks...
CLSA-2024-1734531954 cups: Fix of CVE-2024-35235
CVE-2024-35235: Patch arbitrary chmod vulnerability in cupsd process when starting server with symbolic link Listen configuration item...
CLSA-2024-1734368826 php: Fix of CVE-2024-11234
CVE-2024-11234: fix HTTP fulluri CRLF injection...
CLSA-2024-1734368527 php: Fix of CVE-2024-11233
CVE-2024-11233: Fix buffer overread by one byte issue in convert.quoted-printable-decode filter - Fix Bug 74267: segfault with streams and invalid data...
CLSA-2024-1734368396 Update of libxml2
Version was updated...
CLSA-2024-1734368297 gnutls: Fix of 3 CVEs
Keep the broken pkcs11 tests disabled. - Added CVE-2024-0567 PoC test. - CVE-2023-5981-pre1: improve level of randomness for each operations, always use gnutlsswitchlibstate for pk wrappers. - CVE-2023-5981-pre2: add constant time/cache operations to prevent or minimaze timining or cache side...
CLSA-2024-1734368090 php: Fix of CVE-2023-3824
CVE-2023-3824: Update length checking in PHAR directory entries reading to prevent stack buffer overflow and potential memory corruption or RCE...
CLSA-2024-1734039943 php: Fix of CVE-2024-11234
CVE-2024-11234: fix stream HTTP fulluri CRLF injection...
CLSA-2024-1734028058 Fix CVE(s): CVE-2024-11003, CVE-2024-48990, CVE-2024-48991, CVE-2024-48992
SECURITY UPDATE: Prevent running the Python interpreter with an attacker-controlled PYTHONPATH environment variable - debian/patches/CVE-2024-48990-CVE-2024-48991.patch: do not set PYTHONPATH environment variable to prevent a LPE and prevent race condition on /proc/$PID/exec evaluation -...
CLSA-2024-1734027948 Update of python
Version was updated...
CLSA-2024-1734027856 nettle: Fix of CVE-2018-16869
Port side-channel silent functions from 3.4.1. Partially fix for CVE-2018-16869 - CVE-2018-16869: Add side-channel silent memory, math, PKCS1, RSA functions - Added tests for side-channel silent implementations...
CLSA-2024-1734007022 Fix CVE(s): CVE-2021-44038
SECURITY UPDATE: Unsafe chown/chmod operations in .service files - debian/patches/CVE-2021-44038.patch: remove chown/chmod commands from the .service files - CVE-2021-44038...
CLSA-2024-1733908995 php: Fix of CVE-2024-11233
CVE-2024-11233: Fix buffer overflow vulnerability in convert.quoted-printable-decode filter; fix bug 74267...
CLSA-2024-1733908866 Fix CVE(s): CVE-2023-25725
SECURITY UPDATE: The HTTP header parsers in HAProxy may accept empty header field names - debian/patches/CVE-2023-25725.patch: prevent empty header field names - CVE-2023-25725...
CLSA-2024-1733483945 Fix of 9 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-49992 - drm: remove all control node code - drm: add managed resources tied to drmdevice - drm: Set finalkfree in drmdevalloc - drm/plane: add drmmuniversalplanealloc - drm: Handle dev-unique with drmm - drm: Use drmm for drmdevinit cleanup - drm:...
CLSA-2024-1733483766 Fix of 9 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-49992 - drm: remove all control node code - drm: add managed resources tied to drmdevice - drm: Set finalkfree in drmdevalloc - drm/plane: add drmmuniversalplanealloc - drm: Handle dev-unique with drmm - drm: Use drmm for drmdevinit cleanup - drm:...
CLSA-2024-1733429914 php: Fix of CVE-2024-11233
CVE-2024-11233: fix buffer overflow vulnerability in convert.quoted-printable-decode filter...
CLSA-2024-1733429722 Fix CVE(s): CVE-2024-48992
SECURITY UPDATE: Arbitrary code execution via manipulated RUBYLIB environment variable - debian/patches/CVE-2024-48992.patch: Prevent script from setting RUBYLIB environment variable to avoid LPE - CVE-2024-48992...
CLSA-2024-1733428726 wget: Fix of CVE-2024-38428
CVE-2024-38428: properly re-implement userinfo parsing rfc2396...
CLSA-2024-1733422548 Update of expat
Version was updated...
CLSA-2024-1733422173 php: Fix of CVE-2024-11233
CVE-2024-11233: Fix buffer overflow vulnerability in convert.quoted-printable-decode filter...
CLSA-2024-1733420952 cups: Fix of CVE-2023-32324
CVE-2023-32324: Fix heap buffer overflow vulnerability in formatlogline function...
CLSA-2024-1733246466 Fix CVE(s): CVE-2024-48991
SECURITY UPDATE: Race condition allows local attackers to execute arbitrary code as root - debian/patches/CVE-2024-48991.patch: Prevent race condition on /proc/$PID/exec evaluation by synchronizing $exe with the initial value from Proc:ProcessTable - CVE-2024-48991...
CLSA-2024-1733246329 php: Fix of CVE-2024-11233
CVE-2024-11233: fix buffer overflow vulnerability in convert.quoted-printable-decode filter...
CLSA-2024-1733245591 pam: Fix of CVE-2024-10963
CVE-2024-10963: fix a flaw found in pamaccess, where certain rules in its configuration file are mistakenly treated as hostnames. There is the new 'nodns' option which should be enabled to fix the CVE...
CLSA-2024-1733245575 cups: Fix of CVE-2023-34241
CVE-2023-34241: Fix use-after-free bug in CUPS...
CLSA-2024-1733158948 php: Fix of CVE-2024-11234
CVE-2024-11234: fix HTTP fulluri CRLF injection...
CLSA-2024-1733158910 kernel: Fix of 6 CVEs
hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails CVE-2022-49029 - ppp: fix pppasyncencode illegal access CVE-2024-50035 - ext4: no need to continue when the number of entries is 1 CVE-2024-49967 - net/packet: fix slab-out-of-bounds access in packetrecvmsg CVE-2022-20368 - packet: in...
CLSA-2024-1733142398 kernel: Fix of 6 CVEs
hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails CVE-2022-49029 - ppp: fix pppasyncencode illegal access CVE-2024-50035 - ext4: no need to continue when the number of entries is 1 CVE-2024-49967 - net/packet: fix slab-out-of-bounds access in packetrecvmsg CVE-2022-20368 - packet: in...
CLSA-2024-1733142550 Fix of 13 CVEs
CVE-url: https://ubuntu.com/security/CVE-2023-52614 - time: Introduce jiffies64tomsecs - PM / devfreq: Modify the indentation of transstat sysfs for readability - PM / devfreq: Do not show statistics if it's not ready. - PM / devfreq: Fix buffer overflow in transstatshow Bionic update: upstream...
CLSA-2024-1733142081 squid: Fix of CVE-2024-23638
CVE-2024-23638: Fix expired pointer reference bug to prevent Denial of Service attack...
CLSA-2024-1733141124 squid: Fix of CVE-2024-45802
CVE-2024-45802: Fix DoS by a trusted server by disabling ESI...