10488 matches found
CLSA-2024-1732704094 squid: Fix of CVE-2024-45802
CVE-2024-45802: disable ESI...
CLSA-2024-1732703448 squid34: Fix of CVE-2024-45802
CVE-2024-45802: disable ESI...
CLSA-2024-1732702350 squid: Fix of CVE-2024-45802
CVE-2024-45802: disable ESI...
CLSA-2024-1732702216 squid34: Fix of CVE-2024-45802
CVE-2024-45802: disable ESI...
CLSA-2024-1732702046 squid: Fix of CVE-2024-45802
CVE-2024-45802: Fix DoS by a trusted server by disabling ESI...
CLSA-2024-1732701755 squid: Fix of CVE-2024-45802
CVE-2024-45802: Disable ESI due to unfixed multiple issues in ESI causing DoS by a trusted server...
CLSA-2024-1732701614 binutils: Fix of CVE-2018-12699
CVE-2018-12699: Fix heap-based buffer overflow, oom, and stack overflow issues...
CLSA-2024-1732701424 Fix CVE(s): CVE-2024-23672
SECURITY UPDATE: DoS via incomplete cleanup vulnerability - debian/patches/CVE-2024-23672.patch: refactor WebSocket close for suspend/resume to ensure connection closure completes - CVE-2024-23672...
CLSA-2024-1732701268 Fix CVE(s): CVE-2024-45802
SECURITY UPDATE: Fix DoS by a trusted server by disable ESI - CVE-2024-45802...
CLSA-2024-1732701075 binutils: Fix of CVE-2018-12699
CVE-2018-12699: Fix heap-based buffer overflow, oom, and stack overflow issues...
CLSA-2024-1732700855 python3.9: Fix of CVE-2024-8088
CVE-2024-8088: Fix infinite loop vulnerability in zipfile.Path when iterating over zip archive entries...
CLSA-2024-1732699822 Fix CVE(s): CVE-2024-45802
SECURITY UPDATE: Fix DoS by a trusted server by disable ESI - CVE-2024-45802...
CLSA-2024-1732637149 Fix CVE(s): CVE-2024-23672
SECURITY UPDATE: Denial of Service vulnerability - debian/patches/CVE-2024-23672.patch: refactor WebSocket close for suspend/resume to ensure WebSocket connection closure completes - CVE-2024-23672...
CLSA-2024-1732555216 Fix CVE(s): CVE-2024-52533
SECURITY UPDATE: Buffer overflow due to off-by-one error in gsocks4aproxy.c - debian/patches/CVE-2024-52533.patch: Fix single byte buffer overflow in connect messages due to incorrect calculation in SOCKS4CONNMSGLEN - CVE-2024-52533...
CLSA-2024-1732555093 Fix CVE(s): CVE-2020-27767
SECURITY UPDATE: Undefined behavior due to values outside range in quantum.h - debian/patches/CVE-2020-27767.patch: Fix quantum.h to include float.h to handle min and max values for Quantum type - debian/patches/CVE-2020-27767-1.patch: Fix ClampToQuantum function to handle negative values correct...
CLSA-2024-1732554981 binutils: Fix of CVE-2018-12699
CVE-2018-12699: Fix heap-based buffer overflow, oom, and stack overflow issues...
CLSA-2024-1732553483 expat: Fix of CVE-2024-50602
CVE-2024-50602: Fix crash in XMLResumeParser by preventing XMLStopParser from stopping/suspending unstarted parser...
CLSA-2024-1732267577 kernel: Fix of 2 CVEs
net: bridge: xmit: make sure we have at least eth header len bytes CVE-2024-38538 - SUNRPC: Fix UAF in svctcplistendataready CVE-2023-52885 - Fix: Revert "smb: client: fix use-after-free bug in cifsdebugdataprocshow" double lock...
CLSA-2024-1732197974 expat: Fix of CVE-2024-50602
CVE-2024-50602: Fix crash in XMLResumeParser function by preventing XMLStopParser from stopping/suspending unstarted parser...
CLSA-2024-1732197865 expat: Fix of CVE-2024-50602
CVE-2024-50602: Fix crash in XMLResumeParser function by preventing XMLStopParser from stopping/suspending unstarted parser...
CLSA-2024-1732197848 expat: Fix of CVE-2024-50602
CVE-2024-50602: Fix crash in XMLResumeParser function by preventing XMLStopParser from stopping/suspending unstarted parser...
CLSA-2024-1732197150 Fix of 20 CVEs
Update to 8u432-ga fixing a number of CVEs - CVE-2024-20918: missing array range check in C1 compiler leads to out-of-bounds access - CVE-2024-20919: unverified bytecode execution because of the flaw in JVM class file verifier - CVE-2024-20921: optimization issue of loop range check in IfNode and...
CLSA-2024-1732196985 Fix CVE(s): CVE-2020-27765
SECURITY UPDATE: Division by zero vulnerability in segment.c - debian/patches/CVE-2020-27765.patch: Fix averagetau calculation by multiplying instead of dividing by numbernodes in OptimalTau function to prevent incorrect segmentation output - CVE-2020-27765...
CLSA-2024-1732196856 Fix CVE(s): CVE-2024-52533
SECURITY UPDATE: Buffer overflow - debian/patches/CVE-2024-52533.patch: Fix a single byte buffer overflow in connect messages in gsocks4aproxy - CVE-2024-52533...
CLSA-2024-1732195001 krb5: Fix of CVE-2024-26462
CVE-2024-26462: Fix memory leak vulnerability in src/kdc/ndr.c...
CLSA-2024-1732194710 httpd: Fix of 2 CVEs
CVE-2023-38709: faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses - CVE-2024-24795: HTTP response splitting in multiple modules allows an attacker that can inject malicious response headers into backend applications to...
CLSA-2024-1732194412 Fix of 14 CVEs
Update to 8u432-ga fixing a number of CVEs - CVE-2024-21131: UTF8 size overflow - CVE-2024-21138: infinite loop vunlerability in SymbolTable - CVE-2024-21140: int overflow/underflow in Range Check Elimination - CVE-2024-21144: invalid header validation leads to Pack200 excessive loading time -...
CLSA-2024-1731956942 Fix CVE(s): CVE-2020-25666, CVE-2020-27764, CVE-2020-27776
SECURITY UPDATE: Undefined behavior in the form of values outside the range of type unsigned long - debian/patches/CVE-2020-27764-and-CVE-2020-27776.patch: Fix outside the range of representable values of type unsigned long - CVE-2020-27764 - CVE-2020-27776 SECURITY UPDATE: Integer overflow in...
CLSA-2024-1731956848 ImageMagick: Fix of 3 CVEs
CVE-2020-27751: fix shift exponent that is too large for 64-bit type at magick/quantum-export.c - CVE-2020-27757: fix outside the range of representable values of type 'unsigned long long' bug at magick/quantum-private.h - CVE-2020-27768: fix outside the range of representable values of type...
CLSA-2024-1731933167 kernel: Fix of 36 CVEs
smb: client: fix use-after-free in smb2queryinfocompound CVE-2023-52751 - smb: client: prevent new fids from being removed by laundromat CVE-2023-52751 - cifs: fix dentry lookups in directory handle cache CVE-2023-52751 - uprobe: avoid out-of-bounds memory access of fetching args CVE-2024-50067 -...
CLSA-2024-1731606243 Fix of 67 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-42265 - protect the fetch of -fdfd in dodup2 from mispredictions CVE-url: https://ubuntu.com/security/CVE-2024-47669 - nilfs2: fix state management in error path of log writing function CVE-url: https://ubuntu.com/security/CVE-2023-52918 - media: pci:...
CLSA-2024-1731605761 Fix of 67 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-42265 - protect the fetch of -fdfd in dodup2 from mispredictions CVE-url: https://ubuntu.com/security/CVE-2024-47669 - nilfs2: fix state management in error path of log writing function CVE-url: https://ubuntu.com/security/CVE-2023-52918 - media: pci:...
CLSA-2024-1731603213 Fix of 76 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-44946 - kcm: Serialise kcmsendmsg for the same socket. CVE-url: https://ubuntu.com/security/CVE-2024-42292 - kobjectuevent: Fix OOB access within zapmodaliasenv CVE-url: https://ubuntu.com/security/CVE-2024-41042 - netfilter: nftables: prefer...
CLSA-2024-1731602566 Fix of 76 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-44946 - kcm: Serialise kcmsendmsg for the same socket. CVE-url: https://ubuntu.com/security/CVE-2024-42292 - kobjectuevent: Fix OOB access within zapmodaliasenv CVE-url: https://ubuntu.com/security/CVE-2024-41042 - netfilter: nftables: prefer...
CLSA-2024-1731599555 Fix CVE(s): CVE-2023-25815
SECURITY UPDATE: gettext machinery might get auto-initialized using an unintended locale directory - debian/patches/CVE-2023-25815.patch: avoid using gettext if the locale dir is not present - CVE-2023-25815...
CLSA-2024-1731524667 Fix CVE(s): CVE-2020-27755
SECURITY UPDATE: Memory leak due to incorrect image depth size check - debian/patches/CVE-2020-27755.patch: Fix image depth not supported error by setting depth to 8 if it is 0 and to maximum size if it exceeds limit - CVE-2020-27755...
CLSA-2024-1731523487 Fix of 5 CVEs
SECURITY UPDATE: Improper type casting in calculation in palm.c could lead to undefined behavior in processing input file - debian/patches/CVE-2020-27761.patch: fix color calculation issue that caused incorrect output when writing PALM images - CVE-2020-27761 SECURITY UPDATE: Negative Quantum val...
CLSA-2024-1731523206 Fix CVE(s): CVE-2024-32021
SECURITY UPDATE: Fix race condition when hardlinking file from the source repository into the destination file in the target repository. - debian/patches/CVE-2024-32021.patch: builtin/clone: abort when hardlinked source and target file differ - CVE-2024-32021...
CLSA-2024-1731432257 Fix CVE(s): CVE-2024-32020
SECURITY UPDATE: When performing a local clone of a repository we end up either copying or hardlinking the source repository into the target repository. - debian/patches/CVE-2024-32020.patch: builtin/clone: refuse local clones of unsafe repositories - CVE-2024-32020...
CLSA-2024-1731432106 ImageMagick: Fix of 2 CVEs
CVE-2020-27751: fix undefined behavior due to an overly large shift exponent in quantum-export.c - CVE-2020-27768: fix NaN being outside the range of representable values issue in quantum-private.h...
CLSA-2024-1731431756 kernel: Fix of 30 CVEs
tty: ngsm: Fix use-after-free in gsmcleanupmux CVE-2024-50073 - drm/amdkfd: amdkfdfreegttmem clear the correct pointer CVE-2024-49991 - ext4: fix timer use-after-free on failed mount CVE-2024-49960 - ext4: avoid use-after-free in ext4extshowleaf CVE-2024-49889 - ext4: fix slab-use-after-free in...
CLSA-2024-1731431059 kernel: Fix of 31 CVEs
driver core: bus: Fix double free in driver API busregister CVE-2024-50055 - net: tun: Fix use-after-free in tundetach CVE-2022-49014 - memcg: fix possible use-after-free in memcgwriteeventcontrol CVE-2022-48988 - ppp: fix pppasyncencode illegal access CVE-2024-50035 - drivers: media:...
CLSA-2024-1731430561 kernel: Fix of 31 CVEs
driver core: bus: Fix double free in driver API busregister CVE-2024-50055 - net: tun: Fix use-after-free in tundetach CVE-2022-49014 - memcg: fix possible use-after-free in memcgwriteeventcontrol CVE-2022-48988 - ppp: fix pppasyncencode illegal access CVE-2024-50035 - drivers: media:...
CLSA-2024-1731348593 kernel: Fix of 18 CVEs
mm: call the securitymmapfile LSM hook in remapfilepages CVE-2024-47745 - slip: make slhcremember more robust against malicious packets CVE-2024-50033 - drm/amdkfd: amdkfdfreegttmem clear the correct pointer CVE-2024-49991 - firmwareloader: Block path traversal CVE-2024-47742 - ext4: avoid OOB...
CLSA-2024-1731345748 Fix CVE(s): CVE-2023-4408
SECURITY UPDATE: The DNS message parsing code in named includes a section whose computational complexity is overly high - debian/patches/CVE-2023-4408.patch: refactoring parsing code - debian/libdns1100.symbols: some function declarations were removed according to the CVE-2023-4408.patch -...
CLSA-2024-1731344946 openssl: Fix of CVE-2024-5535
CVE-2024-5535: Validate provided client list in ssl/ssllib.c. Clarify SSLselectnextproto documentation...
CLSA-2024-1731344359 Fix CVE(s): CVE-2020-27763
SECURITY UPDATE: Division by zero vulnerability - debian/patches/CVE-2020-27763.patch: Fix window function scaling in resize.c to avoid division on every filter call - CVE-2020-27763...
CLSA-2024-1731343085 Fix CVE(s): CVE-2020-27772
SECURITY UPDATE: Integer overflow vulnerability in bmp.c - debian/patches/CVE-2020-27772.patch: fix integer overflow causing incorrect color primary values in BMP image encoding - CVE-2020-27772 - debian/patches/fix-cast-to-ssizet-always-resulting-in-zero.patch: Fix cast to ssizet always resultin...
CLSA-2024-1731341580 Fix CVE(s): CVE-2002-27759, CVE-2020-27754, CVE-2020-27759
SECURITY UPDATE: Potential overflow in IntensityCompare function in quantize.c - debian/patches/CVE-2020-27754.patch: fix pixel intensity comparison in quantize.c to avoid integer overflow - debian/patches/CVE-2020-27759.patch: fix IntensityCompare function to correctly calculate intensity...