CLSA-2024-1733483945 Fix of 9 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-49992 - drm: remove all control node code - drm: add managed resources tied to drmdevice - drm: Set finalkfree in drmdevalloc - drm/plane: add drmmuniversalplanealloc - drm: Handle dev-unique with drmm - drm: Use drmm for drmdevinit cleanup - drm:...

CLSA-2024-1733483766 Fix of 9 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-49992 - drm: remove all control node code - drm: add managed resources tied to drmdevice - drm: Set finalkfree in drmdevalloc - drm/plane: add drmmuniversalplanealloc - drm: Handle dev-unique with drmm - drm: Use drmm for drmdevinit cleanup - drm:...

CLSA-2024-1733429914 php: Fix of CVE-2024-11233

CVE-2024-11233: fix buffer overflow vulnerability in convert.quoted-printable-decode filter...

CLSA-2024-1733429722 Fix CVE(s): CVE-2024-48992

SECURITY UPDATE: Arbitrary code execution via manipulated RUBYLIB environment variable - debian/patches/CVE-2024-48992.patch: Prevent script from setting RUBYLIB environment variable to avoid LPE - CVE-2024-48992...

CLSA-2024-1733428726 wget: Fix of CVE-2024-38428

CVE-2024-38428: properly re-implement userinfo parsing rfc2396...

CLSA-2024-1733422548 Update of expat

Version was updated...

CLSA-2024-1733422173 php: Fix of CVE-2024-11233

CVE-2024-11233: Fix buffer overflow vulnerability in convert.quoted-printable-decode filter...

CLSA-2024-1733421975 php: Fix of CVE-2024-11233

CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode filter...

CLSA-2024-1733420952 cups: Fix of CVE-2023-32324

CVE-2023-32324: Fix heap buffer overflow vulnerability in formatlogline function...

CLSA-2024-1733246466 Fix CVE(s): CVE-2024-48991

SECURITY UPDATE: Race condition allows local attackers to execute arbitrary code as root - debian/patches/CVE-2024-48991.patch: Prevent race condition on /proc/$PID/exec evaluation by synchronizing $exe with the initial value from Proc:ProcessTable - CVE-2024-48991...

CLSA-2024-1733246329 php: Fix of CVE-2024-11233

CVE-2024-11233: fix buffer overflow vulnerability in convert.quoted-printable-decode filter...

CLSA-2024-1733245591 pam: Fix of CVE-2024-10963

CVE-2024-10963: fix a flaw found in pamaccess, where certain rules in its configuration file are mistakenly treated as hostnames. There is the new 'nodns' option which should be enabled to fix the CVE...

CLSA-2024-1733245575 cups: Fix of CVE-2023-34241

CVE-2023-34241: Fix use-after-free bug in CUPS...

CLSA-2024-1733158948 php: Fix of CVE-2024-11234

CVE-2024-11234: fix HTTP fulluri CRLF injection...

CLSA-2024-1733158910 kernel: Fix of 6 CVEs

hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails CVE-2022-49029 - ppp: fix pppasyncencode illegal access CVE-2024-50035 - ext4: no need to continue when the number of entries is 1 CVE-2024-49967 - net/packet: fix slab-out-of-bounds access in packetrecvmsg CVE-2022-20368 - packet: in...

CLSA-2024-1733142968 Fix of 13 CVEs

CVE-url: https://ubuntu.com/security/CVE-2023-52614 - time: Introduce jiffies64tomsecs - PM / devfreq: Modify the indentation of transstat sysfs for readability - PM / devfreq: Do not show statistics if it's not ready. - PM / devfreq: Fix buffer overflow in transstatshow Bionic update: upstream...

CLSA-2024-1733142398 kernel: Fix of 6 CVEs

hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails CVE-2022-49029 - ppp: fix pppasyncencode illegal access CVE-2024-50035 - ext4: no need to continue when the number of entries is 1 CVE-2024-49967 - net/packet: fix slab-out-of-bounds access in packetrecvmsg CVE-2022-20368 - packet: in...

CLSA-2024-1733142550 Fix of 13 CVEs

CVE-url: https://ubuntu.com/security/CVE-2023-52614 - time: Introduce jiffies64tomsecs - PM / devfreq: Modify the indentation of transstat sysfs for readability - PM / devfreq: Do not show statistics if it's not ready. - PM / devfreq: Fix buffer overflow in transstatshow Bionic update: upstream...

CLSA-2024-1733142094 squid: Fix of CVE-2024-23638

CVE-2024-23638: Do not update StoreEntry expiration after errorAppendEntry...

CLSA-2024-1733142081 squid: Fix of CVE-2024-23638

CVE-2024-23638: Fix expired pointer reference bug to prevent Denial of Service attack...

CLSA-2024-1733141124 squid: Fix of CVE-2024-45802

CVE-2024-45802: Fix DoS by a trusted server by disabling ESI...

CLSA-2024-1733141074 krb5: Fix of 2 CVEs

CVE-2024-26458: Fix memory leak vulnerability in src/lib/rpc/pmaprmt.c - CVE-2024-26461: Fix memory leak vulnerability in src/lib/gssapi/krb5/k5sealv3.c...

CLSA-2024-1732704094 squid: Fix of CVE-2024-45802

CVE-2024-45802: disable ESI...

CLSA-2024-1732703448 squid34: Fix of CVE-2024-45802

CVE-2024-45802: disable ESI...

CLSA-2024-1732702350 squid: Fix of CVE-2024-45802

CVE-2024-45802: disable ESI...

CLSA-2024-1732702216 squid34: Fix of CVE-2024-45802

CVE-2024-45802: disable ESI...

CLSA-2024-1732702046 squid: Fix of CVE-2024-45802

CVE-2024-45802: Fix DoS by a trusted server by disabling ESI...

CLSA-2024-1732701755 squid: Fix of CVE-2024-45802

CVE-2024-45802: Disable ESI due to unfixed multiple issues in ESI causing DoS by a trusted server...

CLSA-2024-1732701614 binutils: Fix of CVE-2018-12699

CVE-2018-12699: Fix heap-based buffer overflow, oom, and stack overflow issues...

CLSA-2024-1732701424 Fix CVE(s): CVE-2024-23672

SECURITY UPDATE: DoS via incomplete cleanup vulnerability - debian/patches/CVE-2024-23672.patch: refactor WebSocket close for suspend/resume to ensure connection closure completes - CVE-2024-23672...

CLSA-2024-1732701268 Fix CVE(s): CVE-2024-45802

SECURITY UPDATE: Fix DoS by a trusted server by disable ESI - CVE-2024-45802...

CLSA-2024-1732701075 binutils: Fix of CVE-2018-12699

CVE-2018-12699: Fix heap-based buffer overflow, oom, and stack overflow issues...

CLSA-2024-1732700855 python3.9: Fix of CVE-2024-8088

CVE-2024-8088: Fix infinite loop vulnerability in zipfile.Path when iterating over zip archive entries...

CLSA-2024-1732699822 Fix CVE(s): CVE-2024-45802

SECURITY UPDATE: Fix DoS by a trusted server by disable ESI - CVE-2024-45802...

CLSA-2024-1732637149 Fix CVE(s): CVE-2024-23672

SECURITY UPDATE: Denial of Service vulnerability - debian/patches/CVE-2024-23672.patch: refactor WebSocket close for suspend/resume to ensure WebSocket connection closure completes - CVE-2024-23672...

CLSA-2024-1732555216 Fix CVE(s): CVE-2024-52533

SECURITY UPDATE: Buffer overflow due to off-by-one error in gsocks4aproxy.c - debian/patches/CVE-2024-52533.patch: Fix single byte buffer overflow in connect messages due to incorrect calculation in SOCKS4CONNMSGLEN - CVE-2024-52533...

CLSA-2024-1732555093 Fix CVE(s): CVE-2020-27767

SECURITY UPDATE: Undefined behavior due to values outside range in quantum.h - debian/patches/CVE-2020-27767.patch: Fix quantum.h to include float.h to handle min and max values for Quantum type - debian/patches/CVE-2020-27767-1.patch: Fix ClampToQuantum function to handle negative values correct...

CLSA-2024-1732554981 binutils: Fix of CVE-2018-12699

CVE-2018-12699: Fix heap-based buffer overflow, oom, and stack overflow issues...

CLSA-2024-1732553483 expat: Fix of CVE-2024-50602

CVE-2024-50602: Fix crash in XMLResumeParser by preventing XMLStopParser from stopping/suspending unstarted parser...

CLSA-2024-1732267577 kernel: Fix of 2 CVEs

net: bridge: xmit: make sure we have at least eth header len bytes CVE-2024-38538 - SUNRPC: Fix UAF in svctcplistendataready CVE-2023-52885 - Fix: Revert "smb: client: fix use-after-free bug in cifsdebugdataprocshow" double lock...

CLSA-2024-1732197974 expat: Fix of CVE-2024-50602

CVE-2024-50602: Fix crash in XMLResumeParser function by preventing XMLStopParser from stopping/suspending unstarted parser...

CLSA-2024-1732197865 expat: Fix of CVE-2024-50602

CVE-2024-50602: Fix crash in XMLResumeParser function by preventing XMLStopParser from stopping/suspending unstarted parser...

CLSA-2024-1732197848 expat: Fix of CVE-2024-50602

CVE-2024-50602: Fix crash in XMLResumeParser function by preventing XMLStopParser from stopping/suspending unstarted parser...

CLSA-2024-1732197150 Fix of 20 CVEs

Update to 8u432-ga fixing a number of CVEs - CVE-2024-20918: missing array range check in C1 compiler leads to out-of-bounds access - CVE-2024-20919: unverified bytecode execution because of the flaw in JVM class file verifier - CVE-2024-20921: optimization issue of loop range check in IfNode and...

CLSA-2024-1732196985 Fix CVE(s): CVE-2020-27765

SECURITY UPDATE: Division by zero vulnerability in segment.c - debian/patches/CVE-2020-27765.patch: Fix averagetau calculation by multiplying instead of dividing by numbernodes in OptimalTau function to prevent incorrect segmentation output - CVE-2020-27765...

CLSA-2024-1732196856 Fix CVE(s): CVE-2024-52533

SECURITY UPDATE: Buffer overflow - debian/patches/CVE-2024-52533.patch: Fix a single byte buffer overflow in connect messages in gsocks4aproxy - CVE-2024-52533...

CLSA-2024-1732195001 krb5: Fix of CVE-2024-26462

CVE-2024-26462: Fix memory leak vulnerability in src/kdc/ndr.c...

CLSA-2024-1732194710 httpd: Fix of 2 CVEs

CVE-2023-38709: faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses - CVE-2024-24795: HTTP response splitting in multiple modules allows an attacker that can inject malicious response headers into backend applications to...

CLSA-2024-1732194412 Fix of 14 CVEs

Update to 8u432-ga fixing a number of CVEs - CVE-2024-21131: UTF8 size overflow - CVE-2024-21138: infinite loop vunlerability in SymbolTable - CVE-2024-21140: int overflow/underflow in Range Check Elimination - CVE-2024-21144: invalid header validation leads to Pack200 excessive loading time -...

CLSA-2024-1731956942 Fix CVE(s): CVE-2020-25666, CVE-2020-27764, CVE-2020-27776

SECURITY UPDATE: Undefined behavior in the form of values outside the range of type unsigned long - debian/patches/CVE-2020-27764-and-CVE-2020-27776.patch: Fix outside the range of representable values of type unsigned long - CVE-2020-27764 - CVE-2020-27776 SECURITY UPDATE: Integer overflow in...