10555 matches found
CLSA-2024-1718202753 Fix CVE(s): CVE-2023-4016
SECURITY UPDATE: Ability to write almost unlimited amounts of unfiltered data into the process heap - debian/patches/CVE-2023-4016-2.patch: ps: extended fix of the CVE-2023-4016 - fix possible buffer overflow in -C option. - CVE-2023-4016...
CLSA-2024-1718202251 procps-ng: Fix of CVE-2023-4016
CVE-2023-4016: possible overflow in multiplication when allocating memory in ps/parser.c...
CLSA-2024-1718202007 pam: Fix of CVE-2024-22365
CVE-2024-22365: pamnamespace: protectdir: use ODIRECTORY to prevent local DoS situations...
CLSA-2024-1718192341 Update of alt-php
Bump epoch Disable ESM notification after installation: - remove ESM hook for apt-system - remove ESM infra/apps repositories from apt sources list Automatically mark some pytest to skip if FIPS kernel is running in a disabled state they always fail in this mode...
CLSA-2024-1718029281 libxml2: Fix of CVE-2024-25062
CVE-2024-25062: Fix use-after-free issue in XML Reader interface...
CLSA-2024-1718028901 git: Fix of CVE-2024-32002
CVE-2024-32002: fix submodule paths to not contain symlinks...
CLSA-2024-1718024371 glibc: Fix of CVE-2024-2961
CVE-2024-2961: Fix buffer overflow issue in iconv function when converting strings to ISO-2022-CN-EXT character set...
CLSA-2024-1718023873 glibc: Fix of 2 CVEs
CVE-2024-2961: Fix buffer overflow issue in iconv function when converting strings to ISO-2022-CN-EXT character set - CVE-2024-33599: Fix buffer overflow in netgroup cache...
CLSA-2024-1717694505 glibc: Fix of 2 CVEs
CVE-2018-11236: fix stack buffer overflow when realpath input length is close to SSIZEMAX. - CVE-2024-2961: fix out-of-bound writes in ISO-2022-CN-EXT escape sequences...
CLSA-2024-1717694198 glibc: Fix of 2 CVEs
CVE-2018-11236: fix stack buffer overflow when realpath input length is close to SSIZEMAX. - CVE-2024-2961: fix out-of-bound writes in ISO-2022-CN-EXT escape sequences...
CLSA-2024-1717693264 python2: Fix of CVE-2023-27043
Remove -b option, use original maintainer approach - CVE-2023-27043: reject malformed addresses in email.parseaddr...
CLSA-2024-1717693112 python3: Fix of 3 CVEs
Remove -b option, use original maintainer approach - Fix expat regression tests for xmletree - CVE-2022-48564: Improve validation of Plist files that prevent DoS - CVE-2023-40217: Fix TLS handshake bypass - CVE-2023-27043: reject malformed addresses in email.parseaddr...
CLSA-2024-1717692967 libxml2: Fix of 2 CVEs
CVE-2023-29469: dict.c: fix non-deterministic hashing of empty dict strings - CVE-2023-28484: fix NULL pointer dereferences in xmlSchemaFixupComplexType and xmlSchemaCheckCOSSTDerivedOK...
CLSA-2024-1717692229 python3: Fix of 3 CVEs
Remove -b option, use original maintainer approach - Fix expat regression tests for xmletree - CVE-2022-48564: Improve validation of Plist files that prevent DoS - CVE-2023-40217: Fix TLS handshake bypass - CVE-2023-27043: reject malformed addresses in email.parseaddr...
CLSA-2024-1717692075 python2: Fix of CVE-2023-27043
Remove -b option, use original maintainer approach - CVE-2023-27043: reject malformed addresses in email.parseaddr...
CLSA-2024-1717691762 libxml2: Fix of 2 CVEs
CVE-2023-29469: dict.c: fix non-deterministic hashing of empty dict strings - CVE-2023-28484: fix NULL pointer dereferences in xmlSchemaFixupComplexType and xmlSchemaCheckCOSSTDerivedOK...
CLSA-2024-1717691587 Fix CVE(s): CVE-2024-2961
SECURITY UPDATE: buffer overflow in iconv function when converting to ISO-2022-CN-EXT character set - debian/patches/any/CVE-2024-2961.patch: fix out-of-bound writes in ISO-2022-CN-EXT escape sequences - CVE-2024-2961...
CLSA-2024-1717691179 file: Fix of CVE-2022-48554
CVE-2022-48554: fix stack-based buffer over-read in filecopystr in funcs.c...
CLSA-2024-1717678054 libwebp: Fix of CVE-2023-4863
CVE-2023-4863: fix OOB write in BuildHuffmanTable...
CLSA-2024-1717139314 bind: Fix of 2 CVEs
Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3...
CLSA-2024-1717087024 bind: Fix of CVE-2023-4408
CVE-2023-4408: use hashtable when parsing a message...
CLSA-2024-1717086870 bind: Fix of CVE-2023-4408
CVE-2023-4408: use hashtable when parsing a message - Fix incorrect locking in maybefreerbtdb...
CLSA-2024-1717086553 linux-firmware: Fix of 4 CVEs
Update iwlwifi firmware to mitigate CVE-2022-38076 for wifi adapters: Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260 - Update automatically loaded iwlwifi firmware to mitigate CVE-2022-36351, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel...
CLSA-2024-1716980332 Fix of 12 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-26929 - scsi: qla2xxx: Fix double free of fcport CVE-url: https://ubuntu.com/security/CVE-2024-35997 - HID: i2c-hid: remove I2CHIDREADPENDING flag to prevent lock-up CVE-url: https://ubuntu.com/security/CVE-2023-52752 - smb: client: fix use-after-free...
CLSA-2024-1716980150 Fix of 12 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-26929 - scsi: qla2xxx: Fix double free of fcport CVE-url: https://ubuntu.com/security/CVE-2024-35997 - HID: i2c-hid: remove I2CHIDREADPENDING flag to prevent lock-up CVE-url: https://ubuntu.com/security/CVE-2023-52752 - smb: client: fix use-after-free...
CLSA-2024-1716981762 Fix of 17 CVEs
CVE-url: https://ubuntu.com/security/CVE-2022-48673 - net/smc: Fix possible access to freed memory in link clear CVE-url: https://ubuntu.com/security/CVE-2024-35997 - HID: i2c-hid: remove I2CHIDREADPENDING flag to prevent lock-up CVE-url: https://ubuntu.com/security/CVE-2023-52752 - smb: client:...
CLSA-2024-1716981167 Fix of 17 CVEs
CVE-url: https://ubuntu.com/security/CVE-2022-48673 - net/smc: Fix possible access to freed memory in link clear CVE-url: https://ubuntu.com/security/CVE-2024-35997 - HID: i2c-hid: remove I2CHIDREADPENDING flag to prevent lock-up CVE-url: https://ubuntu.com/security/CVE-2023-52752 - smb: client:...
CLSA-2024-1716924362 httpd: Fix of CVE-2024-27316
CVE-2024-27316: fix HTTP/2 DoS vulnerability caused by memory exhaustion from endless continuation frames: Incoming headers that exceed limits are buffered in nghttp2 to generate an HTTP 413 response...
CLSA-2024-1716923768 httpd: Fix of CVE-2024-27316
CVE-2024-27316: fix HTTP/2 DoS vulnerability caused by memory exhaustion from endless continuation frames: Incoming headers that exceed limits are buffered in nghttp2 to generate an HTTP 413 response...
CLSA-2024-1716917767 unzip: Fix of CVE-2022-0530
CVE-2022-0530: possible flaw occurance during the conversion of a wide string to a local string...
CLSA-2024-1716916085 tomcat: Fix of CVE-2021-25329
CVE-2021-25329: use consistent approach for sub-directory checking - Fix javadoc build...
CLSA-2024-1716915845 java-1.8.0-openjdk: Fix of 4 CVEs
Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized...
CLSA-2024-1716915132 httpd: Fix of CVE-2024-27316
CVE-2024-27316: fix HTTP/2 DoS vulnerability caused by memory exhaustion from endless continuation frames: Incoming headers that exceed limits are buffered in nghttp2 to generate an HTTP 413 response...
CLSA-2024-1716883173 curl: Fix of CVE-2023-46218
CVE-2023-46218: fix cookie validation to prevent passing cookies to unrelated sites...
CLSA-2024-1716882786 curl: Fix of CVE-2023-46218
CVE-2023-46218: fix cookie validation to prevent passing cookies to unrelated sites...
CLSA-2024-1716485905 Fix CVE(s): CVE-2023-6992
SECURITY UPDATE: heap-based buffer overflow - debian/patches/CVE-2023-6992.patch: in deflace.c fix incorrectly calculated min size of block. - CVE-2023-6992...
CLSA-2024-1716485825 Fix CVE(s): CVE-2023-5764
SECURITY UPDATE: template injection allows code injection through specially crafted files - debian/patches/CVE-2023-5764.patch: avoid evaluate unsafe conditions - debian/patches/CVE-2023-5764-ext-tests.patch: addional tests - CVE-2023-5764...
CLSA-2024-1716485695 php: Fix of 2 CVEs
CVE-2022-4900: sapi/cli/phpcliserver.c: Prevent potential buffer overflow for large value of phpcliserverworkersmax - CVE-2023-3247: ext/soap/phphttp.c: Fix missing randomness check and insufficient random bytes...
CLSA-2024-1716485568 php: Fix of 2 CVEs
CVE-2022-4900: sapi/cli/phpcliserver.c: Prevent potential buffer overflow for large value of phpcliserverworkersmax - CVE-2023-3247: ext/soap/phphttp.c: Fix missing randomness check and insufficient random bytes...
CLSA-2024-1716287930 ansible: Fix of CVE-2023-5764
CVE-2023-5764: avoid evaluate unsafe conditions...
CLSA-2024-1716272110 ncurses: Fix of CVE-2023-50495
CVE-2023-50495: check return value of ncsavestr from upstream patch 20230424, add validity checks in ncparseentry from upstream patch 20170826...
CLSA-2024-1716272658 ansible: Fix of CVE-2023-5764
CVE-2023-5764: avoid evaluate unsafe conditions...
CLSA-2024-1716272474 Fix CVE(s): CVE-2023-49288
SECURITY UPDATE: Denial of Service attack against HTTP header parsing - debian/patches/CVE-2023-49288.patch: fix unintentional freeing in TRACE request handler - CVE-2023-49288...
CLSA-2024-1716272273 less: Fix of CVE-2022-48624
CVE-2022-48624: filename.c: shell-quote filenames when invoking LESSCLOSE...
CLSA-2024-1716272169 less: Fix of CVE-2022-48624
CVE-2022-48624: filename.c: shell-quote filenames when invoking LESSCLOSE...
CLSA-2024-1716271951 less: Fix of CVE-2022-48624
CVE-2022-48624: shell-quote filenames when invoking LESSCLOSE...
CLSA-2024-1716270655 Fix of 48 CVEs
CVE-url: https://ubuntu.com/security/CVE-2023-47233 - wifi: brcmfmac: Fix use-after-free bug in brcmfcfg80211detach CVE-url: https://ubuntu.com/security/CVE-2023-52601 - jfs: Fix memleak in dbAdjCtl CVE-url: https://ubuntu.com/security/CVE-2024-26801 - Bluetooth: Avoid potential use-after-free in...
CLSA-2024-1716270232 Fix of 48 CVEs
CVE-url: https://ubuntu.com/security/CVE-2023-47233 - wifi: brcmfmac: Fix use-after-free bug in brcmfcfg80211detach CVE-url: https://ubuntu.com/security/CVE-2023-52601 - jfs: Fix memleak in dbAdjCtl CVE-url: https://ubuntu.com/security/CVE-2024-26801 - Bluetooth: Avoid potential use-after-free in...
CLSA-2024-1716269925 Fix of 42 CVEs
CVE-url: https://ubuntu.com/security/CVE-2023-47233 - wifi: brcmfmac: Fix use-after-free bug in brcmfcfg80211detach CVE-url: https://ubuntu.com/security/CVE-2023-52601 - jfs: Fix memleak in dbAdjCtl CVE-url: https://ubuntu.com/security/CVE-2024-26801 - Bluetooth: Avoid potential use-after-free in...
CLSA-2024-1716269479 Fix of 42 CVEs
CVE-url: https://ubuntu.com/security/CVE-2023-47233 - wifi: brcmfmac: Fix use-after-free bug in brcmfcfg80211detach CVE-url: https://ubuntu.com/security/CVE-2023-52601 - jfs: Fix memleak in dbAdjCtl CVE-url: https://ubuntu.com/security/CVE-2024-26801 - Bluetooth: Avoid potential use-after-free in...