10488 matches found
CLSA-2023-1702573449 Fix of 5 CVEs
SECURITY UPDATE: Update to 5.7.44 to fix security issues - CVE-2023-22053, CVE-2023-22084, CVE-2023-22015, CVE-2023-22026, CVE-2023-22028...
CLSA-2023-1702573269 Fix CVE(s): CVE-2022-48560
SECURITY UPDATE: Posible crash in heapq with custom comparison operators - debian/patches/CVE-2022-48560.patch: Disallow releasing heap items during a comparison callback - CVE-2022-48560...
CLSA-2023-1702496473 squid34: Fix of CVE-2023-46728
CVE-2023-46728: Remove support for Gopher protocol...
CLSA-2023-1702496332 squid: Fix of CVE-2023-46728
CVE-2023-46728: Remove support for Gopher protocol - Enable test-suite...
CLSA-2023-1702495907 squid34: Fix of CVE-2023-46728
CVE-2023-46728: Remove support for Gopher protocol...
CLSA-2023-1702495796 squid: Fix of CVE-2023-46728
CVE-2023-46728: Remove support for Gopher protocol - Enable test-suite...
CLSA-2023-1702495594 squid: Fix of CVE-2023-46728
CVE-2023-46728: Remove support for Gopher protocol...
CLSA-2023-1702495324 squid: Fix of CVE-2023-46728
CVE-2023-46728: Remove support for Gopher protocol...
CLSA-2023-1702495193 openssl: Fix of CVE-2023-5363
CVE-2023-5363: evp: process key length and iv length early if present...
CLSA-2023-1702495051 perl: Fix of CVE-2023-47100
CVE-2023-47100: fix read/write past buffer end...
CLSA-2023-1702421029 microcode_ctl: Fix of CVE-2023-23583
Update Intel CPU microcode to microcode-20231114 release, addresses CVE-2023-23583 INTEL-SA-00950: - Update of 06-6a-06/0x87 ICX-SP D0 microcode in 06-6a-06 from revision 0xd0003a5 up to 0xd0003b9; - Update of 06-6c-01/0x10 ICL-D B0 microcode in 06-6c-01 from revision 0x1000230 up to 0x1000268; -...
CLSA-2023-1702420812 microcode_ctl: Fix of CVE-2023-23583
Update Intel CPU microcode to microcode-20231114 release, addresses CVE-2023-23583 INTEL-SA-00950: - Addition of 06-ba-02/0xe0 microcode at revision 0x411c; - Addition of 06-ba-02/0xe0 microcode at revision 0x411c; - Addition of 06-ba-03/0xe0 microcode in intel-ucode/06-ba-02 at revision 0x411c;...
CLSA-2023-1702420635 microcode_ctl: Fix of CVE-2023-23583
Update Intel CPU microcode to microcode-20231114 release, addresses CVE-2023-23583 INTEL-SA-00950: - Addition of 06-ba-02/0xe0 microcode at revision 0x411c; - Addition of 06-ba-02/0xe0 microcode at revision 0x411c; - Addition of 06-ba-03/0xe0 microcode in intel-ucode/06-ba-02 at revision 0x411c;...
CLSA-2023-1702420529 microcode_ctl: Fix of CVE-2023-23583
Update Intel CPU microcode to microcode-20231114 release, addresses CVE-2023-23583 INTEL-SA-00950: - Update of 06-6a-06/0x87 ICX-SP D0 microcode in 06-6a-06 from revision 0xd0003a5 up to 0xd0003b9; - Update of 06-6c-01/0x10 ICL-D B0 microcode in 06-6c-01 from revision 0x1000230 up to 0x1000268; -...
CLSA-2023-1702420474 Fix CVE(s): CVE-2023-46728
SECURITY UPDATE: Denial of Service attack against Squid’s Gopher gateway due to a NULL pointer dereference bug - debian/patches/CVE-2023-46728.patch: Remove support for Gopher protocol - CVE-2023-46728...
CLSA-2023-1702420408 Fix CVE(s): CVE-2023-46728
SECURITY UPDATE: Denial of Service attack against Squid’s Gopher gateway due to a NULL pointer dereference bug - debian/patches/CVE-2023-46728.patch: remove support for Gopher protocol - CVE-2023-46728...
CLSA-2023-1702324842 Fix CVE(s): CVE-2023-23583
SECURITY UPDATE: New microcode data file 2023-11-14 - Updated microcodes: sig 0x000606a6, pfmask 0x87, 2023-09-01, rev 0xd0003b9, size 299008 sig 0x000606c1, pfmask 0x10, 2023-09-08, rev 0x1000268, size 290816 sig 0x000706e5, pfmask 0x80, 2023-09-03, rev 0x00c2, size 113664 sig 0x000806c1, pfmask...
CLSA-2023-1702324685 Fix CVE(s): CVE-2023-23583
SECURITY UPDATE: New microcode data file 2023-11-14 - Updated microcodes: sig 0x000606a6, pfmask 0x87, 2023-09-01, rev 0xd0003b9, size 299008 sig 0x000606c1, pfmask 0x10, 2023-09-08, rev 0x1000268, size 290816 sig 0x000706e5, pfmask 0x80, 2023-09-03, rev 0x00c2, size 113664 sig 0x000806c1, pfmask...
CLSA-2023-1701971779 microcode_ctl: Fix of CVE-2023-23583
Update Intel CPU microcode to microcode-20231114 release, addresses CVE-2023-23583 INTEL-SA-00950: - Update of 06-6a-06/0x87 ICX-SP D0 microcode in 06-6a-06 from revision 0xd0003a5 up to 0xd0003b9; - Update of 06-6c-01/0x10 ICL-D B0 microcode in 06-6c-01 from revision 0x1000230 up to 0x1000268; -...
CLSA-2023-1701971558 python2: Fix of CVE-2023-40217
CVE-2023-40217: Fix TLS handshake bypass...
CLSA-2023-1701971396 python2: Fix of CVE-2023-40217
CVE-2023-40217: Fix TLS handshake bypass...
CLSA-2023-1701971295 Fix CVE(s): CVE-2023-40217
SECURITY UPDATE: TLS handshake bypass - debian/patches/CVE-2023-40217.patch: Check for & avoid the ssl pre-close flaw. Update SSL tests - CVE-2023-40217...
CLSA-2023-1701971229 Fix CVE(s): CVE-2023-40217
SECURITY UPDATE: TLS handshake bypass - debian/patches/CVE-2023-40217.patch: Check for & avoid the ssl pre-close flaw. Update SSL tests - CVE-2023-40217...
CLSA-2023-1701971140 Fix CVE(s): CVE-2022-48564, CVE-2023-40217
SECURITY UPDATE: potential DoS attack via CPU and RAM exhaustion - debian/patches/CVE-2022-48564.patch: Improve validation of Plist files that prevent DoS when processing malformed Apple Property List files in binary format - CVE-2022-48564 SECURITY UPDATE: TLS handshake bypass -...
CLSA-2023-1701963303 kernel: Fix of 18 CVEs
net/tls: do not free tlsrec on async operation in bpfexectxverdict CVE-2023-6176 - wifi: mac80211: fix MBSSID parsing use-after-free CVE-2022-42719 - mac80211: always allocate struct ieee80211elems CVE-2022-42719 - x86/sev: Check for user-space IOIO pointing to kernel space CVE-2023-46813 -...
CLSA-2023-1701962635 kernel: Fix of 18 CVEs
net/tls: do not free tlsrec on async operation in bpfexectxverdict CVE-2023-6176 - wifi: mac80211: fix MBSSID parsing use-after-free CVE-2022-42719 - mac80211: always allocate struct ieee80211elems CVE-2022-42719 - x86/sev: Check for user-space IOIO pointing to kernel space CVE-2023-46813 -...
CLSA-2023-1701801241 Fix of 8 CVEs
CVE-url: https://ubuntu.com/security/CVE-2023-45871 - igb: Limit maximum frame Rx based on MTU - igb: Only sync size of expected frame in ethtool testing - igb: Add support for ethtool private flag to allow use of legacy Rx - igb: Add support for using order 1 pages to receive large frames - igb:...
CLSA-2023-1701799960 Fix of 8 CVEs
CVE-url: https://ubuntu.com/security/CVE-2023-45871 - igb: Limit maximum frame Rx based on MTU - igb: Only sync size of expected frame in ethtool testing - igb: Add support for ethtool private flag to allow use of legacy Rx - igb: Add support for using order 1 pages to receive large frames - igb:...
CLSA-2023-1701706552 httpd: Fix of 2 CVEs
CVE-2023-27522: modproxyuwsgi: HTTP response splitting - CVE-2023-31122: modmacro: fix out-of-bounds read vulnerability by using own strncmp function...
CLSA-2023-1701706444 Fix CVE(s): CVE-2023-4016
SECURITY UPDATE: Ability to write almost unlimited amounts of unfiltered data into the process heap - debian/patches/CVE-2023-4016.patch: ps: fix possible buffer overflow in -C option. - CVE-2023-4016...
CLSA-2023-1701706316 Fix CVE(s): CVE-2023-4016
SECURITY UPDATE: Ability to write almost unlimited amounts of unfiltered data into the process heap - debian/patches/CVE-2023-4016.patch: ps: fix possible buffer overflow in -C option. - CVE-2023-4016...
CLSA-2023-1701446494 Fix CVE(s): CVE-2022-3515, CVE-2022-47629
SECURITY UPDATE: integer overflow in the TLV parser - debian/patches/CVE-2022-3515.patch: detect a possible overflow directly in the TLV parser - CVE-2022-3515 SECURITY UPDATE: integer overflow in the CRL signature parser - debian/patches/CVE-2022-47629.patch: fix an integer overflow in the CRL...
CLSA-2023-1701446356 libksba: Fix of 2 CVEs
CVE-2022-3515: detect a possible overflow directly in the TLV parser - CVE-2022-47629: fix an integer overflow in the CRL signature parser...
CLSA-2023-1701445586 libksba: Fix of 2 CVEs
CVE-2022-3515: detect a possible overflow directly in the TLV parser - CVE-2022-47629: fix an integer overflow in the CRL signature parser...
CLSA-2023-1701445345 libksba: Fix of 2 CVEs
CVE-2022-3515: detect a possible overflow directly in the TLV parser - CVE-2022-47629: fix an integer overflow in the CRL signature parser...
CLSA-2023-1701445092 libksba: Fix of 2 CVEs
CVE-2022-3515: detect a possible overflow directly in the TLV parser - CVE-2022-47629: fix an integer overflow in the CRL signature parser...
CLSA-2023-1701444720 microcode_ctl: Fix of 4 CVEs
Update Intel CPU microcode to microcode-20231114 release, addresses CVE-2022-40982 INTEL-SA-00828, CVE-2022-41804 INTEL-SA-00837, CVE-2023-23908 INTEL-SA-00836, CVE-2023-23583 INTEL-SA-00950: - Addition of 06-9a-04/0x40 microcode in 06-9a-04 at revision 0x5; - Addition of 06-ba-02/0xe0 microcode...
CLSA-2023-1701444589 openldap: Fix of CVE-2023-2953
CVE-2023-2953: added check for strdup failure, to avoid null pointer dereference...
CLSA-2023-1701444455 python3.9: Fix of CVE-2023-24329
CVE-2023-24329: prevent bypass blocklisting methods...
CLSA-2023-1701293817 perl: Fix of 2 CVEs
CVE-2023-31484: fix possible MITM attach due to missing SSL verification - CVE-2023-31486: add verifySSL=1 to HTTP::Tiny default configuration...
CLSA-2023-1701293664 binutils: Fix of 7 CVEs
CVE-2021-45078: Fix out-of-bounds write in stabxcoffbuiltintype - CVE-2021-46174: Fix buffer overflow in readsectionstabsdebugginginfo - CVE-2022-44840: Fix possible heap buffer overflow in findsectioninset in readelf.c - CVE-2022-45703: Combine sanity checks, calculate element counts, not word...
CLSA-2023-1701286463 squid34: Fix of CVE-2023-46847
CVE-2023-46847: Fix stack buffer overflow when parsing Digest Authorization...
CLSA-2023-1701286147 squid34: Fix of CVE-2023-46724
CVE-2023-46724: Fix validation of certificates with CN=...
CLSA-2023-1701285908 exim: Fix of CVE-2023-42117
CVE-2023-42117: fix stringisipaddress...
CLSA-2023-1701285323 exim: Fix of CVE-2023-42117
CVE-2023-42117: fix stringisipaddress...
CLSA-2023-1701285122 squid34: Fix of CVE-2023-46724
CVE-2023-46724: Fix validation of certificates with CN=...
CLSA-2023-1701284898 squid34: Fix of CVE-2023-46847
CVE-2023-46847: Fix stack buffer overflow when parsing Digest Authorization...
CLSA-2023-1701284544 Fix CVE(s): CVE-2020-12321
CVE-2020-12321 - linux-firmware: Update firmware file for Intel Bluetooth 9260 - linux-firmware: Update firmware file for Intel Bluetooth 9560...
CLSA-2023-1701266210 Fix of 10 CVEs
CVE-2023-31085 // CVE-url: https://ubuntu.com/security/CVE-2023-31085 - ubi: Refuse attaching if mtd's erasesize is 0 Jammy update: v5.15.121 upstream stable release LP: 2032689 // CVE-url: https://ubuntu.com/security/CVE-2023-4132 - media: usb: siano: Fix warning due to null workfunct function...
CLSA-2023-1701265865 Fix of 10 CVEs
CVE-2023-31085 // CVE-url: https://ubuntu.com/security/CVE-2023-31085 - ubi: Refuse attaching if mtd's erasesize is 0 Jammy update: v5.15.121 upstream stable release LP: 2032689 // CVE-url: https://ubuntu.com/security/CVE-2023-4132 - media: usb: siano: Fix warning due to null workfunct function...