10560 matches found
CLSA-2023-1701706552 httpd: Fix of 2 CVEs
CVE-2023-27522: modproxyuwsgi: HTTP response splitting - CVE-2023-31122: modmacro: fix out-of-bounds read vulnerability by using own strncmp function...
CLSA-2023-1701706444 Fix CVE(s): CVE-2023-4016
SECURITY UPDATE: Ability to write almost unlimited amounts of unfiltered data into the process heap - debian/patches/CVE-2023-4016.patch: ps: fix possible buffer overflow in -C option. - CVE-2023-4016...
CLSA-2023-1701706316 Fix CVE(s): CVE-2023-4016
SECURITY UPDATE: Ability to write almost unlimited amounts of unfiltered data into the process heap - debian/patches/CVE-2023-4016.patch: ps: fix possible buffer overflow in -C option. - CVE-2023-4016...
CLSA-2023-1701446494 Fix CVE(s): CVE-2022-3515, CVE-2022-47629
SECURITY UPDATE: integer overflow in the TLV parser - debian/patches/CVE-2022-3515.patch: detect a possible overflow directly in the TLV parser - CVE-2022-3515 SECURITY UPDATE: integer overflow in the CRL signature parser - debian/patches/CVE-2022-47629.patch: fix an integer overflow in the CRL...
CLSA-2023-1701446356 libksba: Fix of 2 CVEs
CVE-2022-3515: detect a possible overflow directly in the TLV parser - CVE-2022-47629: fix an integer overflow in the CRL signature parser...
CLSA-2023-1701445586 libksba: Fix of 2 CVEs
CVE-2022-3515: detect a possible overflow directly in the TLV parser - CVE-2022-47629: fix an integer overflow in the CRL signature parser...
CLSA-2023-1701445345 libksba: Fix of 2 CVEs
CVE-2022-3515: detect a possible overflow directly in the TLV parser - CVE-2022-47629: fix an integer overflow in the CRL signature parser...
CLSA-2023-1701445092 libksba: Fix of 2 CVEs
CVE-2022-3515: detect a possible overflow directly in the TLV parser - CVE-2022-47629: fix an integer overflow in the CRL signature parser...
CLSA-2023-1701444720 microcode_ctl: Fix of 4 CVEs
Update Intel CPU microcode to microcode-20231114 release, addresses CVE-2022-40982 INTEL-SA-00828, CVE-2022-41804 INTEL-SA-00837, CVE-2023-23908 INTEL-SA-00836, CVE-2023-23583 INTEL-SA-00950: - Addition of 06-9a-04/0x40 microcode in 06-9a-04 at revision 0x5; - Addition of 06-ba-02/0xe0 microcode...
CLSA-2023-1701444589 openldap: Fix of CVE-2023-2953
CVE-2023-2953: added check for strdup failure, to avoid null pointer dereference...
CLSA-2023-1701444455 python3.9: Fix of CVE-2023-24329
CVE-2023-24329: prevent bypass blocklisting methods...
CLSA-2023-1701293817 perl: Fix of 2 CVEs
CVE-2023-31484: fix possible MITM attach due to missing SSL verification - CVE-2023-31486: add verifySSL=1 to HTTP::Tiny default configuration...
CLSA-2023-1701293664 binutils: Fix of 7 CVEs
CVE-2021-45078: Fix out-of-bounds write in stabxcoffbuiltintype - CVE-2021-46174: Fix buffer overflow in readsectionstabsdebugginginfo - CVE-2022-44840: Fix possible heap buffer overflow in findsectioninset in readelf.c - CVE-2022-45703: Combine sanity checks, calculate element counts, not word...
CLSA-2023-1701286463 squid34: Fix of CVE-2023-46847
CVE-2023-46847: Fix stack buffer overflow when parsing Digest Authorization...
CLSA-2023-1701286147 squid34: Fix of CVE-2023-46724
CVE-2023-46724: Fix validation of certificates with CN=...
CLSA-2023-1701285908 exim: Fix of CVE-2023-42117
CVE-2023-42117: fix stringisipaddress...
CLSA-2023-1701285323 exim: Fix of CVE-2023-42117
CVE-2023-42117: fix stringisipaddress...
CLSA-2023-1701285122 squid34: Fix of CVE-2023-46724
CVE-2023-46724: Fix validation of certificates with CN=...
CLSA-2023-1701284898 squid34: Fix of CVE-2023-46847
CVE-2023-46847: Fix stack buffer overflow when parsing Digest Authorization...
CLSA-2023-1701284544 Fix CVE(s): CVE-2020-12321
CVE-2020-12321 - linux-firmware: Update firmware file for Intel Bluetooth 9260 - linux-firmware: Update firmware file for Intel Bluetooth 9560...
CLSA-2023-1701266210 Fix of 10 CVEs
CVE-2023-31085 // CVE-url: https://ubuntu.com/security/CVE-2023-31085 - ubi: Refuse attaching if mtd's erasesize is 0 Jammy update: v5.15.121 upstream stable release LP: 2032689 // CVE-url: https://ubuntu.com/security/CVE-2023-4132 - media: usb: siano: Fix warning due to null workfunct function...
CLSA-2023-1701265865 Fix of 10 CVEs
CVE-2023-31085 // CVE-url: https://ubuntu.com/security/CVE-2023-31085 - ubi: Refuse attaching if mtd's erasesize is 0 Jammy update: v5.15.121 upstream stable release LP: 2032689 // CVE-url: https://ubuntu.com/security/CVE-2023-4132 - media: usb: siano: Fix warning due to null workfunct function...
CLSA-2023-1700852317 samba: Fix of CVE-2023-3961
CVE-2023-3961: Fix a path traversal out of the socket directory - fix chagelog's versions...
CLSA-2023-1700835779 Fix CVE(s): CVE-2023-3961
SECURITY UPDATE: open socket out of the dedicated directory - debian/patches/CVE-2023-3961.patch: prevents a traversal out the dedicated directory - CVE-2023-3961...
CLSA-2023-1700835091 Fix CVE(s): CVE-2023-3961
SECURITY UPDATE: open socket out of the dedicated directory - debian/patches/CVE-2023-3961.patch: prevents a traversal out the dedicated directory - CVE-2023-3961...
CLSA-2023-1700834882 samba: Fix of CVE-2023-3961
CVE-2023-3961: Fix a path traversal out of the socket directory...
CLSA-2023-1700834265 samba: Fix of CVE-2023-3961
CVE-2023-3961: Fix a path traversal out of the socket directory...
CLSA-2023-1700833977 samba: Fix of CVE-2023-3961
CVE-2023-3961: Fix a path traversal out of the socket directory...
CLSA-2023-1700686706 Update of microcode_ctl
Fix silent microcode rejection in some cases - Loading to /dev/null is enabled on VM...
CLSA-2023-1700686509 Update of microcode_ctl
Fix silent microcode rejection in some cases - Loading to /dev/null is enabled on VM...
CLSA-2023-1700593692 Fix CVE(s): CVE-2023-3446
SECURITY UPDATE: Denial of service could be encountered if a DH key or DH parameters check experience long delays. - debian/patches/CVE-2023-3446.patch: Adds check to prevent the testing of an excessively large modulus in DHcheck. - CVE-2023-3446...
CLSA-2023-1700593531 Fix CVE(s): CVE-2023-3446
SECURITY UPDATE: Denial of service could be encountered if a DH key or DH parameters check experience long delays. - debian/patches/CVE-2023-3446.patch: Adds check to prevent the testing of an excessively large modulus in DHcheck. - CVE-2023-3446...
CLSA-2023-1700593371 Fix CVE(s): CVE-2023-22045, CVE-2023-22049
Backport upstream releases 8u382 to 16.04 LTS CVEs fixed in 8u382: - CVE-2023-22045: OpenJDK incorrectly handled array accesses. - CVE-2023-22049: OpenJDK incorrectly sanitized URIs strings...
CLSA-2023-1700592975 squid: Fix of CVE-2023-46724
CVE-2023-46724: Fix validation of certificates with CN=...
CLSA-2023-1700592773 squid: Fix of CVE-2023-46724
CVE-2023-46724: Fix validation of certificates with CN=...
CLSA-2023-1700591846 kernel: Fix of 10 CVEs
openvswitch: fix OOB access in reservesfasize CVE-2022-2639 - xen/blkfront: fix leaking data in shared pages CVE-2022-26365 - Bluetooth: Fix slab-out-of-bounds read in hciextendedinquiryresultevt CVE-2020-36386 - btrfs: only search for leftinfo if there is no rightinfo in trymergefreespace...
CLSA-2023-1700591071 kernel: Fix of 10 CVEs
openvswitch: fix OOB access in reservesfasize CVE-2022-2639 - xen/blkfront: fix leaking data in shared pages CVE-2022-26365 - Bluetooth: Fix slab-out-of-bounds read in hciextendedinquiryresultevt CVE-2020-36386 - btrfs: only search for leftinfo if there is no rightinfo in trymergefreespace...
CLSA-2023-1700590886 kernel: Fix of 10 CVEs
openvswitch: fix OOB access in reservesfasize CVE-2022-2639 - xen/blkfront: fix leaking data in shared pages CVE-2022-26365 - Bluetooth: Fix slab-out-of-bounds read in hciextendedinquiryresultevt CVE-2020-36386 - btrfs: only search for leftinfo if there is no rightinfo in trymergefreespace...
CLSA-2023-1700590262 kernel: Fix of 10 CVEs
openvswitch: fix OOB access in reservesfasize CVE-2022-2639 - xen/blkfront: fix leaking data in shared pages CVE-2022-26365 - Bluetooth: Fix slab-out-of-bounds read in hciextendedinquiryresultevt CVE-2020-36386 - btrfs: only search for leftinfo if there is no rightinfo in trymergefreespace...
CLSA-2023-1700589307 Update of zlib
Changed suffix from esu to els...
CLSA-2023-1700211046 squid: Fix of 2 CVEs
CVE-2023-46846: Improve HTTP chunked encoding compliance - CVE-2023-46847: Fix stack buffer overflow when parsing Digest Authorization...
CLSA-2023-1700164647 squid: Fix of CVE-2023-46847
CVE-2023-46847: Fix stack buffer overflow when parsing Digest Authorization...
CLSA-2023-1700164396 squid: Fix of CVE-2023-46847
CVE-2023-46847: Fix stack buffer overflow when parsing Digest Authorization...
CLSA-2023-1700164193 grub2: Fix of CVE-2023-4692
CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary...
CLSA-2023-1700161520 grub2: Fix of CVE-2023-4692
CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary...
CLSA-2023-1700161280 squid: Fix of 3 CVEs
CVE-2023-46846: Improve HTTP chunked encoding compliance - CVE-2023-46847: Fix stack buffer overflow when parsing Digest Authorization - CVE-2023-46848: Fix userinfo percent-encoding...
CLSA-2023-1700161185 Fix CVE(s): CVE-2023-46847
SECURITY UPDATE: denial of service in HTTP Digest Authentication - debian/patches/CVE-2023-46847.patch: fix stack buffer overflow when parsing Digest Authorization - CVE-2023-46847...
CLSA-2023-1700161076 Fix CVE(s): CVE-2023-36054
SECURITY UPDATE: Remote authenticated user can trigger a kadmind crash - debian/patches/CVE-2023-36054.patch: ensure array count consistency in kadm5 RPC - CVE-2023-36054...
CLSA-2023-1700160963 Fix CVE(s): CVE-2023-42117, CVE-2023-42119
SECURITY UPDATE: Remote code execution because of improper neutralization of special elements - debian/patches/CVE-2023-42117.patch: fix stringisipaddress - CVE-2023-42117 SECURITY UPDATE: dnsdb out-of-bounds read information disclosure - debian/patches/CVE-2023-42119.patch: harden dnsdb against...
CLSA-2023-1700160647 Fix CVE(s): CVE-2023-46847
SECURITY UPDATE: Denial of Service in HTTP Digest Authentication - debian/patches/CVE-2023-46847.patch: fix stack buffer overflow when parsing Digest Authorization - CVE-2023-46847...