10553 matches found
CLSA-2023-1699907536 Fix CVE(s): CVE-2023-32360
SECURITY UPDATE: An unauthenticated user may be able to access recently printed documents. The config file /etc/cups/cupsd.conf should be edited manually in case the cups has been already installed in the system: the and sections should be changed according to the patch -...
CLSA-2023-1699907419 Fix CVE(s): CVE-2023-3247
SECURITY UPDATE: possible weak randomness in nonce value - debian/patches/php-7.1-CVE-2023-3247.patch: Fix missing randomness check for SOAP HTTP Digest - CVE-2023-3247...
CLSA-2023-1699468875 Fix CVE(s): CVE-2022-48560
SECURITY UPDATE: posible crash in heapq with custom comparison operators - debian/patches/CVE-2022-48560.patch: disallow releasing heap items during a comparison callback - CVE-2022-48560...
CLSA-2023-1699468766 Fix CVE(s): CVE-2018-12327
SECURITY UPDATE: Arbitrary code execution vulnerability in ntpq/ntpdc - debian/patches/CVE-2018-12327.patch: fix stack buffer overflow in NTPQ/NTPDC. - CVE-2018-12327...
CLSA-2023-1699468134 Fix CVE(s): CVE-2023-42119
SECURITY UPDATE: dnsdb out-of-bounds read information disclosure - debian/patches/CVE-2023-42119.patch: harden dnsdb against crafted DNS responses - CVE-2023-42119...
CLSA-2023-1699467659 Fix CVE(s): CVE-2023-0288, CVE-2023-0054
SECURITY UPDATE: a heap-based overflow - debian/patches/CVE-2023-0288.patch: prevent the cursor from moving to line zero - CVE-2023-0288 SECURITY UPDATE: an out-of-bounds write - debian/patches/CVE-2023-0054.patch: check the return value of vimregsub - CVE-2023-0054...
CLSA-2023-1699439565 openssl: Fix of CVE-2021-3711
CVE-2021-3711: Fix an incorrect buffer size calculation leads to an overflow - Check the plaintext buffer is large enough when decrypting SM2 - Add extended tests for SM2...
CLSA-2023-1699393971 libxml2: Fix of CVE-2016-4658
CVE-2016-4658: disallow namespace nodes in XPointer ranges...
CLSA-2023-1699381307 libxml2: Fix of CVE-2016-4658
CVE-2016-4658: disallow namespace nodes in XPointer ranges...
CLSA-2023-1699381084 Fix of 5 CVEs
SECURITY UPDATE: reachable assertion failure in displaydebugnames - debian/patches/CVE-2022-35205.patch: replace assert with a warning message - CVE-2022-35205 SECURITY UPDATE: memory leak in stabdemanglev3arg - debian/patches/CVE-2022-47007.patch: free dt on failure path - CVE-2022-47007 SECURIT...
CLSA-2023-1699380962 Fix CVE(s): CVE-2022-48063
SECURITY UPDATE: fix an attempt to allocate an unreasonably large amount of memory when parsing a corrupt ELF file - debian/patches/CVE-2022-48063.patch: Check for excessively large sections - CVE-2022-48063...
CLSA-2023-1699380309 Fix CVE(s): CVE-2022-48063
SECURITY UPDATE: fix an attempt to allocate an unreasonably large amount of memory when parsing a corrupt ELF file - debian/patches/CVE-2022-48063.patch: Check for excessively large sections - CVE-2022-48063...
CLSA-2023-1699380175 Fix CVE(s): CVE-2022-47011, CVE-2022-47007, CVE-2022-47010, CVE-2022-47008
SECURITY UPDATE: memory leak in stabdemanglev3arg - debian/patches/CVE-2022-47007.patch: free dt on failure path - CVE-2022-47007 SECURITY UPDATE: memory leak in maketempdir - debian/patches/CVE-2022-47008.patch: free template on all failure paths - CVE-2022-47008 SECURITY UPDATE: memory leak in...
CLSA-2023-1699380056 rsync: Fix of 2 CVEs
CVE-2018-25032: fix a bug that can crash deflate on some input when using ZFIXED - CVE-2022-37434: fix zlib bug with a large gzip header extra field...
CLSA-2023-1699379448 libcap: Fix of CVE-2023-2603
CVE-2023-2603: integer overflow if the input string is close to 4GiB...
CLSA-2023-1698949696 httpd: Fix of CVE-2023-31122
CVE-2023-31122: modmacro: Fix out-of-bounds read vulnerability by using own strncmp function...
CLSA-2023-1698949525 openssl: Fix of CVE-2021-3711
CVE-2021-3711: Fix an incorrect buffer size calculation leads to an overflow - Check the plaintext buffer is large enough when decrypting SM2 - Add extended tests for SM2...
CLSA-2023-1698949430 Fix CVE(s): CVE-2023-31122
SECURITY UPDATE: modmacro buffer over-read - debian/patches/CVE-2023-31122.patch: use our own strncmp function in modmacro - CVE-2023-31122...
CLSA-2023-1698949348 Fix CVE(s): CVE-2023-31122
SECURITY UPDATE: modmacro buffer over-read - debian/patches/CVE-2023-31122.patch: use our own strncmp function in modmacro - CVE-2023-31122...
CLSA-2023-1698949146 httpd: Fix of CVE-2023-31122
CVE-2023-31122: modmacro: fix out-of-bounds read vulnerability by using own strncmp function...
CLSA-2023-1698948956 httpd: Fix of CVE-2023-31122
CVE-2023-31122: modmacro: fix out-of-bounds read vulnerability by using own strncmp function...
CLSA-2023-1698946014 sqlite: Fix of CVE-2022-35737
CVE-2022-35737: increase the size of loop variables in the printf implementation...
CLSA-2023-1698945913 python3: Fix of CVE-2020-26116
CVE-2020-26116: prevent header injection in http methods...
CLSA-2023-1698945053 libgcrypt: Fix of 4 CVEs
CVE-2013-4576: Normalize the MPIs to prevent possible side-channel attacks - CVE-2014-3591: Use ciphertext blinding for Elgamal to prevent possible side-channel attacks - CVE-2021-33560: Use of smaller K for ephemeral key in ElGamal prevent generation of weak keys - CVE-2021-40528: Add exponent...
CLSA-2023-1698690423 systemd: Fix of CVE-2023-26604
CVE-2023-26604: use only less as a pager and restrict its functionality e.g stop running external shell unless environment variable SYSTEMDPAGERSECURE is defined...
CLSA-2023-1698690146 nginx: Fix of CVE-2023-44487
CVE-2023-44487: HTTP/2 - per-iteration stream handling limit...
CLSA-2023-1698689944 nginx: Fix of CVE-2023-44487
CVE-2023-44487: HTTP/2 - per-iteration stream handling limit...
CLSA-2023-1698689824 Fix CVE(s): CVE-2023-44487
SECURITY UPDATE: The HTTP/2 protocol allows a denial of service because request cancellation can reset many streams quickly - debian/patches/CVE-2023-44487.patch: Improvements to HTTP/2 overhead protection - CVE-2023-44487...
CLSA-2023-1698689712 Fix CVE(s): CVE-2023-44487
SECURITY UPDATE: The HTTP/2 protocol allows a denial of service because request cancellation can reset many streams quickly - debian/patches/CVE-2023-44487.patch: Improvements to HTTP/2 overhead protection - CVE-2023-44487...
CLSA-2023-1698689602 Fix CVE(s): CVE-2023-44487
SECURITY UPDATE: The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly - debian/patches/CVE-2023-44487.patch: h2: don't accept new streams if connstreams are still in excess - CVE-2023-44487...
CLSA-2023-1698352063 vim: Fix of 2 CVEs
CVE-2023-5441: segfault in exmode - CVE-2023-5344: buffer overflow in truncstring...
CLSA-2023-1698351940 vim: Fix of 2 CVEs
CVE-2023-5441: segfault in exmode - CVE-2023-5344: buffer overflow in truncstring...
CLSA-2023-1698312967 perl: Fix of CVE-2023-31484
CVE-2023-31484: add verifySSL=1 to HTTP::Tiny to verify https server identity...
CLSA-2023-1698312626 glibc: Fix of CVE-2023-4911
CVE-2023-4911: Terminate if end of input is reached...
CLSA-2023-1698312539 Fix CVE(s): CVE-2023-5441, CVE-2023-5344
SECURITY UPDATE: a fix of buffer-overflow in truncstring - debian/patches/CVE-2023-5344.patch - CVE-2023-5344 SECURITY UPDATE: segfault in exmode - debian/patches/CVE-2023-5441.patch - CVE-2023-5441...
CLSA-2023-1698312412 Fix CVE(s): CVE-2023-34969, CVE-2020-34969
SECURITY UPDATE: Assign a serial number for messages from the driver - debian/patches/CVE-2023-34969.patch: Fix assertion failure when a monitor is active and a message from the driver cannot be delivered. - CVE-2020-34969...
CLSA-2023-1698307021 Fix of 7 CVEs
CVE-2023-0597 // CVE-url: https://ubuntu.com/security/CVE-2023-0597 - x86/kasan: Map shadow for percpu pages on demand - x86/mm: Recompute physical address for every page of per-CPU CEA mapping - x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area - x86/mm: Do not shuffle CPU...
CLSA-2023-1698306895 Fix of 7 CVEs
CVE-2023-0597 // CVE-url: https://ubuntu.com/security/CVE-2023-0597 - x86/kasan: Map shadow for percpu pages on demand - x86/mm: Recompute physical address for every page of per-CPU CEA mapping - x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area - x86/mm: Do not shuffle CPU...
CLSA-2023-1698248409 Fix of 6 CVEs
CVE-2023-42752 // CVE-url: https://ubuntu.com/security/CVE-2023-42752 - igmp: limit igmpv3newpack packet size to IPMAXMTU CVE-2023-4623 // CVE-url: https://ubuntu.com/security/CVE-2023-4623 - net/sched: schhfsc: Ensure inner classes have fsc curve CVE-2023-34319 // CVE-url:...
CLSA-2023-1698247974 Fix of 6 CVEs
CVE-2023-42752 // CVE-url: https://ubuntu.com/security/CVE-2023-42752 - igmp: limit igmpv3newpack packet size to IPMAXMTU CVE-2023-4623 // CVE-url: https://ubuntu.com/security/CVE-2023-4623 - net/sched: schhfsc: Ensure inner classes have fsc curve CVE-2023-34319 // CVE-url:...
CLSA-2023-1698180806 zlib: Fix of CVE-2023-45853
CVE-2023-45853: Reject overflows of zip header fields in minizip...
CLSA-2023-1698180296 zlib: Fix of CVE-2023-45853
CVE-2023-45853: Reject overflows of zip header fields in minizip...
CLSA-2023-1698180079 zlib: Fix of CVE-2023-45853
CVE-2023-45853: Reject overflows of zip header fields in minizip...
CLSA-2023-1698179874 zlib: Fix of CVE-2023-45853
CVE-2023-45853: Reject overflows of zip header fields in minizip...
CLSA-2023-1698179730 zlib: Fix of CVE-2023-45853
CVE-2023-45853: Reject overflows of zip header fields in minizip...
CLSA-2023-1698179598 Fix CVE(s): CVE-2023-45853
SECURITY UPDATE: Reject overflows of zip header fields in minizip - debian/patches/CVE-2023-45853.patch: Check length of comment, filename and extra field in zipOpenNewFileInZip464 - CVE-2023-45853...
CLSA-2023-1698179235 Fix CVE(s): CVE-2023-45853
SECURITY UPDATE: Reject overflows of zip header fields in minizip - debian/patches/CVE-2023-45853.patch: Check length of comment, filename and extra field in zipOpenNewFileInZip464 - CVE-2023-45853...
CLSA-2023-1698101945 Fix of 7 CVEs
CVE-2023-22006, CVE-2023-22036, CVE-2023-22041, CVE-2023-22044, CVE-2023-22045, CVE-2023-22049, CVE-2023-25193. - Release notes: https://mail.openjdk.org/pipermail/jdk-updates-dev/2023-July/024064.html...