10553 matches found
CLSA-2023-1698101447 nginx: Fix of CVE-2023-44487
CVE-2023-44487: HTTP/2 - per-iteration stream handling limit...
CLSA-2023-1697817694 quagga: Fix of 2 CVEs
CVE-2023-41360: don't read the first byte of ORF header if we are ahead of stream - CVE-2023-41358: do not process NLRIs if the attribute length is zero...
CLSA-2023-1697817547 nginx: Fix of CVE-2023-44487
CVE-2023-44487: HTTP/2 - per-iteration stream handling limit...
CLSA-2023-1697817200 quagga: Fix of 2 CVEs
CVE-2023-41360: don't read the first byte of ORF header if we are ahead of stream - CVE-2023-41358: do not process NLRIs if the attribute length is zero...
CLSA-2023-1697816511 python: Fix of CVE-2022-48560
CVE-2022-48560: Fix SIGSEGV in Python via heappushpop in heapq...
CLSA-2023-1697816385 curl: Fix of 2 CVEs
CVE-2022-27782: check additional TLS or SSH connection parameters that should have prohibited connection reuse - CVE-2023-27534: fix SFTP path '' resolving discrepancy - fix read off end of array for SCP home directory case...
CLSA-2023-1697816288 Fix CVE(s): CVE-2023-41358, CVE-2023-41360
SECURITY UPDATE: bgpd/bgppacket.c can read the initial byte of the ORF header in an ahead-of-stream situation - debian/patches/CVE-2023-41360.patch: don't read the first byte of ORF header if we are ahead of stream. - CVE-2023-41360 SECURITY UPDATE: bgpd/bgppacket.c processes NLRIs if the attribu...
CLSA-2023-1697816189 Fix CVE(s): CVE-2023-41360, CVE-2023-41358
SECURITY UPDATE: bgpd/bgppacket.c can read the initial byte of the ORF header in an ahead-of-stream situation - debian/patches/CVE-2023-41360.patch: don't read the first byte of ORF header if we are ahead of stream. - CVE-2023-41360 SECURITY UPDATE: bgpd/bgppacket.c processes NLRIs if the attribu...
CLSA-2023-1697744819 Fix of 8 CVEs
CVE-url: https://ubuntu.com/security/CVE-2023-42755 - net/sched: Retire rsvp classifier CVE-url: https://ubuntu.com/security/CVE-2023-39194 - net: xfrm: Fix xfrmaddressfilter OOB read CVE-url: https://ubuntu.com/security/CVE-2023-39192 - netfilter: xtu32: validate user space input CVE-url:...
CLSA-2023-1697744683 Fix of 8 CVEs
CVE-url: https://ubuntu.com/security/CVE-2023-42755 - net/sched: Retire rsvp classifier CVE-url: https://ubuntu.com/security/CVE-2023-39194 - net: xfrm: Fix xfrmaddressfilter OOB read CVE-url: https://ubuntu.com/security/CVE-2023-39192 - netfilter: xtu32: validate user space input CVE-url:...
CLSA-2023-1697744503 Fix of 7 CVEs
CVE-url: https://ubuntu.com/security/CVE-2023-42755 - net/sched: Retire rsvp classifier CVE-url: https://ubuntu.com/security/CVE-2023-39194 - net: xfrm: Fix xfrmaddressfilter OOB read CVE-url: https://ubuntu.com/security/CVE-2023-39192 - netfilter: xtu32: validate user space input CVE-url:...
CLSA-2023-1697744372 Fix of 7 CVEs
CVE-url: https://ubuntu.com/security/CVE-2023-42755 - net/sched: Retire rsvp classifier CVE-url: https://ubuntu.com/security/CVE-2023-39194 - net: xfrm: Fix xfrmaddressfilter OOB read CVE-url: https://ubuntu.com/security/CVE-2023-39192 - netfilter: xtu32: validate user space input CVE-url:...
CLSA-2023-1697742355 Fix CVE(s): CVE-2023-44487
SECURITY UPDATE: The HTTP/2 protocol allows a denial of service because request cancellation can reset many streams quickly - debian/patches/CVE-2023-44487.patch: HTTP/2 - per-iteration stream handling limit. - CVE-2023-44487...
CLSA-2023-1697742241 Fix CVE(s): CVE-2023-44487
SECURITY UPDATE: The HTTP/2 protocol allows a denial of service because request cancellation can reset many streams quickly - debian/patches/CVE-2023-44487.patch: HTTP/2 - per-iteration stream handling limit. - CVE-2023-44487...
CLSA-2023-1697741983 python3: Fix of CVE-2022-48560
CVE-2022-48560: fix posible crash in heapq with custom comparison operators...
CLSA-2023-1697741849 Fix of 5 CVEs
SECURITY UPDATE: GVariant security issues - debian/patches/CVE-2023-29499-x-CVE-2023-32665/.patch: fix multiple GVariant serialization issues - CVE-2023-29499, CVE-2023-32611, CVE-2023-32636, CVE-2023-32643, CVE-2023-32665 debian/patches/fix-gtestbug-assertion.patch: Fix gtestbug assertion in...
CLSA-2023-1697741722 Fix of 5 CVEs
SECURITY UPDATE: GVariant security issues - debian/patches/CVE-2023-29499-x-CVE-2023-32665/.patch: fix multiple GVariant serialization issues - CVE-2023-29499, CVE-2023-32611, CVE-2023-32636, CVE-2023-32643, CVE-2023-32665 debian/patches/fix-gtestbug-assertion.patch: Fix gtestbug assertion in...
CLSA-2023-1697741516 python2: Fix of CVE-2022-48560
CVE-2022-48560: Fix SIGSEGV in Python via heappushpop in heapq...
CLSA-2023-1697741309 python3: Fix of CVE-2022-48560
CVE-2022-48560: fix posible crash in heapq with custom comparison operators...
CLSA-2023-1697740947 glib2: Fix of 5 CVEs
Enable internal tests - Skip several failed tests from the check - CVE-2023-29499: Fix GVariant offset table entry size which is not checked in isnormal - CVE-2023-32611: Fix an issue where gvariantbyteswap can take a long time with some non-normal inputs - CVE-2023-32665: Fix GVariant...
CLSA-2023-1697740683 python3: Fix of CVE-2022-48560
CVE-2022-48560: fix posible crash in heapq with custom comparison operators...
CLSA-2023-1697740469 python2: Fix of CVE-2022-48560
CVE-2022-48560: Fix SIGSEGV in Python via heappushpop in heapq...
CLSA-2023-1697740212 glib2: Fix of 5 CVEs
Enable internal tests - Skip several failed tests from the check - CVE-2023-29499: Fix GVariant offset table entry size which is not checked in isnormal - CVE-2023-32611: Fix an issue where gvariantbyteswap can take a long time with some non-normal inputs - CVE-2023-32665: Fix GVariant...
CLSA-2023-1697739734 python: Fix of 2 CVEs
CVE-2022-45061: fix quadratic time idna decoding - CVE-2021-3737: fix http client infinite line reading DoS after a HTTP 100 Continue...
CLSA-2023-1697739575 python3: Fix of 4 CVEs
CVE-2021-3737: Fix http client infinite line reading DoS after a HTTP 100 Continue - CVE-2021-28861: Fix an open redirection vulnerability in http.server - CVE-2022-0391: Make urllib.parse sanitize urls containing ASCII newline and tabs - CVE-2022-45061: Fix quadratic time idna decoding...
CLSA-2023-1697576371 Update of exim
Rebuilt with rebrand to TuxCare ELS...
CLSA-2023-1697576165 Update of exim
Rebuilt with rebrand to TuxCare ELS...
CLSA-2023-1697576053 Fix CVE(s): CVE-2023-4504
SECURITY UPDATE: heap-based buffer overflow - debian/patches/CVE-2023-4504.patch: check for end of buffer if there is an escaped character - CVE-2023-4504...
CLSA-2023-1697575950 Fix CVE(s): CVE-2023-4504
SECURITY UPDATE: heap-based buffer overflow - debian/patches/CVE-2023-4504.patch: check for end of buffer if there is an escaped character - CVE-2023-4504...
CLSA-2023-1697556743 Fix CVE(s): CVE-2022-48566
SECURITY UPDATE: Constant-time-defeating optimisations issue - debian/patches/CVE-2022-48566.patch: Make comparedigest more constant-time - CVE-2022-48566...
CLSA-2023-1697482739 exim: Fix of 2 CVEs
CVE-2023-42114: fix possible OOB read in SPA authenticator - CVE-2023-42116: fix possible OOB write in SPA authenticator...
CLSA-2023-1697481196 exim: Fix of 2 CVEs
CVE-2023-42114: fix possible OOB read in SPA authenticator - CVE-2023-42116: fix possible OOB write in SPA authenticator...
CLSA-2023-1697481097 Update of alt-php
Bump epoch Disable ESM notification after installation: - remove ESM hook for apt-system - remove ESM infra/apps repositories from apt sources list Automatically mark some pytest to skip if FIPS kernel is running in a disabled state they always fail in this mode...
CLSA-2023-1697466063 python2: Fix of CVE-2022-48566
CVE-2022-48566: Make comparedigest more constant-time...
CLSA-2023-1697465582 curl: Fix of CVE-2023-38546
CVE-2023-38546: cookie: remove unnecessary struct fields...
CLSA-2023-1697465384 python2: Fix of CVE-2022-48566
CVE-2022-48566: Make comparedigest more constant-time...
CLSA-2023-1697465164 curl: Fix of CVE-2023-38546
CVE-2023-38546: cookie: remove unnecessary struct fields...
CLSA-2023-1697464688 curl: Fix of CVE-2023-38546
CVE-2023-38546: cookie: remove unnecessary struct fields - Rebuild expired test certificates...
CLSA-2023-1697464394 curl: Fix of CVE-2023-38546
CVE-2023-38546: cookie: remove unnecessary struct fields - Rebuild expired test certificates...
CLSA-2023-1697464186 sysstat: Fix of 2 CVEs
CVE-2022-39377: check an overflow and exit if it be - CVE-2023-33204: fix possible buffer overflow in an incomplete fix for CVE-2022-39377...
CLSA-2023-1697464069 python: Fix of CVE-2022-48566
CVE-2022-48566: Make comparedigest more constant-time...
CLSA-2023-1697463947 curl: Fix of CVE-2023-38546
CVE-2023-38546: cookie: remove unnecessary struct fields - Rebuild expired test certificates...
CLSA-2023-1697463705 Fix CVE(s): CVE-2022-48566
SECURITY UPDATE: Constant-time-defeating optimisations issue - debian/patches/CVE-2022-48566.patch: Make comparedigest more constant-time - CVE-2022-48566...
CLSA-2023-1697463600 Fix CVE(s): CVE-2023-42116, CVE-2023-42114
SECURITY UPDATE: Multiple security issues - debian/patches/CVE-2023-42114.patch: fix possible OOB read in SPA authenticator - CVE-2023-42114 - debian/patches/CVE-2023-42116.patch: fix possible OOB write in SPA authenticator - CVE-2023-42116...
CLSA-2023-1697463486 Fix CVE(s): CVE-2023-38546
SECURITY UPDATE: сookie injection with none file - debian/patches/CVE-2023-38546.patch: remove unnecessary struct fields in lib/cookie.c - CVE-2023-38546...
CLSA-2023-1697463318 Fix CVE(s): CVE-2023-38546
SECURITY UPDATE: сookie injection with none file - debian/patches/CVE-2023-38546.patch: remove unnecessary struct fields in lib/cookie.c - CVE-2023-38546...
CLSA-2023-1697463155 Fix CVE(s): CVE-2022-48566
SECURITY UPDATE: Constant-time-defeating optimisations issue - debian/patches/CVE-2022-48566.patch: Make comparedigest more constant-time - CVE-2022-48566...
CLSA-2023-1697462566 Fix CVE(s): CVE-2022-48566
SECURITY UPDATE: Constant-time-defeating optimisations issue - debian/patches/CVE-2022-48566.patch: Make comparedigest more constant-time - CVE-2022-48566...