10488 matches found
CLSA-2023-1685972217 Fix CVE(s): CVE-2023-2609
SECURITY UPDATE: NULL pointer dereference in getregister - debian/patches/CVE-2023-2609.patch: Check "yarray" is not NULL - CVE-2023-2609...
CLSA-2023-1685971623 Fix CVE(s): CVE-2022-45141
SECURITY UPDATE: Samba AD DC using Heimdal can be forced to issue rc4-hmac encrypted Kerberos tickets - debian/patches/CVE-2022-45141.patch: fix TGS ticket enc-part key selection and check-des - CVE-2022-45141...
CLSA-2023-1685634253 vim: Fix of CVE-2023-2609
CVE-2023-2609: check "yarray" is not NULL...
CLSA-2023-1685633907 vim: Fix of CVE-2023-2609
CVE-2023-2609: check "yarray" is not NULL...
CLSA-2023-1685631968 samba: Fix of CVE-2022-1615
CVE-2022-1615: util/genrand: don't ignore errors in random number generation...
CLSA-2023-1685631809 git: Fix of 2 CVEs
CVE-2022-24765: fix safe.directory key not being checked in setup.c - CVE-2022-29178: avoid failing dir ownership check - some unstable tests were disabled...
CLSA-2023-1685631644 dhcp: Fix of 2 CVEs
CVE-2022-2928: option refcount overflow when leasequery is enabled leading to dhcpd abort - CVE-2022-2929: DHCP memory leak - Backported tests from upstream, for this and other CVEs...
CLSA-2023-1685630287 samba: Fix of CVE-2022-1615
CVE-2022-1615: util/genrand: don't ignore errors in random number generation...
CLSA-2023-1685630036 Update of nettle
Rebuilt with rebrand to TuxCare ELS...
CLSA-2023-1685629885 git: Fix of 2 CVEs
CVE-2022-24765: fix safe.directory key not being checked in setup.c - CVE-2022-29178: avoid failing dir ownership check - some unstable tests were disabled...
CLSA-2023-1685629665 dhcp: Fix of 2 CVEs
CVE-2022-2928: option refcount overflow when leasequery is enabled leading to dhcpd abort - CVE-2022-2929: DHCP memory leak - Backported tests from upstream, for this and other CVEs...
CLSA-2023-1685536317 gnutls: Fix of CVE-2022-2509
CVE-2022-2509: Fix double free during gnutlspkcs7verify...
CLSA-2023-1685536090 gnutls: Fix of CVE-2022-2509
CVE-2022-2509: Fix double free during gnutlspkcs7verify...
CLSA-2023-1685380447 Fix CVE(s): CVE-2023-2610
SECURITY UPDATE: Crash when expanding "" in substitute causes very long text - debian/patches/CVE-2023-2610.patch: Limit the text length to MAXCOL - CVE-2023-2610...
CLSA-2023-1685380362 Fix CVE(s): CVE-2023-33204, CVE-2022-39377
SECURITY UPDATE: a possible overflow because of an incomplete fix of CVE-2022-39377 - debian/patches/CVE-2023-33204.patch: check an overflow and exit if it be - CVE-2023-33204...
CLSA-2023-1685378500 sysstat: Fix of 2 CVEs
CVE-2023-33204: fix possible buffer overflow in an incomplete fix for CVE-2022-39377...
CLSA-2023-1685378325 curl: Fix of 2 CVEs
CVE-2022-43552: smb/telnet: do not free the protocol struct in done - CVE-2022-35252: cookie: reject cookies with "control bytes"...
CLSA-2023-1685378213 sysstat: Fix of 2 CVEs
CVE-2023-33204: fix possible buffer overflow in an incomplete fix for CVE-2022-39377...
CLSA-2023-1685378052 curl: Fix of 2 CVEs
CVE-2022-43552: smb/telnet: do not free the protocol struct in done - CVE-2022-35252: cookie: reject cookies with "control bytes"...
CLSA-2023-1685377940 vim: Fix of CVE-2023-2610
CVE-2023-2610: limit the text length to MAXCOL...
CLSA-2023-1685377804 sysstat: Fix of 2 CVEs
CVE-2022-39377: fix possible buffer overflow - CVE-2023-33204: fix possible buffer overflow in an incomplete fix for CVE-2022-39377...
CLSA-2023-1685377319 vim: Fix of CVE-2023-2610
CVE-2023-2610: limit the text length to MAXCOL...
CLSA-2023-1685377120 sysstat: Fix of 2 CVEs
CVE-2022-39377: fix possible buffer overflow - CVE-2023-33204: fix possible buffer overflow in an incomplete fix for CVE-2022-39377...
CLSA-2023-1685023926 Fix CVE(s): CVE-2022-39377
SECURITY UPDATE: an overflow of 64-bit value used to a memory allocation - debian/patches/CVE-2022-39377.patch: check an overflow and exit if it be - CVE-2022-39377...
CLSA-2023-1685023815 sysstat: Fix of CVE-2022-39377
CVE-2022-39377: fix overflow...
CLSA-2023-1685023501 libssh: Fix of CVE-2021-3634
CVE-2021-3634: create a separate length for sessionid...
CLSA-2023-1685023359 sysstat: Fix of CVE-2022-39377
CVE-2022-39377: fix overflow...
CLSA-2023-1685023099 libssh: Fix of CVE-2021-3634
CVE-2021-3634: create a separate length for sessionid...
CLSA-2023-1684824309 Update of alt-php
Universal build for Ubuntu/Debian...
CLSA-2023-1684823891 Update of alt-php
Universal build for Ubuntu/Debian...
CLSA-2023-1684759167 Update of file
rebuild to rebrand to TuxCare ELS...
CLSA-2023-1684277794 Fix CVE(s): CVE-2022-1012
Bionic update: upstream stable patchset 2022-09-12 LP: 1989374 // CVE-2022-1012 - tcp: use different parts of the portoffset for index and offset - tcp: add small random increments to the source port - tcp: dynamically allocate the perturb table used by source ports - tcp: increase source port...
CLSA-2023-1684277390 Fix CVE(s): CVE-2022-1012
Bionic update: upstream stable patchset 2022-09-12 LP: 1989374 // CVE-2022-1012 - tcp: use different parts of the portoffset for index and offset - tcp: add small random increments to the source port - tcp: dynamically allocate the perturb table used by source ports - tcp: increase source port...
CLSA-2023-1684174277 Fix CVE(s): CVE-2023-21980, CVE-2023-21912
SECURITY UPDATE: Update to 5.7.42 to fix security issues - CVE-2023-21912, CVE-2023-21980...
CLSA-2023-1684174025 Update of spamassassin
Rebuilt with rebrand to TuxCare ELS...
CLSA-2023-1683815557 git: Fix of 2 CVEs
CVE-2023-25652: removing a link instead of writing into - CVE-2023-29007: restrict the config file line length to parse it whole...
CLSA-2023-1683815235 git: Fix of 2 CVEs
CVE-2023-25652: removing a link instead of writing into - CVE-2023-29007: restrict the config file line length to parse it whole...
CLSA-2023-1683815086 Fix CVE(s): CVE-2023-25652, CVE-2023-29007
SECURITY UPDATE: By feeding specially crafted input to git apply --reject, a path outside the working tree can be overwritten with partially controlled contents corresponding to the rejected hunks from the given patch - debian/patches/CVE-2023-25652.patch: removing a link instead of writing into ...
CLSA-2023-1683814846 git: Fix of 2 CVEs
CVE-2023-25652: removing a link instead of writing into - CVE-2023-29007: restrict the config file line length to parse it whole - tests were activated - a buffer overflow during reading of configuration's enormous value has been fixed...
CLSA-2023-1683814164 git: Fix of 2 CVEs
CVE-2023-25652: removing a link instead of writing into - CVE-2023-29007: restrict the config file line length to parse it whole - tests were activated - a buffer overflow during reading of configuration's enormous value has been fixed...
CLSA-2023-1683236532 openssl: Fix of 3 CVEs
CVE-2023-0464: Fix excessive resource use verifying X.509 policy constraints - CVE-2023-0466: Fix documentation of X509VERIFYPARAMadd0policy - CVE-2022-3996: Drop redundant flag setting in policycachesetmapping...
CLSA-2023-1683235759 Fix CVE(s): CVE-2022-3996, CVE-2023-0464, CVE-2023-0466
SECURITY UPDATE: Excessive resource use verifying X.509 policy constraints - debian/patches/CVE-2023-0464.patch: Limit X.509 certificate tree size to avoid exponential use of computational resources - CVE-2023-0464 SECURITY UPDATE: Incorrecly documented X509VERIFYPARAMadd0policy -...
CLSA-2023-1683235565 openssl: Fix of 3 CVEs
CVE-2023-0464: Fix excessive resource use verifying X.509 policy constraints - CVE-2023-0466: Fix documentation of X509VERIFYPARAMadd0policy - CVE-2022-3996: Drop redundant flag setting in policycachesetmapping...
CLSA-2023-1683235231 openssl: Fix of 3 CVEs
CVE-2023-0464: Fix excessive resource use verifying X.509 policy constraints - CVE-2023-0466: Fix documentation of X509VERIFYPARAMadd0policy - CVE-2022-3996: Drop redundant flag setting in policycachesetmapping...
CLSA-2023-1683234934 openssl: Fix of 3 CVEs
CVE-2023-0464: Fix excessive resource use verifying X.509 policy constraints - CVE-2023-0466: Fix documentation of X509VERIFYPARAMadd0policy - CVE-2022-3996: Drop redundant flag setting in policycachesetmapping...
CLSA-2023-1683229770 kernel: Fix of 22 CVEs
media: rc: Fix use-after-free bugs caused by enetxirqsim CVE-2023-1118 - net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26545 - net/ulp: prevent ULP without clone op from entering the LISTEN status CVE-2023-0461 - Bluetooth: L2CAP: Fix u8 overflow CVE-2022-45934 -...
CLSA-2023-1683146027 kernel: Fix of 23 CVEs
media: rc: Fix use-after-free bugs caused by enetxirqsim CVE-2023-1118 - net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26545 - net/ulp: prevent ULP without clone op from entering the LISTEN status CVE-2023-0461 - Bluetooth: L2CAP: Fix u8 overflow CVE-2022-45934 -...
CLSA-2023-1682712108 kernel: Fix of 7 CVEs
mISDN: fix use-after-free bugs in l1oip timer handlers CVE-2022-3565 - media: rc: Fix use-after-free bugs caused by enetxirqsim CVE-2023-1118 - Bluetooth: btsdio: fix use after free bug in btsdioremove due to unfinished work CVE-2023-1989 - proc: procskipspaces shouldn't think it is working on C...
CLSA-2023-1682711913 kernel: Fix of 7 CVEs
mISDN: fix use-after-free bugs in l1oip timer handlers CVE-2022-3565 - media: rc: Fix use-after-free bugs caused by enetxirqsim CVE-2023-1118 - Bluetooth: btsdio: fix use after free bug in btsdioremove due to unfinished work CVE-2023-1989 - proc: procskipspaces shouldn't think it is working on C...
CLSA-2023-1682711481 kernel: Fix of 7 CVEs
mISDN: fix use-after-free bugs in l1oip timer handlers CVE-2022-3565 - media: rc: Fix use-after-free bugs caused by enetxirqsim CVE-2023-1118 - Bluetooth: btsdio: fix use after free bug in btsdioremove due to unfinished work CVE-2023-1989 - proc: procskipspaces shouldn't think it is working on C...