10560 matches found
CLSA-2023-1680210075 openssl: Fix of 2 CVEs
CVE-2022-4304: fix timing based side channel in RSA decryption - CVE-2022-4450: avoid dangling pointers in PEMreadbioex...
CLSA-2023-1680206329 openssl: Fix of 2 CVEs
CVE-2022-4304: fix timing based side channel in RSA decryption - CVE-2022-4450: avoid dangling pointers in PEMreadbioex...
CLSA-2023-1679944242 Fix CVE(s): CVE-2022-31629, CVE-2022-31628, CVE-2022-31631
SECURITY UPDATE: Denial of service - debian/patches/CVE-2022-31628.patch: Fix potential infinite recursion in phar wrapper when using quine gzip file - CVE-2022-31628 SECURITY UPDATE: Cookie injection - debian/patches/CVE-2022-31629.patch: Add cookie integrity validation - CVE-2022-31629 SECURITY...
CLSA-2023-1679943745 Fix CVE(s): CVE-2023-25690
SECURITY UPDATE: proxy configuration may trigger HTTP request smuggling attack - debian/patches/CVE-2023-25690.patch: don't forward invalid query strings - CVE-2023-25690...
CLSA-2023-1679925211 Fix CVE(s): CVE-2023-1170
SECURITY UPDATE: Accessing invalid memory with put in Visual block mode - debian/patches/CVE-2023-1170: Adjust the cursor column if needed - CVE-2023-1170...
CLSA-2023-1679925093 vim: Fix of CVE-2023-1170
CVE-2023-1170: adjust the cursor column if needed...
CLSA-2023-1679924984 vim: Fix of CVE-2023-1170
CVE-2023-1170: adjust the cursor column if needed...
CLSA-2023-1679350567 systemd: Fix of CVE-2023-26604
CVE-2023-26604: prevent a priveledge escalation in a pager sub-process - testlogin was updated...
CLSA-2023-1679350425 php: Fix of 3 CVEs
CVE-2023-0567: crypt: Fix validation of malformed BCrypt hashes - CVE-2023-0568: Fix array overrun when appending slash to paths - CVE-2023-0662: Fix DoS vulnerability when parsing multipart request body...
CLSA-2023-1679350332 curl: Fix of CVE-2023-23916
CVE-2023-23916: fix HTTP multi-header compression denial of service - fix testing system by adding the nonewline option...
CLSA-2023-1679350239 systemd: Fix of CVE-2023-26604
CVE-2023-26604: prevent a priveledge escalation in a pager sub-process - testlogin was updated...
CLSA-2023-1679350071 php: Fix of 3 CVEs
CVE-2023-0567: crypt: Fix validation of malformed BCrypt hashes - CVE-2023-0568: Fix array overrun when appending slash to paths - CVE-2023-0662: Fix DoS vulnerability when parsing multipart request body...
CLSA-2023-1679349850 curl: Fix of CVE-2023-23916
CVE-2023-23916: fix HTTP multi-header compression denial of service - fix testing system by adding the nonewline option...
CLSA-2023-1679349729 Fix CVE(s): CVE-2023-26604, CVE-2022-3821
SECURITY UPDATE: buffer overrun vulnerability in formattimespan - debian/patches/CVE-2022-3821.patch: fix buffer-over-run - CVE-2022-3821 SECURITY UPDATE: a local privelege escalation for some sudo configs was not blocked adequately - debian/patches/CVE-2023-26604.patch: use only less as a pager...
CLSA-2023-1679000956 Fix CVE(s): CVE-2022-45141
SECURITY UPDATE: AD DC can be forced to issue rc4-hmac Kerberos tickets - debian/patches/CVE-2022-45141.patch: fix session key selection algorithm for selecting the ticket in strongest-to-weakest order, thus allowing the target server to select better encryption - CVE-2022-45141...
CLSA-2023-1679000846 Fix of 6 CVEs
SECURITY UPDATE: New microcode data file 2023-02-14 - New microcodes: sig 0x000606c1, pfmask 0x10, 2022-09-23, rev 0x1000211, size 289792 sig 0x000806f4, pfmask 0x10, 2022-12-19, rev 0x2c000170, size 600064 sig 0x000806f4, pfmask 0x87, 2022-12-27, rev 0x2b000181, size 561152 sig 0x000806f5, pfmas...
CLSA-2023-1679000716 httpd: Fix of 2 CVEs
CVE-2023-25690: HTTP request splitting with modrewrite and modproxy - CVE-2023-27522: modproxyuwsgi: HTTP response splitting...
CLSA-2023-1679000442 httpd: Fix of 2 CVEs
CVE-2023-25690: HTTP request splitting with modrewrite and modproxy - CVE-2023-27522: modproxyuwsgi: HTTP response splitting...
CLSA-2023-1678820960 vim: Fix of CVE-2023-1175
CVE-2023-1175: make sure "startspaces" is not negative...
CLSA-2023-1678820835 samba: Fix of CVE-2022-38023
CVE-2022-38023: avoid weak rc4-hmac encryption algorithm for the Netlogon RPC...
CLSA-2023-1678820695 python3: Fix of CVE-2023-24329
CVE-2023-24329: Prevent urllib.parse.urlparse from accepting schemes that don't begin with an alphabetical ASCII character...
CLSA-2023-1678820588 samba: Fix of CVE-2022-38023
CVE-2022-38023: avoid weak rc4-hmac encryption algorithm for the Netlogon RPC...
CLSA-2023-1678820490 python3: Fix of CVE-2023-24329
CVE-2023-24329: Prevent urllib.parse.urlparse from accepting schemes that don't begin with an alphabetical ASCII character...
CLSA-2023-1678820270 vim: Fix of CVE-2023-1175
CVE-2023-1175: make sure "startspaces" is not negative...
CLSA-2023-1678820199 Fix CVE(s): CVE-2022-43552
SECURITY UPDATE: HTTP Proxy deny use-after-free - debian/patches/CVE-2022-43552.patch: + smb/telnet: do not free the protocol struct in done. + conn: don't free easy handle data in handler-disconnect. - CVE-2022-43552...
CLSA-2023-1678820123 Fix CVE(s): CVE-2023-1175
SECURITY UPDATE: Illegal memory access when using virtual editing - debian/patches/CVE-2023-1175: Make sure "startspaces" is not negative - CVE-2023-1175...
CLSA-2023-1678396353 Fix CVE(s): CVE-2023-24329
SECURITY UPDATE: urllib.parse.urlparse does not enforce that a scheme must begin with an ASCII-character - debian/patches/CVE-2023-24329.patch: Prevent urllib.parse.urlparse from accepting schemes that don't begin with an alphabetical ASCII character - CVE-2023-24329...
CLSA-2023-1678396156 php: Fix of 3 CVEs
CVE-2023-0567: crypt: Fix validation of malformed BCrypt hashes - CVE-2023-0568: Fix array overrun when appending slash to paths - CVE-2023-0662: Fix DoS vulnerability when parsing multipart request body...
CLSA-2023-1678396066 systemd: Fix of CVE-2022-4415
CVE-2022-4415: coredump: do not allow user to access coredumps with changed uid/gid/capabilities...
CLSA-2023-1678395968 systemd: Fix of CVE-2022-4415
CVE-2022-4415: coredump: do not allow user to access coredumps with changed uid/gid/capabilities...
CLSA-2023-1678395661 php: Fix of 3 CVEs
CVE-2023-0567: crypt: Fix validation of malformed BCrypt hashes - CVE-2023-0568: Fix array overrun when appending slash to paths - CVE-2023-0662: Fix DoS vulnerability when parsing multipart request body...
CLSA-2023-1678136944 python: Fix of CVE-2023-24329
CVE-2023-24329: Prevent urllib.parse.urlparse from accepting schemes that don't begin with an alphabetical ASCII character...
CLSA-2023-1678136793 httpd: Fix of CVE-2006-20001
CVE-2006-20001: moddav: out-of-bounds read/write...
CLSA-2023-1678136704 Fix CVE(s): CVE-2023-24329
SECURITY UPDATE: Improper input validation - debian/patches/CVE-2023-24329-v2.7.patch: Prevent urllib.parse.urlparse from accepting schemes that don't begin with an alphabetical ASCII character - CVE-2023-24329...
CLSA-2023-1678136626 python: Fix of CVE-2023-24329
CVE-2023-24329: Prevent urllib.parse.urlparse from accepting schemes that don't begin with an alphabetical ASCII character...
CLSA-2023-1678136537 httpd: Fix of CVE-2006-20001
CVE-2006-20001: moddav: out-of-bounds read/write...
CLSA-2023-1678136443 python2: Fix of CVE-2023-24329
CVE-2023-24329: Prevent urllib.parse.urlparse from accepting schemes that don't begin with an alphabetical ASCII character...
CLSA-2023-1678136294 httpd: Fix of 2 CVEs
CVE-2022-37436: modproxy: HTTP response splitting - CVE-2006-20001: moddav: out-of-bounds read/write...
CLSA-2023-1678135993 python2: Fix of CVE-2023-24329
CVE-2023-24329: Prevent urllib.parse.urlparse from accepting schemes that don't begin with an alphabetical ASCII character...
CLSA-2023-1678135884 httpd: Fix of 2 CVEs
CVE-2022-37436: modproxy: HTTP response splitting - CVE-2006-20001: moddav: out-of-bounds read/write...
CLSA-2023-1677791921 tar: Fix of CVE-2022-48303
CVE-2022-48303: check for the end of field after leading byte 0x80 or 0xff of base-256 encoded header value...
CLSA-2023-1677784249 Fix CVE(s): CVE-2022-48303, CVE-2021-20193
SECURITY UPDATE: memory leak in readheader - debian/patches/CVE-2021-20193.patch: Don't return directly from the loop. Instead set the status and break. Return the status. - CVE-2021-20193.patch SECURITY UPDATE: a heap buffer overflow - debian/patches/CVE-2022-48303.patch: Check for the end of...
CLSA-2023-1677784124 Fix CVE(s): CVE-2023-0662, CVE-2023-0568, CVE-2023-0567
SECURITY UPDATE: Invalid validation of BCrypt hashes - debian/patches/CVE-2023-0567.patch: Remove "PHP Hack" to fix validation of malformed BCrypt hashes - CVE-2023-0567 SECURITY UPDATE: Unauthorized data access or modification - debian/patches/CVE-2023-0568.patch: Fix array overrun when appendin...
CLSA-2023-1677784062 Fix CVE(s): CVE-2022-34480
SECURITY UPDATE: Within the lginit function, if several allocations succeed but then one fails, an uninitialized pointer would have been freed despite never being allocated. - debian/patches/CVE-2022-34480.patch: avoid using uninitialized pointer - CVE-2022-34480...
CLSA-2023-1677783967 tar: Fix of CVE-2022-48303
CVE-2022-48303: check for the end of field after leading byte 0x80 or 0xff of base-256 encoded header value...
CLSA-2023-1677783889 tar: Fix of CVE-2022-48303
CVE-2022-48303: check for the end of field after leading byte 0x80 or 0xff of base-256 encoded header value...
CLSA-2023-1677783798 nss: Fix of CVE-2022-34480
CVE-2022-34480: nss: fix using of uninitialized pointer in lginit...
CLSA-2023-1677783720 tar: Fix of CVE-2022-48303
CVE-2022-48303: check for the end of field after leading byte 0x80 or 0xff of base-256 encoded header value...
CLSA-2023-1677783628 nss: Fix of CVE-2022-34480
CVE-2022-34480: nss: fix using of uninitialized pointer in lginit...
CLSA-2023-1677231280 git: Fix of 4 CVEs
CVE-2022-41903: fix out-of-bounds write caused by integer overflow - CVE-2021-40330: forbid newlines in host and path - CVE-2022-39260: reject too long command line strings - CVE-2023-23946: prevent git-apply from writing behind newly created symbolic links...