17404 matches found
CLSA-2024-1720178375 python2: Fix of CVE-2024-0450
CVE-2024-0450: Make zipfile module reject zip archives which overlap entries in the archive. Prevent “quoted-overlap” zip-bombs exploit...
CLSA-2024-1720027216 glibc: Fix of 4 CVEs
CVE-2021-3999: getcwd - Set errno to ERANGE for size == 1 - CVE-2021-35942: wordexp - handle overflow in positional parameter number - CVE-2022-23218: Buffer overflow in sunrpc svcunixcreate - CVE-2022-23219: Buffer overflow in sunrpc clntcreate for "unix"...
CLSA-2024-1720026957 openssl: Fix of 2 CVEs
CVE-2023-0215: biondef: fix a UAF resulting from a bug in BIOnewNDEF - CVE-2023-0464: x509v3: Limit X.509 certificate tree size to avoid exponential use of computational resources...
CLSA-2024-1719943814 curl: Fix of 2 CVEs
CVE-2023-27538: url: fix the SSH connection reuse check - CVE-2023-27536: url: only reuse connections with same GSS delegation...
CLSA-2024-1719568519 Fix of 6 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-2201 - x86/cpufeatures: Add new word for scattered features - x86/cpufeatures: Add CPUIDLNX5 to track recently added Linux-defined word - x86/bugs: Change commas to semicolons in 'spectrev2' sysfs file - x86/bhi: Add support for clearing branch histor...
CLSA-2024-1718898112 glibc: Fix of 3 CVEs
CVE-2024-33600: nscd: avoid null pointer crashes after notfound response - CVE-2024-33601: fix memory allocation issue in netgroup cache by replacing xmalloc and xrealloc functions to prevent denial of service - CVE-2024-33602: fix memory corruption in netgroup cache by ensuring all strings are...
CLSA-2024-1718796961 pam: Fix of CVE-2024-22365
CVE-2024-22365: use ODIRECTORY to prevent local DoS situations...
CLSA-2024-1718788150 java-1.8.0-openjdk: Fix of 4 CVEs
Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u412-b08. That fixes following CVEs: - CVE-2024-21011: Long Exception message leading to crash - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: C2...
CLSA-2024-1718639881 openssl: Fix of 2 CVEs
CVE-2023-5678: Fix that DHcheckpubkey and DHgeneratekey don't check large modulus - CVE-2023-3446: Fix that checking excessively long DH keys or parameters may be very slow...
CLSA-2024-1718639724 openssl: Fix of 2 CVEs
CVE-2023-5678: Fix that DHcheckpubkey and DHgeneratekey don't check large modulus - CVE-2023-3446: Fix that checking excessively long DH keys or parameters may be very slow...
CLSA-2024-1718202007 pam: Fix of CVE-2024-22365
CVE-2024-22365: pamnamespace: protectdir: use ODIRECTORY to prevent local DoS situations...
CLSA-2024-1718028901 git: Fix of CVE-2024-32002
CVE-2024-32002: fix submodule paths to not contain symlinks...
CLSA-2024-1718024371 glibc: Fix of CVE-2024-2961
CVE-2024-2961: Fix buffer overflow issue in iconv function when converting strings to ISO-2022-CN-EXT character set...
CLSA-2024-1718023873 glibc: Fix of 2 CVEs
CVE-2024-2961: Fix buffer overflow issue in iconv function when converting strings to ISO-2022-CN-EXT character set - CVE-2024-33599: Fix buffer overflow in netgroup cache...
CLSA-2024-1717692075 python2: Fix of CVE-2023-27043
Remove -b option, use original maintainer approach - CVE-2023-27043: reject malformed addresses in email.parseaddr...
CLSA-2024-1717691179 file: Fix of CVE-2022-48554
CVE-2022-48554: fix stack-based buffer over-read in filecopystr in funcs.c...
CLSA-2024-1717139314 bind: Fix of 2 CVEs
Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3...
CLSA-2024-1716272273 less: Fix of CVE-2022-48624
CVE-2022-48624: filename.c: shell-quote filenames when invoking LESSCLOSE...
CLSA-2024-1715946971 less: Fix of CVE-2024-32487
CVE-2024-32487: filename.c: quoting mishandling...
CLSA-2024-1715280966 php: Fix of 2 CVEs
CVE-2022-31629: Add cookie integrity validation - CVE-2024-2756: Move cookie integrity validation downwards...
CLSA-2024-1713791075 Fix of 12 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-23307 - md/raid5: fix atomicity violation in raid5cachecount CVE-url: https://ubuntu.com/security/CVE-2021-46932 - Input: appletouch - initialize work before device registration CVE-url: https://ubuntu.com/security/CVE-2021-46936 - net: fix...
CLSA-2024-1713370315 sudo: Fix of CVE-2023-42465
CVE-2023-42465: Make sudo less vulnerable to ROWHAMMER attacks...
CLSA-2024-1711563079 Update of zlib
Rebuild with dist .el79...
CLSA-2024-1711477070 gmp: Fix of CVE-2021-43618
CVE-2021-43618: gmp security and enhancement update...
CLSA-2024-1711476689 e2fsprogs: Fix of CVE-2022-1304
CVE-2022-1304.patch: libext2fs: add sanity check to extent manipulation...
CLSA-2024-1711036211 Update of grub2
Make this package installable only on a system having Cloudlinux signed components: grub2 and kernel...
CLSA-2024-1709839850 Fix CVE(s): CVE-2023-5341
SECURITY UPDATE: Heap use-after-free flaw in BMP coder - debian/patches/CVE-2023-5341.patch: Check BMP file size to fix ImproperImageHeader issue caused by a provided poc - CVE-2023-5341...
CLSA-2024-1709561259 bind: Fix of 2 CVEs
CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3...
CLSA-2024-1709203515 kernel: Fix of 7 CVEs
KVM: nSVM: avoid picking up unsupported bits from L2 in intctl CVE-2021-3653 CVE-2021-3653 - xen/netfront: fix leaking data in shared pages CVE-2022-33740 - xfs: fix up non-directory creation in SGID directories CVE-2021-4037 - netsched: clsroute: remove from list when handle is 0 CVE-2022-2588 -...
CLSA-2024-1708171186 Fix of 10 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-23851 - dm: limit the number of targets and parameter size area CVE-url: https://ubuntu.com/security/CVE-2024-23849 - net/rds: Fix UBSAN: array-index-out-of-bounds in rdscmsgrecv CVE-url: https://ubuntu.com/security/CVE-2024-1086 - netfilter: nftables...
CLSA-2024-1707918214 sqlite: Fix of CVE-2023-7104
CVE-2023-7104: Fix heap-based buffer overflow in the sessionReadRecord function...
CLSA-2024-1706545934 Fix of 10 CVEs
CVE-url: https://ubuntu.com/security/CVE-2022-36402 - drm/vmwgfx: Add support for SVGA3dCmdDefineGBSurfacev3 - drm/vmwgfx: Add SM41 flag - drm/vmwgfx: Add CAP2 support in vmwgfx - drm/vmwgfx: Bump version patchlevel and date - drm/vmwgfx: Expose SM41 param to user space - drm/vmwgfx: Update the...
CLSA-2024-1705945513 Update of ca-certificates
update to CKBI 2.64 from NSS 3.95 - updated: - Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - removed old certificates: - Certificate "E-Tugra Certification Authority" - Certificate "Hongkong Post Root CA 1" - Certificate "Symantec Class 1 Public Primary Certification...
CLSA-2024-1705941172 Update of alt-php
Update ca-certificates database to 20231207: - mozilla/certdata.txt,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.64. - The following certificares were updated: Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - The following certificates authoriti...
CLSA-2024-1705940980 Update of ca-certificates
Update to CKBI 2.64 from NSS 3.95 - Removed: - Certificate "Chambers of Commerce Root - 2008" - Certificate "E-Tugra Certification Authority" - Certificate "Global Chambersign Root - 2008" - Certificate "Hongkong Post Root CA 1" - Certificate "Symantec Class 1 Public Primary Certification...
CLSA-2024-1705077885 Fix of 8 CVEs
SECURITY UPDATE: use-after-free in winclose - debian/patches/CVE-2023-48231.patch: check window is valid, before accessing it - CVE-2023-48231 SECURITY UPDATE: overflow with count for :s command - debian/patches/CVE-2023-48233.patch: abort the :s command if the count is too large - CVE-2023-48233...
CLSA-2023-1702573728 Fix CVE(s): CVE-2022-48560
SECURITY UPDATE: Posible crash in heapq with custom comparison operators - debian/patches/CVE-2022-48560.patch: Disallow releasing heap items during a comparison callback - CVE-2022-48560...
CLSA-2023-1702420474 Fix CVE(s): CVE-2023-46728
SECURITY UPDATE: Denial of Service attack against Squid’s Gopher gateway due to a NULL pointer dereference bug - debian/patches/CVE-2023-46728.patch: Remove support for Gopher protocol - CVE-2023-46728...
CLSA-2023-1702420408 Fix CVE(s): CVE-2023-46728
SECURITY UPDATE: Denial of Service attack against Squid’s Gopher gateway due to a NULL pointer dereference bug - debian/patches/CVE-2023-46728.patch: remove support for Gopher protocol - CVE-2023-46728...
CLSA-2023-1701971229 Fix CVE(s): CVE-2023-40217
SECURITY UPDATE: TLS handshake bypass - debian/patches/CVE-2023-40217.patch: Check for & avoid the ssl pre-close flaw. Update SSL tests - CVE-2023-40217...
CLSA-2023-1701446356 libksba: Fix of 2 CVEs
CVE-2022-3515: detect a possible overflow directly in the TLV parser - CVE-2022-47629: fix an integer overflow in the CRL signature parser...
CLSA-2023-1701444455 python3.9: Fix of CVE-2023-24329
CVE-2023-24329: prevent bypass blocklisting methods...
CLSA-2023-1701293664 binutils: Fix of 7 CVEs
CVE-2021-45078: Fix out-of-bounds write in stabxcoffbuiltintype - CVE-2021-46174: Fix buffer overflow in readsectionstabsdebugginginfo - CVE-2022-44840: Fix possible heap buffer overflow in findsectioninset in readelf.c - CVE-2022-45703: Combine sanity checks, calculate element counts, not word...
CLSA-2023-1700592975 squid: Fix of CVE-2023-46724
CVE-2023-46724: Fix validation of certificates with CN=...
CLSA-2023-1700590262 kernel: Fix of 10 CVEs
openvswitch: fix OOB access in reservesfasize CVE-2022-2639 - xen/blkfront: fix leaking data in shared pages CVE-2022-26365 - Bluetooth: Fix slab-out-of-bounds read in hciextendedinquiryresultevt CVE-2020-36386 - btrfs: only search for leftinfo if there is no rightinfo in trymergefreespace...
CLSA-2023-1699907419 Fix CVE(s): CVE-2023-3247
SECURITY UPDATE: possible weak randomness in nonce value - debian/patches/php-7.1-CVE-2023-3247.patch: Fix missing randomness check for SOAP HTTP Digest - CVE-2023-3247...
CLSA-2023-1699393971 libxml2: Fix of CVE-2016-4658
CVE-2016-4658: disallow namespace nodes in XPointer ranges...
CLSA-2023-1698949348 Fix CVE(s): CVE-2023-31122
SECURITY UPDATE: modmacro buffer over-read - debian/patches/CVE-2023-31122.patch: use our own strncmp function in modmacro - CVE-2023-31122...