==========================================================================
Ubuntu Security Notice USN-5310-2
March 07, 2022
glibc vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 ESM
Summary:
Several security issues were fixed in GNU C Library.
Software Description:
- glibc: GNU C Library
Details:
USN-5310-1 fixed several vulnerabilities in GNU. This update provides
the corresponding update for Ubuntu 16.04 ESM.
Original advisory details:
It was discovered that the GNU C library getcwd function incorrectly
handled buffers. An attacker could use this issue to cause the GNU C
Library to crash, resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2021-3999)
It was discovered that the GNU C Library sunrpc module incorrectly handled
buffer lengths. An attacker could possibly use this issue to cause the GNU
C Library to crash, resulting in a denial of service. (CVE-2022-23218,
CVE-2022-23219)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 16.04 ESM:
libc6 2.23-0ubuntu11.3+esm1
After a standard system update you need to reboot your computer to make
all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5310-2
https://ubuntu.com/security/notices/USN-5310-1
CVE-2021-3999, CVE-2022-23218, CVE-2022-23219
Monday, March 7, 2022
[USN-5313-1] OpenJDK vulnerabilities
==========================================================================
Ubuntu Security Notice USN-5313-1
March 07, 2022
openjdk-lts, openjdk-17 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 21.10
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
Summary:
Several security issues were fixed in OpenJDK.
Software Description:
- openjdk-17: Open Source Java implementation
- openjdk-lts: Open Source Java implementation
Details:
It was discovered that OpenJDK incorrectly handled deserialization filters.
An attacker could possibly use this issue to insert, delete or obtain
sensitive information. (CVE-2022-21248)
It was discovered that OpenJDK incorrectly read uncompressed TIFF files.
An attacker could possibly use this issue to cause a denial of service via
a specially crafted TIFF file. (CVE-2022-21277)
Jonni Passki discovered that OpenJDK incorrectly verified access
restrictions when performing URI resolution. An attacker could possibly
use this issue to obtain sensitive information. (CVE-2022-21282)
It was discovered that OpenJDK incorrectly handled certain regular
expressions in the Pattern class implementation. An attacker could
possibly use this issue to cause a denial of service. (CVE-2022-21283)
It was discovered that OpenJDK incorrectly handled specially crafted Java
class files. An attacker could possibly use this issue to cause a denial
of service. (CVE-2022-21291)
Markus Loewe discovered that OpenJDK incorrectly validated attributes
during object deserialization. An attacker could possibly use this issue
to cause a denial of service. (CVE-2022-21293, CVE-2022-21294)
Dan Rabe discovered that OpenJDK incorrectly verified access permissions
in the JAXP component. An attacker could possibly use this to specially
craft an XML file to obtain sensitive information. (CVE-2022-21296)
It was discovered that OpenJDK incorrectly handled XML entities. An
attacker could use this to specially craft an XML file that, when parsed,
would possibly cause a denial of service. (CVE-2022-21299)
Zhiqiang Zang discovered that OpenJDK incorrectly handled array indexes.
An attacker could possibly use this issue to obtain sensitive information.
(CVE-2022-21305)
It was discovered that OpenJDK incorrectly read very long attributes
values in JAR file manifests. An attacker could possibly use this to
specially craft JAR file to cause a denial of service. (CVE-2022-21340)
It was discovered that OpenJDK incorrectly validated input from serialized
streams. An attacker cold possibly use this issue to bypass sandbox
restrictions. (CVE-2022-21341)
Fabian Meumertzheim discovered that OpenJDK incorrectly handled certain
specially crafted BMP or TIFF files. An attacker could possibly use this
to cause a denial of service. (CVE-2022-21360, CVE-2022-21366)
It was discovered that an integer overflow could be triggered in OpenJDK
BMPImageReader class implementation. An attacker could possibly use this
to specially craft a BMP file to cause a denial of service.
(CVE-2022-21365)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 21.10:
openjdk-11-jdk 11.0.14+9-0ubuntu2~22.10
openjdk-11-jre 11.0.14+9-0ubuntu2~22.10
openjdk-11-jre-headless 11.0.14+9-0ubuntu2~22.10
openjdk-11-jre-zero 11.0.14+9-0ubuntu2~22.10
openjdk-17-jdk 17.0.2+8-1~22.10
openjdk-17-jre 17.0.2+8-1~22.10
openjdk-17-jre-headless 17.0.2+8-1~22.10
openjdk-17-jre-zero 17.0.2+8-1~22.10
Ubuntu 20.04 LTS:
openjdk-11-jdk 11.0.14+9-0ubuntu2~20.04
openjdk-11-jre 11.0.14+9-0ubuntu2~20.04
openjdk-11-jre-headless 11.0.14+9-0ubuntu2~20.04
openjdk-11-jre-zero 11.0.14+9-0ubuntu2~20.04
openjdk-17-jdk 17.0.2+8-1~20.04
openjdk-17-jre 17.0.2+8-1~20.04
openjdk-17-jre-headless 17.0.2+8-1~20.04
openjdk-17-jre-zero 17.0.2+8-1~20.04
Ubuntu 18.04 LTS:
openjdk-11-jdk 11.0.14+9-0ubuntu2~18.04
openjdk-11-jre 11.0.14+9-0ubuntu2~18.04
openjdk-11-jre-headless 11.0.14+9-0ubuntu2~18.04
openjdk-11-jre-zero 11.0.14+9-0ubuntu2~18.04
openjdk-17-jdk 17.0.2+8-1~18.04
openjdk-17-jre 17.0.2+8-1~18.04
openjdk-17-jre-headless 17.0.2+8-1~18.04
openjdk-17-jre-zero 17.0.2+8-1~18.04
This update uses a new upstream release, which includes additional bug
fixes. After a standard system update you need to restart any Java
applications or applets to make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5313-1
CVE-2022-21248, CVE-2022-21277, CVE-2022-21282, CVE-2022-21283,
CVE-2022-21291, CVE-2022-21293, CVE-2022-21294, CVE-2022-21296,
CVE-2022-21299, CVE-2022-21305, CVE-2022-21340, CVE-2022-21341,
CVE-2022-21360, CVE-2022-21365, CVE-2022-21366
Package Information:
https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10
https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10
https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04
https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04
https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04
https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04
Ubuntu Security Notice USN-5313-1
March 07, 2022
openjdk-lts, openjdk-17 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 21.10
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
Summary:
Several security issues were fixed in OpenJDK.
Software Description:
- openjdk-17: Open Source Java implementation
- openjdk-lts: Open Source Java implementation
Details:
It was discovered that OpenJDK incorrectly handled deserialization filters.
An attacker could possibly use this issue to insert, delete or obtain
sensitive information. (CVE-2022-21248)
It was discovered that OpenJDK incorrectly read uncompressed TIFF files.
An attacker could possibly use this issue to cause a denial of service via
a specially crafted TIFF file. (CVE-2022-21277)
Jonni Passki discovered that OpenJDK incorrectly verified access
restrictions when performing URI resolution. An attacker could possibly
use this issue to obtain sensitive information. (CVE-2022-21282)
It was discovered that OpenJDK incorrectly handled certain regular
expressions in the Pattern class implementation. An attacker could
possibly use this issue to cause a denial of service. (CVE-2022-21283)
It was discovered that OpenJDK incorrectly handled specially crafted Java
class files. An attacker could possibly use this issue to cause a denial
of service. (CVE-2022-21291)
Markus Loewe discovered that OpenJDK incorrectly validated attributes
during object deserialization. An attacker could possibly use this issue
to cause a denial of service. (CVE-2022-21293, CVE-2022-21294)
Dan Rabe discovered that OpenJDK incorrectly verified access permissions
in the JAXP component. An attacker could possibly use this to specially
craft an XML file to obtain sensitive information. (CVE-2022-21296)
It was discovered that OpenJDK incorrectly handled XML entities. An
attacker could use this to specially craft an XML file that, when parsed,
would possibly cause a denial of service. (CVE-2022-21299)
Zhiqiang Zang discovered that OpenJDK incorrectly handled array indexes.
An attacker could possibly use this issue to obtain sensitive information.
(CVE-2022-21305)
It was discovered that OpenJDK incorrectly read very long attributes
values in JAR file manifests. An attacker could possibly use this to
specially craft JAR file to cause a denial of service. (CVE-2022-21340)
It was discovered that OpenJDK incorrectly validated input from serialized
streams. An attacker cold possibly use this issue to bypass sandbox
restrictions. (CVE-2022-21341)
Fabian Meumertzheim discovered that OpenJDK incorrectly handled certain
specially crafted BMP or TIFF files. An attacker could possibly use this
to cause a denial of service. (CVE-2022-21360, CVE-2022-21366)
It was discovered that an integer overflow could be triggered in OpenJDK
BMPImageReader class implementation. An attacker could possibly use this
to specially craft a BMP file to cause a denial of service.
(CVE-2022-21365)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 21.10:
openjdk-11-jdk 11.0.14+9-0ubuntu2~22.10
openjdk-11-jre 11.0.14+9-0ubuntu2~22.10
openjdk-11-jre-headless 11.0.14+9-0ubuntu2~22.10
openjdk-11-jre-zero 11.0.14+9-0ubuntu2~22.10
openjdk-17-jdk 17.0.2+8-1~22.10
openjdk-17-jre 17.0.2+8-1~22.10
openjdk-17-jre-headless 17.0.2+8-1~22.10
openjdk-17-jre-zero 17.0.2+8-1~22.10
Ubuntu 20.04 LTS:
openjdk-11-jdk 11.0.14+9-0ubuntu2~20.04
openjdk-11-jre 11.0.14+9-0ubuntu2~20.04
openjdk-11-jre-headless 11.0.14+9-0ubuntu2~20.04
openjdk-11-jre-zero 11.0.14+9-0ubuntu2~20.04
openjdk-17-jdk 17.0.2+8-1~20.04
openjdk-17-jre 17.0.2+8-1~20.04
openjdk-17-jre-headless 17.0.2+8-1~20.04
openjdk-17-jre-zero 17.0.2+8-1~20.04
Ubuntu 18.04 LTS:
openjdk-11-jdk 11.0.14+9-0ubuntu2~18.04
openjdk-11-jre 11.0.14+9-0ubuntu2~18.04
openjdk-11-jre-headless 11.0.14+9-0ubuntu2~18.04
openjdk-11-jre-zero 11.0.14+9-0ubuntu2~18.04
openjdk-17-jdk 17.0.2+8-1~18.04
openjdk-17-jre 17.0.2+8-1~18.04
openjdk-17-jre-headless 17.0.2+8-1~18.04
openjdk-17-jre-zero 17.0.2+8-1~18.04
This update uses a new upstream release, which includes additional bug
fixes. After a standard system update you need to restart any Java
applications or applets to make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5313-1
CVE-2022-21248, CVE-2022-21277, CVE-2022-21282, CVE-2022-21283,
CVE-2022-21291, CVE-2022-21293, CVE-2022-21294, CVE-2022-21296,
CVE-2022-21299, CVE-2022-21305, CVE-2022-21340, CVE-2022-21341,
CVE-2022-21360, CVE-2022-21365, CVE-2022-21366
Package Information:
https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10
https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10
https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04
https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04
https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04
https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04
[USN-5300-3] PHP vulnerabilities
==========================================================================
Ubuntu Security Notice USN-5300-3
March 07, 2022
php8.0 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 21.10
Summary:
Several security issues were fixed in PHP.
Software Description:
- php8.0: HTML-embedded scripting language interpreter
Details:
USN-5300-1 fixed vulnerabilities in PHP. This update provides the
corresponding updates for Ubuntu 21.10.
Original advisory details:
It was discovered that PHP incorrectly handled certain scripts.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2015-9253, CVE-2017-8923, CVE-2017-9118, CVE-2017-9120)
It was discovered that PHP incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a denial of service,
or possibly obtain sensitive information. (CVE-2017-9119)
It was discovered that PHP incorrectly handled certain scripts with XML
parsing functions.
An attacker could possibly use this issue to obtain sensitive information.
(CVE-2021-21707)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 21.10:
php8.0-cgi 8.0.8-1ubuntu0.3
php8.0-cli 8.0.8-1ubuntu0.3
php8.0-fpm 8.0.8-1ubuntu0.3
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5300-3
https://ubuntu.com/security/notices/USN-5300-1
CVE-2017-8923, CVE-2017-9118, CVE-2017-9120, CVE-2021-21707
Package Information:
https://launchpad.net/ubuntu/+source/php8.0/8.0.8-1ubuntu0.3
Ubuntu Security Notice USN-5300-3
March 07, 2022
php8.0 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 21.10
Summary:
Several security issues were fixed in PHP.
Software Description:
- php8.0: HTML-embedded scripting language interpreter
Details:
USN-5300-1 fixed vulnerabilities in PHP. This update provides the
corresponding updates for Ubuntu 21.10.
Original advisory details:
It was discovered that PHP incorrectly handled certain scripts.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2015-9253, CVE-2017-8923, CVE-2017-9118, CVE-2017-9120)
It was discovered that PHP incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a denial of service,
or possibly obtain sensitive information. (CVE-2017-9119)
It was discovered that PHP incorrectly handled certain scripts with XML
parsing functions.
An attacker could possibly use this issue to obtain sensitive information.
(CVE-2021-21707)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 21.10:
php8.0-cgi 8.0.8-1ubuntu0.3
php8.0-cli 8.0.8-1ubuntu0.3
php8.0-fpm 8.0.8-1ubuntu0.3
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5300-3
https://ubuntu.com/security/notices/USN-5300-1
CVE-2017-8923, CVE-2017-9118, CVE-2017-9120, CVE-2021-21707
Package Information:
https://launchpad.net/ubuntu/+source/php8.0/8.0.8-1ubuntu0.3
Orphaned packages looking for new maintainers
The following packages are orphaned and will be retired when they
are orphaned for six weeks, unless someone adopts them. If you know for sure
that the package should be retired, please do so now with a proper reason:
https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life
Note: If you received this mail directly you (co)maintain one of the affected
packages or a package that depends on one. Please adopt the affected package or
retire your depending package to avoid broken dependencies, otherwise your
package will fail to install and/or build when the affected package gets retired.
Request package ownership via the *Take* button in he left column on
https://src.fedoraproject.org/rpms/<pkgname>
Full report available at:
https://churchyard.fedorapeople.org/orphans-2022-03-07.txt
grep it for your FAS username and follow the dependency chain.
For human readable dependency chains,
see https://packager-dashboard.fedoraproject.org/
For all orphaned packages,
see https://packager-dashboard.fedoraproject.org/orphan
Package (co)maintainers Status Change
================================================================================
augeas-vala orphan 1 weeks ago
beanstalk-client orphan 0 weeks ago
bmap-tools orphan 0 weeks ago
deltarpm jdieter, orphan 0 weeks ago
ghc-dbus orphan 0 weeks ago
ghc-libxml-sax orphan 0 weeks ago
gimp-fourier-plugin orphan 1 weeks ago
gocl orphan 1 weeks ago
javahelp2 orphan 3 weeks ago
linenoise orphan 0 weeks ago
lua-ldap orphan 0 weeks ago
nautilus-image-converter orphan, timj 4 weeks ago
nodejs-backbone nodejs-sig, orphan, vjancik 0 weeks ago
php-pecl-datadog_trace orphan 5 weeks ago
python-aiohttp-cors orphan, python-sig 0 weeks ago
python-aiohttp-negotiate orphan 0 weeks ago
python-blessings orphan 0 weeks ago
python-fastimport orphan 0 weeks ago
python-hkdf orphan 1 weeks ago
python-lrparsing orphan 0 weeks ago
python-magic-wormhole orphan 1 weeks ago
python-magic-wormhole-mailbox- orphan 1 weeks ago
server
python-magic-wormhole-transit- orphan 1 weeks ago
relay
python-ofxparse orphan 0 weeks ago
python-phonenumbers orphan 0 weeks ago
python-plyvel orphan 0 weeks ago
python-pystalk orphan 0 weeks ago
python-spake2 orphan 1 weeks ago
python-txtorcon orphan 1 weeks ago
python-uinput orphan 1 weeks ago
python-unidiff orphan 0 weeks ago
qcommandline orphan 0 weeks ago
rpg-cli orphan, rust-sig 3 weeks ago
rubygem-database_cleaner orphan 2 weeks ago
rubygem-ruby-ntlm orphan 5 weeks ago
ssh-contact orphan 4 weeks ago
telepathy-farstream orphan 4 weeks ago
telepathy-idle orphan 4 weeks ago
telepathy-logger orphan, rishi 4 weeks ago
vorbisgain orphan 4 weeks ago
w_scan orphan 3 weeks ago
xorg-sgml-doctools airlied, ajax, alexl, caillon, 5 weeks ago
caolanm, glisse, mbarnes,
orphan, rhughes, rstrode,
slaanesh, ssp, whot
xorg-x11-docs airlied, ajax, alexl, caillon, 5 weeks ago
caolanm, glisse, mbarnes,
orphan, rhughes, rstrode,
slaanesh, ssp, whot
xorg-x11-drv-sisusb airlied, ajax, alexl, caillon, 5 weeks ago
caolanm, glisse, mbarnes,
orphan, rhughes, rstrode, ssp,
whot
xorg-x11-drv-v4l airlied, ajax, alexl, caillon, 5 weeks ago
caolanm, glisse, mbarnes,
mchehab, orphan, rhughes,
rstrode, ssp, whot
xorg-x11-twm airlied, ajax, alexl, caillon, 5 weeks ago
caolanm, glisse, mbarnes,
orphan, rhughes, rstrode,
slaanesh, ssp, whot
xorg-x11-xdm airlied, ajax, alexl, caillon, 5 weeks ago
caolanm, glisse, mbarnes,
orphan, rhughes, rstrode, ssp,
whot
xorg-x11-xfs airlied, ajax, alexl, caillon, 5 weeks ago
caolanm, glisse, mbarnes,
orphan, rhughes, rstrode,
slaanesh, ssp, whot
xorg-x11-xsm airlied, ajax, alexl, caillon, 5 weeks ago
caolanm, glisse, mbarnes,
orphan, rhughes, rstrode, ssp,
whot
The following packages require above mentioned packages:
Report too long, see the full version at
https://churchyard.fedorapeople.org/orphans-2022-03-07.txt
See dependency chains of your packages at
https://packager-dashboard.fedoraproject.org/
See all orphaned packages at https://packager-dashboard.fedoraproject.org/orphan
Affected (co)maintainers (either directly or via packages' dependencies):
airlied: xorg-x11-drv-sisusb, xorg-sgml-doctools, xorg-x11-xdm,
xorg-x11-drv-v4l, xorg-x11-twm, xorg-x11-xfs, xorg-x11-xsm, xorg-x11-docs
ajax: xorg-x11-drv-sisusb, xorg-sgml-doctools, xorg-x11-xdm, xorg-x11-drv-v4l,
xorg-x11-twm, xorg-x11-xfs, xorg-x11-xsm, xorg-x11-docs
alexl: xorg-x11-drv-sisusb, xorg-sgml-doctools, xorg-x11-xdm, xorg-x11-drv-v4l,
xorg-x11-twm, xorg-x11-xfs, xorg-x11-xsm, xorg-x11-docs
ankursinha: nodejs-backbone, ghc-dbus
bowlofeggs: nodejs-backbone
caillon: xorg-x11-drv-sisusb, xorg-sgml-doctools, xorg-x11-xdm,
xorg-x11-drv-v4l, xorg-x11-twm, xorg-x11-xfs, xorg-x11-xsm, xorg-x11-docs
caolanm: xorg-x11-drv-sisusb, xorg-sgml-doctools, xorg-x11-xdm,
xorg-x11-drv-v4l, xorg-x11-twm, xorg-x11-xfs, xorg-x11-xsm, xorg-x11-docs
chimosky: xorg-x11-drv-sisusb
churchyard: nodejs-backbone
csomh: python-unidiff
cstratak: nodejs-backbone
dcallagh: python-phonenumbers
dcantrell: nodejs-backbone
dcavalca: nodejs-backbone
defolos: deltarpm
dkrejci: nodejs-backbone
dvratil: telepathy-logger, telepathy-farstream
ellert: nodejs-backbone
epel-packagers-sig: nodejs-backbone
fab: nodejs-backbone
filbranden: nodejs-backbone
fmuellner: telepathy-logger, telepathy-idle
fnecas: python-unidiff
gbcox: telepathy-farstream
glisse: xorg-x11-drv-sisusb, xorg-sgml-doctools, xorg-x11-xdm,
xorg-x11-drv-v4l, xorg-x11-twm, xorg-x11-xfs, xorg-x11-xsm, xorg-x11-docs
gnome-sig: telepathy-logger, telepathy-idle
hguemar: deltarpm
hno: nodejs-backbone
ignatenkobrain: nodejs-backbone
jamatos: nodejs-backbone
jcline: nodejs-backbone
jdieter: deltarpm
jgrulich: telepathy-logger, telepathy-farstream
jjames: nodejs-backbone
jpopelka: python-unidiff
jreznik: telepathy-logger, telepathy-farstream
jscotka: python-unidiff
kalev: nodejs-backbone
kde-sig: telepathy-logger, telepathy-farstream
ksurma: nodejs-backbone
kwizart: python-aiohttp-cors
lachmanfrantisek: python-unidiff
lbalhar: nodejs-backbone
lbarczio: python-unidiff
lbazan: ghc-dbus
lkundrak: nodejs-backbone
maha: nodejs-backbone
mathstuf: ghc-dbus
maxamillion: python-blessings, nodejs-backbone
mbaldessari: nodejs-backbone
mbarnes: xorg-x11-drv-sisusb, xorg-sgml-doctools, xorg-x11-xdm,
xorg-x11-drv-v4l, xorg-x11-twm, xorg-x11-xfs, xorg-x11-xsm, xorg-x11-docs
mchehab: xorg-x11-drv-v4l
mck182: telepathy-logger, telepathy-farstream
mfocko: python-unidiff
mrunge: nodejs-backbone
msuchy: deltarpm
neuro-sig: nodejs-backbone, ghc-dbus
nforro: python-unidiff
ngompa: deltarpm
nodejs-sig: nodejs-backbone
nonamedotc: nodejs-backbone
nucleo: python-aiohttp-cors, telepathy-farstream
orion: nodejs-backbone
packit: python-unidiff
pbrobinson: xorg-x11-drv-sisusb
pcpa: nodejs-backbone
petersen: ghc-dbus
phracek: python-unidiff
python-sig: python-aiohttp-cors, nodejs-backbone
qulogic: nodejs-backbone, ghc-dbus
rathann: nodejs-backbone
rdieter: telepathy-logger, telepathy-farstream
rebus: nodejs-backbone
ret2libc: nodejs-backbone
rhughes: xorg-x11-drv-sisusb, xorg-sgml-doctools, xorg-x11-xdm,
xorg-x11-drv-v4l, xorg-x11-twm, xorg-x11-xfs, xorg-x11-xsm, xorg-x11-docs
rishi: telepathy-logger
rkuska: python-blessings
rstrode: xorg-x11-drv-sisusb, xorg-sgml-doctools, xorg-x11-xdm,
xorg-x11-drv-v4l, xorg-x11-twm, xorg-x11-xfs, xorg-x11-xsm, xorg-x11-docs
rust-sig: rpg-cli
sagitter: nodejs-backbone
salimma: python-blessings, nodejs-backbone
sergiopr: nodejs-backbone
slaanesh: xorg-sgml-doctools, xorg-x11-twm, xorg-x11-xfs, xorg-x11-docs
slankes: telepathy-farstream
ssp: xorg-x11-drv-sisusb, xorg-sgml-doctools, xorg-x11-xdm, xorg-x11-drv-v4l,
xorg-x11-twm, xorg-x11-xfs, xorg-x11-xsm, xorg-x11-docs
tejas: telepathy-farstream
terjeros: python-blessings
thozza: nodejs-backbone
timj: nautilus-image-converter
tomspur: nodejs-backbone
ttomecek: python-unidiff
usercont: python-unidiff
v02460: python-phonenumbers
vjancik: nodejs-backbone
whot: xorg-x11-drv-sisusb, xorg-sgml-doctools, xorg-x11-xdm, xorg-x11-drv-v4l,
xorg-x11-twm, xorg-x11-xfs, xorg-x11-xsm, xorg-x11-docs
zbyszek: nodejs-backbone
zdohnal: nodejs-backbone
--
The script creating this output is run and developed by Fedora
Release Engineering. Please report issues at its pagure instance:
https://pagure.io/releng/
The sources of this script can be found at:
https://pagure.io/releng/blob/main/f/scripts/find_unblocked_orphans.py
Report finished at 2022-03-07 09:28:42 UTC
_______________________________________________
devel-announce mailing list -- devel-announce@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
are orphaned for six weeks, unless someone adopts them. If you know for sure
that the package should be retired, please do so now with a proper reason:
https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life
Note: If you received this mail directly you (co)maintain one of the affected
packages or a package that depends on one. Please adopt the affected package or
retire your depending package to avoid broken dependencies, otherwise your
package will fail to install and/or build when the affected package gets retired.
Request package ownership via the *Take* button in he left column on
https://src.fedoraproject.org/rpms/<pkgname>
Full report available at:
https://churchyard.fedorapeople.org/orphans-2022-03-07.txt
grep it for your FAS username and follow the dependency chain.
For human readable dependency chains,
see https://packager-dashboard.fedoraproject.org/
For all orphaned packages,
see https://packager-dashboard.fedoraproject.org/orphan
Package (co)maintainers Status Change
================================================================================
augeas-vala orphan 1 weeks ago
beanstalk-client orphan 0 weeks ago
bmap-tools orphan 0 weeks ago
deltarpm jdieter, orphan 0 weeks ago
ghc-dbus orphan 0 weeks ago
ghc-libxml-sax orphan 0 weeks ago
gimp-fourier-plugin orphan 1 weeks ago
gocl orphan 1 weeks ago
javahelp2 orphan 3 weeks ago
linenoise orphan 0 weeks ago
lua-ldap orphan 0 weeks ago
nautilus-image-converter orphan, timj 4 weeks ago
nodejs-backbone nodejs-sig, orphan, vjancik 0 weeks ago
php-pecl-datadog_trace orphan 5 weeks ago
python-aiohttp-cors orphan, python-sig 0 weeks ago
python-aiohttp-negotiate orphan 0 weeks ago
python-blessings orphan 0 weeks ago
python-fastimport orphan 0 weeks ago
python-hkdf orphan 1 weeks ago
python-lrparsing orphan 0 weeks ago
python-magic-wormhole orphan 1 weeks ago
python-magic-wormhole-mailbox- orphan 1 weeks ago
server
python-magic-wormhole-transit- orphan 1 weeks ago
relay
python-ofxparse orphan 0 weeks ago
python-phonenumbers orphan 0 weeks ago
python-plyvel orphan 0 weeks ago
python-pystalk orphan 0 weeks ago
python-spake2 orphan 1 weeks ago
python-txtorcon orphan 1 weeks ago
python-uinput orphan 1 weeks ago
python-unidiff orphan 0 weeks ago
qcommandline orphan 0 weeks ago
rpg-cli orphan, rust-sig 3 weeks ago
rubygem-database_cleaner orphan 2 weeks ago
rubygem-ruby-ntlm orphan 5 weeks ago
ssh-contact orphan 4 weeks ago
telepathy-farstream orphan 4 weeks ago
telepathy-idle orphan 4 weeks ago
telepathy-logger orphan, rishi 4 weeks ago
vorbisgain orphan 4 weeks ago
w_scan orphan 3 weeks ago
xorg-sgml-doctools airlied, ajax, alexl, caillon, 5 weeks ago
caolanm, glisse, mbarnes,
orphan, rhughes, rstrode,
slaanesh, ssp, whot
xorg-x11-docs airlied, ajax, alexl, caillon, 5 weeks ago
caolanm, glisse, mbarnes,
orphan, rhughes, rstrode,
slaanesh, ssp, whot
xorg-x11-drv-sisusb airlied, ajax, alexl, caillon, 5 weeks ago
caolanm, glisse, mbarnes,
orphan, rhughes, rstrode, ssp,
whot
xorg-x11-drv-v4l airlied, ajax, alexl, caillon, 5 weeks ago
caolanm, glisse, mbarnes,
mchehab, orphan, rhughes,
rstrode, ssp, whot
xorg-x11-twm airlied, ajax, alexl, caillon, 5 weeks ago
caolanm, glisse, mbarnes,
orphan, rhughes, rstrode,
slaanesh, ssp, whot
xorg-x11-xdm airlied, ajax, alexl, caillon, 5 weeks ago
caolanm, glisse, mbarnes,
orphan, rhughes, rstrode, ssp,
whot
xorg-x11-xfs airlied, ajax, alexl, caillon, 5 weeks ago
caolanm, glisse, mbarnes,
orphan, rhughes, rstrode,
slaanesh, ssp, whot
xorg-x11-xsm airlied, ajax, alexl, caillon, 5 weeks ago
caolanm, glisse, mbarnes,
orphan, rhughes, rstrode, ssp,
whot
The following packages require above mentioned packages:
Report too long, see the full version at
https://churchyard.fedorapeople.org/orphans-2022-03-07.txt
See dependency chains of your packages at
https://packager-dashboard.fedoraproject.org/
See all orphaned packages at https://packager-dashboard.fedoraproject.org/orphan
Affected (co)maintainers (either directly or via packages' dependencies):
airlied: xorg-x11-drv-sisusb, xorg-sgml-doctools, xorg-x11-xdm,
xorg-x11-drv-v4l, xorg-x11-twm, xorg-x11-xfs, xorg-x11-xsm, xorg-x11-docs
ajax: xorg-x11-drv-sisusb, xorg-sgml-doctools, xorg-x11-xdm, xorg-x11-drv-v4l,
xorg-x11-twm, xorg-x11-xfs, xorg-x11-xsm, xorg-x11-docs
alexl: xorg-x11-drv-sisusb, xorg-sgml-doctools, xorg-x11-xdm, xorg-x11-drv-v4l,
xorg-x11-twm, xorg-x11-xfs, xorg-x11-xsm, xorg-x11-docs
ankursinha: nodejs-backbone, ghc-dbus
bowlofeggs: nodejs-backbone
caillon: xorg-x11-drv-sisusb, xorg-sgml-doctools, xorg-x11-xdm,
xorg-x11-drv-v4l, xorg-x11-twm, xorg-x11-xfs, xorg-x11-xsm, xorg-x11-docs
caolanm: xorg-x11-drv-sisusb, xorg-sgml-doctools, xorg-x11-xdm,
xorg-x11-drv-v4l, xorg-x11-twm, xorg-x11-xfs, xorg-x11-xsm, xorg-x11-docs
chimosky: xorg-x11-drv-sisusb
churchyard: nodejs-backbone
csomh: python-unidiff
cstratak: nodejs-backbone
dcallagh: python-phonenumbers
dcantrell: nodejs-backbone
dcavalca: nodejs-backbone
defolos: deltarpm
dkrejci: nodejs-backbone
dvratil: telepathy-logger, telepathy-farstream
ellert: nodejs-backbone
epel-packagers-sig: nodejs-backbone
fab: nodejs-backbone
filbranden: nodejs-backbone
fmuellner: telepathy-logger, telepathy-idle
fnecas: python-unidiff
gbcox: telepathy-farstream
glisse: xorg-x11-drv-sisusb, xorg-sgml-doctools, xorg-x11-xdm,
xorg-x11-drv-v4l, xorg-x11-twm, xorg-x11-xfs, xorg-x11-xsm, xorg-x11-docs
gnome-sig: telepathy-logger, telepathy-idle
hguemar: deltarpm
hno: nodejs-backbone
ignatenkobrain: nodejs-backbone
jamatos: nodejs-backbone
jcline: nodejs-backbone
jdieter: deltarpm
jgrulich: telepathy-logger, telepathy-farstream
jjames: nodejs-backbone
jpopelka: python-unidiff
jreznik: telepathy-logger, telepathy-farstream
jscotka: python-unidiff
kalev: nodejs-backbone
kde-sig: telepathy-logger, telepathy-farstream
ksurma: nodejs-backbone
kwizart: python-aiohttp-cors
lachmanfrantisek: python-unidiff
lbalhar: nodejs-backbone
lbarczio: python-unidiff
lbazan: ghc-dbus
lkundrak: nodejs-backbone
maha: nodejs-backbone
mathstuf: ghc-dbus
maxamillion: python-blessings, nodejs-backbone
mbaldessari: nodejs-backbone
mbarnes: xorg-x11-drv-sisusb, xorg-sgml-doctools, xorg-x11-xdm,
xorg-x11-drv-v4l, xorg-x11-twm, xorg-x11-xfs, xorg-x11-xsm, xorg-x11-docs
mchehab: xorg-x11-drv-v4l
mck182: telepathy-logger, telepathy-farstream
mfocko: python-unidiff
mrunge: nodejs-backbone
msuchy: deltarpm
neuro-sig: nodejs-backbone, ghc-dbus
nforro: python-unidiff
ngompa: deltarpm
nodejs-sig: nodejs-backbone
nonamedotc: nodejs-backbone
nucleo: python-aiohttp-cors, telepathy-farstream
orion: nodejs-backbone
packit: python-unidiff
pbrobinson: xorg-x11-drv-sisusb
pcpa: nodejs-backbone
petersen: ghc-dbus
phracek: python-unidiff
python-sig: python-aiohttp-cors, nodejs-backbone
qulogic: nodejs-backbone, ghc-dbus
rathann: nodejs-backbone
rdieter: telepathy-logger, telepathy-farstream
rebus: nodejs-backbone
ret2libc: nodejs-backbone
rhughes: xorg-x11-drv-sisusb, xorg-sgml-doctools, xorg-x11-xdm,
xorg-x11-drv-v4l, xorg-x11-twm, xorg-x11-xfs, xorg-x11-xsm, xorg-x11-docs
rishi: telepathy-logger
rkuska: python-blessings
rstrode: xorg-x11-drv-sisusb, xorg-sgml-doctools, xorg-x11-xdm,
xorg-x11-drv-v4l, xorg-x11-twm, xorg-x11-xfs, xorg-x11-xsm, xorg-x11-docs
rust-sig: rpg-cli
sagitter: nodejs-backbone
salimma: python-blessings, nodejs-backbone
sergiopr: nodejs-backbone
slaanesh: xorg-sgml-doctools, xorg-x11-twm, xorg-x11-xfs, xorg-x11-docs
slankes: telepathy-farstream
ssp: xorg-x11-drv-sisusb, xorg-sgml-doctools, xorg-x11-xdm, xorg-x11-drv-v4l,
xorg-x11-twm, xorg-x11-xfs, xorg-x11-xsm, xorg-x11-docs
tejas: telepathy-farstream
terjeros: python-blessings
thozza: nodejs-backbone
timj: nautilus-image-converter
tomspur: nodejs-backbone
ttomecek: python-unidiff
usercont: python-unidiff
v02460: python-phonenumbers
vjancik: nodejs-backbone
whot: xorg-x11-drv-sisusb, xorg-sgml-doctools, xorg-x11-xdm, xorg-x11-drv-v4l,
xorg-x11-twm, xorg-x11-xfs, xorg-x11-xsm, xorg-x11-docs
zbyszek: nodejs-backbone
zdohnal: nodejs-backbone
--
The script creating this output is run and developed by Fedora
Release Engineering. Please report issues at its pagure instance:
https://pagure.io/releng/
The sources of this script can be found at:
https://pagure.io/releng/blob/main/f/scripts/find_unblocked_orphans.py
Report finished at 2022-03-07 09:28:42 UTC
_______________________________________________
devel-announce mailing list -- devel-announce@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Sunday, March 6, 2022
[USN-5314-1] Firefox vulnerabilities
==========================================================================
Ubuntu Security Notice USN-5314-1
March 06, 2022
firefox vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 21.10
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
Summary:
Firefox could be made to crash or run programs as your login if it
opened a malicious website.
Software Description:
- firefox: Mozilla Open Source web browser
Details:
A use-after-free was discovered when removing an XSLT parameter in some
circumstances. If a user were tricked into opening a specially crafted
website, an attacker could exploit this to cause a denial of service, or
execute arbitrary code. (CVE-2022-26485)
A use-after-free was discovered in the WebGPU IPC framework. If a user
were tricked into opening a specially crafted website, an attacker could
exploit this to cause a denial of service, or execute arbitrary code.
(CVE-2022-26486)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 21.10:
firefox 97.0.2+build1-0ubuntu0.21.10.1
Ubuntu 20.04 LTS:
firefox 97.0.2+build1-0ubuntu0.20.04.1
Ubuntu 18.04 LTS:
firefox 97.0.2+build1-0ubuntu0.18.04.1
After a standard system update you need to restart Firefox to make
all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5314-1
CVE-2022-26485, CVE-2022-26486
Package Information:
https://launchpad.net/ubuntu/+source/firefox/97.0.2+build1-0ubuntu0.21.10.1
https://launchpad.net/ubuntu/+source/firefox/97.0.2+build1-0ubuntu0.20.04.1
https://launchpad.net/ubuntu/+source/firefox/97.0.2+build1-0ubuntu0.18.04.1
This message has been scanned for malware by SurfControl plc.
www.surfcontrol.com
Ubuntu Security Notice USN-5314-1
March 06, 2022
firefox vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 21.10
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
Summary:
Firefox could be made to crash or run programs as your login if it
opened a malicious website.
Software Description:
- firefox: Mozilla Open Source web browser
Details:
A use-after-free was discovered when removing an XSLT parameter in some
circumstances. If a user were tricked into opening a specially crafted
website, an attacker could exploit this to cause a denial of service, or
execute arbitrary code. (CVE-2022-26485)
A use-after-free was discovered in the WebGPU IPC framework. If a user
were tricked into opening a specially crafted website, an attacker could
exploit this to cause a denial of service, or execute arbitrary code.
(CVE-2022-26486)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 21.10:
firefox 97.0.2+build1-0ubuntu0.21.10.1
Ubuntu 20.04 LTS:
firefox 97.0.2+build1-0ubuntu0.20.04.1
Ubuntu 18.04 LTS:
firefox 97.0.2+build1-0ubuntu0.18.04.1
After a standard system update you need to restart Firefox to make
all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5314-1
CVE-2022-26485, CVE-2022-26486
Package Information:
https://launchpad.net/ubuntu/+source/firefox/97.0.2+build1-0ubuntu0.21.10.1
https://launchpad.net/ubuntu/+source/firefox/97.0.2+build1-0ubuntu0.20.04.1
https://launchpad.net/ubuntu/+source/firefox/97.0.2+build1-0ubuntu0.18.04.1
This message has been scanned for malware by SurfControl plc.
www.surfcontrol.com
Thursday, March 3, 2022
[USN-5311-1] containerd vulnerability
==========================================================================
Ubuntu Security Notice USN-5311-1
March 03, 2022
containerd vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 21.10
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
Summary:
containerd would allow unintended access to files over the network.
Software Description:
- containerd: daemon to control runC
Details:
It was discovered that containerd allows attackers to gain access to read-
only copies of arbitrary files and directories on the host via a specially-
crafted image configuration. An attacker could possibly use this issue to
obtain sensitive information.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 21.10:
containerd 1.5.5-0ubuntu3.1
Ubuntu 20.04 LTS:
containerd 1.5.5-0ubuntu3~20.04.2
Ubuntu 18.04 LTS:
containerd 1.5.5-0ubuntu3~18.04.2
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5311-1
CVE-2022-23648
Package Information:
https://launchpad.net/ubuntu/+source/containerd/1.5.5-0ubuntu3.1
https://launchpad.net/ubuntu/+source/containerd/1.5.5-0ubuntu3~20.04.2
https://launchpad.net/ubuntu/+source/containerd/1.5.5-0ubuntu3~18.04.2
Ubuntu Security Notice USN-5311-1
March 03, 2022
containerd vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 21.10
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
Summary:
containerd would allow unintended access to files over the network.
Software Description:
- containerd: daemon to control runC
Details:
It was discovered that containerd allows attackers to gain access to read-
only copies of arbitrary files and directories on the host via a specially-
crafted image configuration. An attacker could possibly use this issue to
obtain sensitive information.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 21.10:
containerd 1.5.5-0ubuntu3.1
Ubuntu 20.04 LTS:
containerd 1.5.5-0ubuntu3~20.04.2
Ubuntu 18.04 LTS:
containerd 1.5.5-0ubuntu3~18.04.2
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5311-1
CVE-2022-23648
Package Information:
https://launchpad.net/ubuntu/+source/containerd/1.5.5-0ubuntu3.1
https://launchpad.net/ubuntu/+source/containerd/1.5.5-0ubuntu3~20.04.2
https://launchpad.net/ubuntu/+source/containerd/1.5.5-0ubuntu3~18.04.2
[USN-5300-2] PHP vulnerabilities
==========================================================================
Ubuntu Security Notice USN-5300-2
March 03, 2022
php7.2, php7.4 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
Summary:
Several security issues were fixed in PHP.
Software Description:
- php7.4: HTML-embedded scripting language interpreter
- php7.2: HTML-embedded scripting language interpreter
Details:
USN-5300-1 fixed vulnerabilities in PHP. This update provides the
corresponding updates for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
Original advisory details:
It was discovered that PHP incorrectly handled certain scripts.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2015-9253, CVE-2017-8923, CVE-2017-9118, CVE-2017-9120)
It was discovered that PHP incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a denial of service,
or possibly obtain sensitive information. (CVE-2017-9119)
It was discovered that PHP incorrectly handled certain scripts with XML
parsing functions.
An attacker could possibly use this issue to obtain sensitive information.
(CVE-2021-21707)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 20.04 LTS:
php7.4-cgi 7.4.3-4ubuntu2.10
php7.4-cli 7.4.3-4ubuntu2.10
php7.4-fpm 7.4.3-4ubuntu2.10
Ubuntu 18.04 LTS:
php7.2-cgi 7.2.24-0ubuntu0.18.04.11
php7.2-cli 7.2.24-0ubuntu0.18.04.11
php7.2-fpm 7.2.24-0ubuntu0.18.04.11
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5300-2
https://ubuntu.com/security/notices/USN-5300-1
CVE-2017-8923, CVE-2017-9118, CVE-2017-9119, CVE-2017-9120,
CVE-2021-21707
Package Information:
https://launchpad.net/ubuntu/+source/php7.4/7.4.3-4ubuntu2.10
https://launchpad.net/ubuntu/+source/php7.2/7.2.24-0ubuntu0.18.04.11
Ubuntu Security Notice USN-5300-2
March 03, 2022
php7.2, php7.4 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
Summary:
Several security issues were fixed in PHP.
Software Description:
- php7.4: HTML-embedded scripting language interpreter
- php7.2: HTML-embedded scripting language interpreter
Details:
USN-5300-1 fixed vulnerabilities in PHP. This update provides the
corresponding updates for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
Original advisory details:
It was discovered that PHP incorrectly handled certain scripts.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2015-9253, CVE-2017-8923, CVE-2017-9118, CVE-2017-9120)
It was discovered that PHP incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a denial of service,
or possibly obtain sensitive information. (CVE-2017-9119)
It was discovered that PHP incorrectly handled certain scripts with XML
parsing functions.
An attacker could possibly use this issue to obtain sensitive information.
(CVE-2021-21707)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 20.04 LTS:
php7.4-cgi 7.4.3-4ubuntu2.10
php7.4-cli 7.4.3-4ubuntu2.10
php7.4-fpm 7.4.3-4ubuntu2.10
Ubuntu 18.04 LTS:
php7.2-cgi 7.2.24-0ubuntu0.18.04.11
php7.2-cli 7.2.24-0ubuntu0.18.04.11
php7.2-fpm 7.2.24-0ubuntu0.18.04.11
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5300-2
https://ubuntu.com/security/notices/USN-5300-1
CVE-2017-8923, CVE-2017-9118, CVE-2017-9119, CVE-2017-9120,
CVE-2021-21707
Package Information:
https://launchpad.net/ubuntu/+source/php7.4/7.4.3-4ubuntu2.10
https://launchpad.net/ubuntu/+source/php7.2/7.2.24-0ubuntu0.18.04.11
[USN-5312-1] HAProxy vulnerability
==========================================================================
Ubuntu Security Notice USN-5312-1
March 03, 2022
haproxy vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 21.10
- Ubuntu 20.04 LTS
Summary:
HAProxy could be made to stop responding if it received specially crafted
network traffic.
Software Description:
- haproxy: fast and reliable load balancing reverse proxy
Details:
It was discovered that HAProxy incorrectly handled certain headers. A
remote attacker could possibly use this issue to cause HAProxy to stop
responding, resulting in a denial of service.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 21.10:
haproxy 2.2.9-2ubuntu2.1
Ubuntu 20.04 LTS:
haproxy 2.0.13-2ubuntu0.5
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5312-1
CVE-2022-0711
Package Information:
https://launchpad.net/ubuntu/+source/haproxy/2.2.9-2ubuntu2.1
https://launchpad.net/ubuntu/+source/haproxy/2.0.13-2ubuntu0.5
Ubuntu Security Notice USN-5312-1
March 03, 2022
haproxy vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 21.10
- Ubuntu 20.04 LTS
Summary:
HAProxy could be made to stop responding if it received specially crafted
network traffic.
Software Description:
- haproxy: fast and reliable load balancing reverse proxy
Details:
It was discovered that HAProxy incorrectly handled certain headers. A
remote attacker could possibly use this issue to cause HAProxy to stop
responding, resulting in a denial of service.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 21.10:
haproxy 2.2.9-2ubuntu2.1
Ubuntu 20.04 LTS:
haproxy 2.0.13-2ubuntu0.5
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5312-1
CVE-2022-0711
Package Information:
https://launchpad.net/ubuntu/+source/haproxy/2.2.9-2ubuntu2.1
https://launchpad.net/ubuntu/+source/haproxy/2.0.13-2ubuntu0.5
Wednesday, March 2, 2022
[CentOS-announce] CESA-2022:0666 Important CentOS 7 cyrus-sasl Security Update
CentOS Errata and Security Advisory 2022:0666 Important
Upstream details at : https://access.redhat.com/errata/RHSA-2022:0666
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
x86_64:
5a07757ffcab76dc74eef1e1537c4ea823f723bae2c05ab1dd29679d95478db1 cyrus-sasl-2.1.26-24.el7_9.i686.rpm
8180d23815951b3c5be397846577728116502dad35bbc2dd67b7c4188244e465 cyrus-sasl-2.1.26-24.el7_9.x86_64.rpm
cf7edef3f54d6a2816515812d2f679ae21bbfb26767bf64e34b73d19a3bce3ae cyrus-sasl-devel-2.1.26-24.el7_9.i686.rpm
b2e43341cc469f66b5495139b62a419c0c671b19535efcdc79df055cc43686e5 cyrus-sasl-devel-2.1.26-24.el7_9.x86_64.rpm
46f713cd31041330e2739c5a644e4f598536096f3e39d6c667a6d044eaa87893 cyrus-sasl-gs2-2.1.26-24.el7_9.i686.rpm
da2b0ffc968803d239f38444842e6792e85494901ff8d0075652f6c2d7aa1800 cyrus-sasl-gs2-2.1.26-24.el7_9.x86_64.rpm
c75dd0b94b1e1300b04edfbfa5a3739573a6f83dc0737110d2f8cfedfc5ab7a2 cyrus-sasl-gssapi-2.1.26-24.el7_9.i686.rpm
816c816facf8421458376b99f244ef91c147063ed4f4955fd0e8dae62eccaeb8 cyrus-sasl-gssapi-2.1.26-24.el7_9.x86_64.rpm
46ac94286722fc2f6f68ec4c0e70152b3d1ff6fac6001d2155f8228d91126574 cyrus-sasl-ldap-2.1.26-24.el7_9.i686.rpm
4a53adae3dd3a8d933f2ec113b7303ce7d9c782edd612d17b8d3badf4c04167e cyrus-sasl-ldap-2.1.26-24.el7_9.x86_64.rpm
4579c7a7925097881dd33b28c72cce227a024a5f071fa4cd0c5bb09cd76d8ec0 cyrus-sasl-lib-2.1.26-24.el7_9.i686.rpm
e1d065bfaef705d407c6134352d1afc64ecf26a5970a0e5282f6dda745483db8 cyrus-sasl-lib-2.1.26-24.el7_9.x86_64.rpm
ffcf7016d990141a16d89aca74ebc89f797e93581bb8c97a08c83f5bf4ae47e4 cyrus-sasl-md5-2.1.26-24.el7_9.i686.rpm
c92bf980488dff6128c5564f2f75712ccb2a9a0f859f4667af435f967eef4c45 cyrus-sasl-md5-2.1.26-24.el7_9.x86_64.rpm
94d6c80d9b08af719fa8a5e007bf753a3f13406d99bcd8411d914c6115c3b571 cyrus-sasl-ntlm-2.1.26-24.el7_9.i686.rpm
995c318e872c57fa7ce17355320c34d3fdd0774343e691cc23d9e9215ad53931 cyrus-sasl-ntlm-2.1.26-24.el7_9.x86_64.rpm
5a42bda7621305ca3bcd588a0c84aac743aba372ea8ee558945564b62173e3f3 cyrus-sasl-plain-2.1.26-24.el7_9.i686.rpm
c960158be24b783ab7fb4a317899b83f806692c1e48426fe46c6bee909357ee5 cyrus-sasl-plain-2.1.26-24.el7_9.x86_64.rpm
925078e3fe326e7212b074bf495287d0fafc0395d9657b439a01b27d1539037e cyrus-sasl-scram-2.1.26-24.el7_9.i686.rpm
4fc0e17577976ecf2487198134b9f2656bdc36caf8e27c75efb6aff14204088e cyrus-sasl-scram-2.1.26-24.el7_9.x86_64.rpm
b1fa72dca82442418098746eaa9881ac7e92678c41e6786a458c28d77235fd5e cyrus-sasl-sql-2.1.26-24.el7_9.i686.rpm
9fc8f4ae81c019b16a882823948eff561fe0f6ad38be509f514a5c287a60d121 cyrus-sasl-sql-2.1.26-24.el7_9.x86_64.rpm
Source:
c49472bd08c6060f53a9dace005b81cf466836790d2dcb407a536820f6319e77 cyrus-sasl-2.1.26-24.el7_9.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos@libera.chat
Twitter: @JohnnyCentOS
_______________________________________________
CentOS-announce mailing list
CentOS-announce@centos.org
https://lists.centos.org/mailman/listinfo/centos-announce
Upstream details at : https://access.redhat.com/errata/RHSA-2022:0666
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
x86_64:
5a07757ffcab76dc74eef1e1537c4ea823f723bae2c05ab1dd29679d95478db1 cyrus-sasl-2.1.26-24.el7_9.i686.rpm
8180d23815951b3c5be397846577728116502dad35bbc2dd67b7c4188244e465 cyrus-sasl-2.1.26-24.el7_9.x86_64.rpm
cf7edef3f54d6a2816515812d2f679ae21bbfb26767bf64e34b73d19a3bce3ae cyrus-sasl-devel-2.1.26-24.el7_9.i686.rpm
b2e43341cc469f66b5495139b62a419c0c671b19535efcdc79df055cc43686e5 cyrus-sasl-devel-2.1.26-24.el7_9.x86_64.rpm
46f713cd31041330e2739c5a644e4f598536096f3e39d6c667a6d044eaa87893 cyrus-sasl-gs2-2.1.26-24.el7_9.i686.rpm
da2b0ffc968803d239f38444842e6792e85494901ff8d0075652f6c2d7aa1800 cyrus-sasl-gs2-2.1.26-24.el7_9.x86_64.rpm
c75dd0b94b1e1300b04edfbfa5a3739573a6f83dc0737110d2f8cfedfc5ab7a2 cyrus-sasl-gssapi-2.1.26-24.el7_9.i686.rpm
816c816facf8421458376b99f244ef91c147063ed4f4955fd0e8dae62eccaeb8 cyrus-sasl-gssapi-2.1.26-24.el7_9.x86_64.rpm
46ac94286722fc2f6f68ec4c0e70152b3d1ff6fac6001d2155f8228d91126574 cyrus-sasl-ldap-2.1.26-24.el7_9.i686.rpm
4a53adae3dd3a8d933f2ec113b7303ce7d9c782edd612d17b8d3badf4c04167e cyrus-sasl-ldap-2.1.26-24.el7_9.x86_64.rpm
4579c7a7925097881dd33b28c72cce227a024a5f071fa4cd0c5bb09cd76d8ec0 cyrus-sasl-lib-2.1.26-24.el7_9.i686.rpm
e1d065bfaef705d407c6134352d1afc64ecf26a5970a0e5282f6dda745483db8 cyrus-sasl-lib-2.1.26-24.el7_9.x86_64.rpm
ffcf7016d990141a16d89aca74ebc89f797e93581bb8c97a08c83f5bf4ae47e4 cyrus-sasl-md5-2.1.26-24.el7_9.i686.rpm
c92bf980488dff6128c5564f2f75712ccb2a9a0f859f4667af435f967eef4c45 cyrus-sasl-md5-2.1.26-24.el7_9.x86_64.rpm
94d6c80d9b08af719fa8a5e007bf753a3f13406d99bcd8411d914c6115c3b571 cyrus-sasl-ntlm-2.1.26-24.el7_9.i686.rpm
995c318e872c57fa7ce17355320c34d3fdd0774343e691cc23d9e9215ad53931 cyrus-sasl-ntlm-2.1.26-24.el7_9.x86_64.rpm
5a42bda7621305ca3bcd588a0c84aac743aba372ea8ee558945564b62173e3f3 cyrus-sasl-plain-2.1.26-24.el7_9.i686.rpm
c960158be24b783ab7fb4a317899b83f806692c1e48426fe46c6bee909357ee5 cyrus-sasl-plain-2.1.26-24.el7_9.x86_64.rpm
925078e3fe326e7212b074bf495287d0fafc0395d9657b439a01b27d1539037e cyrus-sasl-scram-2.1.26-24.el7_9.i686.rpm
4fc0e17577976ecf2487198134b9f2656bdc36caf8e27c75efb6aff14204088e cyrus-sasl-scram-2.1.26-24.el7_9.x86_64.rpm
b1fa72dca82442418098746eaa9881ac7e92678c41e6786a458c28d77235fd5e cyrus-sasl-sql-2.1.26-24.el7_9.i686.rpm
9fc8f4ae81c019b16a882823948eff561fe0f6ad38be509f514a5c287a60d121 cyrus-sasl-sql-2.1.26-24.el7_9.x86_64.rpm
Source:
c49472bd08c6060f53a9dace005b81cf466836790d2dcb407a536820f6319e77 cyrus-sasl-2.1.26-24.el7_9.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos@libera.chat
Twitter: @JohnnyCentOS
_______________________________________________
CentOS-announce mailing list
CentOS-announce@centos.org
https://lists.centos.org/mailman/listinfo/centos-announce
Fedora Linux 36 Beta Go/No-Go meeting next week
Hi everyone,
It's that time already! The Fedora Linux 36 Beta Go/No-Go[1] meeting
is scheduled for Thursday 10 March at 1700 UTC in #fedora-meeting. At
this time, we will determine the status of the F36 Beta for the 15
March early target date[2]. For more information about the Go/No-Go
meeting, see the wiki[3].
[1] https://calendar.fedoraproject.org/meeting/10209/
[2] https://fedorapeople.org/groups/schedule/f-36/f-36-key-tasks.html
[3] https://fedoraproject.org/wiki/Go_No_Go_Meeting
--
Ben Cotton
He / Him / His
Fedora Program Manager
Red Hat
TZ=America/Indiana/Indianapolis
_______________________________________________
devel-announce mailing list -- devel-announce@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
It's that time already! The Fedora Linux 36 Beta Go/No-Go[1] meeting
is scheduled for Thursday 10 March at 1700 UTC in #fedora-meeting. At
this time, we will determine the status of the F36 Beta for the 15
March early target date[2]. For more information about the Go/No-Go
meeting, see the wiki[3].
[1] https://calendar.fedoraproject.org/meeting/10209/
[2] https://fedorapeople.org/groups/schedule/f-36/f-36-key-tasks.html
[3] https://fedoraproject.org/wiki/Go_No_Go_Meeting
--
Ben Cotton
He / Him / His
Fedora Program Manager
Red Hat
TZ=America/Indiana/Indianapolis
_______________________________________________
devel-announce mailing list -- devel-announce@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Tuesday, March 1, 2022
[lfs-announce] LFS and BLFS Version 11.1 are released
The Linux From Scratch community is pleased to announce the release of LFS Version
11.1, LFS Version 11.1 (systemd), BLFS Version 11.1, and BLFS Version 11.1 (systemd).
This release is a major update to both LFS and BLFS.
The LFS release includes updates to glibc-2.35 and binutils-2.38. The Linux kernel
has also been updated to version 5.16.9. Changes to text have been made throughout
the books.
The BLFS version includes approximately 1000 packages beyond the base Linux From
Scratch Version 10.0 book. This release has over 900 updates from the previous
version in addition to numerous text and formatting changes.
Thanks for this release goes to many contributors. Notably:
Douglas Reno
Pierre Labastie
Xi Ruoyao
Thomas Trepl
Ken Moffat
Tim Tassonis
DJ Lucas
You can read the books online[0]-[3], or download[4]-[7] to read locally.
Please direct any comments about this release to the LFS development
team at lfs-dev@lists.linuxfromscratch.org or blfs-dev@lists.linuxfromscratch.org.
Registration for the mailing lists is required to avoid junk email.
-- Bruce Dubbs
LFS
[0] http://www.linuxfromscratch.org/lfs/view/11.1/
[1] http://www.linuxfromscratch.org/blfs/view/11.1/
[2] http://www.linuxfromscratch.org/lfs/view/11.1-systemd/
[3] http://www.linuxfromscratch.org/blfs/view/11.1-systemd/
[4] http://www.linuxfromscratch.org/lfs/downloads/11.1/
[5] http://www.linuxfromscratch.org/blfs/downloads/11.1/
[6] http://www.linuxfromscratch.org/lfs/downloads/11.1-systemd/
[7] http://www.linuxfromscratch.org/blfs/downloads/11.1-systemd/
11.1, LFS Version 11.1 (systemd), BLFS Version 11.1, and BLFS Version 11.1 (systemd).
This release is a major update to both LFS and BLFS.
The LFS release includes updates to glibc-2.35 and binutils-2.38. The Linux kernel
has also been updated to version 5.16.9. Changes to text have been made throughout
the books.
The BLFS version includes approximately 1000 packages beyond the base Linux From
Scratch Version 10.0 book. This release has over 900 updates from the previous
version in addition to numerous text and formatting changes.
Thanks for this release goes to many contributors. Notably:
Douglas Reno
Pierre Labastie
Xi Ruoyao
Thomas Trepl
Ken Moffat
Tim Tassonis
DJ Lucas
You can read the books online[0]-[3], or download[4]-[7] to read locally.
Please direct any comments about this release to the LFS development
team at lfs-dev@lists.linuxfromscratch.org or blfs-dev@lists.linuxfromscratch.org.
Registration for the mailing lists is required to avoid junk email.
-- Bruce Dubbs
LFS
[0] http://www.linuxfromscratch.org/lfs/view/11.1/
[1] http://www.linuxfromscratch.org/blfs/view/11.1/
[2] http://www.linuxfromscratch.org/lfs/view/11.1-systemd/
[3] http://www.linuxfromscratch.org/blfs/view/11.1-systemd/
[4] http://www.linuxfromscratch.org/lfs/downloads/11.1/
[5] http://www.linuxfromscratch.org/blfs/downloads/11.1/
[6] http://www.linuxfromscratch.org/lfs/downloads/11.1-systemd/
[7] http://www.linuxfromscratch.org/blfs/downloads/11.1-systemd/
[USN-5310-1] GNU C Library vulnerabilities
==========================================================================
Ubuntu Security Notice USN-5310-1
March 01, 2022
glibc vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 21.10
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
Summary:
Several security issues were fixed in GNU C Library.
Software Description:
- glibc: GNU C Library
Details:
Jan Engelhardt, Tavis Ormandy, and others discovered that the GNU C Library
iconv feature incorrectly handled certain input sequences. An attacker
could possibly use this issue to cause the GNU C Library to hang or crash,
resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS
and Ubuntu 20.04 LTS. (CVE-2016-10228, CVE-2019-25013, CVE-2020-27618,
CVE-2020-29562, CVE-2021-3326)
Jason Royes and Samuel Dytrych discovered that the GNU C Library
incorrectly handled signed comparisons on ARMv7 targets. A remote attacker
could use this issue to cause the GNU C Library to crash, resulting in a
denial of service, or possibly execute arbitrary code. This issue only
affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-6096)
It was discovered that the GNU C Library nscd daemon incorrectly handled
certain netgroup lookups. An attacker could possibly use this issue to
cause the GNU C Library to crash, resulting in a denial of service. This
issue only affected Ubuntu 20.04 LTS. (CVE-2021-27645)
It was discovered that the GNU C Library wordexp function incorrectly
handled certain patterns. An attacker could use this issue to cause the
GNU C Library to crash, resulting in a denial of service, or possibly
obtain sensitive information. This issue only affected Ubuntu 18.04 LTS and
Ubuntu 20.04 LTS. (CVE-2021-35942)
It was discovered that the GNU C Library realpath function incorrectly
handled return values. An attacker could possibly use this issue to obtain
sensitive information. This issue only affected Ubuntu 21.10.
(CVE-2021-3998)
It was discovered that the GNU C library getcwd function incorrectly
handled buffers. An attacker could use this issue to cause the GNU C
Library to crash, resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2021-3999)
It was discovered that the GNU C Library sunrpc module incorrectly handled
buffer lengths. An attacker could possibly use this issue to cause the GNU
C Library to crash, resulting in a denial of service. (CVE-2022-23218,
CVE-2022-23219)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 21.10:
libc6 2.34-0ubuntu3.2
Ubuntu 20.04 LTS:
libc6 2.31-0ubuntu9.7
Ubuntu 18.04 LTS:
libc6 2.27-3ubuntu1.5
After a standard system update you need to reboot your computer to make
all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5310-1
CVE-2016-10228, CVE-2019-25013, CVE-2020-27618, CVE-2020-29562,
CVE-2020-6096, CVE-2021-27645, CVE-2021-3326, CVE-2021-35942,
CVE-2021-3998, CVE-2021-3999, CVE-2022-23218, CVE-2022-23219
Package Information:
https://launchpad.net/ubuntu/+source/glibc/2.34-0ubuntu3.2
https://launchpad.net/ubuntu/+source/glibc/2.31-0ubuntu9.7
https://launchpad.net/ubuntu/+source/glibc/2.27-3ubuntu1.5
Ubuntu Security Notice USN-5310-1
March 01, 2022
glibc vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 21.10
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
Summary:
Several security issues were fixed in GNU C Library.
Software Description:
- glibc: GNU C Library
Details:
Jan Engelhardt, Tavis Ormandy, and others discovered that the GNU C Library
iconv feature incorrectly handled certain input sequences. An attacker
could possibly use this issue to cause the GNU C Library to hang or crash,
resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS
and Ubuntu 20.04 LTS. (CVE-2016-10228, CVE-2019-25013, CVE-2020-27618,
CVE-2020-29562, CVE-2021-3326)
Jason Royes and Samuel Dytrych discovered that the GNU C Library
incorrectly handled signed comparisons on ARMv7 targets. A remote attacker
could use this issue to cause the GNU C Library to crash, resulting in a
denial of service, or possibly execute arbitrary code. This issue only
affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-6096)
It was discovered that the GNU C Library nscd daemon incorrectly handled
certain netgroup lookups. An attacker could possibly use this issue to
cause the GNU C Library to crash, resulting in a denial of service. This
issue only affected Ubuntu 20.04 LTS. (CVE-2021-27645)
It was discovered that the GNU C Library wordexp function incorrectly
handled certain patterns. An attacker could use this issue to cause the
GNU C Library to crash, resulting in a denial of service, or possibly
obtain sensitive information. This issue only affected Ubuntu 18.04 LTS and
Ubuntu 20.04 LTS. (CVE-2021-35942)
It was discovered that the GNU C Library realpath function incorrectly
handled return values. An attacker could possibly use this issue to obtain
sensitive information. This issue only affected Ubuntu 21.10.
(CVE-2021-3998)
It was discovered that the GNU C library getcwd function incorrectly
handled buffers. An attacker could use this issue to cause the GNU C
Library to crash, resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2021-3999)
It was discovered that the GNU C Library sunrpc module incorrectly handled
buffer lengths. An attacker could possibly use this issue to cause the GNU
C Library to crash, resulting in a denial of service. (CVE-2022-23218,
CVE-2022-23219)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 21.10:
libc6 2.34-0ubuntu3.2
Ubuntu 20.04 LTS:
libc6 2.31-0ubuntu9.7
Ubuntu 18.04 LTS:
libc6 2.27-3ubuntu1.5
After a standard system update you need to reboot your computer to make
all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5310-1
CVE-2016-10228, CVE-2019-25013, CVE-2020-27618, CVE-2020-29562,
CVE-2020-6096, CVE-2021-27645, CVE-2021-3326, CVE-2021-35942,
CVE-2021-3998, CVE-2021-3999, CVE-2022-23218, CVE-2022-23219
Package Information:
https://launchpad.net/ubuntu/+source/glibc/2.34-0ubuntu3.2
https://launchpad.net/ubuntu/+source/glibc/2.31-0ubuntu9.7
https://launchpad.net/ubuntu/+source/glibc/2.27-3ubuntu1.5
Subscribe to:
Posts (Atom)