The updated packages fix security vulnerabilities: Excessive time spent in DH check / generation with large Q parameter value. (CVE-2023-5678) POLY1305 MAC implementation corrupts vector registers on PowerPC. (CVE-2023-6129) . MGASA-2024-0036 - Updated quictls packages fix security vulnerabilities Publication date: 14 Feb 2024 URL: https://advisories.mageia.org/MGASA-2024-0036.html Type: security Affected Mageia releases: 9 CVE: CVE-2023-5678, CVE-2023-6129, CVE-2023-6237, CVE-2024-0727 The updated packages fix security vulnerabilities: Excessive time spent in DH check / generation with large Q parameter value. (CVE-2023-5678) POLY1305 MAC implementation corrupts vector registers on PowerPC. (CVE-2023-6129) Excessive time spent checking invalid RSA public keys. (CVE-2023-6237) PKCS12 Decoding crashes. (CVE-2024-0727) References: - https://bugs.mageia.org/show_bug.cgi?id=32794 - https://bugs.mageia.org/show_bug.cgi?id=32498 - https://openssl-library.org/news/secadv/20231106.txt - https://openssl-library.org/news/secadv/20240109.txt - https://openssl-library.org/news/secadv/20240115.txt - https://openssl-library.org/news/secadv/20240125.txt - https://www.cve.org/CVERecord?id=CVE-2023-5678 - https://www.cve.org/CVERecord?id=CVE-2023-6129 - https://www.cve.org/CVERecord?id=CVE-2023-6237 - https://www.cve.org/CVERecord?id=CVE-2024-0727 SRPMS: - 9/core/quictls-3.0.12-1.1.mga9 . Recent updates to quictls packages tackle vulnerabilities that lead to prolonged computation durations and problems with vector registers on PowerPC architectures.. Mageia Security Update, Quictls Fix, PowerPC Advisory. . Severity: Critical. LinuxSecurity.com Team
This update fixes a small buffer overflow that causes crashes on vt switches on powerpc.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2006-297 2006-04-13 ---------------------------------------------------------------------Product : Fedora Core 5 Name : xorg-x11-server Version : 1.0.1 Release : 9.fc5 Summary : X.Org X11 X server Description : X.Org X11 X server ---------------------------------------------------------------------Update Information: This update fixes a small buffer overflow that causes crashes on vt switches on powerpc. ---------------------------------------------------------------------* Sun Apr 9 2006 Ray Strode - 1.0.1-9.fc5 - Fix small overflow that causes crash on vt switch on ppc. Patch by David Woodhouse (bug 187083). ---------------------------------------------------------------------This update can be downloaded from: fbd32e6d1614398bae4f2843e815414750eea1e3 SRPMS/xorg-x11-server-1.0.1-9.fc5.src.rpm 1afb53923a8b3888151a5b477d188c32f3c4cff9 ppc/xorg-x11-server-Xorg-1.0.1-9.fc5.ppc.rpm ec945ca1ef375fcbe998a832bf3c1ce59761aa25 ppc/xorg-x11-server-Xnest-1.0.1-9.fc5.ppc.rpm f0f31a93b058fc340c54d7365bc60490baae505a ppc/xorg-x11-server-Xdmx-1.0.1-9.fc5.ppc.rpm 46f1d3f2535cc889b74bb9715b8d87b4578c1493 ppc/xorg-x11-server-Xvfb-1.0.1-9.fc5.ppc.rpm ba87a3e59fffeb7f97f8905465bd157b81e1fff9 ppc/xorg-x11-server-sdk-1.0.1-9.fc5.ppc.rpm 927817d0f9ff0848d63d29ceebadf09f1bb96043 ppc/debug/xorg-x11-server-debuginfo-1.0.1-9.fc5.ppc.rpm 3ace0e18373f43615cd144c3b30f55ab0af63730 x86_64/xorg-x11-server-Xorg-1.0.1-9.fc5.x86_64.rpm 78be2c943844b91a05951146fc65821f90a50c68 x86_64/xorg-x11-server-Xnest-1.0.1-9.fc5.x86_64.rpm e47d7f692077cbf9ef5c09590e0612afa071205d x86_64/xorg-x11-server-Xdmx-1.0.1-9.fc5.x86_64.rpm 581277e126d410f5f0bf1ae75f0c6174f46ae33e x86_64/xorg-x11-server-Xvfb-1.0.1-9.fc5.x86_64.rpm 9e2c43767c36759a0eed1fe5caefac9371d4736c x86_64/xorg-x11-server-sdk-1.0.1-9.fc5.x86_64.rpm e1dc18fa309b7120be7982acce7ada62f34c6e25 x86_64/debug/xorg-x11-server-debuginfo-1.0.1-9.fc5.x86_64.rpm 0583f35a6ec525ab9f0fde9278415376fb3a6d2c i386/xorg-x11-server-Xorg-1.0.1-9.fc5.i386.rpm c664d97673fd620b88269c3c6394dabf818efb4c i386/xorg-x11-server-Xnest-1.0.1-9.fc5.i386.rpm 9f0c8c150f7bf35b0689c91c2507d333ef89041a i386/xorg-x11-server-Xdmx-1.0.1-9.fc5.i386.rpm 0d4340119097eebb6ee6ca8cc6f4aa016b132859 i386/xorg-x11-server-Xvfb-1.0.1-9.fc5.i386.rpm 38d068fbf6e69af806dcec0dcae2589600311aa0 i386/xorg-x11-server-sdk-1.0.1-9.fc5.i386.rpm eceac5dfc885126dd599366538a9fb8ffafe5416 i386/debug/xorg-x11-server-debuginfo-1.0.1-9.fc5.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at . ----------------------------------------------------------------------- fedora-announce-list mailing list
This patch corrects a root exploit specifically for the 2.2.x kernel on the PowerPC platform.. Debian Security Advisory DSA 466-1
The most recent advisory covering sudo missed one architecture that was released with 2.2. Therefore this advisory is only an addition to DSA 031-1 and only adds the relevant package for the powerpc architecture.. ---------------------------------------------------------------------------- Debian Security Advisory DSA-031-2
Get the latest Linux and open source security news straight to your inbox.