NVD Description

Note: Versions mentioned in the description apply only to the upstream apparmor package and not the apparmor package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

In all versions of AppArmor mount rules are accidentally widened when compiled.

Remediation

There is no fixed version for Ubuntu:16.04 apparmor.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-1585
• https://security-tracker.debian.org/tracker/CVE-2016-1585
• https://bugs.launchpad.net/apparmor/+bug/1597017
• https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
• https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E

NVD Description

Note: Versions mentioned in the description apply only to the upstream curl package and not the curl package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

When doing HTTP(S) transfers, libcurl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent POST request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.

Remediation

Upgrade Ubuntu:16.04 curl to version 7.47.0-1ubuntu2.19+esm6 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-32221
• https://hackerone.com/reports/1704017
• https://security.gentoo.org/glsa/202212-01
• https://security.netapp.com/advisory/ntap-20230110-0006/
• https://support.apple.com/kb/HT213604
• https://support.apple.com/kb/HT213605
• http://seclists.org/fulldisclosure/2023/Jan/20
• http://seclists.org/fulldisclosure/2023/Jan/19
• https://www.debian.org/security/2023/dsa-5330
• https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
• https://security.netapp.com/advisory/ntap-20230208-0002/
• http://www.openwall.com/lists/oss-security/2023/05/17/4

NVD Description

Note: Versions mentioned in the description apply only to the upstream dpkg package and not the dpkg package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.

Remediation

Upgrade Ubuntu:16.04 dpkg to version 1.18.4ubuntu1.7+esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-1664
• https://lists.debian.org/debian-security-announce/2022/msg00115.html
• https://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=faa4c92debe45412bfcf8a44f26e827800bb24be
• https://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=7a6c03cb34d4a09f35df2f10779cbf1b70a5200b
• https://lists.debian.org/debian-lts-announce/2022/05/msg00033.html
• https://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=58814cacee39c4ce9e2cd0e3a3b9b57ad437eff5
• https://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=1f23dddc17f69c9598477098c7fb9936e15fa495
• https://security.netapp.com/advisory/ntap-20221007-0002/

NVD Description

Note: Versions mentioned in the description apply only to the upstream expat package and not the expat package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

Remediation

Upgrade Ubuntu:16.04 expat to version 2.1.0-7ubuntu0.16.04.5+esm2 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-22824
• https://github.com/libexpat/libexpat/pull/539
• http://www.openwall.com/lists/oss-security/2022/01/17/3
• https://www.tenable.com/security/tns-2022-05
• https://www.debian.org/security/2022/dsa-5073
• https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
• https://security.gentoo.org/glsa/202209-24

NVD Description

Note: Versions mentioned in the description apply only to the upstream expat package and not the expat package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

Remediation

Upgrade Ubuntu:16.04 expat to version 2.1.0-7ubuntu0.16.04.5+esm2 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-22823
• https://github.com/libexpat/libexpat/pull/539
• http://www.openwall.com/lists/oss-security/2022/01/17/3
• https://www.tenable.com/security/tns-2022-05
• https://www.debian.org/security/2022/dsa-5073
• https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
• https://security.gentoo.org/glsa/202209-24

NVD Description

Note: Versions mentioned in the description apply only to the upstream expat package and not the expat package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

Remediation

Upgrade Ubuntu:16.04 expat to version 2.1.0-7ubuntu0.16.04.5+esm2 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-22822
• https://github.com/libexpat/libexpat/pull/539
• http://www.openwall.com/lists/oss-security/2022/01/17/3
• https://www.tenable.com/security/tns-2022-05
• https://www.debian.org/security/2022/dsa-5073
• https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
• https://security.gentoo.org/glsa/202209-24

NVD Description

Note: Versions mentioned in the description apply only to the upstream expat package and not the expat package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.

Remediation

Upgrade Ubuntu:16.04 expat to version 2.1.0-7ubuntu0.16.04.5+esm2 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-23852
• https://github.com/libexpat/libexpat/pull/550
• https://www.tenable.com/security/tns-2022-05
• https://www.debian.org/security/2022/dsa-5073
• https://security.netapp.com/advisory/ntap-20220217-0001/
• https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html
• https://www.oracle.com/security-alerts/cpuapr2022.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
• https://security.gentoo.org/glsa/202209-24

NVD Description

Note: Versions mentioned in the description apply only to the upstream expat package and not the expat package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.

Remediation

Upgrade Ubuntu:16.04 expat to version 2.1.0-7ubuntu0.16.04.5+esm5 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-25315
• https://github.com/libexpat/libexpat/pull/559
• http://www.openwall.com/lists/oss-security/2022/02/19/1
• https://www.debian.org/security/2022/dsa-5085
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/
• https://security.netapp.com/advisory/ntap-20220303-0008/
• https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html
• https://www.oracle.com/security-alerts/cpuapr2022.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
• https://security.gentoo.org/glsa/202209-24
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/

NVD Description

Note: Versions mentioned in the description apply only to the upstream git package and not the git package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

Git is distributed revision control system. git log can display commits in an arbitrary format using its --format specifiers. This functionality is also exposed to git archive via the export-subst gitattribute. When processing the padding operators, there is a integer overflow in pretty.c::format_and_pad_commit() where a size_t is stored improperly as an int, and then added as an offset to a memcpy(). This overflow can be triggered directly by a user running a command which invokes the commit formatting machinery (e.g., git log --format=...). It may also be triggered indirectly through git archive via the export-subst mechanism, which expands format specifiers inside of files within the repository during a git archive. This integer overflow can result in arbitrary heap writes, which may result in arbitrary code execution. The problem has been patched in the versions published on 2023-01-17, going back to v2.30.7. Users are advised to upgrade. Users who are unable to upgrade should disable git archive in untrusted repositories. If you expose git archive via git daemon, disable it by running git config --global daemon.uploadArch false.

Remediation

Upgrade Ubuntu:16.04 git to version 1:2.7.4-0ubuntu1.10+esm4 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-41903
• https://github.com/git/git/security/advisories/GHSA-475x-2q3q-hvwq
• https://github.com/git/git/commit/508386c6c5857b4faa2c3e491f422c98cc69ae76
• https://git-scm.com/book/en/v2/Customizing-Git-Git-Attributes#_export_subst
• https://git-scm.com/docs/pretty-formats#Documentation/pretty-formats.txt-emltltNgttruncltruncmtruncem
• https://security.gentoo.org/glsa/202312-15

NVD Description

Note: Versions mentioned in the description apply only to the upstream git package and not the git package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a .gitattributes file to the repository, which contains a set of file patterns and the attributes that should be set for paths matching this pattern. When parsing gitattributes, multiple integer overflows can occur when there is a huge number of path patterns, a huge number of attributes for a single pattern, or when the declared attribute names are huge. These overflows can be triggered via a crafted .gitattributes file that may be part of the commit history. Git silently splits lines longer than 2KB when parsing gitattributes from a file, but not when parsing them from the index. Consequentially, the failure mode depends on whether the file exists in the working tree, the index or both. This integer overflow can result in arbitrary heap reads and writes, which may result in remote code execution. The problem has been patched in the versions published on 2023-01-17, going back to v2.30.7. Users are advised to upgrade. There are no known workarounds for this issue.

Remediation

Upgrade Ubuntu:16.04 git to version 1:2.7.4-0ubuntu1.10+esm4 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-23521
• https://github.com/git/git/security/advisories/GHSA-c738-c5qq-xg89
• https://github.com/git/git/commit/508386c6c5857b4faa2c3e491f422c98cc69ae76
• https://security.gentoo.org/glsa/202312-15

NVD Description

Note: Versions mentioned in the description apply only to the upstream heimdal package and not the heimdal package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center (KDC).

Remediation

Upgrade Ubuntu:16.04 heimdal to version 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-44640
• https://github.com/heimdal/heimdal/security/advisories/GHSA-88pm-hfmq-7vv4
• https://security.netapp.com/advisory/ntap-20230216-0008/
• https://security.gentoo.org/glsa/202310-06

NVD Description

Note: Versions mentioned in the description apply only to the upstream libwebp package and not the libwebp package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Remediation

Upgrade Ubuntu:16.04 libwebp to version 0.4.4-1ubuntu0.1~esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2020-36328
• https://support.apple.com/kb/HT212601
• https://www.debian.org/security/2021/dsa-4930
• https://bugzilla.redhat.com/show_bug.cgi?id=1956829
• https://lists.debian.org/debian-lts-announce/2021/06/msg00005.html
• https://lists.debian.org/debian-lts-announce/2021/06/msg00006.html
• http://seclists.org/fulldisclosure/2021/Jul/54
• https://security.netapp.com/advisory/ntap-20211112-0001/

NVD Description

Note: Versions mentioned in the description apply only to the upstream libwebp package and not the libwebp package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().

Remediation

Upgrade Ubuntu:16.04 libwebp to version 0.4.4-1ubuntu0.1~esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2018-25011
• https://support.apple.com/kb/HT212601
• https://www.debian.org/security/2021/dsa-4930
• https://bugzilla.redhat.com/show_bug.cgi?id=1956919
• https://lists.debian.org/debian-lts-announce/2021/06/msg00005.html
• https://lists.debian.org/debian-lts-announce/2021/06/msg00006.html
• http://seclists.org/fulldisclosure/2021/Jul/54
• https://security.netapp.com/advisory/ntap-20211104-0004/
• https://chromium.googlesource.com/webm/libwebp/+/v1.0.1
• https://chromium.googlesource.com/webm/libwebp/+log/be738c6d396fa5a272c1b209be4379a7532debfe..29fb8562c60b5a919a75d904ff7366af423f8ab9?pretty=fuller&n=10000
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9119

NVD Description

Note: Versions mentioned in the description apply only to the upstream libwebp package and not the libwebp package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Remediation

Upgrade Ubuntu:16.04 libwebp to version 0.4.4-1ubuntu0.1~esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2020-36329
• https://support.apple.com/kb/HT212601
• https://www.debian.org/security/2021/dsa-4930
• https://bugzilla.redhat.com/show_bug.cgi?id=1956843
• https://lists.debian.org/debian-lts-announce/2021/06/msg00005.html
• https://lists.debian.org/debian-lts-announce/2021/06/msg00006.html
• http://seclists.org/fulldisclosure/2021/Jul/54
• https://security.netapp.com/advisory/ntap-20211112-0001/

NVD Description

Note: Versions mentioned in the description apply only to the upstream libwebp package and not the libwebp package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().

Remediation

Upgrade Ubuntu:16.04 libwebp to version 0.4.4-1ubuntu0.1~esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2018-25014
• https://support.apple.com/kb/HT212601
• https://www.debian.org/security/2021/dsa-4930
• https://bugzilla.redhat.com/show_bug.cgi?id=1956927
• https://lists.debian.org/debian-lts-announce/2021/06/msg00005.html
• https://lists.debian.org/debian-lts-announce/2021/06/msg00006.html
• http://seclists.org/fulldisclosure/2021/Jul/54
• https://security.netapp.com/advisory/ntap-20211104-0004/
• https://chromium.googlesource.com/webm/libwebp/+log/78ad57a36ad69a9c22874b182d49d64125c380f2..907208f97ead639bd52
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9496

NVD Description

Note: Versions mentioned in the description apply only to the upstream libx11 package and not the libx11 package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code. The libX11 XLookupColor request (intended for server-side color lookup) contains a flaw allowing a client to send color-name requests with a name longer than the maximum size allowed by the protocol (and also longer than the maximum packet size for normal-sized packets). The user-controlled data exceeding the maximum size is then interpreted by the server as additional X protocol requests and executed, e.g., to disable X server authorization completely. For example, if the victim encounters malicious terminal control sequences for color codes, then the attacker may be able to take full control of the running graphical session.

Remediation

Upgrade Ubuntu:16.04 libx11 to version 2:1.6.3-1ubuntu2.2+esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2021-31535
• https://security.netapp.com/advisory/ntap-20210813-0001/
• https://www.debian.org/security/2021/dsa-4920
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TEOT4RLB76RVPJQKGGTIKTBIOLHX2NR6/
• http://seclists.org/fulldisclosure/2021/May/52
• https://security.gentoo.org/glsa/202105-16
• http://packetstormsecurity.com/files/162737/libX11-Insufficient-Length-Check-Injection.html
• https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/8d2e02ae650f00c4a53deb625211a0527126c605
• https://lists.freedesktop.org/archives/xorg/
• https://lists.x.org/archives/xorg-announce/2021-May/003088.html
• https://unparalleled.eu/blog/2021/20210518-using-xterm-to-navigate-the-huge-color-space/
• https://unparalleled.eu/publications/2021/advisory-unpar-2021-1.txt
• https://www.openwall.com/lists/oss-security/2021/05/18/2
• https://www.openwall.com/lists/oss-security/2021/05/18/3
• https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc@%3Cdev.kafka.apache.org%3E
• https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc@%3Cusers.kafka.apache.org%3E
• https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7@%3Cdev.kafka.apache.org%3E
• https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7@%3Cusers.kafka.apache.org%3E
• https://lists.debian.org/debian-lts-announce/2021/05/msg00021.html
• http://www.openwall.com/lists/oss-security/2021/05/18/2
• https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E
• https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E
• https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E
• https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEOT4RLB76RVPJQKGGTIKTBIOLHX2NR6/

NVD Description

Note: Versions mentioned in the description apply only to the upstream lz4 package and not the lz4 package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove() on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability, with some potential impact to confidentiality and integrity as well.

Remediation

Upgrade Ubuntu:16.04 lz4 to version 0.0~r131-2ubuntu2+esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2021-3520
• https://bugzilla.redhat.com/show_bug.cgi?id=1954559
• https://www.oracle.com/security-alerts/cpuoct2021.html
• https://www.oracle.com//security-alerts/cpujul2021.html
• https://security.netapp.com/advisory/ntap-20211104-0005/
• https://www.oracle.com/security-alerts/cpuapr2022.html
• https://access.redhat.com/errata/RHBA-2021:2854
• https://access.redhat.com/errata/RHSA-2021:2575
• https://access.redhat.com/errata/RHSA-2022:1345
• https://access.redhat.com/errata/RHSA-2022:5606
• https://access.redhat.com/errata/RHSA-2022:6407
• https://access.redhat.com/security/cve/CVE-2021-3520

NVD Description

Note: Versions mentioned in the description apply only to the upstream openldap package and not the openldap package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.

Remediation

Upgrade Ubuntu:16.04 openldap to version 2.4.42+dfsg-2ubuntu3.13+esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-29155
• https://bugs.openldap.org/show_bug.cgi?id=9815
• https://www.debian.org/security/2022/dsa-5140
• https://lists.debian.org/debian-lts-announce/2022/05/msg00032.html
• https://security.netapp.com/advisory/ntap-20220609-0007/

NVD Description

Note: Versions mentioned in the description apply only to the upstream openssh package and not the openssh package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.

Remediation

Upgrade Ubuntu:16.04 openssh to version 1:7.2p2-4ubuntu2.10+esm3 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-38408
• https://blog.qualys.com/vulnerabilities-threat-research/2023/07/19/cve-2023-38408-remote-code-execution-in-opensshs-forwarded-ssh-agent
• https://github.com/openbsd/src/commit/7bc29a9d5cd697290aa056e94ecee6253d3425f8
• https://github.com/openbsd/src/commit/f03a4faa55c4ce0818324701dadbf91988d7351d
• https://github.com/openbsd/src/commit/f8f5a6b003981bb824329dc987d101977beda7ca
• https://news.ycombinator.com/item?id=36790196
• https://www.openssh.com/security.html
• https://www.openssh.com/txt/release-9.3p2
• https://www.qualys.com/2023/07/19/cve-2023-38408/rce-openssh-forwarded-ssh-agent.txt
• https://security.gentoo.org/glsa/202307-01
• http://www.openwall.com/lists/oss-security/2023/07/20/1
• http://www.openwall.com/lists/oss-security/2023/07/20/2
• http://packetstormsecurity.com/files/173661/OpenSSH-Forwarded-SSH-Agent-Remote-Code-Execution.html
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RAXVQS6ZYTULFAK3TEJHRLKZALJS3AOU/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CEBTJJINE2I3FHAUKKNQWMFGYMLSMWKQ/
• https://security.netapp.com/advisory/ntap-20230803-0010/
• https://lists.debian.org/debian-lts-announce/2023/08/msg00021.html
• http://www.openwall.com/lists/oss-security/2023/09/22/9
• http://www.openwall.com/lists/oss-security/2023/09/22/11
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CEBTJJINE2I3FHAUKKNQWMFGYMLSMWKQ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RAXVQS6ZYTULFAK3TEJHRLKZALJS3AOU/
• https://support.apple.com/kb/HT213940
• https://www.vicarius.io/vsociety/posts/exploring-opensshs-agent-forwarding-rce-cve-2023-38408

NVD Description

Note: Versions mentioned in the description apply only to the upstream openssl package and not the openssl package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).

Remediation

Upgrade Ubuntu:16.04 openssl to version 1.0.2g-1ubuntu4.20+esm3 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-1292
• https://www.openssl.org/news/secadv/20220503.txt
• https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2
• https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23
• https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=548d3f280a6e737673f5b61fce24bb100108dfeb
• https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html
• https://www.debian.org/security/2022/dsa-5139
• https://security.netapp.com/advisory/ntap-20220602-0009/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD/
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011
• https://www.oracle.com/security-alerts/cpujul2022.html
• https://security.netapp.com/advisory/ntap-20220729-0004/
• https://security.gentoo.org/glsa/202210-02
• https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf
• https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2
• https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb
• https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD/

NVD Description

Note: Versions mentioned in the description apply only to the upstream openssl package and not the openssl package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).

Remediation

Upgrade Ubuntu:16.04 openssl to version 1.0.2g-1ubuntu4.20+esm5 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-2068
• https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9639817dac8bbbaa64d09efad7464ccc405527c7
• https://www.openssl.org/news/secadv/20220621.txt
• https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9
• https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c9c35870601b4a44d86ddbf512b38df38285cfa
• https://www.debian.org/security/2022/dsa-5169
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6WZZBKUHQFGSKGNXXKICSRPL7AMVW5M5/
• https://security.netapp.com/advisory/ntap-20220707-0008/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/
• https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf
• https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2c9c35870601b4a44d86ddbf512b38df38285cfa
• https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9
• https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9639817dac8bbbaa64d09efad7464ccc405527c7
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WZZBKUHQFGSKGNXXKICSRPL7AMVW5M5/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/

NVD Description

Note: Versions mentioned in the description apply only to the upstream python2.7 package and not the python2.7 package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.

Remediation

Upgrade Ubuntu:16.04 python2.7 to version 2.7.12-1ubuntu0~16.04.18+esm6 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-48565
• https://bugs.python.org/issue42051
• https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html
• https://security.netapp.com/advisory/ntap-20231006-0007/
• https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AFHYAGWBFBNUGWU6XWKBHTCV5NH77MB7/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KZRZRJHWLZ7MOJNPQBWGJVXMVYDC5BRA/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BAYWJD576JUKLHCWKDLMJSUGTRDKPF3M/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFHYAGWBFBNUGWU6XWKBHTCV5NH77MB7/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BAYWJD576JUKLHCWKDLMJSUGTRDKPF3M/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KZRZRJHWLZ7MOJNPQBWGJVXMVYDC5BRA/

NVD Description

Note: Versions mentioned in the description apply only to the upstream zlib package and not the zlib package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).

Remediation

Upgrade Ubuntu:16.04 zlib to version 1:1.2.8.dfsg-2ubuntu4.3+esm2 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-37434
• https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764
• https://github.com/ivd38/zlib_overflow
• https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1
• https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063
• http://www.openwall.com/lists/oss-security/2022/08/05/2
• https://github.com/curl/curl/issues/9271
• http://www.openwall.com/lists/oss-security/2022/08/09/1
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/
• https://www.debian.org/security/2022/dsa-5218
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/
• https://security.netapp.com/advisory/ntap-20220901-0005/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/
• https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/
• https://support.apple.com/kb/HT213490
• https://support.apple.com/kb/HT213493
• https://support.apple.com/kb/HT213494
• https://support.apple.com/kb/HT213491
• https://support.apple.com/kb/HT213488
• https://support.apple.com/kb/HT213489
• http://seclists.org/fulldisclosure/2022/Oct/41
• http://seclists.org/fulldisclosure/2022/Oct/37
• http://seclists.org/fulldisclosure/2022/Oct/38
• http://seclists.org/fulldisclosure/2022/Oct/42
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/
• https://security.netapp.com/advisory/ntap-20230427-0007/

NVD Description

Note: Versions mentioned in the description apply only to the upstream libwebp package and not the libwebp package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability.

Remediation

Upgrade Ubuntu:16.04 libwebp to version 0.4.4-1ubuntu0.1~esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2020-36331
• https://support.apple.com/kb/HT212601
• https://www.debian.org/security/2021/dsa-4930
• https://bugzilla.redhat.com/show_bug.cgi?id=1956856
• https://lists.debian.org/debian-lts-announce/2021/06/msg00005.html
• https://lists.debian.org/debian-lts-announce/2021/06/msg00006.html
• http://seclists.org/fulldisclosure/2021/Jul/54
• https://security.netapp.com/advisory/ntap-20211112-0001/

NVD Description

Note: Versions mentioned in the description apply only to the upstream libwebp package and not the libwebp package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability.

Remediation

Upgrade Ubuntu:16.04 libwebp to version 0.4.4-1ubuntu0.1~esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2020-36330
• https://support.apple.com/kb/HT212601
• https://www.debian.org/security/2021/dsa-4930
• https://bugzilla.redhat.com/show_bug.cgi?id=1956853
• https://lists.debian.org/debian-lts-announce/2021/06/msg00005.html
• https://lists.debian.org/debian-lts-announce/2021/06/msg00006.html
• http://seclists.org/fulldisclosure/2021/Jul/54
• https://security.netapp.com/advisory/ntap-20211104-0004/

NVD Description

Note: Versions mentioned in the description apply only to the upstream libwebp package and not the libwebp package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().

Remediation

Upgrade Ubuntu:16.04 libwebp to version 0.4.4-1ubuntu0.1~esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2018-25009
• https://www.debian.org/security/2021/dsa-4930
• https://bugzilla.redhat.com/show_bug.cgi?id=1956917
• https://lists.debian.org/debian-lts-announce/2021/06/msg00005.html
• https://lists.debian.org/debian-lts-announce/2021/06/msg00006.html
• https://security.netapp.com/advisory/ntap-20211104-0004/
• https://chromium.googlesource.com/webm/libwebp/+/95fd65070662e01cc9170c4444f5c0859a710097
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9100

NVD Description

Note: Versions mentioned in the description apply only to the upstream libwebp package and not the libwebp package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter().

Remediation

Upgrade Ubuntu:16.04 libwebp to version 0.4.4-1ubuntu0.1~esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2018-25010
• https://support.apple.com/kb/HT212601
• https://www.debian.org/security/2021/dsa-4930
• https://bugzilla.redhat.com/show_bug.cgi?id=1956918
• https://lists.debian.org/debian-lts-announce/2021/06/msg00005.html
• https://lists.debian.org/debian-lts-announce/2021/06/msg00006.html
• http://seclists.org/fulldisclosure/2021/Jul/54
• https://security.netapp.com/advisory/ntap-20211112-0001/
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9105
• https://chromium.googlesource.com/webm/libwebp/+/1344a2e947c749d231141a295327e5b99b444d63

NVD Description

Note: Versions mentioned in the description apply only to the upstream libwebp package and not the libwebp package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().

Remediation

Upgrade Ubuntu:16.04 libwebp to version 0.4.4-1ubuntu0.1~esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2018-25013
• https://www.debian.org/security/2021/dsa-4930
• https://bugzilla.redhat.com/show_bug.cgi?id=1956926
• https://lists.debian.org/debian-lts-announce/2021/06/msg00005.html
• https://lists.debian.org/debian-lts-announce/2021/06/msg00006.html
• https://security.netapp.com/advisory/ntap-20211112-0001/
• https://chromium.googlesource.com/webm/libwebp/+/907208f97ead639bd521cf355a2f203f462eade6
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9417

NVD Description

Note: Versions mentioned in the description apply only to the upstream libwebp package and not the libwebp package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().

Remediation

Upgrade Ubuntu:16.04 libwebp to version 0.4.4-1ubuntu0.1~esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2018-25012
• https://bugzilla.redhat.com/show_bug.cgi?id=1956922
• https://lists.debian.org/debian-lts-announce/2021/06/msg00005.html
• https://lists.debian.org/debian-lts-announce/2021/06/msg00006.html
• https://security.netapp.com/advisory/ntap-20211112-0001/
• https://chromium.googlesource.com/webm/libwebp/+/95fd65070662e01cc9170c4444f5c0859a710097
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9123

NVD Description

Note: Versions mentioned in the description apply only to the upstream mercurial package and not the mercurial package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a malformed manifest entry.

Remediation

There is no fixed version for Ubuntu:16.04 mercurial.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2018-17983
• https://security-tracker.debian.org/tracker/CVE-2018-17983
• https://www.mercurial-scm.org/repo/hg/rev/5405cb1a7901
• https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.7.2_.282018-10-01.29

NVD Description

Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service.

Remediation

Upgrade Ubuntu:16.04 binutils to version 2.26.1-1ubuntu1~16.04.8+esm7 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2020-19726
• https://sourceware.org/bugzilla/show_bug.cgi?id=26240
• https://sourceware.org/bugzilla/show_bug.cgi?id=26241

NVD Description

Note: Versions mentioned in the description apply only to the upstream expat package and not the expat package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

Remediation

Upgrade Ubuntu:16.04 expat to version 2.1.0-7ubuntu0.16.04.5+esm2 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-22827
• https://github.com/libexpat/libexpat/pull/539
• http://www.openwall.com/lists/oss-security/2022/01/17/3
• https://www.tenable.com/security/tns-2022-05
• https://www.debian.org/security/2022/dsa-5073
• https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
• https://security.gentoo.org/glsa/202209-24

NVD Description

Note: Versions mentioned in the description apply only to the upstream expat package and not the expat package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

Remediation

Upgrade Ubuntu:16.04 expat to version 2.1.0-7ubuntu0.16.04.5+esm2 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-22826
• https://github.com/libexpat/libexpat/pull/539
• http://www.openwall.com/lists/oss-security/2022/01/17/3
• https://www.tenable.com/security/tns-2022-05
• https://www.debian.org/security/2022/dsa-5073
• https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
• https://security.gentoo.org/glsa/202209-24

NVD Description

Note: Versions mentioned in the description apply only to the upstream expat package and not the expat package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

Remediation

Upgrade Ubuntu:16.04 expat to version 2.1.0-7ubuntu0.16.04.5+esm2 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-22825
• https://github.com/libexpat/libexpat/pull/539
• http://www.openwall.com/lists/oss-security/2022/01/17/3
• https://www.tenable.com/security/tns-2022-05
• https://www.debian.org/security/2022/dsa-5073
• https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
• https://security.gentoo.org/glsa/202209-24

NVD Description

Note: Versions mentioned in the description apply only to the upstream git package and not the git package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

Git is an open source, scalable, distributed revision control system. git shell is a restricted login shell that can be used to implement Git's push/pull functionality via SSH. In versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4, the function that splits the command arguments into an array improperly uses an int to represent the number of entries in the array, allowing a malicious actor to intentionally overflow the return value, leading to arbitrary heap writes. Because the resulting array is then passed to execv(), it is possible to leverage this attack to gain remote code execution on a victim machine. Note that a victim must first allow access to git shell as a login shell in order to be vulnerable to this attack. This problem is patched in versions 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 and users are advised to upgrade to the latest version. Disabling git shell access via remote logins is a viable short-term workaround.

Remediation

Upgrade Ubuntu:16.04 git to version 1:2.7.4-0ubuntu1.10+esm3 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-39260
• https://github.com/git/git/security/advisories/GHSA-rjr6-wcq6-83p6
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UKFHE4KVD7EKS5J3KTDFVBEKU3CLXGVV/
• https://support.apple.com/kb/HT213496
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OHNO2FB55CPX47BAXMBWUBGWHO6N6ZZH/
• http://seclists.org/fulldisclosure/2022/Nov/1
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C7B6JPKX5CGGLAHXJVQMIZNNEEB72FHD/
• https://lists.debian.org/debian-lts-announce/2022/12/msg00025.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C7B6JPKX5CGGLAHXJVQMIZNNEEB72FHD/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OHNO2FB55CPX47BAXMBWUBGWHO6N6ZZH/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UKFHE4KVD7EKS5J3KTDFVBEKU3CLXGVV/
• https://security.gentoo.org/glsa/202312-15

NVD Description

Note: Versions mentioned in the description apply only to the upstream gzip package and not the gzip package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.

Remediation

Upgrade Ubuntu:16.04 gzip to version 1.6-4ubuntu1+esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-1271
• https://bugzilla.redhat.com/show_bug.cgi?id=2073310
• https://access.redhat.com/security/cve/CVE-2022-1271
• https://lists.gnu.org/r/bug-gzip/2022-04/msg00011.html
• https://tukaani.org/xz/xzgrep-ZDI-CAN-16587.patch
• https://www.openwall.com/lists/oss-security/2022/04/07/8
• https://git.tukaani.org/?p=xz.git;a=commit;h=69d1b3fc29677af8ade8dc15dba83f0589cb63d6
• https://security-tracker.debian.org/tracker/CVE-2022-1271
• https://security.gentoo.org/glsa/202209-01
• https://security.netapp.com/advisory/ntap-20220930-0006/
• https://git.tukaani.org/?p=xz.git%3Ba=commit%3Bh=69d1b3fc29677af8ade8dc15dba83f0589cb63d6

NVD Description

Note: Versions mentioned in the description apply only to the upstream heimdal package and not the heimdal package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has "a similar bug."

Remediation

Upgrade Ubuntu:16.04 heimdal to version 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-42898
• https://github.com/krb5/krb5/commit/ea92d2f0fcceb54a70910fa32e9a0d7a5afc3583
• https://bugzilla.samba.org/show_bug.cgi?id=15203
• https://web.mit.edu/kerberos/advisories/
• https://www.samba.org/samba/security/CVE-2022-42898.html
• https://github.com/heimdal/heimdal/security/advisories/GHSA-64mq-fvfj-5x3c
• https://web.mit.edu/kerberos/krb5-1.20/README-1.20.1.txt
• https://web.mit.edu/kerberos/krb5-1.19/
• https://security.netapp.com/advisory/ntap-20230216-0008/
• https://security.netapp.com/advisory/ntap-20230223-0001/
• https://security.gentoo.org/glsa/202309-06
• https://security.gentoo.org/glsa/202310-06

NVD Description

Note: Versions mentioned in the description apply only to the upstream krb5 package and not the krb5 package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has "a similar bug."

Remediation

Upgrade Ubuntu:16.04 krb5 to version 1.13.2+dfsg-5ubuntu2.2+esm3 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-42898
• https://github.com/krb5/krb5/commit/ea92d2f0fcceb54a70910fa32e9a0d7a5afc3583
• https://bugzilla.samba.org/show_bug.cgi?id=15203
• https://web.mit.edu/kerberos/advisories/
• https://www.samba.org/samba/security/CVE-2022-42898.html
• https://github.com/heimdal/heimdal/security/advisories/GHSA-64mq-fvfj-5x3c
• https://web.mit.edu/kerberos/krb5-1.20/README-1.20.1.txt
• https://web.mit.edu/kerberos/krb5-1.19/
• https://security.netapp.com/advisory/ntap-20230216-0008/
• https://security.netapp.com/advisory/ntap-20230223-0001/
• https://security.gentoo.org/glsa/202309-06
• https://security.gentoo.org/glsa/202310-06

NVD Description

Note: Versions mentioned in the description apply only to the upstream libvpx package and not the libvpx package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Remediation

Upgrade Ubuntu:16.04 libvpx to version 1.5.0-2ubuntu1.1+esm2 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-5217
• https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html
• https://crbug.com/1486441
• http://www.openwall.com/lists/oss-security/2023/09/28/5
• http://www.openwall.com/lists/oss-security/2023/09/28/6
• http://www.openwall.com/lists/oss-security/2023/09/29/1
• http://www.openwall.com/lists/oss-security/2023/09/29/2
• http://www.openwall.com/lists/oss-security/2023/09/29/7
• http://www.openwall.com/lists/oss-security/2023/09/29/11
• http://www.openwall.com/lists/oss-security/2023/09/29/12
• http://www.openwall.com/lists/oss-security/2023/09/29/9
• https://bugzilla.redhat.com/show_bug.cgi?id=2241191
• https://github.com/webmproject/libvpx/commit/3fbd1dca6a4d2dad332a2110d646e4ffef36d590
• https://github.com/webmproject/libvpx/commit/af6dedd715f4307669366944cca6e0417b290282
• https://github.com/webmproject/libvpx/tags
• https://pastebin.com/TdkC4pDv
• https://security-tracker.debian.org/tracker/CVE-2023-5217
• https://stackdiary.com/google-discloses-a-webm-vp8-bug-tracked-as-cve-2023-5217/
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/
• https://www.openwall.com/lists/oss-security/2023/09/28/5
• http://www.openwall.com/lists/oss-security/2023/09/29/14
• https://www.debian.org/security/2023/dsa-5508
• https://www.debian.org/security/2023/dsa-5509
• https://www.debian.org/security/2023/dsa-5510
• http://www.openwall.com/lists/oss-security/2023/09/30/1
• https://lists.debian.org/debian-lts-announce/2023/09/msg00038.html
• https://arstechnica.com/security/2023/09/new-0-day-in-chrome-and-firefox-is-likely-to-plague-other-software/
• https://twitter.com/maddiestone/status/1707163313711497266
• https://github.com/webmproject/libvpx/releases/tag/v1.13.1
• http://www.openwall.com/lists/oss-security/2023/09/30/2
• http://www.openwall.com/lists/oss-security/2023/09/30/3
• http://www.openwall.com/lists/oss-security/2023/09/30/4
• http://www.openwall.com/lists/oss-security/2023/09/30/5
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BCVSHVX2RFBU3RMCUFSATVQEJUFD4Q63/
• http://www.openwall.com/lists/oss-security/2023/10/01/1
• http://www.openwall.com/lists/oss-security/2023/10/01/2
• http://www.openwall.com/lists/oss-security/2023/10/01/5
• https://lists.debian.org/debian-lts-announce/2023/10/msg00001.html
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MFWDFJSSIFKWKNOCTQCFUNZWAXUCSS4/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/55YVCZNAVY3Y5E4DWPWMX2SPKZ2E5SOV/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CWEJYS5NC7KVFYU3OAMPKQDYN6JQGVK6/
• http://www.openwall.com/lists/oss-security/2023/10/02/6
• http://www.openwall.com/lists/oss-security/2023/10/03/11
• https://security.gentoo.org/glsa/202310-04
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AY642Z6JZODQJE7Z62CFREVUHEGCXGPD/
• http://seclists.org/fulldisclosure/2023/Oct/12
• https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html
• http://seclists.org/fulldisclosure/2023/Oct/16
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TE7F54W5O5RS4ZMAAC7YK3CZWQXIDSKB/
• https://support.apple.com/kb/HT213961
• https://support.apple.com/kb/HT213972
• https://security.gentoo.org/glsa/202401-34
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog

NVD Description

Note: Versions mentioned in the description apply only to the upstream libxml2 package and not the libxml2 package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.

Remediation

Upgrade Ubuntu:16.04 libxml2 to version 2.9.3+dfsg1-1ubuntu0.7+esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2021-3518
• https://security.netapp.com/advisory/ntap-20210625-0002/
• https://support.apple.com/kb/HT212601
• https://support.apple.com/kb/HT212602
• https://support.apple.com/kb/HT212604
• https://support.apple.com/kb/HT212605
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/
• http://seclists.org/fulldisclosure/2021/Jul/54
• http://seclists.org/fulldisclosure/2021/Jul/55
• http://seclists.org/fulldisclosure/2021/Jul/58
• http://seclists.org/fulldisclosure/2021/Jul/59
• https://security.gentoo.org/glsa/202107-05
• https://bugzilla.redhat.com/show_bug.cgi?id=1954242
• https://www.oracle.com/security-alerts/cpuoct2021.html
• https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E
• https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E
• https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html
• https://www.oracle.com/security-alerts/cpuapr2022.html
• https://www.oracle.com/security-alerts/cpujul2022.html
• https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
• https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/

NVD Description

Note: Versions mentioned in the description apply only to the upstream libxpm package and not the libxpm package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, relying on the PATH environment variable to find these programs, which could allow a malicious user to execute other programs by manipulating the PATH environment variable.

Remediation

Upgrade Ubuntu:16.04 libxpm to version 1:3.5.11-1ubuntu0.16.04.1+esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-4883
• https://bugzilla.redhat.com/show_bug.cgi?id=2160213
• https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/515294bb8023a45ff91669
• https://gitlab.freedesktop.org/xorg/lib/libxpm/-/merge_requests/9
• https://lists.x.org/archives/xorg-announce/2023-January/003312.html
• https://lists.debian.org/debian-lts-announce/2023/06/msg00021.html

NVD Description

Note: Versions mentioned in the description apply only to the upstream libxslt package and not the libxslt package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Remediation

Upgrade Ubuntu:16.04 libxslt to version 1.1.28-2.1ubuntu0.3+esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2021-30560
• https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html
• https://crbug.com/1219209
• https://www.debian.org/security/2022/dsa-5216
• https://lists.debian.org/debian-lts-announce/2022/09/msg00010.html
• https://security.gentoo.org/glsa/202310-23

NVD Description

Note: Versions mentioned in the description apply only to the upstream pixman package and not the pixman package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integer overflow in pixman_sample_floor_y.

Remediation

Upgrade Ubuntu:16.04 pixman to version 0.33.6-1ubuntu0.1~esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-44638
• https://gitlab.freedesktop.org/pixman/pixman/-/issues/63
• http://www.openwall.com/lists/oss-security/2022/11/05/1
• https://lists.debian.org/debian-lts-announce/2022/11/msg00008.html
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BY4OPSIB33ETNUXZY2UPZ4NGQ3OKDY4D/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IUJ2BULJTZ2BMSKQHB6US674P55UCWWS/
• https://www.debian.org/security/2022/dsa-5276
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AJ5VY2VYXE4WTRGQ6LMGLF6FV3SY37YE/
• http://packetstormsecurity.com/files/170121/pixman-pixman_sample_floor_y-Integer-Overflow.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AJ5VY2VYXE4WTRGQ6LMGLF6FV3SY37YE/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BY4OPSIB33ETNUXZY2UPZ4NGQ3OKDY4D/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IUJ2BULJTZ2BMSKQHB6US674P55UCWWS/

NVD Description

Note: Versions mentioned in the description apply only to the upstream postgresql-9.5 package and not the postgresql-9.5 package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pg_amcheck commands activated relevant protections too late or not at all during the process. This flaw allows an attacker with permission to create non-temporary objects in at least one schema to execute arbitrary SQL functions under a superuser identity.

Remediation

Upgrade Ubuntu:16.04 postgresql-9.5 to version 9.5.25-0ubuntu0.16.04.1+esm2 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-1552
• https://www.postgresql.org/about/news/postgresql-143-137-1211-1116-and-1021-released-2449/
• https://access.redhat.com/security/cve/CVE-2022-1552
• https://bugzilla.redhat.com/show_bug.cgi?id=2081126
• https://www.postgresql.org/support/security/CVE-2022-1552/
• https://security.netapp.com/advisory/ntap-20221104-0005/
• https://security.gentoo.org/glsa/202211-04

NVD Description

Note: Versions mentioned in the description apply only to the upstream postgresql-9.5 package and not the postgresql-9.5 package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory.

Remediation

Upgrade Ubuntu:16.04 postgresql-9.5 to version 9.5.25-0ubuntu0.16.04.1+esm6 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-5869
• https://access.redhat.com/errata/RHSA-2023:7545
• https://access.redhat.com/errata/RHSA-2023:7579
• https://access.redhat.com/errata/RHSA-2023:7580
• https://access.redhat.com/errata/RHSA-2023:7581
• https://access.redhat.com/errata/RHSA-2023:7616
• https://access.redhat.com/errata/RHSA-2023:7656
• https://access.redhat.com/errata/RHSA-2023:7666
• https://access.redhat.com/errata/RHSA-2023:7667
• https://access.redhat.com/errata/RHSA-2023:7694
• https://access.redhat.com/errata/RHSA-2023:7695
• https://access.redhat.com/security/cve/CVE-2023-5869
• https://bugzilla.redhat.com/show_bug.cgi?id=2247169
• https://www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/
• https://www.postgresql.org/support/security/CVE-2023-5869/
• https://access.redhat.com/errata/RHSA-2023:7714
• https://access.redhat.com/errata/RHSA-2023:7770
• https://access.redhat.com/errata/RHSA-2023:7771
• https://access.redhat.com/errata/RHSA-2023:7772
• https://access.redhat.com/errata/RHSA-2023:7778
• https://access.redhat.com/errata/RHSA-2023:7783
• https://access.redhat.com/errata/RHSA-2023:7784
• https://access.redhat.com/errata/RHSA-2023:7785
• https://access.redhat.com/errata/RHSA-2023:7786
• https://access.redhat.com/errata/RHSA-2023:7788
• https://access.redhat.com/errata/RHSA-2023:7789
• https://access.redhat.com/errata/RHSA-2023:7790
• https://access.redhat.com/errata/RHSA-2023:7878
• https://access.redhat.com/errata/RHSA-2023:7883
• https://access.redhat.com/errata/RHSA-2023:7884
• https://access.redhat.com/errata/RHSA-2023:7885
• https://access.redhat.com/errata/RHSA-2024:0304
• https://security.netapp.com/advisory/ntap-20240119-0003/
• https://access.redhat.com/errata/RHSA-2024:0332
• https://access.redhat.com/errata/RHSA-2024:0337

NVD Description

Note: Versions mentioned in the description apply only to the upstream postgresql-9.5 package and not the postgresql-9.5 package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SQL array values, missing bounds checks let authenticated database users write arbitrary bytes to a wide area of server memory. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Remediation

Upgrade Ubuntu:16.04 postgresql-9.5 to version 9.5.25-0ubuntu0.16.04.1+esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2021-32027
• https://security.netapp.com/advisory/ntap-20210713-0004/
• https://bugzilla.redhat.com/show_bug.cgi?id=1956876
• https://www.postgresql.org/support/security/CVE-2021-32027/
• https://security.gentoo.org/glsa/202211-04

NVD Description

Note: Versions mentioned in the description apply only to the upstream postgresql-9.5 package and not the postgresql-9.5 package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser.

Remediation

Upgrade Ubuntu:16.04 postgresql-9.5 to version 9.5.25-0ubuntu0.16.04.1+esm5 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-39417
• https://access.redhat.com/security/cve/CVE-2023-39417
• https://bugzilla.redhat.com/show_bug.cgi?id=2228111
• https://www.postgresql.org/support/security/CVE-2023-39417
• https://security.netapp.com/advisory/ntap-20230915-0002/
• https://lists.debian.org/debian-lts-announce/2023/10/msg00003.html
• https://www.debian.org/security/2023/dsa-5553
• https://www.debian.org/security/2023/dsa-5554
• https://access.redhat.com/errata/RHSA-2023:7545
• https://access.redhat.com/errata/RHSA-2023:7579
• https://access.redhat.com/errata/RHSA-2023:7580
• https://access.redhat.com/errata/RHSA-2023:7581
• https://access.redhat.com/errata/RHSA-2023:7616
• https://access.redhat.com/errata/RHSA-2023:7656
• https://access.redhat.com/errata/RHSA-2023:7666
• https://access.redhat.com/errata/RHSA-2023:7667
• https://access.redhat.com/errata/RHSA-2023:7694
• https://access.redhat.com/errata/RHSA-2023:7695
• https://access.redhat.com/errata/RHSA-2023:7714
• https://access.redhat.com/errata/RHSA-2023:7770
• https://access.redhat.com/errata/RHSA-2023:7772
• https://access.redhat.com/errata/RHSA-2023:7784
• https://access.redhat.com/errata/RHSA-2023:7785
• https://access.redhat.com/errata/RHSA-2023:7883
• https://access.redhat.com/errata/RHSA-2023:7884
• https://access.redhat.com/errata/RHSA-2023:7885
• https://access.redhat.com/errata/RHSA-2024:0304
• https://access.redhat.com/errata/RHSA-2024:0332
• https://access.redhat.com/errata/RHSA-2024:0337

NVD Description

Note: Versions mentioned in the description apply only to the upstream tiff package and not the tiff package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/tif_getimage.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 227500897dfb07fb7d27f7aa570050e62617e3be. It is recommended to apply a patch to fix this issue. The identifier VDB-213549 was assigned to this vulnerability.

Remediation

Upgrade Ubuntu:16.04 tiff to version 4.0.6-1ubuntu0.8+esm8 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-3970
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53137
• https://gitlab.com/libtiff/libtiff/-/commit/227500897dfb07fb7d27f7aa570050e62617e3be
• https://vuldb.com/?id.213549
• https://oss-fuzz.com/download?testcase_id=5738253143900160
• https://security.netapp.com/advisory/ntap-20221215-0009/
• https://lists.debian.org/debian-lts-announce/2023/01/msg00018.html
• https://support.apple.com/kb/HT213843
• https://support.apple.com/kb/HT213841

NVD Description

Note: Versions mentioned in the description apply only to the upstream xz-utils package and not the xz-utils package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.

Remediation

Upgrade Ubuntu:16.04 xz-utils to version 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-1271
• https://bugzilla.redhat.com/show_bug.cgi?id=2073310
• https://access.redhat.com/security/cve/CVE-2022-1271
• https://lists.gnu.org/r/bug-gzip/2022-04/msg00011.html
• https://tukaani.org/xz/xzgrep-ZDI-CAN-16587.patch
• https://www.openwall.com/lists/oss-security/2022/04/07/8
• https://git.tukaani.org/?p=xz.git;a=commit;h=69d1b3fc29677af8ade8dc15dba83f0589cb63d6
• https://security-tracker.debian.org/tracker/CVE-2022-1271
• https://security.gentoo.org/glsa/202209-01
• https://security.netapp.com/advisory/ntap-20220930-0006/
• https://git.tukaani.org/?p=xz.git%3Ba=commit%3Bh=69d1b3fc29677af8ade8dc15dba83f0589cb63d6

NVD Description

Note: Versions mentioned in the description apply only to the upstream libxml2 package and not the libxml2 package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.

Remediation

Upgrade Ubuntu:16.04 libxml2 to version 2.9.3+dfsg1-1ubuntu0.7+esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2021-3517
• https://security.netapp.com/advisory/ntap-20210625-0002/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/
• https://security.gentoo.org/glsa/202107-05
• https://bugzilla.redhat.com/show_bug.cgi?id=1954232
• https://www.oracle.com/security-alerts/cpuoct2021.html
• https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E
• https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E
• https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html
• https://security.netapp.com/advisory/ntap-20211022-0004/
• https://www.oracle.com/security-alerts/cpujan2022.html
• https://www.oracle.com/security-alerts/cpuapr2022.html
• https://www.oracle.com/security-alerts/cpujul2022.html
• https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
• https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/

NVD Description

Note: Versions mentioned in the description apply only to the upstream expat package and not the expat package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.

Remediation

Upgrade Ubuntu:16.04 expat to version 2.1.0-7ubuntu0.16.04.5+esm6 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-40674
• https://github.com/libexpat/libexpat/pull/629
• https://github.com/libexpat/libexpat/pull/640
• https://www.debian.org/security/2022/dsa-5236
• https://lists.debian.org/debian-lts-announce/2022/09/msg00029.html
• https://security.gentoo.org/glsa/202209-24
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2ZKEPGFCZ7R6DRVH3K6RBJPT42ZBEG/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J2IGJNHFV53PYST7VQV3T4NHVYAMXA36/
• https://security.netapp.com/advisory/ntap-20221028-0008/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSVZN3IJ6OCPSJL7AEX3ZHSHAHFOGESK/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XCGBVQQ47URGJAZWHCISHDWF6QBTV2LE/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LQB6FJAM5YQ35SF5B2MN25Y2FX56EOEZ/
• https://security.gentoo.org/glsa/202211-06
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GSVZN3IJ6OCPSJL7AEX3ZHSHAHFOGESK/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J2IGJNHFV53PYST7VQV3T4NHVYAMXA36/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LQB6FJAM5YQ35SF5B2MN25Y2FX56EOEZ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2ZKEPGFCZ7R6DRVH3K6RBJPT42ZBEG/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCGBVQQ47URGJAZWHCISHDWF6QBTV2LE/

NVD Description

Note: Versions mentioned in the description apply only to the upstream libzstd package and not the libzstd package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if an output buffer smaller than the recommended size was used.

Remediation

Upgrade Ubuntu:16.04 libzstd to version 1.3.1+dfsg-1~ubuntu0.16.04.1+esm2 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2019-11922
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11922
• https://www.facebook.com/security/advisories/cve-2019-11922
• https://security-tracker.debian.org/tracker/CVE-2019-11922
• https://github.com/facebook/zstd/pull/1404/commits/3e5cdf1b6a85843e991d7d10f6a2567c15580da0
• https://www.oracle.com/security-alerts/cpuoct2020.html
• http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00008.html
• http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00062.html
• http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00078.html
• https://usn.ubuntu.com/4108-1/

NVD Description

Note: Versions mentioned in the description apply only to the upstream perl package and not the perl package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.

Remediation

Upgrade Ubuntu:16.04 perl to version 5.22.1-9ubuntu0.9+esm2 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-31484
• https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/
• https://github.com/andk/cpanpm/pull/175
• https://metacpan.org/dist/CPAN/changes
• https://www.openwall.com/lists/oss-security/2023/04/18/14
• http://www.openwall.com/lists/oss-security/2023/04/29/1
• http://www.openwall.com/lists/oss-security/2023/05/03/3
• http://www.openwall.com/lists/oss-security/2023/05/03/5
• http://www.openwall.com/lists/oss-security/2023/05/07/2
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BM6UW55CNFUTNGD5ZRKGUKKKFDJGMFHL/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LEGCEOKFJVBJ2QQ6S2H4NAEWTUERC7SB/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BM6UW55CNFUTNGD5ZRKGUKKKFDJGMFHL/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LEGCEOKFJVBJ2QQ6S2H4NAEWTUERC7SB/

NVD Description

Note: Versions mentioned in the description apply only to the upstream postgresql-9.5 package and not the postgresql-9.5 package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption.

Remediation

Upgrade Ubuntu:16.04 postgresql-9.5 to version 9.5.25-0ubuntu0.16.04.1+esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2021-23214
• https://git.postgresql.org/gitweb/?p=postgresql.git;a=commit;h=28e24125541545483093819efae9bca603441951
• https://www.postgresql.org/support/security/CVE-2021-23214/
• https://github.com/postgres/postgres/commit/28e24125541545483093819efae9bca603441951
• https://bugzilla.redhat.com/show_bug.cgi?id=2022666
• https://security.gentoo.org/glsa/202211-04
• https://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commit%3Bh=28e24125541545483093819efae9bca603441951

NVD Description

Note: Versions mentioned in the description apply only to the upstream sqlite3 package and not the sqlite3 package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. A malicious application may cause a denial of service or potentially disclose memory contents.

Remediation

There is no fixed version for Ubuntu:16.04 sqlite3.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2020-9794
• https://security-tracker.debian.org/tracker/CVE-2020-9794
• https://support.apple.com/HT211168
• https://support.apple.com/HT211170
• https://support.apple.com/HT211171
• https://support.apple.com/HT211175
• https://support.apple.com/HT211178
• https://support.apple.com/HT211179
• https://support.apple.com/HT211181
• https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
• https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E

NVD Description

Note: Versions mentioned in the description apply only to the upstream postgresql-9.5 package and not the postgresql-9.5 package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, enabling safe refresh of untrusted materialized views. The victim is a superuser or member of one of the attacker's roles. The attack requires luring the victim into running REFRESH MATERIALIZED VIEW CONCURRENTLY on the attacker's materialized view. As part of exploiting this vulnerability, the attacker creates functions that use CREATE RULE to convert the internally-built temporary table to a view. Versions before PostgreSQL 15.6, 14.11, 13.14, and 12.18 are affected. The only known exploit does not work in PostgreSQL 16 and later. For defense in depth, PostgreSQL 16.2 adds the protections that older branches are using to fix their vulnerability.

Remediation

Upgrade Ubuntu:16.04 postgresql-9.5 to version 9.5.25-0ubuntu0.16.04.1+esm7 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2024-0985
• https://www.postgresql.org/support/security/CVE-2024-0985/
• https://lists.debian.org/debian-lts-announce/2024/03/msg00017.html

NVD Description

Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function bfd_mach_o_get_synthetic_symtab in match-o.c.

Remediation

Upgrade Ubuntu:16.04 binutils to version 2.26.1-1ubuntu1~16.04.8+esm7 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-47695
• https://sourceware.org/bugzilla/show_bug.cgi?id=29846

NVD Description

Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function compare_symbols.

Remediation

Upgrade Ubuntu:16.04 binutils to version 2.26.1-1ubuntu1~16.04.8+esm6 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-47696
• https://sourceware.org/bugzilla/show_bug.cgi?id=29677

NVD Description

Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

An issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains multiple out of bound reads which may cause a denial of service or other unspecified impacts.

Remediation

There is no fixed version for Ubuntu:16.04 binutils.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-47673
• https://sourceware.org/bugzilla/show_bug.cgi?id=29876

NVD Description

Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c.

Remediation

Upgrade Ubuntu:16.04 binutils to version 2.26.1-1ubuntu1~16.04.8+esm7 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-45703
• https://sourceware.org/bugzilla/show_bug.cgi?id=29799
• https://security.netapp.com/advisory/ntap-20231006-0003/

NVD Description

Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in file readelf.c.

Remediation

Upgrade Ubuntu:16.04 binutils to version 2.26.1-1ubuntu1~16.04.8+esm7 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-44840
• https://sourceware.org/bugzilla/show_bug.cgi?id=29732

NVD Description

Note: Versions mentioned in the description apply only to the upstream djvulibre package and not the djvulibre package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A flaw was found in djvulibre-3.5.28 and earlier. An integer overflow in function render() in tools/ddjvu via crafted djvu file may lead to application crash and other consequences.

Remediation

Upgrade Ubuntu:16.04 djvulibre to version 3.5.27.1-5ubuntu0.1+esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2021-32491
• https://bugzilla.redhat.com/show_bug.cgi?id=1943684
• https://www.debian.org/security/2021/dsa-5032

NVD Description

Note: Versions mentioned in the description apply only to the upstream djvulibre package and not the djvulibre package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filter_bv() via crafted djvu file may lead to application crash and other consequences.

Remediation

Upgrade Ubuntu:16.04 djvulibre to version 3.5.27.1-5ubuntu0.1+esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2021-32490
• https://bugzilla.redhat.com/show_bug.cgi?id=1943693
• https://www.debian.org/security/2021/dsa-5032

NVD Description

Note: Versions mentioned in the description apply only to the upstream djvulibre package and not the djvulibre package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode() via crafted djvu file may lead to application crash and other consequences.

Remediation

Upgrade Ubuntu:16.04 djvulibre to version 3.5.27.1-5ubuntu0.1+esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2021-32493
• https://bugzilla.redhat.com/show_bug.cgi?id=1943690
• https://www.debian.org/security/2021/dsa-5032

NVD Description

Note: Versions mentioned in the description apply only to the upstream e2fsprogs package and not the e2fsprogs package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.

Remediation

Upgrade Ubuntu:16.04 e2fsprogs to version 1.42.13-1ubuntu1.2+esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-1304
• https://bugzilla.redhat.com/show_bug.cgi?id=2069726
• https://access.redhat.com/errata/RHSA-2022:7720
• https://access.redhat.com/errata/RHSA-2022:8361
• https://access.redhat.com/security/cve/CVE-2022-1304

NVD Description

Note: Versions mentioned in the description apply only to the upstream expat package and not the expat package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

Remediation

Upgrade Ubuntu:16.04 expat to version 2.1.0-7ubuntu0.16.04.5+esm2 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2021-46143
• https://github.com/libexpat/libexpat/issues/532
• https://github.com/libexpat/libexpat/pull/538
• http://www.openwall.com/lists/oss-security/2022/01/17/3
• https://security.netapp.com/advisory/ntap-20220121-0006/
• https://www.tenable.com/security/tns-2022-05
• https://www.debian.org/security/2022/dsa-5073
• https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
• https://security.gentoo.org/glsa/202209-24

NVD Description

Note: Versions mentioned in the description apply only to the upstream gdk-pixbuf package and not the gdk-pixbuf package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.

Remediation

There is no fixed version for Ubuntu:16.04 gdk-pixbuf.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-48622
• https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/202

NVD Description

Note: Versions mentioned in the description apply only to the upstream git package and not the git package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted .gitmodules file with submodule URLs that are longer than 1024 characters can used to exploit a bug in config.c::git_config_copy_or_rename_section_in_file(). This bug can be used to inject arbitrary configuration into a user's $GIT_DIR/config when attempting to remove the configuration section associated with that submodule. When the attacker injects configuration values which specify executables to run (such as core.pager, core.editor, core.sshCommand, etc.) this can lead to a remote code execution. A fix A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid running git submodule deinit on untrusted repositories or without prior inspection of any submodule sections in $GIT_DIR/config.

Remediation

Upgrade Ubuntu:16.04 git to version 1:2.7.4-0ubuntu1.10+esm7 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-29007
• https://github.com/git/git/blob/9ce9dea4e1c2419cca126d29fa7730baa078a11b/Documentation/RelNotes/2.30.9.txt
• https://github.com/git/git/commit/528290f8c61222433a8cf02fb7cfffa8438432b4
• https://github.com/git/git/security/advisories/GHSA-v48j-4xgg-4844
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PI7FZ4NNR5S5J5K6AMVQBH2JFP6NE4L7/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YFZWGQKB6MM5MNF2DLFTD7KS2KWPICKL/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RKOXOAZ42HLXHXTW6JZI4L5DAIYDTYCU/
• https://security.gentoo.org/glsa/202312-15

NVD Description

Note: Versions mentioned in the description apply only to the upstream git package and not the git package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5, is vulnerable to privilege escalation in all platforms. An unsuspecting user could still be affected by the issue reported in CVE-2022-24765, for example when navigating as root into a shared tmp directory that is owned by them, but where an attacker could create a git repository. Versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5 contain a patch for this issue. The simplest way to avoid being affected by the exploit described in the example is to avoid running git as root (or an Administrator in Windows), and if needed to reduce its use to a minimum. While a generic workaround is not possible, a system could be hardened from the exploit described in the example by removing any such repository if it exists already and creating one as root to block any future attacks.

Remediation

There is no fixed version for Ubuntu:16.04 git.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-29187
• https://github.blog/2022-04-12-git-security-vulnerability-announced
• https://lore.kernel.org/git/xmqqv8s2fefi.fsf@gitster.g/T/#u
• https://github.com/git/git/security/advisories/GHSA-j342-m5hw-rr3v
• http://www.openwall.com/lists/oss-security/2022/07/14/1
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TRZG5CDUQ27OWTPC5MQOR4UASNXHWEZS/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDI325LOO2XBDDKLINOAQJEG6MHAURZE/
• https://support.apple.com/kb/HT213496
• http://seclists.org/fulldisclosure/2022/Nov/1
• https://lists.debian.org/debian-lts-announce/2022/12/msg00025.html
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DIKWISWUDFT2FAITYIA6372BVLH3OOOC/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YROCMBWYFKRSS64PO6FUNM6L7LKBUKVW/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVOLER2PIGMHPQMDGG4RDE2KZB74QLA2/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UDZRZAL7QULOB6V7MKT66MOMWJLBJPX4/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDI325LOO2XBDDKLINOAQJEG6MHAURZE/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIKWISWUDFT2FAITYIA6372BVLH3OOOC/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVOLER2PIGMHPQMDGG4RDE2KZB74QLA2/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRZG5CDUQ27OWTPC5MQOR4UASNXHWEZS/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UDZRZAL7QULOB6V7MKT66MOMWJLBJPX4/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YROCMBWYFKRSS64PO6FUNM6L7LKBUKVW/
• https://lore.kernel.org/git/xmqqv8s2fefi.fsf%40gitster.g/T/#u
• https://security.gentoo.org/glsa/202312-15
• https://security.gentoo.org/glsa/202401-17

NVD Description

Note: Versions mentioned in the description apply only to the upstream glib2.0 package and not the glib2.0 package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affect any released version of GLib, but does affect GLib distributors who followed the guidance of GLib developers to backport the initial fix for CVE-2023-32665.

Remediation

Upgrade Ubuntu:16.04 glib2.0 to version 2.48.2-0ubuntu4.8+esm3 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-32643
• https://gitlab.gnome.org/GNOME/glib/-/issues/2840
• https://https://discourse.gnome.org/t/multiple-fixes-for-gvariant-normalisation-issues-in-glib/12835

NVD Description

Note: Versions mentioned in the description apply only to the upstream glibc package and not the glibc package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd() in a setuid program could use this flaw to potentially execute arbitrary code and escalate their privileges on the system.

Remediation

Upgrade Ubuntu:16.04 glibc to version 2.23-0ubuntu11.3+esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2021-3999
• https://www.openwall.com/lists/oss-security/2022/01/24/4
• https://access.redhat.com/security/cve/CVE-2021-3999
• https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=23e0e8f5f1fb5ed150253d986ecccdc90c2dcd5e
• https://sourceware.org/bugzilla/show_bug.cgi?id=28769
• https://security-tracker.debian.org/tracker/CVE-2021-3999
• https://bugzilla.redhat.com/show_bug.cgi?id=2024637
• https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html
• https://security.netapp.com/advisory/ntap-20221104-0001/
• https://access.redhat.com/errata/RHSA-2022:0896
• https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=23e0e8f5f1fb5ed150253d986ecccdc90c2dcd5e

NVD Description

Note: Versions mentioned in the description apply only to the upstream graphviz package and not the graphviz package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component.

Remediation

Upgrade Ubuntu:16.04 graphviz to version 2.38.0-12ubuntu2.1+esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2020-18032
• https://www.debian.org/security/2021/dsa-4914
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D5PQPHJHPU46FK3R5XBP3XDT4X37HMPC/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGY2IGARE6RZHTF2UEZEWLMQCDILFK6A/
• https://gitlab.com/graphviz/graphviz/-/issues/1700
• https://lists.debian.org/debian-lts-announce/2021/05/msg00014.html
• https://security.gentoo.org/glsa/202107-04
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D5PQPHJHPU46FK3R5XBP3XDT4X37HMPC/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGY2IGARE6RZHTF2UEZEWLMQCDILFK6A/

NVD Description

Note: Versions mentioned in the description apply only to the upstream graphviz package and not the graphviz package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root.

Remediation

Upgrade Ubuntu:16.04 graphviz to version 2.38.0-12ubuntu2.1+esm2 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-46045
• https://gitlab.com/graphviz/graphviz/-/issues/2441
• https://seclists.org/fulldisclosure/2024/Jan/73
• https://www.openwall.com/lists/oss-security/2024/02/01/2
• http://seclists.org/fulldisclosure/2024/Feb/24
• https://seclists.org/fulldisclosure/2024/Feb/24

NVD Description

Note: Versions mentioned in the description apply only to the upstream imagemagick package and not the imagemagick package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.

Remediation

Upgrade Ubuntu:16.04 imagemagick to version 8:6.8.9.9-7ubuntu5.16+esm3 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-28463
• https://github.com/ImageMagick/ImageMagick6/commit/e6ea5876e0228165ee3abc6e959aa174cee06680
• https://github.com/ImageMagick/ImageMagick/issues/4988
• https://github.com/ImageMagick/ImageMagick/commit/ca3654ebf7a439dc736f56f083c9aa98e4464b7f
• https://lists.debian.org/debian-lts-announce/2022/05/msg00018.html
• https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html

NVD Description

Note: Versions mentioned in the description apply only to the upstream imagemagick package and not the imagemagick package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

In ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte alignment and for type 'float', which requires 4 byte alignment at MagickCore/property.c. Whenever crafted or untrusted input is processed by ImageMagick, this causes a negative impact to application availability or other problems related to undefined behavior.

Remediation

Upgrade Ubuntu:16.04 imagemagick to version 8:6.8.9.9-7ubuntu5.16+esm4 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-32547
• https://bugzilla.redhat.com/show_bug.cgi?id=2091813
• https://github.com/ImageMagick/ImageMagick6/commit/dc070da861a015d3c97488fdcca6063b44d47a7b
• https://github.com/ImageMagick/ImageMagick/commit/eac8ce4d873f28bb6a46aa3a662fb196b49b95d0
• https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html

NVD Description

Note: Versions mentioned in the description apply only to the upstream imagemagick package and not the imagemagick package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior.

Remediation

Upgrade Ubuntu:16.04 imagemagick to version 8:6.8.9.9-7ubuntu5.16+esm4 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-32545
• https://bugzilla.redhat.com/show_bug.cgi?id=2091811
• https://github.com/ImageMagick/ImageMagick/commit/9c9a84cec4ab28ee0b57c2b9266d6fbe68183512
• https://github.com/ImageMagick/ImageMagick6/commit/450949ed017f009b399c937cf362f0058eacc5fa
• https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html

NVD Description

Note: Versions mentioned in the description apply only to the upstream imagemagick package and not the imagemagick package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior.

Remediation

Upgrade Ubuntu:16.04 imagemagick to version 8:6.8.9.9-7ubuntu5.16+esm4 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-32546
• https://github.com/ImageMagick/ImageMagick/commit/f221ea0fa3171f0f4fdf74ac9d81b203b9534c23
• https://bugzilla.redhat.com/show_bug.cgi?id=2091812
• https://github.com/ImageMagick/ImageMagick6/commit/29c8abce0da56b536542f76a9ddfebdaab5b2943
• https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html

NVD Description

Note: Versions mentioned in the description apply only to the upstream libcap2 package and not the libcap2 package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.

Remediation

Upgrade Ubuntu:16.04 libcap2 to version 1:2.24-12ubuntu0.1~esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-2603
• https://bugzilla.redhat.com/show_bug.cgi?id=2209113
• https://www.x41-dsec.de/static/reports/X41-libcap-Code-Review-2023-OSTIF-Final-Report.pdf
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPEGCFMCN5KGCFX5Y2VTKR732TTD4ADW/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ57ICDLMVYEREXQGZWL4GWI7FRJCRQT/

NVD Description

Note: Versions mentioned in the description apply only to the upstream libx11 package and not the libx11 package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated privileges.

Remediation

Upgrade Ubuntu:16.04 libx11 to version 2:1.6.3-1ubuntu2.2+esm4 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-43787
• https://access.redhat.com/security/cve/CVE-2023-43787
• https://bugzilla.redhat.com/show_bug.cgi?id=2242254
• https://security.netapp.com/advisory/ntap-20231103-0006/
• http://www.openwall.com/lists/oss-security/2024/01/24/9
• https://jfrog.com/blog/xorg-libx11-vulns-cve-2023-43786-cve-2023-43787-part-two/

NVD Description

Note: Versions mentioned in the description apply only to the upstream libxml2 package and not the libxml2 package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.

Remediation

Upgrade Ubuntu:16.04 libxml2 to version 2.9.3+dfsg1-1ubuntu0.7+esm4 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-40304
• https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.3
• https://gitlab.gnome.org/GNOME/libxml2/-/commit/1b41ec4e9433b05bb0376be4725804c54ef1d80b
• https://gitlab.gnome.org/GNOME/libxml2/-/tags
• https://security.netapp.com/advisory/ntap-20221209-0003/
• https://support.apple.com/kb/HT213534
• https://support.apple.com/kb/HT213535
• https://support.apple.com/kb/HT213536
• https://support.apple.com/kb/HT213531
• https://support.apple.com/kb/HT213533
• http://seclists.org/fulldisclosure/2022/Dec/21
• http://seclists.org/fulldisclosure/2022/Dec/25
• http://seclists.org/fulldisclosure/2022/Dec/24
• http://seclists.org/fulldisclosure/2022/Dec/26
• http://seclists.org/fulldisclosure/2022/Dec/27

NVD Description

Note: Versions mentioned in the description apply only to the upstream libxml2 package and not the libxml2 package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability.

Remediation

Upgrade Ubuntu:16.04 libxml2 to version 2.9.3+dfsg1-1ubuntu0.7+esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2021-3516
• https://security.netapp.com/advisory/ntap-20210716-0005/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/
• https://security.gentoo.org/glsa/202107-05
• https://bugzilla.redhat.com/show_bug.cgi?id=1954225
• https://gitlab.gnome.org/GNOME/libxml2/-/commit/1358d157d0bd83be1dfe356a69213df9fac0b539
• https://gitlab.gnome.org/GNOME/libxml2/-/issues/230
• https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html
• https://www.oracle.com/security-alerts/cpujan2022.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/

NVD Description

Note: Versions mentioned in the description apply only to the upstream libxpm package and not the libxpm package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated privileges.

Remediation

Upgrade Ubuntu:16.04 libxpm to version 1:3.5.11-1ubuntu0.16.04.1+esm2 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-43787
• https://access.redhat.com/security/cve/CVE-2023-43787
• https://bugzilla.redhat.com/show_bug.cgi?id=2242254
• https://security.netapp.com/advisory/ntap-20231103-0006/
• http://www.openwall.com/lists/oss-security/2024/01/24/9
• https://jfrog.com/blog/xorg-libx11-vulns-cve-2023-43786-cve-2023-43787-part-two/

NVD Description

Note: Versions mentioned in the description apply only to the upstream ncurses package and not the ncurses package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.

Remediation

Upgrade Ubuntu:16.04 ncurses to version 6.0+20160213-1ubuntu1+esm3 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-29491
• http://ncurses.scripts.mit.edu/?p=ncurses.git;a=commit;h=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56
• https://www.openwall.com/lists/oss-security/2023/04/12/5
• https://www.openwall.com/lists/oss-security/2023/04/13/4
• http://www.openwall.com/lists/oss-security/2023/04/19/10
• http://www.openwall.com/lists/oss-security/2023/04/19/11
• https://security.netapp.com/advisory/ntap-20230517-0009/
• https://support.apple.com/kb/HT213843
• https://support.apple.com/kb/HT213844
• https://support.apple.com/kb/HT213845
• http://ncurses.scripts.mit.edu/?p=ncurses.git%3Ba=commit%3Bh=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56
• https://lists.debian.org/debian-lts-announce/2023/12/msg00004.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/

NVD Description

Note: Versions mentioned in the description apply only to the upstream perl package and not the perl package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

CPAN 2.28 allows Signature Verification Bypass.

Remediation

Upgrade Ubuntu:16.04 perl to version 5.22.1-9ubuntu0.9+esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2020-16156
• https://metacpan.org/pod/distribution/CPAN/scripts/cpan
• https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/
• http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SZ32AJIV4RHJMLWLU5QULGKMMIHYOMDC/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SD6RYOJII7HRJ6WVORFNVTYNOFY5JDXN/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SD6RYOJII7HRJ6WVORFNVTYNOFY5JDXN/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SZ32AJIV4RHJMLWLU5QULGKMMIHYOMDC/

NVD Description

Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4x_print_cond (file opcodes/tic4x-dis.c) which could allow attackers to make an information leak.

Remediation

Upgrade Ubuntu:16.04 binutils to version 2.26.1-1ubuntu1~16.04.8+esm7 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2020-35342
• https://sourceware.org/bugzilla/show_bug.cgi?id=25319
• https://security.netapp.com/advisory/ntap-20231006-0009/

NVD Description

Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37.

Remediation

Upgrade Ubuntu:16.04 binutils to version 2.26.1-1ubuntu1~16.04.8+esm7 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2021-46174
• https://sourceware.org/bugzilla/show_bug.cgi?id=28753

NVD Description

Note: Versions mentioned in the description apply only to the upstream ca-certificates package and not the ca-certificates package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.

Remediation

Upgrade Ubuntu:16.04 ca-certificates to version 2021101616.04.1esm2 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-23491
• https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/yLohoVqtCgAJ
• https://github.com/certifi/python-certifi/security/advisories/GHSA-43fp-rhv2-5gv8

NVD Description

Note: Versions mentioned in the description apply only to the upstream curl package and not the curl package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (--ssl-reqd on the command line orCURLOPT_USE_SSL set to CURLUSESSL_CONTROL or CURLUSESSL_ALL withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations withoutTLS contrary to the instructions and expectations, exposing possibly sensitive data in clear text over the network.

Remediation

Upgrade Ubuntu:16.04 curl to version 7.47.0-1ubuntu2.19+esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2021-22946
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/
• https://hackerone.com/reports/1334111
• https://www.oracle.com/security-alerts/cpuoct2021.html
• https://lists.debian.org/debian-lts-announce/2021/09/msg00022.html
• https://security.netapp.com/advisory/ntap-20211029-0003/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/
• https://security.netapp.com/advisory/ntap-20220121-0008/
• https://www.oracle.com/security-alerts/cpujan2022.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
• https://support.apple.com/kb/HT213183
• http://seclists.org/fulldisclosure/2022/Mar/29
• https://www.oracle.com/security-alerts/cpuapr2022.html
• https://www.oracle.com/security-alerts/cpujul2022.html
• https://www.debian.org/security/2022/dsa-5197
• https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
• https://security.gentoo.org/glsa/202212-01
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/

NVD Description

Note: Versions mentioned in the description apply only to the upstream expat package and not the expat package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.

Remediation

Upgrade Ubuntu:16.04 expat to version 2.1.0-7ubuntu0.16.04.5+esm2 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-23990
• https://github.com/libexpat/libexpat/pull/551
• https://www.tenable.com/security/tns-2022-05
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R7FF2UH7MPXKTADYSJUAHI2Y5UHBSHUH/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/34NXVL2RZC2YZRV74ZQ3RNFB7WCEUP7D/
• https://www.debian.org/security/2022/dsa-5073
• https://www.oracle.com/security-alerts/cpuapr2022.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
• https://security.gentoo.org/glsa/202209-24
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/34NXVL2RZC2YZRV74ZQ3RNFB7WCEUP7D/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7FF2UH7MPXKTADYSJUAHI2Y5UHBSHUH/

NVD Description

Note: Versions mentioned in the description apply only to the upstream expat package and not the expat package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.

Remediation

Upgrade Ubuntu:16.04 expat to version 2.1.0-7ubuntu0.16.04.5+esm7 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-43680
• https://github.com/libexpat/libexpat/pull/650
• https://github.com/libexpat/libexpat/pull/616
• https://github.com/libexpat/libexpat/issues/649
• https://lists.debian.org/debian-lts-announce/2022/10/msg00033.html
• https://www.debian.org/security/2022/dsa-5266
• https://security.gentoo.org/glsa/202210-38
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BY4OPSIB33ETNUXZY2UPZ4NGQ3OKDY4D/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IUJ2BULJTZ2BMSKQHB6US674P55UCWWS/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AJ5VY2VYXE4WTRGQ6LMGLF6FV3SY37YE/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DPQVIF6TOJNY2T3ZZETFKR4G34FFREBQ/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FFCOMBSOJKLIKCGCJWHLJXO4EVYBG7AR/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XG5XOOB7CD55CEE6OJYKSACSIMQ4RWQ6/
• https://security.netapp.com/advisory/ntap-20221118-0007/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AJ5VY2VYXE4WTRGQ6LMGLF6FV3SY37YE/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BY4OPSIB33ETNUXZY2UPZ4NGQ3OKDY4D/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DPQVIF6TOJNY2T3ZZETFKR4G34FFREBQ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FFCOMBSOJKLIKCGCJWHLJXO4EVYBG7AR/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IUJ2BULJTZ2BMSKQHB6US674P55UCWWS/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XG5XOOB7CD55CEE6OJYKSACSIMQ4RWQ6/
• http://www.openwall.com/lists/oss-security/2023/12/28/5
• http://www.openwall.com/lists/oss-security/2024/01/03/5

NVD Description

Note: Versions mentioned in the description apply only to the upstream git package and not the git package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring.

Remediation

Upgrade Ubuntu:16.04 git to version 1:2.7.4-0ubuntu1.10+esm1 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2021-40330
• https://github.com/git/git/commit/a02ea577174ab8ed18f847cf1693f213e0b9c473
• https://github.com/git/git/compare/v2.30.0...v2.30.1
• https://lists.debian.org/debian-lts-announce/2022/10/msg00014.html

NVD Description

Note: Versions mentioned in the description apply only to the upstream git package and not the git package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8. By feeding a crafted input to git apply, a path outside the working tree can be overwritten as the user who is running git apply. A fix has been prepared and will appear in v2.39.2, v2.38.4, v2.37.6, v2.36.5, v2.35.7, v2.34.7, v2.33.7, v2.32.6, v2.31.7, and v2.30.8. As a workaround, use git apply --stat to inspect a patch before applying; avoid applying one that creates a symbolic link and then creates a file beyond the symbolic link.

Remediation

Upgrade Ubuntu:16.04 git to version 1:2.7.4-0ubuntu1.10+esm5 or higher.

References

• http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-23946
• https://github.com/git/git/commit/c867e4fa180bec4750e9b54eb10f459030dbebfd
• https://github.com/git/git/security/advisories/GHSA-r87m-v37r-cwfh
• https://security.gentoo.org/glsa/202312-15

NVD Description

Note: Versions mentioned in the description apply only to the upstream git package and not the git package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, by feeding specially crafted input to git apply --reject, a path outside the working tree can be overwritten with partially controlled contents (corresponding to the rejected hunk(s) from the given patch). A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid using git apply with --reject when applying patches from an untrusted source. Use git apply --stat to inspect a patch before applying; avoid applying one that create a conflict where a link corresponding to the *.rej file exists.

Remediation

Upgrade Ubuntu:16.04 git to version 1:2.7.4-0ubuntu1.10+esm7 or higher.

References