CLSA-2023-1677096675
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1677096675.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2023-1677096675
- Upstream
- Published
- 2023-02-22T20:11:15Z
- Modified
- 2026-06-04T10:03:38.164606622Z
- Summary
- Fix of 5 CVEs
- Details
-
- SECURITY UPDATE: out-of-bounds write caused by integer overflow
- debian/patches/CVE-2022-41903.patch: use 'size_t' instead of 'int' to track the string lengths and so allow >2GB input sizes.
- CVE-2022-41903
- t-mark-submodule-clean-test-as-known-failure.patch: mark submodule clean test as known failure and so pass 'make test'.
- SECURITY UPDATE: possible cross-protocol requests
- debian/patches/CVE-2021-40330.patch: forbid newlines in host and path.
- CVE-2021-40330
- SECURITY UPDATE: out-of-bounds write and possible RCE caused by
integer overflow
- debian/patches/CVE-2022-39260.patch: reject too long command line strings in split_cmdline().
- CVE-2022-39260
- SECURITY UPDATE: out-of-bounds write when reading an unreasonably
large .gitattributes file
- debian/patches/CVE-2021-23521.patch: implement line and overall size checks for .gitattributes files.
- CVE-2021-23521
- SECURITY UPDATE: possible write outside of the repository's
working directory
- debian/patches/CVE-2023-23946.patch: prevent git-apply from writing behind newly created symbolic links.
- CVE-2023-23946
- SECURITY UPDATE: out-of-bounds write caused by integer overflow
- References