ALT-BU-2017-3230-1
Branch sisyphus update bulletin.
Closed vulnerabilities
Modified: 2024-11-21
CVE-2017-7529
Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.
- [nginx-announce] 20170711 nginx security advisory (CVE-2017-7529)
- [nginx-announce] 20170711 nginx security advisory (CVE-2017-7529)
- 20210921 APPLE-SA-2021-09-20-4 Xcode 13
- 20210921 APPLE-SA-2021-09-20-4 Xcode 13
- 99534
- 99534
- 1039238
- 1039238
- RHSA-2017:2538
- RHSA-2017:2538
- https://puppet.com/security/cve/cve-2017-7529
- https://puppet.com/security/cve/cve-2017-7529
- https://support.apple.com/kb/HT212818
- https://support.apple.com/kb/HT212818
Package libva-driver-intel updated to version 1.8.3-alt2.S1 for branch sisyphus in task 185275.
Closed bugs
wrong package summary
Closed vulnerabilities
Modified: 2024-11-21
CVE-2017-9772
Insufficient sanitisation in the OCaml compiler versions 4.04.0 and 4.04.1 allows external code to be executed with raised privilege in binaries marked as setuid, by setting the CAML_CPLUGINS, CAML_NATIVE_CPLUGINS, or CAML_BYTE_CPLUGINS environment variable.
Modified: 2024-11-21
CVE-2017-9779
OCaml compiler allows attackers to have unspecified impact via unknown vectors, a similar issue to CVE-2017-9772 "but with much less impact."