{"id":"CLSA-2023-1679349729","summary":"Fix CVE(s): CVE-2023-26604, CVE-2022-3821","details":"\n   * SECURITY UPDATE: buffer overrun vulnerability in format_timespan()\n     - debian/patches/CVE-2022-3821.patch: fix buffer-over-run\n     - CVE-2022-3821\n   * SECURITY UPDATE: a local privelege escalation for some sudo configs\n     was not blocked adequately\n     - debian/patches/CVE-2023-26604.patch: use only less as a pager and\n     restrict its functionality (e.g stop running external shell) unless\n     environment variable SYSTEMD_PAGERSECURE is defined\n     - CVE-2023-26604","modified":"2026-06-04T10:03:44.778349630Z","published":"2023-03-20T22:02:09Z","upstream":["CVE-2022-3821","CVE-2023-26604"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1679349729"}],"affected":[{"package":{"name":"libnss-myhostname","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libnss-myhostname?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1679349729.json"}},{"package":{"name":"libnss-mymachines","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libnss-mymachines?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1679349729.json"}},{"package":{"name":"libnss-resolve","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libnss-resolve?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1679349729.json"}},{"package":{"name":"libpam-systemd","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libpam-systemd?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1679349729.json"}},{"package":{"name":"libsystemd-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libsystemd-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1679349729.json"}},{"package":{"name":"libsystemd0","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libsystemd0?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1679349729.json"}},{"package":{"name":"libudev-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libudev-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1679349729.json"}},{"package":{"name":"libudev1","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libudev1?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1679349729.json"}},{"package":{"name":"systemd","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/systemd?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1679349729.json"}},{"package":{"name":"systemd-container","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/systemd-container?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1679349729.json"}},{"package":{"name":"systemd-coredump","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/systemd-coredump?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1679349729.json"}},{"package":{"name":"systemd-journal-remote","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/systemd-journal-remote?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1679349729.json"}},{"package":{"name":"systemd-sysv","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/systemd-sysv?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1679349729.json"}},{"package":{"name":"udev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/udev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1679349729.json"}}],"schema_version":"1.7.5"}