• [RFR] wml://security/2022/dsa-52{19,20,22}.wml

    From Jean-Pierre Giraud@21:1/5 to All on Wed Aug 31 18:40:01 2022
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------H5qpX42AmGHMfVe3g6VLOjXF
    Content-Type: multipart/mixed; boundary="------------24ZM3hqOhYDTG431OxJQ3LTp"

    --------------24ZM3hqOhYDTG431OxJQ3LTp
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    Qm9uam91ciwNCnRyb2lzIG5vdXZlbGxlcyBhbm5vbmNlcyBkZSBzw6ljdXJpdMOpIG9udCDD qXTDqSBwdWJsacOpZXMuIEVuIHZvaWNpIHVuZSANCnRyYWR1Y3Rpb24uIE1lcmNpIGQnYXZh bmNlIHBvdXIgdm9zIHJlbGVjdHVyZXMuDQpBbWljYWxlbWVudCwNCmppcGVnZQ0K --------------24ZM3hqOhYDTG431OxJQ3LTp
    Content-Type: text/vnd.wap.wml; charset=UTF-8; name="dsa-5222.wml" Content-Disposition: attachment; filename="dsa-5222.wml" Content-Transfer-Encoding: base64

    I3VzZSB3bWw6OmRlYmlhbjo6dHJhbnNsYXRpb24tY2hlY2sgdHJhbnNsYXRpb249ImQ0YWIz NmE4N2YwOGQ5ZmY1NmE0ZjRmYTE1NzkwZDYwZDJlNTIzN2UiIG1haW50YWluZXI9IiIKPGRl ZmluZS10YWcgZGVzY3JpcHRpb24+TWlzZSDDoCBqb3VyIGRlIHPDqWN1cml0w6k8L2RlZmlu ZS10YWc+CjxkZWZpbmUtdGFnIG1vcmVpbmZvPgo8cD5VbiBkw6lwYXNzZW1lbnQgZGUgdGFt cG9uIGEgw6l0w6kgZMOpY291dmVydCBkYW5zIGxlIGNvZGUgdmhvc3QgZGUgRFBESywgdW4K ZW5zZW1ibGUgZGUgYmlibGlvdGjDqHF1ZXMgcG91ciBsZSB0cmFpdGVtZW50IHJhcGlkZSBk ZSBwYXF1ZXRzLCBxdWkKcG91dmFpdCBhdm9pciBwb3VyIGNvbnPDqXF1ZW5jZXMgdW4gZMOp bmkgZGUgc2VydmljZSBvdSBsJ2V4w6ljdXRpb24gZGUgY29kZQphcmJpdHJhaXJlIHBhciBk ZXMgY2xpZW50cyBvdSBkZXMgY29udGVuZXVycyBtYWx2ZWlsbGFudHMuPC9wPgoKPHA+UG91 ciBsYSBkaXN0cmlidXRpb24gc3RhYmxlIChCdWxsc2V5ZSksIGNlcyBwcm9ibMOobWVzIG9u dCDDqXTDqSBjb3JyaWfDqXMKZGFucyBsYSB2ZXJzaW9uwqAyMC4xMS42LTF+ZGViMTF1MS48 L3A+Cgo8cD5Ob3VzIHZvdXMgcmVjb21tYW5kb25zIGRlIG1ldHRyZSDDoCBqb3VyIHZvcyBw YXF1ZXRzIGRwZGsuPC9wPgoKPHA+UG91ciBkaXNwb3NlciBkJ3VuIMOpdGF0IGTDqXRhaWxs w6kgc3VyIGxhIHPDqWN1cml0w6kgZGUgZHBkaywgdmV1aWxsZXoKY29uc3VsdGVyIHNhIHBh Z2UgZGUgc3VpdmkgZGUgc8OpY3VyaXTDqSDDoCBsJ2FkcmVzc2XCoDoKPGEgaHJlZj0iaHR0 cHM6Ly9zZWN1cml0eS10cmFja2VyLmRlYmlhbi5vcmcvdHJhY2tlci9kcGRrIj5cCmh0dHBz Oi8vc2VjdXJpdHktdHJhY2tlci5kZWJpYW4ub3JnL3RyYWNrZXIvZHBkazwvYT4uPC9wPgo8 L2RlZmluZS10YWc+CgojIGRvIG5vdCBtb2RpZnkgdGhlIGZvbGxvd2luZyBsaW5lCiNpbmNs dWRlICIkKEVOR0xJU0hESVIpL3NlY3VyaXR5LzIwMjIvZHNhLTUyMjIuZGF0YSIKIyAkSWQ6
    ICQK
    --------------24ZM3hqOhYDTG431OxJQ3LTp
    Content-Type: text/vnd.wap.wml; charset=UTF-8; name="dsa-5220.wml" Content-Disposition: attachment; filename="dsa-5220.wml" Content-Transfer-Encoding: base64

    I3VzZSB3bWw6OmRlYmlhbjo6dHJhbnNsYXRpb24tY2hlY2sgdHJhbnNsYXRpb249IjVlZmY5 NzM5OGI0MzRhOTM0ODI0N2NkMTM5NWYxNGFiOWMwMDJhNjYiIG1haW50YWluZXI9IkplYW4t UGllcnJlIEdpcmF1ZCIKPGRlZmluZS10YWcgZGVzY3JpcHRpb24+TWlzZSDDoCBqb3VyIGRl IHPDqWN1cml0w6k8L2RlZmluZS10YWc+CjxkZWZpbmUtdGFnIG1vcmVpbmZvPgo8cD5MZXMg dnVsbsOpcmFiaWxpdMOpcyBzdWl2YW50ZXMgb250IMOpdMOpIGTDqWNvdXZlcnRlcyBkYW5z IGxlIG1vdGV1ciB3ZWIKV1BFIFdlYktpdMKgOjwvcD4KCjx1bD4KCjxsaT48YSBocmVmPSJo dHRwczovL3NlY3VyaXR5LXRyYWNrZXIuZGViaWFuLm9yZy90cmFja2VyL0NWRS0yMDIyLTMy ODkzIj5DVkUtMjAyMi0zMjg5MzwvYT4KCjxwPlVuIGNoZXJjaGV1ciBhbm9ueW1lIGEgZMOp Y291dmVydCBxdWUgbGUgdHJhaXRlbWVudCBkJ3VuIGNvbnRlbnUgd2ViCmNvbnRyZWZhaXQg cG91dmFpdCBjb25kdWlyZSDDoCBsJ2V4w6ljdXRpb24gZGUgY29kZSBhcmJpdHJhaXJlLiBB cHBsZSBhIMOpdMOpCmluZm9ybcOpIGQndW4gcmFwcG9ydCBpbmRpcXVhbnQgcXVlIGNlIHBy b2Jsw6htZSBhIMOpdMOpIGFjdGl2ZW1lbnQgZXhwbG9pdMOpLjwvcD48L2xpPgoKPC91bD4K CjxwPlBvdXIgbGEgZGlzdHJpYnV0aW9uIHN0YWJsZSAoQnVsbHNleWUpLCBjZSBwcm9ibMOo bWUgYSDDqXTDqSBjb3JyaWfDqSBkYW5zIGxhCnZlcnNpb27CoDIuMzYuNy0xfmRlYjExdTEu PC9wPgoKPHA+Tm91cyB2b3VzIHJlY29tbWFuZG9ucyBkZSBtZXR0cmUgw6Agam91ciB2b3Mg cGFxdWV0cyB3cGV3ZWJraXQuPC9wPgoKPHA+UG91ciBkaXNwb3NlciBkJ3VuIMOpdGF0IGTD qXRhaWxsw6kgc3VyIGxhIHPDqWN1cml0w6kgZGUgd3Bld2Via2l0LCB2ZXVpbGxlegpjb25z dWx0ZXIgc2EgcGFnZSBkZSBzdWl2aSBkZSBzw6ljdXJpdMOpIMOgIGwnYWRyZXNzZcKgOgo8 YSBocmVmPSJodHRwczovL3NlY3VyaXR5LXRyYWNrZXIuZGViaWFuLm9yZy90cmFja2VyL3dw ZXdlYmtpdCI+XApodHRwczovL3NlY3VyaXR5LXRyYWNrZXIuZGViaWFuLm9yZy90cmFja2Vy L3dwZXdlYmtpdDwvYT4uPC9wPgo8L2RlZmluZS10YWc+CgojIGRvIG5vdCBtb2RpZnkgdGhl IGZvbGxvd2luZyBsaW5lCiNpbmNsdWRlICIkKEVOR0xJU0hESVIpL3NlY3VyaXR5LzIwMjIv ZHNhLTUyMjAuZGF0YSIKIyAkSWQ6ICQK
    --------------24ZM3hqOhYDTG431OxJQ3LTp
    Content-Type: text/vnd.wap.wml; charset=UTF-8; name="dsa-5219.wml" Content-Disposition: attachment; filename="dsa-5219.wml" Content-Transfer-Encoding: base64

    I3VzZSB3bWw6OmRlYmlhbjo6dHJhbnNsYXRpb24tY2hlY2sgdHJhbnNsYXRpb249IjIzZmFm MzExYzU2MDljYTVmM2U4ZjdiODNmZjYwNzc3MWQ0OGFkMzciIG1haW50YWluZXI9IkplYW4t UGllcnJlIEdpcmF1ZCIKPGRlZmluZS10YWcgZGVzY3JpcHRpb24+TWlzZSDDoCBqb3VyIGRl IHPDqWN1cml0w6k8L2RlZmluZS10YWc+CjxkZWZpbmUtdGFnIG1vcmVpbmZvPgo8cD5MZXMg dnVsbsOpcmFiaWxpdMOpcyBzdWl2YW50ZXMgb250IMOpdMOpIGTDqWNvdXZlcnRlcyBkYW5z IGxlIG1vdGV1ciB3ZWIKV2ViS2l0R1RLwqA6PC9wPgoKPHVsPgoKPGxpPjxhIGhyZWY9Imh0 dHBzOi8vc2VjdXJpdHktdHJhY2tlci5kZWJpYW4ub3JnL3RyYWNrZXIvQ1ZFLTIwMjItMzI4 OTMiPkNWRS0yMDIyLTMyODkzPC9hPgoKPHA+VW4gY2hlcmNoZXVyIGFub255bWUgYSBkw6lj b3V2ZXJ0IHF1ZSBsZSB0cmFpdGVtZW50IGQndW4gY29udGVudSB3ZWIKY29udHJlZmFpdCBw b3V2YWl0IGNvbmR1aXJlIMOgIGwnZXjDqWN1dGlvbiBkZSBjb2RlIGFyYml0cmFpcmUuIEFw cGxlIGEgw6l0w6kKaW5mb3Jtw6kgZCd1biByYXBwb3J0IGluZGlxdWFudCBxdWUgY2UgcHJv YmzDqG1lIGEgw6l0w6kgYWN0aXZlbWVudCBleHBsb2l0w6kuPC9wPjwvbGk+Cgo8L3VsPgoK PHA+UG91ciBsYSBkaXN0cmlidXRpb24gc3RhYmxlIChCdWxsc2V5ZSksIGNlIHByb2Jsw6ht ZSBhIMOpdMOpIGNvcnJpZ8OpIGRhbnMgbGEKdmVyc2lvbsKgMi4zNi43LTF+ZGViMTF1MS48 L3A+Cgo8cD5Ob3VzIHZvdXMgcmVjb21tYW5kb25zIGRlIG1ldHRyZSDDoCBqb3VyIHZvcyBw YXF1ZXRzIHdlYmtpdDJndGsuPC9wPgoKPHA+UG91ciBkaXNwb3NlciBkJ3VuIMOpdGF0IGTD qXRhaWxsw6kgc3VyIGxhIHPDqWN1cml0w6kgZGUgd2Via2l0Mmd0aywgdmV1aWxsZXoKY29u c3VsdGVyIHNhIHBhZ2UgZGUgc3VpdmkgZGUgc8OpY3VyaXTDqSDDoCBsJ2FkcmVzc2XCoDoK PGEgaHJlZj0iaHR0cHM6Ly9zZWN1cml0eS10cmFja2VyLmRlYmlhbi5vcmcvdHJhY2tlci93 ZWJraXQyZ3RrIj5cCmh0dHBzOi8vc2VjdXJpdHktdHJhY2tlci5kZWJpYW4ub3JnL3RyYWNr ZXIvd2Via2l0Mmd0azwvYT4uPC9wPgo8L2RlZmluZS10YWc+CgojIGRvIG5vdCBtb2RpZnkg dGhlIGZvbGxvd2luZyBsaW5lCiNpbmNsdWRlICIkKEVOR0xJU0hESVIpL3NlY3VyaXR5LzIw MjIvZHNhLTUyMTkuZGF0YSIKIyAkSWQ6ICQK

    --------------24ZM3hqOhYDTG431OxJQ3LTp--

    --------------H5qpX42AmGHMfVe3g6VLOjXF--

    -----BEGIN PGP SIGNATURE-----

    wsF5BAABCAAjFiEEcH/R3vmpi4JWBoDfeBP2a44wMXIFAmMPjjkFAwAAAAAACgkQeBP2a44wMXLM QhAAl3X6PjUkidxH4R/jU6p1Hp9peTNeYQYHL9YhO3StHk1SWZoHISmXXUgp57Ig32yVo744EQJh NjzHmKRovhpxwzJ+X2mSQZfNVZZ5kCRzaLDkh+qSdNcMkJ+T6kd7Dh5OB5nArDLvuM7tnryFjbJN yXH7PjIcSal/kPFvO3cQVOrV/9dbFQ7iGMHdBHZE4Ehm0vjJoWaYr+ENJHHI5Hs3cM6+Q75T2+ZK h5qjLb6II3edESAu/ZWbo1I4TSrLrmJX1BB6l3txg49uhXvdER/T07oa10UQShLyXzNOqLZT2fuy i3PJu+yfxb/NKeqg8m5rEuO9DAtR0wajZrqtjkO2kVhWmxpn3/v60fRIbWYhhGhqVJMmdqd8VK6v hUnWLpi4Gv6AiieLjHx/k5ghZSZ4iqc4rW7g5txOdH9mTBBTFKdtFEaHUMJhwMR/TucznmfrIGkx 748xsbs8shsaFT6kV2SxzUjrwHhmDDh1+yIo1QEdU34s3ANXv8FOWZ0bE5e77WibW3g6USmEZ455 4C/0ghQsJKuf+2EpX5LDfXnMo8g52l5HAzrALJEKo6XE10ZKWwagmnPZTCTQPk9YB7nUXpbdXOsH 6DyPGU2g4gBqYA0sUgbRnpnwq1n5KvAT2T0Zx8rU3wTPySTT5vSz8XmH3VVS9cFIbs8WjH9morav m+Y=
    =y6M2
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From bubub@no-log.org@21:1/5 to All on Wed Aug 31 20:20:01 2022
    Bonjour,

    trois nouvelles annonces de sécurité ont été publiées. En voici une traduction. Merci d'avance pour vos relectures.
    Amicalement,
    jipege

    une suggestion tant pour la dsa 19 que la 20;

    amicalement,
    bubu
    --- dsa-5219.wml 2022-08-31 20:03:37.306354049 +0200
    +++ dsa-5219.relu.wml 2022-08-31 20:05:50.000422987 +0200
    @@ -10,7 +10,7 @@

    <p>Un chercheur anonyme a découvert que le traitement d'un contenu web
    contrefait pouvait conduire à l'exécution de code arbitraire. Apple a été -informé d'un rapport indiquant que ce problème a été activement exploité.</p></li>
    +informé, par un rapport, indiquant que ce problème a été activement exploité.</p></li>

    </ul>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Md@21:1/5 to All on Thu Sep 1 08:50:01 2022
    Le mercredi 31 août 2022 à 20:10 +0200, bubub@no-log.org a écrit :
    Bonjour,

    trois nouvelles annonces de sécurité ont été publiées. En voici une traduction. Merci d'avance pour vos relectures.
    Amicalement,
    jipege


    une suggestion tant pour la dsa 19 que la 20;

    amicalement,
    bubu

    Bonjour Bubu & JiP

    mon amicale préférence :

    ......Apple a été informée de l'exploitation active de ce problème.....

    Avec les bonnes balises of course.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEErl9eUc9FdsspUlEe4HEr1yIeQ/MFAmMQVEQACgkQ4HEr1yIe Q/M52g//cAqPEkPPugJIyi01boLovFyNooliTcCP04GDOZYfzrBNvn/Yx1aapE0h oqVKj0F9aeiMGpGFkTl/hwMXDl9LiSJE7qrXf0wT0mPBgdml4Hh2+eIIH2kwYlic 7nWmcrzbq/pfgsp9k6K4lmIlp8mTXWxcuaKR7X/2wVqjeea5MHeLHOVhToQFhLpy iuXim5h2rW05tupPK8s3tuBRLobRpHB2oXrZfrChtBy2E+s6BendC+laBpWflrTx YGpAAq8ZqmUbuvxEmqz3Rwtl1YIKltwEQHIJMQbGNAn1k5IFGfzOccDLYdxDCC6g Nn1gxJYGGdyYIEkJCqXMR4R0OuTEup7deIMiUuByIHuQY5Q/oNZouzXdxS5Nqcru Rgv7QNYXkh0RoFwAfhPJHDNCf7MEj003relKX7joWbhztfu3gDAX1c2kldqgoXVK zqA396Nt9rsTbH/Mwgy9oy6NPDaB+6fYLIakCfDjl5MU5Q7iXJy78Da/nU4ZdwS2 exOvi0ScTLyNqnJqLYsj1Do6C30WmUtm1tZIcCSEOk/0KFh54Aw49cAJ12JNZvc2 NaUy3gwemGhd0fqKQ6TlkcS+W5cHIzAjOB+UIvkSpVtPaYGmLEcAtFz1ygNoM6gE csJmB/nzQXZd0dym7ccg8/1OdTgd2+2fU4fwFrRBDOFqZYwyLhw=
    =rkEX
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)