mojarra-2.2.13-patched

Mojarra 2.2.13 – CVE-2020-6950 Backport This repository contains a reproducible backport of the fix for CVE-2020-6950 to Mojarra 2.2.13. It exists primarily for traceability and for maintaining legacy applications which, for compatibility reasons, cannot simply be upgraded to a newer JSF/Mojarra...

Joomla-3.10.12-languagehelper-hotfix

ESTE REPO ESTÁ OBSOLETO Y DEBERÍAS USAR ESTE EN SU LUGAR: https://github.com/TLWebdesign/Joomla-3-EOL-Security-Fixes Joomla-3.10.12 LanguageHelper.php Parche Temporal Este pequeño plugin te ayudará a actualizar el archivo LanguageHelper con la corrección de seguridad que backporté desde Joomla...

Oracle Linux 8 : ELSA-2026-62571-0: / freerdp (ELSA-2026-625710)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-625710 advisory. 2:2.11.7-12 - Backport several CVE fixes CVE-2026-55194, CVE-2026-67288, CVE-2026-67291, CVE-2026-67301 Resolves: RHEL-225093, RHEL-227724,...

Oracle Linux 9 : ELSA-2026-61379-0: / freerdp (ELSA-2026-613790)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-613790 advisory. 2:2.11.7-7.6 - Backport several CVE fixes CVE-2026-55194, CVE-2026-67288, CVE-2026-67291, CVE-2026-67301 Resolves: RHEL-225096, RHEL-227729,...

CveTest

CveTest Caso de prueba para replicar el fallo de Node.JS V0.10.31 v8 backport CVE-2013-6668 . La prueba llama a un procedimiento almacenado SQL "GetSomething" para recuperar datos de una tabla "Table1" en la base de datos "SQLDB". El fallo ocurre cuando se devuelven más de 52 filas y después de...

jq-els-backport-cve-2025-48060

jq-els-backport-cve-2025-48060 Backport de la corrección upstream para CVE-2025-48060 desbordamiento de búfer de heap en jvstringempty a jq 1.6. Backport CVE-2025-48060 – Backport del commit upstream c6e0416 “Corrección de desbordamiento de búfer de heap al formatear una cadena vacía” desde una...

openvz-cve-patch-2026

GhostLock - Parche backport de CVE-2026-43499 para openVZ 7 Parche backport de CVE-2026-43499 para el kernel de openVZ 7 vzkernel-3.10.0-1160.129.1.ovz7.226.2 Dado que el equipo de OpenVZ no ha implementado un parche para el kernel de OpenVZ todavía, con la ayuda de Claude he creado este y parece...

JavaScript-Example

Seal Security — Ejemplo JavaScript npm Una aplicación Node.js/Express mínima e intencionadamente vulnerable, utilizada para demostrar, de extremo a extremo, cómo Seal Security remedia un CVE conocido reemplazando una dependencia vulnerable por una versión sellada con backport, de sustitución...

mistune-patch-backport

Patch CVE-2021-1748 per iOS = 14.3 La causa principale di CVE-2021-1748 è che l'app si fida di URI di dati arbitrari e li carica in una WebView locale. Questo tweak porta indietro la patch per iOS = 14.3 intercettando l'URI data:. Si noti che esiste ancora una potente variante del bug. Questa pat...

Oracle Linux 7 : libreoffice (ELSA-2026-46386)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-46386 advisory. - Backport fix for CVE-2026-4430 Orabug: 39791243 - Backport fix for CVE-2026-8357 Orabug: 39791243 Tenable has extracted the preceding description...

Astra Linux – Vulnerability in Xen

A issue was discovered in Xen through version 4.11.x, allowing users of x86 Intel HVM guest operating systems to obtain unintended read/write DMA access. This could potentially lead to a denial of service causing the host operating system to crash or result in privilege escalation. This issue...

Astra Linux – Vulnerability in Python 3.7, Python 2.7

In Python aka CPython, up to version 3.10.8, the mailcap module does not add escape characters to commands found in the system’s mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input if those commands lack validation of...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: usb: musb: dsps: Fix the probe error path The commit 7c75bde329d7 “usb: musb: musbdsps: requestirq after initializing musb” has corrected the calls to dspssetupoptionalvbusirq and dspscreatemusbpdev, but it did not update the err...

Astra Linux – Vulnerability in Heimdal

The fix for CVE-2022-3437 involved changing the memcmp function to run in constant time, as well as providing a workaround for a compiler bug by adding comparisons of the result with the value “!= 0” to the memcmp function. When these patches were backported to the heimdal-7.7.1 and heimdal-7.8.0...

Astra Linux – Vulnerability in Redis

Redis is an open-source, in-memory database that persists data on disk. In affected versions of Redis, a integer overflow bug in the 32-bit Redis version 4.0 or newer can be exploited to corrupt the heap and potentially lead to remote code execution. Redis 4.0 or newer uses a configurable limit f...

libssh security update

0.12.0-3 - Backport CVE fixes from 0.12.2 Resolves: RHEL-213004 Resolves: RHEL-213029 Resolves: RHEL-213032 Resolves: RHEL-213039 Resolves: RHEL-213046 Resolves: RHEL-213079 Resolves: RHEL-213112 Resolves: RHEL-213117 Resolves: RHEL-213148 Resolves: RHEL-213150 Resolves: RHEL-213175...

gnome-remote-desktop security update

49.3-4 - Backport connection throttling...

RHSA-2026:52833 Red Hat Security Advisory: RHELAI 3.2 Backport fixes for CVE-2026-64835 and CVE-2026-58049

Bulletin has no description...

RHSA-2026:52832 Red Hat Security Advisory: RHELAI 3.0 Backport fixes for CVE-2026-64835 and CVE-2026-58049

Bulletin has no description...

Oracle Linux 7 : dovecot (ELSA-2026-49513)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-49513 advisory. - Backport fix for CVE-2026-42006 Orabug: 39820967 - Backport fix for CVE-2025-59032 Orabug: 39573795 - Backport fix for CVE-2026-27856 Orabug: 39573795 -...