Joomla-3.10.12-languagehelper-hotfix

이 저장소는 더 이상 사용되지 않습니다. 대신 이 저장소를 사용하세요: https://github.com/TLWebdesign/Joomla-3-EOL-Security-Fixes Joomla-3.10.12 LanguageHelper.php Hotfix 이 작은 플러그인은 Joomla 4.4.1에서 백포팅한 보안 수정으로 LanguageHelper 파일을 업데이트하는 데 도움을 줍니다. 취약점에 대한 자세한 정보는 여기:...

mojarra-2.2.13-patched

Mojarra 2.2.13 – CVE-2020-6950 バックポート このリポジトリには、CVE-2020-6950 の修正を Mojarra 2.2.13 に適用した再現可能なバックポートが含まれています。 これは主にトレーサビリティと、互換性の理由から新しい JSF/Mojarra リリースに単純にアップグレードできないレガシーアプリケーションの保守を目的として存在します。 クレジットとアップストリームソース Mojarra Mojarra は JavaServer Faces JSF のリファレンス実装であり、元々は GlassFish/Java EE...

CveTest

CveTest Node.JS V0.10.31 v8 バックポート CVE-2013-6668 のクラッシュを再現するためのテストケース。 このテストでは、"SQLDB" データベース内のテーブル（"Table1"）からデータを取得するために、SQL ストアドプロシージャ（"GetSomething"）を呼び出します。同じ呼び出しを数回行った後に、返される行が 52 行を超えるとクラッシュが発生します。 環境 Windows 7 64-bit MS SQL 2005 Node.JS V0.10.31 x64 tedious node module V1.4.3 以前 さまざまな種類の...

jq-els-backport-cve-2025-48060

jq-els-backport-cve-2025-48060 CVE-2025-48060 の上流修正（jvstringempty のヒープバッファオーバーフロー）を jq 1.6 にバックポートしました。 バックポート（CVE-2025-48060） – 新しいバージョンの jq から上流コミット c6e0416（「Fix heap buffer overflow when formatting an empty string」）を jq-1.6...

openvz-cve-patch-2026

GhostLock - openVZ 7 用 CVE-2026-43499 バックポートパッチ openVZ 7 カーネル vzkernel-3.10.0-1160.129.1.ovz7.226.2 向け CVE-2026-43499 バックポートパッチ OpenVZ チームはまだ OpenVZ カーネル向けのパッチを提供していないため、Claude の助けを借りてこのパッチを作成しました。動作しているようです!本番環境の 2 台のサーバーでテスト済みで、今のところ問題はありません root@kitploit: USAGE: git clone -b...

libsoup security update

2.62.3-15 - Backport patch for CVE-2026-15711...

unbound security update

1.24.2-3.6 - Backport additional fix from 1.26.0 CVE-2026-50252 1.24.2-3.5 - Fix CVE-2026-50252 RHEL-243479...

rsyslog security update

8.2510.0-5.1 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700...

Astra Linux – Vulnerability in Xen

A issue was discovered in Xen through version 4.11.x, allowing users of x86 Intel HVM guest operating systems to obtain unintended read/write DMA access. This could potentially lead to a denial of service host operating system crash or privilege escalation. This issue arises because a backport...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fs: Relaxing the assertions when encoding file handles fails Encoding file handles is typically performed by a filesystem method called encodefh, which may fail for various reasons. Legacy users of exportfsencodefh—specifically,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: Un-sharing of page tables occurs during VMA splitting, not before. Currently, splitvma triggers the un-sharing of hugetlb page tables through vmops-maysplit. This occurs before the VMA lock and rmap locks are taken –...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: mm/hugetlb: fixed hugetlbpmdshared. The patch series “mm/hugetlb: fixes for PMD table sharing including using mmugather”, version 3. One functional fix, one performance regression fix, and two related comment fixes. I updated ...

Astra Linux – Vulnerability in Python 3.7, Python 2.7

In Python aka CPython, up to version 3.10.8, the mailcap module does not add escape characters to commands found in the system’s mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input if those commands lack validation of...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Networks: Ethernet: lantiqetop – fixed memory disclosure issues. When padding packets, the buffer is not zeroed, resulting in memory disclosure. The affected data is visible on the network. This patch uses skbputpadto to properly...

Astra Linux – Vulnerability in Redis

Redis is an open-source, in-memory database that persists data on disk. In affected versions of Redis, a integer overflow bug in the 32-bit Redis version 4.0 or newer can be exploited to corrupt the heap, potentially leading to remote code execution. Redis 4.0 or newer includes a configurable lim...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: TCP: TX zerocopy should not access the pfmemalloc status. We received a recent syzbot report 1 indicating a possible misuse of the page status in TCP zerocopy paths. Indeed, for pages originating from user space or other layers,...

Astra Linux – Vulnerability in Heimdal

The fix for CVE-2022-3437 involved changing the memcmp function to run in constant time, as well as providing a workaround for a compiler bug by adding comparisons of the result with the value “!= 0” to the memcmp function. When these patches were backported to the heimdal-7.7.1 and heimdal-7.8.0...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: xfs: Do not propagate ENODATA disk errors into the xattr code. ENODATA also known as ENOATTR has a very specific meaning in the xfs xattr code: it indicates that the requested attribute name could not be found. However, a medium...

Fedora 45 : freerdp2 (2026-20b7d49f70)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-20b7d49f70 advisory. Backport several CVE fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

kernel security update

6.12.0-211.54.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...