CLSA-2025-1758743212 cups: Fix of CVE-2023-4504

CVE-2023-4504: check for null terminator after a backslash...

CLSA-2025-1758645976 dovecot: Fix of CVE-2020-12673

CVE-2020-12673: fix reading past buffer...

CLSA-2025-1758635382 openssl: Fix of CVE-2023-3446

CVE-2023-3446: fix DHcheck excessive time with over sized modulus...

CLSA-2025-1757690876 glibc: Fix of CVE-2019-9169

CVE-2019-9169: fix heap-based buffer over-read in proceednextnode in posix/regexec.c...

CLSA-2025-1757663366 git: Fix of CVE-2024-50349

CVE-2024-50349: fix ANSI escape sequence vulnerability that occurs when asking for credentials interactively...

CLSA-2025-1757500267 python3.9: Fix of CVE-2025-8194

CVE-2025-8194: fix tarfile deadlock/infinite loop by rejecting negative member offsets...

CLSA-2025-1757014622 squid34: Fix of CVE-2025-54574

CVE-2025-54574: fix buffer overflow in URN handling...

CLSA-2025-1757010850 squid: Fix of CVE-2025-54574

CVE-2025-54574: fix heap buffer overflow in URN parsing...

CLSA-2025-1756928002 iperf3: Fix of CVE-2024-53580

CVE-2024-53580: fix segmentation violation in iperfexchangeparameters function...

K000153040: Python urllib vulnerability CVE-2019-9740

Security Advisory Description An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n specifically in the...

CLSA-2025-1755004236 dmidecode: Fix of CVE-2023-30630

CVE-2023-30630: do not let --dump-bin overwrite an existing file...

CLSA-2025-1754939766 git: Fix of CVE-2024-52006

CVE-2024-52006: fix newline confusion in credential helpers that can lead to credential exfiltration...

CLSA-2025-1753953101 php: Fix of CVE-2025-1735

CVE-2025-1735: add error checking for pgsql extension escape functions, mainly to fix possible issues with multi-byte encoding of Postgres databases...

CLSA-2025-1753375058 ruby: Fix of CVE-2024-27281

CVE-2024-27281: fix object injection and remote code execution in .rdocoptions and documentation cache loading...

CLSA-2025-1752748974 git: Fix of CVE-2025-48384

CVE-2025-48384: config: quote values containing CR character...

CLSA-2025-1751142817 openssl: Fix of CVE-2024-13176

CVE-2024-13176: fix timing side-channel in ECDSA signature computation...

CLSA-2025-1751135005 curl: Fix of CVE-2024-7264

CVE-2024-7264: fix out-of-bound read in GTime2str function...

CLSA-2025-1749821936 openssh: Fix of CVE-2025-32728

CVE-2025-32728: fix logic error in DisableForwarding option...

CLSA-2025-1740823520 bind: Fix of CVE-2024-11187

CVE-2024-11187: Limit the additional processing for large RDATA sets...

CLSA-2025-1737993258 tomcat: Fix of CVE-2024-34750

CVE-2024-34750: correctly count the number of active streams...