1412 matches found
CveTest
CveTest Test case to replicate Node.JS V0.10.31 v8 backport CVE-2013-6668 crash. Test calls a SQL stored procedure "GetSomething" to retrieve data from a table "Table1" in "SQLDB" database. Crash occurs when there is more than 52 rows returned and after making the same call several times...
ovpn-kernel-backport
OpenVPN kernel module backport review Documentation of a local build, functional tests, focused source review and deterministic VPN-IP and transport-endpoint rehash invariant regression tests of the upstream fix associated with CVE-2026-74727, against Ubuntu kernel source package linux 7.0.0-38.3...
mojarra-2.2.13-patched
Mojarra 2.2.13 – CVE-2020-6950 Backport This repository contains a reproducible backport of the fix for CVE-2020-6950 to Mojarra 2.2.13. It exists primarily for traceability and for maintaining legacy applications which, for compatibility reasons, cannot simply be upgraded to a newer JSF/Mojarra...
openvz-cve-patch-2026
GhostLock - CVE-2026-43499 backport patch for openVZ 7 CVE-2026-43499 backport patch for openVZ 7 kernel vzkernel-3.10.0-1160.129.1.ovz7.226.2 Since OpenVZ team didnt deploy patch for OpenVZ kernel yet with help of Claude i've created this one and it seems to work! ive tested it on two servers in...
jq-els-backport-cve-2025-48060
jq-els-backport-cve-2025-48060 Backported the upstream fix for CVE-2025-48060 heap buffer overflow in jvstringempty to jq 1.6. Backport CVE-2025-48060 – Backported upstream commit c6e0416 “Fix heap buffer overflow when formatting an empty string” from a newer jq version to jq-1.6, adapting intern...
Joomla-3.10.12-languagehelper-hotfix
THIS REPO IS OBSOLETE AND YOU SHOULD USE THIS ONE INSTEAD: https://github.com/TLWebdesign/Joomla-3-EOL-Security-Fixes Joomla-3.10.12 LanguageHelper.php Hotfix This little plugin will help you update the LanguageHelper file with the security fix i backported from Joomla 4.4.1 More info on the...
Fedora 44 : python-pillow (2026-719fffc96a)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-719fffc96a advisory. Backport fix for CVE-2026-112900. ---- Backport fix for CVE-2026-112398 ---- Backport fix for CVE-2026-112393. Tenable has extracted the preceding...
Fedora 45 : python-pillow (2026-be73b9861d)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-be73b9861d advisory. Backport fix for CVE-2026-112900. ---- Backport fix for CVE-2026-112398 ---- Backport fix for CVE-2026-112393. ---- Backport fix for CVE-2026-112892...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
English This repository contains unofficial source backpo...
CLSA-2026-1777641037 kernel-uek: Fix of CVE-2026-31431
crypto: algifaead - Fix minimum RX size check for decryption CVE-2026-31431 - crypto: afalg - Fix page reassignment overflow in afalgpulltsgl CVE-2026-31431 - crypto: authencesn - reject too-short AAD assoclen8 to match ESP/ESN spec CVE-2026-31431 - crypto: authencesn - Fix src offset when...
Astra Linux – vulnerability in linux-6.12, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlbpmdshared Patch series “mm/hugetlb: fixes for PMD table sharing including using mmugather”, version v3. One functional fix, one performance regression fix, and two related comment fixes. I cleaned up my...
Astra Linux – vulnerability in linux-6.12
In the Linux kernel, the following vulnerability has been resolved: iio: frequency: admv1013: fix NULL pointer dereference on str When devicepropertyreadstring fails, str remains uninitialized; however, the code proceeds to strcmpstr, ..., dereferencing a null pointer. Replace manual read/strcmp...
Astra Linux – vulnerability in linux-6.1, linux-6.12
In the Linux kernel, the following vulnerability has been resolved: erofs: fix unsigned underflow in zerofslz4handleoverlap Some crafted images can have illegal !partialdecoding && mllen out access reads past the decompressedpages array. However, such crafted cases can correctly result in a...
Astra Linux – vulnerability in python3.7, python2.7
In Python aka CPython up to 3.10.8, the mailcap module does not add escape characters to commands found in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input if they lack validation of user-provided filenam...
Astra Linux – vulnerability in Redis
Redis is an open-source, in-memory database that persists data on disk. In affected versions of Redis, an integer overflow vulnerability in 32-bit Redis versions 4.0 or later can be exploited to corrupt the heap, potentially leading to remote code execution. Redis 4.0 or newer includes a...
Astra Linux – Vulnerability in Heimdal
The fix for CVE-2022-3437 involved changing the memcmp function to run in constant time, as well as providing a workaround for a compiler bug by adding comparisons of the result with the value “!= 0” to the memcmp function. When these patches were backported to the heimdal-7.7.1 and heimdal-7.8.0...
CLSA-2026-1790601667 Update of udisks2
rebase to 2.8.4-1.0.1.el7 - drop the 1 TuxCare CVE backport; the vendor now ships its own patch for it - no TuxCare CVE patches remain...
PT-2026-123581
rebase to 1.8.3.1-25.0.1.el7 9 - drop the 1 TuxCare CVE backport; 1.8.3.1 already incorporates it - no TuxCare CVE patches remain; the .tuxcare.elsN suffix keeps the ELS channel authoritative...
PT-2026-123555
rebase to 1.8.3.1-25.0.1.el7 9 - drop the 1 TuxCare CVE backport; 1.8.3.1 already incorporates it - no TuxCare CVE patches remain; the .tuxcare.elsN suffix keeps the ELS channel authoritative...
