Joomla-3.10.12-languagehelper-hotfix

이 저장소는 더 이상 사용되지 않습니다. 대신 이 저장소를 사용하세요: https://github.com/TLWebdesign/Joomla-3-EOL-Security-Fixes Joomla-3.10.12 LanguageHelper.php Hotfix 이 작은 플러그인은 Joomla 4.4.1에서 백포팅한 보안 수정으로 LanguageHelper 파일을 업데이트하는 데 도움을 줍니다. 취약점에 대한 자세한 정보는 여기:...

mojarra-2.2.13-patched

Mojarra 2.2.13 – CVE-2020-6950 バックポート このリポジトリには、CVE-2020-6950 の修正を Mojarra 2.2.13 に適用した再現可能なバックポートが含まれています。 これは主にトレーサビリティと、互換性の理由から新しい JSF/Mojarra リリースに単純にアップグレードできないレガシーアプリケーションの保守を目的として存在します。 クレジットとアップストリームソース Mojarra Mojarra は JavaServer Faces JSF のリファレンス実装であり、元々は GlassFish/Java EE...

CveTest

CveTest Node.JS V0.10.31 v8 backport CVE-2013-6668 충돌을 재현하는 테스트 케이스입니다. 테스트는 "SQLDB" 데이터베이스의 "Table1" 테이블에서 데이터를 검색하기 위해 SQL 저장 프로시저"GetSomething"를 호출합니다. 동일한 호출을 여러 번 수행한 후 52개 이상의 행이 반환되면 충돌이 발생합니다. 환경 Windows 7 64비트 MS SQL 2005 Node.JS V0.10.31 x64 tedious node module V1.4.3 또는 이전 다양한 Node 버전에...

jq-els-backport-cve-2025-48060

jq-els-backport-cve-2025-48060 상위 버전에서 CVE-2025-48060heap buffer overflow in jvstringempty 수정을 jq 1.6으로 백포트했습니다. 백포트 CVE-2025-48060 – 상위 커밋 c6e0416 “빈 문자열 형식화 시 힙 버퍼 오버플로우 수정”을 최신 jq 버전에서 jq-1.6으로 백포트, 내부 문자열 표현jvstringempty을 조정하고, 회귀 테스트0implode를 추가했으며, 성공적으로 재빌드 및 테스트 스위트를 실행했습니다. 이 패치 적용 방법 공식...

openvz-cve-patch-2026

GhostLock - CVE-2026-43499 backport patch for openVZ 7 CVE-2026-43499 backport patch for openVZ 7 kernel vzkernel-3.10.0-1160.129.1.ovz7.226.2 Since OpenVZ team didnt deploy patch for OpenVZ kernel yet with help of Claude i've created this one and it seems to work! ive tested it on two servers in...

libsoup security update

2.62.3-15 - Backport patch for CVE-2026-15711...

unbound security update

1.24.2-3.6 - Backport additional fix from 1.26.0 CVE-2026-50252 1.24.2-3.5 - Fix CVE-2026-50252 RHEL-243479...

rsyslog security update

8.2510.0-5.1 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: Un-sharing of page tables occurs during VMA splitting, not before. Currently, splitvma triggers the un-sharing of hugetlb page tables through vmops-maysplit. This occurs before the VMA lock and rmap locks are taken –...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fs: Relaxing the assertions when encoding file handles fails Encoding file handles is typically performed by a filesystem method called encodefh, which may fail for various reasons. Legacy users of exportfsencodefh—specifically,...

Astra Linux – Vulnerability in Python 3.7, Python 2.7

In Python aka CPython, up to version 3.10.8, the mailcap module does not add escape characters to commands found in the system’s mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input if those commands lack validation of...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: xfs: Do not propagate ENODATA disk errors into the xattr code. ENODATA also known as ENOATTR has a very specific meaning in the xfs xattr code: it indicates that the requested attribute name could not be found. However, a medium...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Networks: Ethernet: lantiqetop – fixed memory disclosure issues. When padding packets, the buffer is not zeroed, resulting in memory disclosure. The affected data is visible on the network. This patch uses skbputpadto to properly...

Astra Linux – Vulnerability in Xen

A issue was discovered in Xen through version 4.11.x, allowing users of x86 Intel HVM guest operating systems to obtain unintended read/write DMA access. This could potentially lead to a denial of service host operating system crash or privilege escalation. This issue arises because a backport...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bpf: Fixed an issue in verifying allowptrleaks. After we changed the capabilities of our networking-bpf program from capsysadmin to capnetadmin+capbpf, our networking-bpf program failed to start. This was because it failed the bp...

Astra Linux – Vulnerability in Heimdal

The fix for CVE-2022-3437 involved changing the memcmp function to run in constant time, as well as providing a workaround for a compiler bug by adding comparisons of the result with the value “!= 0” to the memcmp function. When these patches were backported to the heimdal-7.7.1 and heimdal-7.8.0...

Astra Linux – Vulnerability in Redis

Redis is an open-source, in-memory database that persists data on disk. In affected versions of Redis, a integer overflow bug in the 32-bit Redis version 4.0 or newer can be exploited to corrupt the heap, potentially leading to remote code execution. Redis 4.0 or newer includes a configurable lim...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: TCP: TX zerocopy should not access the pfmemalloc status. We received a recent syzbot report 1 indicating a possible misuse of the page status in TCP zerocopy paths. Indeed, for pages originating from user space or other layers,...

Fedora 45 : freerdp2 (2026-20b7d49f70)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-20b7d49f70 advisory. Backport several CVE fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

kernel security update

6.12.0-211.54.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...