subversion: Fix of CVE-2024-46901

CVE-2024-46901: fix moddavsvn denial-of-service via control characters in paths...

java-1.7.0-openjdk: Fix of 11 CVEs

CVE-2024-20952: Enhance TLS connection support JDK-8317547, JDK-8302017 - CVE-2025-21587: Better TLS connection support JDK-8337692 - CVE-2026-34268: Enhance key generation JDK-8371935 - CVE-2026-22007: Enhance crypto algorithm support JDK-8369575 - CVE-2026-21925: Improve JMX connections...

expat: Fix of CVE-2026-56131

CVE-2026-56131: fix use-after-free caused by XMLResumeParser being callable from inside a handler, which re-enters the parser while the outer frame still owns bufferPtr/eventPtr...

openssl: Fix of 5 CVEs

CVE-2026-7383: fix signed integer overflow when sizing Unicode output in ASN1mbstringncopy - CVE-2026-9076: fix heap out-of-bounds read in kekunwrapkey check-byte validation - CVE-2026-28388: fix NULL pointer dereference when delta CRL lacks the CRL Number extension - CVE-2026-34180: avoid length...

php: Fix of 2 CVEs

CVE-2026-7260: fix stack exhaustion via unbounded recursion on circular symlinks in phar archives - CVE-2026-9672: fix use of uninitialised LZW table data in bundled libgd GIF decoder...

curl: Fix of CVE-2026-8286

CVE-2026-8286: fix connection reuse for STARTTLS with mismatching TLS config...

glib2: Fix of CVE-2025-13601

CVE-2025-13601: error out instead of overflowing the allocation in gescapeuristring when a string needs a very large number of percent-escapes, and count unacceptable characters in an unsigned type...

python: Fix of CVE-2026-11972

CVE-2026-11972: fix an unbounded loop CPU DoS in the tarfile module when a member header in a streaming-mode archive mode="r|" declares a huge size, by breaking out of the Stream.seek read loop at EOF...

httpd: Fix of CVE-2026-44186

CVE-2026-44186: modproxyftp: infinite loop in proxyftphandler when scanning an FTP 120 greeting for a Retry-After delta-seconds value; the scan loop never advanced secsstr, so it spun forever on any greeting that did not begin with a digit, letting a backend FTP server hang worker processes...

nginx: Fix of CVE-2026-49975

CVE-2026-49975: improve the maxheaders patch to preserve binary compatibility with externally-built nginx modules...

vim: Fix of CVE-2026-25749

CVE-2026-25749: bound the copy of the 'helpfile' option value in gettagfname so an over-long value cannot overflow the MAXPATHL buffer, reserving room for the "tags" tail appended right after upstream 9.1.2132...

clamav: Fix of 6 CVEs

CVE-2026-20213: fix Aspack-triggered PE rebuild integer overflow leading to heap buffer overflow write - CVE-2026-20214: fix FSG unpacker section loop underflow leading to out-of-bounds write - CVE-2026-20215: fix 7z substream count overflow leading to heap under-allocation and out-of-bounds...

java-1.7.0-openjdk: Fix of 6 CVEs

CVE-2026-47063: Enhance Jar handling JDK-8381049...

openssl: Fix of CVE-2026-54874

CVE-2026-54874: avoid buffering the whole DTLS read buffer for a record arriving early for the next epoch, capping per-connection memory amplification...

kernel: Fix of 2 CVEs

sctp: don't free the ASCONF's own transport in DEL-IP processing CVE-2026-64564 - NFSv4: include MAYWRITE in open permission mask for OTRUNC CVE-2026-64298...

bind: Fix of 2 CVEs

CVE-2026-13321: Reject NSEC records whose next owner name points outside the signer's zone, which let a signed zone forge proofs of non-existence for other zones - CVE-2026-11622: Reference count the cache rdataset headers so a superseded generation is freed as soon as nothing holds it, instead...