601 matches found
squid34: Fix of CVE-2025-62168
CVE-2025-62168: Redact HTTP authentication credentials in error handling to prevent information disclosure...
python: Fix of CVE-2016-5636
CVE-2016-5636: fix heap-based buffer overflow in zipimport.c...
wget: Fix of CVE-2024-38428
CVE-2024-38428: fix mishandle semicolons in userinfo subcomponent of URI to prevent insecure behavior...
perl: Fix of CVE-2018-18311
CVE-2018-18311: fix buffer overflow...
sssd: Fix of CVE-2023-3758
CVE-2023-3758: fix race condition in adgpo...
mysql: Fix of 3 CVEs
CVE-2017-3636: mysqlaccess no longer loads its configuration file from the current directory BUG25043674 - CVE-2017-3651: mysql client escapes quoted database names in USE BUG25998635 - CVE-2017-10384: reject partition names whose file path exceeds FNREFLEN instead of overflowing stack buffers...
expat: Fix of CVE-2026-76957
CVE-2026-76957: fix use-after-free from calling XMLParserFree inside a custom unknown-encoding convert or release callback, by routing both through callUnknownEncodingConvert/callUnknownEncodingRelease so they are covered by the handler call depth tracking...
glib2: Fix of CVE-2025-13601
CVE-2025-13601: error out instead of overflowing the allocation in gescapeuristring when a string needs a very large number of percent-escapes, and count unacceptable characters in an unsigned type...
python: Fix of CVE-2026-11972
CVE-2026-11972: fix an unbounded loop CPU DoS in the tarfile module when a member header in a streaming-mode archive mode="r|" declares a huge size, by breaking out of the Stream.seek read loop at EOF...
libxml2: Fix of CVE-2022-49043
CVE-2022-49043: fix use-after-free in xmlXIncludeAddNode, free URI after reporting the error to avoid use-after-free...
nss: Fix of CVE-2020-25648
CVE-2020-25648: fix DoS in case of receiving multiple CCS messages - extended tests...
libxml2: Fix of CVE-2025-6021
CVE-2025-6021: fix integer overflows in buffer size calculations...
dovecot: Fix of CVE-2020-12674
CVE-2020-12674: fix mishandling of zero length in RPA request to prevent auth service crash...
dovecot: Fix of CVE-2020-12673
CVE-2020-12673: fix reading past buffer...
subversion: Fix of CVE-2024-46901
CVE-2024-46901: fix moddavsvn denial-of-service via control characters in paths...
libxml2: Fix of CVE-2025-32415
CVE-2025-32415: fix heap buffer overflow in xmlSchemaIDCFillNodeTables...
python: Fix of CVE-2026-9669
CVE-2026-9669: fix a stack buffer overflow in the bz2 module when a BZ2Decompressor object is reused after a decompression error; the decompressor now becomes unusable once libbz2 reports an error, instead of resuming from an invalid internal state...
python: Fix of CVE-2026-0864
CVE-2026-0864: fix configuration injection in the ConfigParser module by normalizing all line endings CR, CRLF and LF to LF+TAB when writing multi-line values, so a carriage return in an attacker-controlled value can no longer inject unexpected keys and values into the written file...
curl: Fix of CVE-2026-8286
CVE-2026-8286: fix connection reuse for STARTTLS with mismatching TLS config...
libxml2: Fix of CVE-2025-27113
CVE-2025-27113: fix compilation of explicit child axis...
Update of cyrus-sasl
Bump up version...
squid: Fix of CVE-2025-54574
CVE-2025-54574: fix buffer overflow in URN handling...
dmidecode: Fix of CVE-2023-30630
CVE-2023-30630: prevent --dump-bin from overwriting local files to address privilege escalation vulnerability...
openssl: Fix of CVE-2026-54874
CVE-2026-54874: avoid buffering the whole DTLS read buffer for a record arriving early for the next epoch, capping per-connection memory amplification...
kernel: Fix of 2 CVEs
sctp: don't free the ASCONF's own transport in DEL-IP processing CVE-2026-64564 - NFSv4: include MAYWRITE in open permission mask for OTRUNC CVE-2026-64298...
java-1.7.0-openjdk: Fix of CVE-2026-47010
CVE-2026-47010: Enhance JPEG handling JDK-8374058, JDK-8388811...
nginx: Fix of CVE-2026-1642
CVE-2026-1642: detect premature plain text response from SSL backend...
bind: Fix of 2 CVEs
CVE-2026-13321: Reject NSEC records whose next owner name points outside the signer's zone, which let a signed zone forge proofs of non-existence for other zones - CVE-2026-11622: Reference count the cache rdataset headers so a superseded generation is freed as soon as nothing holds it, instead...
rsync: Fix of 5 CVEs
CVE-2026-53790: refuse a shell-active RSYNCCONNECTPROG %H host and quote it; escape backtick, newline and carriage return in remote-shell arguments - CVE-2026-53793: confine a "/./" inner-module chroot: secure opens, changedir, chmod, rename, delta-basis opens and alt-dest basis stats, resolved...
nginx: Fix of 5 CVEs
CVE-2026-27651: properly clear s-passwd in mail auth http requests to fix a null pointer dereference on CRAM-MD5/APOP retry - CVE-2026-27654: validate the Destination length for Dav COPY and MOVE to prevent an integer underflow and heap buffer overwrite when alias is used - CVE-2026-27654: also...
httpd: Fix of CVE-2026-56154
CVE-2026-56154: modrewrite: use-after-free of the Vary header name collected during an LA-U/LA-F lookahead of an HTTP header; copy it into the main request pool before destroying the sub-request...
libxml2: Fix of 2 CVEs
CVE-2026-86143: reject buffer lengths at or above INTMAX before calling the output write callback to prevent an integer overflow - CVE-2026-86144: propagate parseFlags in xmlXIncludeProcess and xmlXIncludeProcessTree so parser flags such as XMLPARSENONET are honoured...
openssh: Fix of 4 CVEs
CVE-2026-106555: reset GSSAPI client state before each authentication attempt - CVE-2026-106553: store GSSAPI delegated credentials only after successful GSSAPI authentication - CVE-2026-106583: disallow '$' and '' in command-line user names - CVE-2026-106585: reject compressed packets that...
vim: Fix of 3 CVEs
CVE-2026-73072: fix heap buffer overflow in setsofo with a crafted spell file upstream 9.2.0846 - CVE-2026-73076: fix arbitrary command execution via a crafted .VimballRecord vimball member upstream 9.2.0847 - CVE-2026-73078: fix Ex command injection via crafted netrw bookmark/history menu...
kernel: Fix of 69 CVEs
sctp: fix errchunk memory leaks in INIT handling CVE-2026-72413 - ACPICA: Fix use-after-free in acpidsterminatecontrolmethod CVE-2026-97455 - ACPICA: Enhance buffer validation in acpiutwalkamlresources CVE-2026-97445 - Bluetooth: L2CAP: validate connectionless PSM length CVE-2026-97408 - wifi:...
httpd: Fix of CVE-2026-56153
CVE-2026-56153: modcharsetlite: out-of-bounds write in finishpartialchar when a partial multibyte character straddles buckets; stop filling ctx-buf once it is full...
cups: Fix of 2 CVEs
CVE-2026-107885: fix denial of service by not letting an in-flight Send-Document suppress submission timeouts of unrelated held jobs beyond MultipleOperationTimeout - CVE-2026-107890: fix cupsd NULL pointer dereference caused by repeated IPP group tags in job creation requests...
expat: Fix of 2 CVEs
CVE-2026-66046: fix quadratic runtime in storeAtts by resolving an attribute's declared type through the default-attribute hash table instead of a linear scan of the element's default attributes - CVE-2026-93990: reject a UTF-16 high surrogate that is not followed by a low surrogate, so malformed...
kernel: Fix of 31 CVEs
ipv4: validate checksumstart before completing checksum CVE-2026-99999 - fbdev: serialize mode sysfs access with lockfbinfo CVE-2026-80785 - powerpc/rtas: avoid device tree lookups in rtasosterm CVE-2022-50870 - svcrdma: Reject connection when transport allocation fails CVE-2026-89531 -...
rsync: Fix of CVE-2026-43619
CVE-2026-29518: re-implement the "use chroot = no" confinement after the centos7els fix: every path operation proves its parent directory beneath the pinned module root through /proc/self/fd and runs on it with the at calls. In-module symlinks, directories the daemon uid may search but not read,...
httpd: Fix of CVE-2026-63292
CVE-2026-63292: modvhostalias: stack buffer overflow when a single Host header segment exceeds HUGESTRINGLEN; reject the expansion...
Update of tzdata
Upgrade to tzdata-2026e - Manitoba moves to permanent -05 on 2026-10-31. - Canada’s Northwest Territories moved to permanent -06 on 2026-08-21. - Obsolescent settings like TZ="EST5EDT" now conform better to POSIX. - Fix security, performance and porting bugs in zic and localtime. - Alberta moved...
rsync: Fix of 4 CVEs
CVE-2026-53801: prevent the sender from listing a directory outside the transfer through a path component swapped for a symlink - CVE-2026-53797: prevent the sender from reading a file outside the transfer the same way - CVE-2026-53800: prevent --remove-source-files from deleting a file outside...
openssl: Fix of CVE-2026-84782
CVE-2026-84782: reset initoff before a DTLS retransmission and skip retransmitting while a handshake write is still suspended...
freetype: Fix of 2 CVEs
CVE-2022-27405: Fix segmentation violation via FNTSizeRequest - CVE-2022-27406: Fix segmentation violation via FTRequestSize...
libtiff: Fix of 22 CVEs
CVE-2018-16335: validate file size before chopping up a single strip...
php: Fix of 2 CVEs
CVE-2026-109618: avoid heap state corruption via bailout on out-of-memory - CVE-2026-109619: reset per-request globals that could be reused after a bailout during request startup...
libX11: Fix of 6 CVEs
CVE-2018-14599: fix off-by-one writes in XListExtensions, XGetFontPath and XListFonts - CVE-2018-14600: fix out-of-bounds write in XListExtensions and XGetFontPath - CVE-2018-14598: fix crash on invalid reply in XListExtensions and XGetFontPath - CVE-2021-31535: reject strings longer than...
gawk: Fix of 3 CVEs
CVE-2023-4156: builtin.c formattree: when collecting positional field widths or precisions, check for wrap around to negative values - CVE-2026-40469: builtin.c subcommon: check for overflow in the result buffer size calculation using 64-bit math, failing with a fatal error instead of corrupting...