10519 matches found
CLSA-2023-1697481097 Update of alt-php
Bump epoch Disable ESM notification after installation: - remove ESM hook for apt-system - remove ESM infra/apps repositories from apt sources list Automatically mark some pytest to skip if FIPS kernel is running in a disabled state they always fail in this mode...
CLSA-2023-1697463600 Fix CVE(s): CVE-2023-42116, CVE-2023-42114
SECURITY UPDATE: Multiple security issues - debian/patches/CVE-2023-42114.patch: fix possible OOB read in SPA authenticator - CVE-2023-42114 - debian/patches/CVE-2023-42116.patch: fix possible OOB write in SPA authenticator - CVE-2023-42116...
CLSA-2023-1695319921 Fix CVE(s): CVE-2023-39417
SECURITY UPDATE: Extension script @substitutions@ within quoting allow SQL injection - debian/patches/CVE-2023-39417.patch: filter each substitution through quoteidentifier - CVE-2023-39417...
CLSA-2023-1695046791 Fix of 7 CVEs
Bionic update: upstream stable patchset 2022-12-01 LP: 1998542 // CVE-2022-26373 - x86/speculation: Add RSB VM Exit protections Bionic update: upstream stable patchset 2022-12-01 LP: 1998542 - Revert "x86/cpu: Add a steppings field to struct x86cpuid" - x86/cpufeature: Add facility to check for m...
CLSA-2023-1693427563 Update of alt-php
Jammy update: v5.15.97 upstream stable release LP: 2015599 - net: Remove WARNONONCEsk-skforwardalloc from skstreamkillqueues...
CLSA-2023-1689885378 python2: Fix of CVE-2023-24329
CVE-2023-24329: part2: Start stripping C0 control and space chars in urlsplit - Also correct the first CVE-2023-24329 patch: Fix testattributesbadscheme to check for non-ascii symbol as first character of url...
CLSA-2023-1682705952 kernel: Fix of 7 CVEs
mISDN: fix use-after-free bugs in l1oip timer handlers CVE-2022-3565 - media: rc: Fix use-after-free bugs caused by enetxirqsim CVE-2023-1118 - Bluetooth: btsdio: fix use after free bug in btsdioremove due to unfinished work CVE-2023-1989 - proc: procskipspaces shouldn't think it is working on C...
CLSA-2022-1670874212 vim: Fix of 2 CVEs
CVE-2022-4141: check for text locked in CTRL-W gf - CVE-2022-3520: check that the column does not become negative...
CLSA-2022-1670606563 Fix CVE(s): CVE-2019-0221
SECURITY UPDATE: The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided data without escaping and is, therefore, vulnerable to XSS. - debian/patches/CVE-2019-0221.patch: Escape debug output to aid readability - CVE-2019-0221...
CLSA-2022-1665680640 Fixed CVE-2022-41318 in squid-4.module_el8.4.0+2078+2063f9d1.2.tuxcare.els4
CVE-2022-41318: Fix buffer-over-read in SSPI and SMB authentication...
CLSA-2022-1660064249 Fix CVE(s): CVE-2022-21434, CVE-2022-21426, CVE-2022-21443, CVE-2022-34169, CVE-2022-21540, CVE-2022-21541, CVE-2022-21476, CVE-2022-21496
Backport upstream releases 8u342 and 8u332 to 16.04 LTS Security fixes in 8u342: - JDK-8272243: Improve DER parsing - JDK-8272249: Better properties of loaded Properties - JDK-8277608: Address IP Addressing - JDK-8281859, CVE-2022-21540: Improve class compilation - JDK-8281866, CVE-2022-21541:...
CLSA-2022-1657814447 Fix CVE(s): CVE-2021-23214
SECURITY UPDATE: MITM attack introducing arbitrary SQL quieries - debian/patches/CVE-2021-23214.patch: Raise error if data was received during SSL handshake - CVE-2021-23214...
CLSA-2022-1657561005 Fixed CVE-2020-12723 in perl-5.10.1
CVE-2020-12723: fix a buffer overflow caused by a crafted regular expression because of recursive Sstudychunk calls...
CLSA-2022-1654717777 Fixed CVE-2022-24903 in rsyslog
CVE-2022-24903: fix heap-based overflow in TCP syslog server...
CLSA-2022-1649869212 Fix CVE(s): CVE-2022-28388
CVE-2022-28388 - ELSCVE-3855 can: usb8dev: usb8devstartxmit: fix double devkfreeskb in error path...
CLSA-2022-1644855795 Fixed CVEs in vim: CVE-2022-0359, CVE-2022-0351, CVE-2022-0368, CVE-2022-0361
CVE-2022-0351: fix crash caused by too depth recursion - CVE-2022-0359: fix illegal memory access with large tabstop in ex mode - CVE-2022-0361: fix illegal memory access when copying lines in visual mode - CVE-2022-0368: fix illegal memory access when undo makes visual area invalid...
CLSA-2022-1643727489 Fix of CVE: CVE-2021-23840, CVE-2021-3712, CVE-2021-23841
CVE-2021-3712: openssl: Read buffer overruns processing ASN.1 strings - CVE-2021-23840: openssl: integer overflow in CipherUpdate - CVE-2021-23841: openssl: NULL pointer dereference in X509issuerandserialhash...
CLSA-2026-1790342075 TuxCare security update for aiohttp (1 CVE)
TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.5.post17+tuxcare...
CLSA-2026-1789736316 TuxCare security update for io.netty (7 CVEs)
TuxCare rebuilt 43 io.netty packages to address 7 CVEs. Fixed in 4.1.63.Final-tuxcare.7...
CLSA-2026-1789582244 TuxCare security update for org.springframework.data (1 CVE)
TuxCare rebuilt 3 org.springframework.data packages to address 1 CVE. Fixed in 4.3.12-tuxcare.1...
CLSA-2026-1787557465 TuxCare security update for log4j:log4j (4 CVEs)
TuxCare rebuilt log4j:log4j to address 4 CVEs. Fixed in 1.2.15-tuxcare.1...
CLSA-2026-1784769612 TuxCare security update for fast-uri (6 CVEs)
TuxCare rebuilt fast-uri to address 6 CVEs. Fixed in 2.4.2-tuxcare.1...
CLSA-2026-1784077476 TuxCare security update for symfony/yaml (2 CVEs)
TuxCare rebuilt symfony/yaml to address 2 CVEs. Fixed in v4.4.45-p1+tuxcare...
CLSA-2026-1780707089 TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 18 @angular packages to address 1 CVE. Fixed in 10.1.0-tuxcare.1...
CLSA-2026-1777509609 TuxCare security update for spatie/browsershot (5 CVEs)
TuxCare rebuilt spatie/browsershot to address 5 CVEs. Fixed in 4.4.0-p2+tuxcare...
CLSA-2026-1777336772 TuxCare security update for 21 packages (1 CVE)
TuxCare rebuilt 21 packages to address 1 CVE. Fixed in 0.14.25-tuxcare.1...
CLSA-2026-1774484515 TuxCare security update for org.bouncycastle (1 CVE)
TuxCare rebuilt 12 org.bouncycastle packages to address 1 CVE. Fixed in 1.64-tuxcare.3...
CLSA-2026-1780391238 Fix CVE(s): CVE-2026-8376
SECURITY UPDATE: heap buffer overflow in the regexp compiler 32-bit - debian/patches/CVE-2026-8376.patch: guard against an SSizet overflow when sizing the joined fixed-substring buffer in Perlstudychunk in regcomp.c; backported from upstream commit 5e7f119eb2bb1181be908701f22bf7068e722f1c. -...
CLSA-2026-1779533209 NetworkManager: Fix of CVE-2024-6501
CVE-2024-6501: NULL pointer dereference of n-lldprx in nmlldpneighborparse when DEBUG logging is enabled, leading to denial-of-service on malformed LLDP packets...
CLSA-2026-1779494089 Fix of 7 CVEs
SECURITY UPDATE: PostgreSQL 2026-05-14 security batch CVE-2026-6473, 6474, 6475, 6477, 6478, 6479, 6637. Backports adapted from upstream REL14STABLE to PG 12 source. - debian/patches/CVE-2026-6473.patch: integer wraparound in tsheadline and ltree lquery parsing; bound...
CLSA-2026-1779438231 rsync: Fix of CVE-2026-43618
CVE-2026-43618: fix integer overflow in compressed-token decoder allowing memory disclosure via crafted compressed stream...
CLSA-2026-1779357606 curl: Fix of CVE-2026-5773
CVE-2026-5773: disable connection reuse for SMBS to prevent libcurl from reusing a connection to the same server for a different SMB share...
CLSA-2026-1779224622 samba: Fix of CVE-2023-4091
CVE-2023-4091: fix openfile access check that allowed a client with read-only share access to truncate files via SMB2 OVERWRITE; the access check now uses openaccessmask instead of the requested accessmask...
CLSA-2026-1779215759 libxml2: Fix of CVE-2022-49043
CVE-2022-49043: fix use-after-free in xmlXIncludeAddNode by deferring xmlFreeURI until after the error path has consumed the value...
CLSA-2026-1779204531 gdk-pixbuf2: Fix of CVE-2026-5201
CVE-2026-5201: fix heap buffer overflow due to unvalidated JPEG color component count in gdkpixbufjpegimageload...
CLSA-2026-1779107085 gnutls: Fix of CVE-2026-3833
CVE-2026-3833: fix nameConstraints dNSName/rfc822Name case-sensitive memcmp bypass...
CLSA-2026-1779130193 vim: Fix of CVE-2022-3520
CVE-2022-3520: clamp bopend.col = 0 in doput to prevent Visual block put underflow...
CLSA-2026-1779129021 Fix CVE(s): CVE-2026-42050
SECURITY UPDATE: fix stack buffer overflow in XTileImage when loading malicious MIFF in display tool - debian/patches/CVE-2026-42050.patch: fix stack buffer overflow in XTileImage when loading malicious MIFF in display tool - CVE-2026-42050...
CLSA-2026-1778943258 Fix CVE(s): CVE-2026-6722, CVE-2026-7261, CVE-2026-7262, CVE-2026-7568
SECURITY UPDATE: SOAP use-after-free with SOAPPERSISTENCESESSION - debian/patches/CVE-2026-7261.patch: skip zvalptrdtor on the persisted soapobj after header parsing failure when persistence is SOAPPERSISTENCESESSION - CVE-2026-7261 SECURITY UPDATE: SOAP use-after-free via Apache Map with duplica...
CLSA-2026-1778896895 kernel: Fix of 2 CVEs
ptrace: require CAPSYSPTRACE when task has no mm - net: udpoffload: propagate SKBFLSHAREDFRAG in skbgroreceivelist CVE-2026-46300 - can: raw: fix ro-uniq use-after-free in rawrcv CVE-2026-31532...
CLSA-2026-1778768341 python: Fix of 4 CVEs
CVE-2019-9740: reject control characters in HTTP URL paths in httplib.HTTPConnection.putrequest to prevent CRLF header injection - CVE-2019-18348: reject control characters in hostnames in httplib.HTTPConnection.init via a new validatehost helper to prevent CRLF header injection the glibc...
CLSA-2026-1778762233 gnutls: Fix of CVE-2026-33845
CVE-2026-33845: fix integer underflow in DTLS handshake reassembly that allowed a remote heap overrun via crafted zero-length fragments...
CLSA-2026-1778615531 podman: Fix of CVE-2026-25679
Rebuild with Go 1.25.7-1.el96.tuxcare.els2 to fix Go standard library CVE - CVE-2026-25679: reject invalid IPv6 host literals in net/url.Parse to prevent URL validation bypass...
CLSA-2026-1778573628 dovecot: Fix of 2 CVEs
CVE-2026-27855: use translated username in authcacheremove to prevent OTP authentication replay attack - CVE-2026-27856: use timing-safe credential comparison in doveadm HTTP and TCP authentication paths...
CLSA-2026-1778490111 libssh: Fix of CVE-2026-0966
CVE-2026-0966: fix heap buffer underflow in sshgethexa on NULL or zero-length input, remotely reachable via GSSAPI authentication logging...
CLSA-2026-1778267481 Update of kernel-uek
rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present - xfrm: esp: avoid in-place decrypt on shared skb frags...
CLSA-2026-1778170790 quagga: Fix of CVE-2018-5381
CVE-2018-5381: bgpd capability parser can enter an infinite loop on invalid OPEN messages whose Multi-Protocol capability has an unrecognized AFI/SAFI, causing a denial of service...
CLSA-2026-1777970333 python3: Fix of CVE-2021-3426
CVE-2021-3426: remove the pydoc getfile feature to prevent directory traversal...
CLSA-2026-1777976295 Fix CVE(s): CVE-2026-28690
SECURITY UPDATE: stack buffer overflow in MNG/JNG encoder — missing NULL check after ImageToBlob in WriteOneJNGImage could propagate a NULL blob pointer into later stack buffer operations GHSA-7h7q-j33q-hvpf. - debian/patches/CVE-2026-28690.patch: bail out of WriteOneJNGImage when ImageToBlob...