10560 matches found
CLSA-2025-1758635382 openssl: Fix of CVE-2023-3446
CVE-2023-3446: fix DHcheck excessive time with over sized modulus...
CLSA-2025-1758635329 Fix CVE(s): CVE-2025-57807
SECURITY UPDATE: heap out-of-bounds write in BlobStream WriteBlob - debian/patches/CVE-2025-57807.patch: enforce extent ≥ offset + length when forward-seeking before writes in MagickCore/blob.c - CVE-2025-57807...
CLSA-2025-1758630391 dovecot: Fix of CVE-2020-12673
CVE-2020-12673: fix reading past buffer...
CLSA-2025-1758615308 libwebp: Fix of CVE-2020-36328
CVE-2020-36328: fix a heap-based buffer overflow in WebPDecodeInto functions...
CLSA-2025-1758300791 glibc: Fix of CVE-2019-9169
Fix spec-file for CVE-2019-9169...
CLSA-2025-1758295568 Update of kernel
Rebased FIPS patches to 5.14.0-570.44.1...
CLSA-2025-1758294053 nodejs: Fix of CVE-2024-27982
CVE-2024-27982: prevent HTTP request smuggling by properly interpreting content-length header...
CLSA-2025-1758293394 postgresql: Fix of 2 CVEs
CVE-2025-8714: prevent execution of unsafe meta-commands in plain-text dumps pgdump/pgrestore/pgdumpall, psql restricted mode - CVE-2025-8715: sanitize newlines in object names to avoid unsafe SQL comments in dumps...
CLSA-2025-1758292868 Fix CVE(s): CVE-2025-7425
SECURITY UPDATE: memory corruption vulnerability in attribute type flags - debian/patches/CVE-2025-7425.patch: Fix heap-use-after-free caused by atype corruption - CVE-2025-7425...
CLSA-2025-1758289815 Fix CVE(s): CVE-2025-53101
SECURITY UPDATE: stack overflow via multiple consecutive %d format specifiers in filename template - debian/patches/CVE-2025-53101.patch: Fix InterpretImageFilename function by adjusting the offset to prevent potential buffer overflow - CVE-2025-53101...
CLSA-2025-1758289801 Fix CVE(s): CVE-2025-53101
SECURITY UPDATE: stack overflow via multiple consecutive %d format specifiers in filename template - debian/patches/CVE-2025-53101.patch: Fix image filename interpretation issue by adjusting the offset value - CVE-2025-53101...
CLSA-2025-1758228486 glibc: Fix of CVE-2019-9169
Fix spec-file for CVE-2019-9169...
CLSA-2025-1758228293 Fix CVE(s): CVE-2025-7425
SECURITY UPDATE: memory corruption vulnerability in attribute type flags - debian/patches/CVE-2025-7425.patch: fix heap-use-after-free in xmlFreeID caused by atype corruption - CVE-2025-7425...
CLSA-2025-1758228143 Fix CVE(s): CVE-2023-30630
SECURITY UPDATE: Overwrite a local file - debian/patches/CVE-2023-30630.patch: Prevent --dump-bin from overwriting local files to address privilege escalation vulnerability - CVE-2023-30630...
CLSA-2025-1758228073 Fix CVE(s): CVE-2023-30630
SECURITY UPDATE: Overwrite a local file - debian/patches/CVE-2023-30630.patch: Prevent --dump-bin from overwriting local files to address privilege escalation vulnerability - CVE-2023-30630...
CLSA-2025-1758228035 Fix CVE(s): CVE-2025-7425
SECURITY UPDATE: memory corruption in attribute type handling - debian/patches/CVE-2025-7425.patch: guard against atype corruption to ensure proper ID cleanup and prevent heap-use-after-free - CVE-2025-7425...
CLSA-2025-1756482270 kernel: Fix of CVE-2024-2201
spec: up spec/misc to 1160.136.1, spectre mitigation is off by default - hugetlb, mempolicy: fix the mbind hugetlb migration - net: atm: fix use after free in lecsend - net: atlantic: fix aqvec index out of range error - block: initialize flush request via blkmqrqctxinit - ALSA: usb-audio: Fix a...
CLSA-2025-1758195721 ImageMagick: Fix of 4 CVEs
CVE-2025-55154: fix integer overflows in MNG magnification - CVE-2025-55212: fix division by zero in ThumbnailImage - CVE-2025-57803: fix 32-bit integer overflow when writing BMP scanline stride - CVE-2025-55298: fix format string bug leading to RCE or heap overflow...
CLSA-2025-1758193800 php: Fix of CVE-2020-7067
CVE-2020-7067: fix negative indexing in phpurldecode function...
CLSA-2025-1758135826 grafana: Fix of CVE-2022-39307
CVE-2022-39307: fix omit error from http response when user does not exist...
CLSA-2025-1758102713 nodejs: Fix of CVE-2025-22150
CVE-2025-22150: fix issue where undici used Math.random to choose boundary for multipart/form-data request, now uses secure random number generator...
CLSA-2025-1758102067 php: Fix of CVE-2020-7059
CVE-2020-7059: fix read past the allocated buffer in the fgetss function...
CLSA-2025-1758101956 Fix CVE(s): CVE-2025-8194
SECURITY UPDATE: defect in 'tarfile' module leads to infinite loop and deadlock in parsing of maliciously crafted tar archives - debian/patches/CVE-2025-8194.patch: Validate archives to ensure member offsets are non-negative - CVE-2025-8194...
CLSA-2025-1758101854 Fix CVE(s): CVE-2025-8194
SECURITY UPDATE: defect in TarFile module leading to infinite loop and deadlock - debian/patches/CVE-2025-8194.patch: Validate archives to ensure member offsets are non-negative - CVE-2025-8194...
CLSA-2025-1758042045 ImageMagick: Fix of 2 CVEs
CVE-2025-53101: fix heap OOB write in BlobStream - CVE-2025-57807: fix stack overflow through vsnprintf...
CLSA-2025-1758041082 libsndfile: Fix of CVE-2024-50612
CVE-2024-50612: fix out-of-bounds read in vorbisanalysiswrote in oggvorbis.c...
CLSA-2025-1758040547 git: Fix of CVE-2024-52006
CVE-2024-52006: fix issue where single Carriage Return characters could be interpreted as newlines by some ecosystems in Git's line-based protocol...
CLSA-2025-1758039948 protobuf: Fix of CVE-2022-1941
CVE-2022-1941: fix parsing vulnerability in MessageSet type to prevent out of memory failures and DoS attacks...
CLSA-2025-1758035415 httpd: Fix of 2 CVEs
CVE-2024-47252: escape characters are now properly handled in modssl to prevent untrusted SSL/TLS clients from inserting escape characters into log files - CVE-2025-49812: remove support for TLS upgrade to mitigate HTTP desynchronisation attack...
CLSA-2025-1758035329 httpd: Fix of 2 CVEs
CVE-2024-47252: escape user-supplied data in modssl to prevent untrusted SSL/TLS clients from inserting escape characters into log files - CVE-2025-49812: remove support for TLS upgrade to prevent HTTP desynchronisation attack...
CLSA-2025-1758034087 kernel: Fix of 24 CVEs
tls: always refresh the queue when reading sock CVE-2025-38471 - Bluetooth: hcicore: Fix use-after-free in vhciflush CVE-2025-38250 - i2c/designware: Fix an initialization issue CVE-2025-38380 - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds CVE-2025-38159 - mm/hugetlb:...
CLSA-2025-1758031287 httpd: Fix of 2 CVEs
CVE-2024-47252: escape user-supplied data in modssl to prevent untrusted SSL/TLS clients from inserting escape characters into log files - CVE-2025-49812: remove support for TLS upgrade to prevent HTTP desynchronisation attack...
CLSA-2025-1758031207 httpd: Fix of 2 CVEs
CVE-2024-47252: escape characters are now properly handled in modssl to prevent untrusted SSL/TLS clients from inserting escape characters into log files - CVE-2025-49812: remove support for TLS upgrade to mitigate HTTP desynchronisation attack...
CLSA-2025-1758031199 httpd: Fix of 2 CVEs
CVE-2024-47252: escape user-supplied data in modssl to prevent untrusted SSL/TLS clients from inserting escape characters into log files - CVE-2025-49812: remove support for TLS upgrade to prevent HTTP desynchronisation attack...
CLSA-2025-1758019011 Fix of 17 CVEs
CVE-2024-50047 fix. // CVE-url: https://ubuntu.com/security/CVE-2025-38488 - smb: client: fix use-after-free in cryptmessage when using async crypto CVE-url: https://ubuntu.com/security/CVE-2024-57996 // CVE-url: https://ubuntu.com/security/CVE-2025-37752 - netsched: schsfq: move the limit...
CLSA-2025-1758025991 gnutls: Fix of CVE-2025-32990
CVE-2025-32990: fix memory corruption in when parsing a template file...
CLSA-2025-1758023679 ruby: Fix of CVE-2016-2339
CVE-2016-2339: fix heap overflow vulnerability in Fiddle::Function.new 'initialize' function...
CLSA-2025-1758022908 ruby: Fix of 2 CVEs
CVE-2024-39908: fix performance issue caused by using repeated characters to avoid DoS vulnerabilities when it parses an XML - CVE-2024-43398: improve namespace conflicted attribute check to avoid DoS vulnerability when it parses an XML...
CLSA-2025-1758022501 gnutls: Fix of CVE-2025-32990
CVE-2025-32990: fix memory corruption in when parsing a template file...
CLSA-2025-1758022425 gnutls: Fix of CVE-2025-32990
CVE-2025-32990: fix memory corruption in when parsing a template file...
CLSA-2025-1758020272 Update of alt-php
Bump ABI 5.4.0-221...
CLSA-2025-1758011363 Update of alt-php
Bump ABI 4.15.0-251...
CLSA-2025-1758010922 Fix of 51 CVEs
CVE-url: https://ubuntu.com/security/CVE-2025-38000 - schhfsc: Fix qlen accounting bug when using peek in hfscenqueue CVE-url: https://ubuntu.com/security/CVE-2024-57996 // CVE-url: https://ubuntu.com/security/CVE-2025-37752 - netsched: schsfq: move the limit validation Focal update: v5.4.285...
CLSA-2025-1758010245 kernel: Fix of 3 CVEs
posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - schqfq: make qfqqlennotify idempotent CVE-2025-38177 - schhfsc: make hfscqlennotify idempotent CVE-2025-38177 - schdrr: make drrqlennotify idempotent CVE-2025-38177 - schhtb: make htbqlennotify...
CLSA-2025-1758010124 Update of alt-php
Bump ABI 4.4.0-278...
CLSA-2025-1758009836 Fix of 28 CVEs
Bionic update: upstream stable patchset 2021-06-11 LP: 1931740 // CVE- url: https://ubuntu.com/security/CVE-2021-34981 - Bluetooth: cmtp: fix file refcount when cmtpattachdevice fails CVE-url: https://ubuntu.com/security/CVE-2025-37797 - netsched: hfsc: Fix a UAF vulnerability in class handling...
CLSA-2025-1758009294 kernel: Fix of 3 CVEs
posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - schqfq: make qfqqlennotify idempotent CVE-2025-38177 - schhfsc: make hfscqlennotify idempotent CVE-2025-38177 - schdrr: make drrqlennotify idempotent CVE-2025-38177 - schhtb: make htbqlennotify...
CLSA-2025-1757967705 kernel: Fix of 42 CVEs
x86/kvm: Disable kvmclock on all CPUs on shutdown CVE-2021-47110 - posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - cifs: fix double free race when mount fails in cifsgetroot CVE-2022-48919 - aio: mark AIO pseudo-fs noexec CVE-2016-10044 - cifs:...
CLSA-2025-1757963029 kernel-uek: Fix of 194 CVEs
rds: tcp: block BH in TCP callbacks - kexec: Improve & fix crashexcludememrange to handle overlapping ranges - module: correctly exit modulekallsymsoneachsymbol when fn != 0 - module: potential uninitialized return in modulekallsymsoneachsymbol - module: use RCU to synchronize findmodule -...