10560 matches found
CLSA-2025-1757523459 php: Fix of 4 CVEs
Fix multiple vulnerabilities in oniguruma: - CVE-2017-9224: out-of-bounds read in matchat - CVE-2017-9226: heap buffer overflow in nextstateval - CVE-2017-9227: out-of-bounds read in mbcenclen - CVE-2017-9228: out-of-bounds heap write in bitsetsetrange...
CLSA-2025-1757523038 Fix CVE(s): CVE-2025-1735
SECURITY UPDATE: inadequate error checking in pgsql and pdopgsql escaping functions - debian/patches/CVE-2025-1735.patch: Add error checks for escape function in pgsql and pdopgsql extensions to prevent storing of improperly escaped data - CVE-2025-1735...
CLSA-2025-1757522880 Fix CVE(s): CVE-2025-6021
SECURITY UPDATE: stack-based buffer overflow vulnerability in xmlBuildQName function - debian/patches/CVE-2025-6021.patch: fix integer overflow in xmlBuildQName causing memory safety issue - CVE-2025-6021...
CLSA-2025-1757501564 xorg-x11-server: Fix of CVE-2025-49180
CVE-2025-49180: fix integer overflow in the RandR extension affecting the RRChangeProviderProperty function...
CLSA-2025-1757501175 httpd: Fix of CVE-2025-49812
CVE-2025-49812: remove support for TLS upgrade to prevent HTTP desynchronisation attacks in modssl configurations...
CLSA-2025-1757500267 python3.9: Fix of CVE-2025-8194
CVE-2025-8194: fix tarfile deadlock/infinite loop by rejecting negative member offsets...
CLSA-2025-1757499160 Fix CVE(s): CVE-2025-5318
SECURITY UPDATE: out-of-bounds read in sftphandle function - debian/patches/CVE-2025-5318.patch: fix possible buffer overrun issue by changing comparison operator in sftphandle function - CVE-2025-5318...
CLSA-2025-1757490210 Fix CVE(s): CVE-2025-1735
SECURITY UPDATE: inadequate validation in pgsql and pdopgsql functions - debian/patches/CVE-2025-1735.patch: Add error checks for escape function in pgsql and pdopgsql extensions to prevent potential security issues - CVE-2025-1735...
CLSA-2025-1757428404 Fix CVE(s): CVE-2025-23048
SECURITY UPDATE: access control bypass by trusted clients via TLS 1.3 session resumption - debian/patches/CVE-2025-23048.patch: update SNI validation to fix compatibility issue - CVE-2025-23048...
CLSA-2025-1757427923 libxml2: Fix of 2 CVEs
CVE-2025-7425: fix heap-use-after-free in xmlFreeID caused by 'atype' corruption - CVE-2025-6021: fix integer overflows in buffer size calculations...
CLSA-2025-1757427840 mpfr: Fix of CVE-2014-9474
CVE-2014-9474: Fix of a buffer overflow due to incorrect GMP documentation for mpnsetstr...
CLSA-2025-1757427057 grafana: Fix of CVE-2022-23552
CVE-2022-23552: sanitize SVG inputs in GeoMap by adding a dompurify preprocessor step, preventing stored XSS where malicious SVG could execute arbitrary JavaScript...
CLSA-2025-1757415450 libxml2: Fix of 2 CVEs
CVE-2025-7425: fix heap-use-after-free in xmlFreeID caused by 'atype' corruption - CVE-2025-6021: fix integer overflows in buffer size calculations...
CLSA-2025-1757413554 libxml2: Fix of 2 CVEs
CVE-2025-7425: fix heap-use-after-free in xmlFreeID caused by 'atype' corruption - CVE-2025-6021: fix integer overflows in buffer size calculations...
CLSA-2025-1757411402 Fix CVE(s): CVE-2025-53014
SECURITY UPDATE: heap buffer overflow in InterpretImageFilename function - debian/patches/CVE-2025-53014.patch: Correct out of bounds read of a single byte in InterpretImageFilename function - CVE-2025-53014...
CLSA-2025-1757411388 Fix CVE(s): CVE-2025-53014
SECURITY UPDATE: heap buffer overflow in InterpretImageFilename function - debian/patches/CVE-2025-53014.patch: fix out of bounds read of a single byte in image file interpretation - CVE-2025-53014...
CLSA-2025-1757409349 Fix CVE(s): CVE-2025-53014
SECURITY UPDATE: heap buffer overflow in InterpretImageFilename function - debian/patches/CVE-2025-53014.patch: fix out of bounds read of a single byte in image file interpretation - CVE-2025-53014...
CLSA-2025-1757409276 mpfr: Fix of CVE-2014-9474
CVE-2014-9474: Fix of a buffer overflow due to incorrect GMP documentation for mpnsetstr...
CLSA-2025-1757247437 zlib: Fix of CVE-2016-9840
CVE-2016-9840: fix undefined behavior in inftrees.c...
CLSA-2025-1757246128 zlib: Fix of CVE-2016-9840
CVE-2016-9840: fix undefined behavior in inftrees.c...
CLSA-2025-1757246101 zlib: Fix of CVE-2016-9840
CVE-2016-9840: fix undefined behavior in inftrees.c...
CLSA-2025-1757148562 Update of kernel
Rebased FIPS patches to 5.14.0-570.39.1...
CLSA-2025-1757148344 Update of kernel
Rebased FIPS patches to 5.14.0-570.35.1...
CLSA-2025-1757076749 Fix CVE(s): CVE-2025-54574
SECURITY UPDATE: Disable URN protocol access to prevent potential security vulnerabilities - debian/patches/CVE-2025-54574.patch: Add ACL rules to deny URN protocol access by default - CVE-2025-54574...
CLSA-2025-1757076677 Fix CVE(s): CVE-2025-54574
SECURITY UPDATE: Disable URN protocol access to prevent potential security vulnerabilities - debian/patches/CVE-2025-54574.patch: Add ACL rules to deny URN protocol access by default - CVE-2025-54574...
CLSA-2025-1757076484 squid: Fix of CVE-2025-54574
CVE-2025-54574: fix buffer overflow in URN handling...
CLSA-2025-1757017511 protobuf: Fix of CVE-2024-7254
CVE-2024-7254: prevent stack overflow by limiting recursion depth when parsing nested Protocol Buffers data...
CLSA-2025-1757016520 squid34: Fix of CVE-2025-54574
CVE-2025-54574: fix buffer overflow in URN handling...
CLSA-2025-1757016400 python3-setuptools: Fix of CVE-2025-47273
CVE-2025-47273: fix path traversal vulnerability in PackageIndex...
CLSA-2025-1757016160 Fix CVE(s): CVE-2025-1217, CVE-2025-1734, CVE-2025-1736, CVE-2025-1861
SECURITY UPDATE: misinterpretation of HTTP response headers - debian/patches/CVE-2025-1217.patch: adds HTTP header folding support for HTTP wrapper response headers in ext/standard/httpfopenwrapper.c - CVE-2025-1217 SECURITY UPDATE: insufficient HTTP header validation -...
CLSA-2025-1757015268 Fix CVE(s): CVE-2025-7545
SECURITY UPDATE: heap-based buffer overflow in copysection function - debian/patches/CVE-2025-7545.patch: Don't extend output section size beyond input section size to fix section contents from being copied - CVE-2025-7545...
CLSA-2025-1757015164 Fix CVE(s): CVE-2025-6021
SECURITY UPDATE: stack-based buffer overflow vulnerability - debian/patches/CVE-2025-6021.patch: Fix integer overflow in xmlBuildQName to improve memory safety - CVE-2025-6021...
CLSA-2025-1757015131 squid: Fix of CVE-2025-54574
CVE-2025-54574: fix buffer overflow in URN handling...
CLSA-2025-1757015069 Fix CVE(s): CVE-2025-6021
SECURITY UPDATE: stack-based buffer overflow via integer overflows in buffer size calculations in xmlBuildQName function - debian/patches/CVE-2025-6021.patch: Fix integer overflow in xmlBuildQName that affects memory safety - CVE-2025-6021...
CLSA-2025-1757015024 squid: Fix of CVE-2025-54574
CVE-2025-54574: fix heap buffer overflow in URN parsing...
CLSA-2025-1757014900 Fix CVE(s): CVE-2025-49812
SECURITY UPDATE: modssl TLS upgrade attack - debian/patches/CVE-2025-49812.patch: remove antiquated 'SSLEngine optional' TLS upgrade in modules/ssl/sslengineconfig.c, modules/ssl/sslengineinit.c, modules/ssl/sslenginekernel.c, modules/ssl/sslprivate.h. - CVE-2025-49812...
CLSA-2025-1757014860 Fix CVE(s): CVE-2025-49812
SECURITY UPDATE: modssl TLS upgrade attack - debian/patches/CVE-2025-49812.patch: remove antiquated 'SSLEngine optional' TLS upgrade in modules/ssl/sslengineconfig.c, modules/ssl/sslengineinit.c, modules/ssl/sslenginekernel.c, modules/ssl/sslprivate.h. - CVE-2025-49812...
CLSA-2025-1757014652 Fix CVE(s): CVE-2025-1217, CVE-2025-1734, CVE-2025-1736, CVE-2025-1861
SECURITY UPDATE: misinterpretation of HTTP response headers - debian/patches/CVE-2025-1217.patch: adds HTTP header folding support for HTTP wrapper response headers in ext/standard/httpfopenwrapper.c - CVE-2025-1217 SECURITY UPDATE: insufficient HTTP header validation -...
CLSA-2025-1757014622 squid34: Fix of CVE-2025-54574
CVE-2025-54574: fix buffer overflow in URN handling...
CLSA-2025-1757012227 ImageMagick: Fix of CVE-2025-53014
CVE-2025-53014: fix heap buffer overflow in InterpretImageFilename...
CLSA-2025-1757011448 tomcat: Fix of CVE-2025-48989
CVE-2025-48989: fix improper resource shutdown vulnerability to prevent reset attack...
CLSA-2025-1757010850 squid: Fix of CVE-2025-54574
CVE-2025-54574: fix heap buffer overflow in URN parsing...
CLSA-2025-1756929133 git: Fix of CVE-2025-27613
CVE-2025-27613: fix issue with file creation and truncation when running gitk without additional command arguments from untrusted repositories...
CLSA-2025-1756961235 nss: Fix of CVE-2023-5388
CVE-2023-5388: fix timing attack against RSA decryption in TLS r=jschanck...
CLSA-2025-1756932817 nodejs: Fix of CVE-2024-22020
CVE-2024-22020: forbid data URLs in network imports to mitigate security flaw allowing bypass of network import restrictions...
CLSA-2025-1756932191 buildah: Fix of CVE-2024-9407
CVE-2024-9407: validate input for bind-propagation option in Dockerfile RUN --mount instruction to prevent arbitrary parameter passing and potential file modification...
CLSA-2025-1756931716 golang: Fix of CVE-2025-4674
CVE-2025-4674: disallow multiple VCS metadata dirs in one module to prevent VCS injection attacks...
CLSA-2025-1756930773 glibc: Fix of CVE-2025-8058
CVE-2025-8058: fix double free vulnerability in regcomp function...