10560 matches found
CLSA-2025-1756928197 Fix CVE(s): CVE-2025-26603
SECURITY UPDATE: fix use-after-free vulnerability in buffer closing - debian/patches/CVE-2025-26603.patch: Fix heap use-after-free in strtoreg - CVE-2025-26603...
CLSA-2025-1756928002 iperf3: Fix of CVE-2024-53580
CVE-2024-53580: fix segmentation violation in iperfexchangeparameters function...
CLSA-2025-1756923561 clamav: Fix of 8 CVEs
Update to 1.0.9 LTS version - CVE-2025-20260: Fixed a possible buffer overflow write bug in the PDF file parser - CVE-2025-20128: Fixed a possible buffer overflow read bug in the OLE2 file parser - CVE-2024-20506: Changed the logging module to disable following symlinks on Linux and Unix systems...
CLSA-2025-1756830276 Fix CVE(s): CVE-2024-47252
SECURITY UPDATE: insufficient escaping of user-supplied data in logging configurations - debian/patches/CVE-2024-47252.patch: Escape ssl vars to prevent potential security vulnerabilities - CVE-2024-47252...
CLSA-2025-1756760036 gnutls: Fix of CVE-2025-32988
CVE-2025-32988: fix double-free vulnerability when exporting othernames in SAN...
CLSA-2025-1756759707 gnutls: Fix of CVE-2025-32988
CVE-2025-32988: fix double-free vulnerability when exporting othernames in SAN...
CLSA-2025-1756751597 squid: Fix of CVE-2023-46846
CVE-2023-46846: fix Request/Response chunk smuggling in HTTP/1.1 and ICAP...
CLSA-2025-1756751473 squid: Fix of CVE-2023-46846
CVE-2023-46846: fix Request/Response chunk smuggling in HTTP/1.1 and ICAP...
CLSA-2025-1756751437 gnutls: Fix of CVE-2025-32988
CVE-2025-32988: fix double-free vulnerability when exporting othernames in SAN...
CLSA-2025-1756489732 subversion: Fix of CVE-2024-46901
CVE-2024-46901: fix moddavsvn denial-of-service via control characters in paths...
CLSA-2025-1756483990 php: Fix of 3 CVEs
CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation...
CLSA-2025-1756483693 php: Fix of 3 CVEs
CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation...
CLSA-2025-1756409922 wget: Fix of CVE-2024-38428
CVE-2024-38428: fix mishandle semicolons in userinfo subcomponent of URI to prevent insecure behavior...
CLSA-2025-1756409662 xorg-x11-server: Fix of 8 CVEs
CVE-2025-26594: refuse to free the root cursor and keep its ref - CVE-2025-26595: fix buffer overflow in XkbVModMaskText - CVE-2025-26596: xkb: fix computation of XkbSizeKeySyms - CVE-2025-26597: xkb: fix buffer overflow in XkbChangeTypesOfKey - CVE-2025-26598: Xi: Fix barrier device search -...
CLSA-2025-1756409595 clamav: Fix of 4 CVEs
Update to 1.4.3 LTS - CVE-2025-20260: Fixed a possible buffer overflow write bug in the PDF file parser - CVE-2025-20234: Fixed a possible buffer overflow read bug in the UDF file parser - CVE-2025-20128: Fixed a possible buffer overflow read bug in the OLE2 file parser - CVE-2024-20506: Changed...
CLSA-2025-1756409198 wget: Fix of CVE-2024-38428
CVE-2024-38428: fix mishandle semicolons in userinfo subcomponent of URI to prevent insecure behavior...
CLSA-2025-1756409018 subversion: Fix of CVE-2024-46901
CVE-2024-46901: fix moddavsvn denial-of-service via control characters in paths...
CLSA-2025-1756408700 nodejs: Fix of CVE-2024-25629
CVE-2024-25629: prevent reading before buffer start when parsing config files containing an embedded NULL as the first character of a line by discarding such lines in aresreadline...
CLSA-2025-1756408610 subversion: Fix of CVE-2024-46901
CVE-2024-46901: fix moddavsvn denial-of-service via control characters in paths...
CLSA-2025-1756408410 xorg-x11-server: Fix of 8 CVEs
CVE-2025-26594: refuse to free the root cursor and keep its ref - CVE-2025-26595: fix buffer overflow in XkbVModMaskText - CVE-2025-26596: xkb: fix computation of XkbSizeKeySyms - CVE-2025-26597: xkb: fix buffer overflow in XkbChangeTypesOfKey - CVE-2025-26598: Xi: Fix barrier device search -...
CLSA-2025-1756324356 Fix CVE(s): CVE-2025-49630
SECURITY UPDATE: denial of service attack caused by untrusted clients triggering assertion in modproxyhttp2 - debian/patches/CVE-2025-49630.patch: tolerate missing host header in h2 proxy to fix issue with HTTP/0.9 request without Host header - CVE-2025-49630...
CLSA-2025-1756323917 php: Fix of CVE-2025-1736
CVE-2025-1736: fix incorrect validation of CRLF in http headers...
CLSA-2025-1756323821 php: Fix of CVE-2025-1736
CVE-2025-1736: fix incorrect validation of CRLF in http headers...
CLSA-2025-1756322698 php: Fix of CVE-2025-1736
CVE-2025-1736: fix incorrect validation of CRLF in http headers...
CLSA-2025-1756317560 emacs: Fix of CVE-2025-1244
CVE-2025-1244: fix man.el shell injection vulnerability...
CLSA-2025-1756305640 nodejs: Fix of CVE-2024-28863
CVE-2024-28863: prevent extraction in excessively deep sub-folders to address unlimited sub-folders vulnerability...
CLSA-2025-1756233744 Update of gcc
Bump the release...
CLSA-2025-1756231459 grub2: Fix of CVE-2025-0624
CVE-2025-0624: net: Fix OOB write in grubnetsearchconfigfile...
CLSA-2025-1756230743 unbound: Fix of CVE-2023-50868
CVE-2023-50868: avoid availabiluty of the remote attackers to cause a denial of service using DNSSEC...
CLSA-2025-1756203636 java-11-openjdk: Fix of 5 CVEs
Upgrade to openjdk-11.0.28+6 GA.. The following CVEs were fixed: - CVE-2025-30749: better Glyph drawing - CVE-2025-30754: enhance TLS protocol support - CVE-2025-30761: improve scripting supports - CVE-2025-50059: improve HTTP client header handling - CVE-2025-50106: better Glyph drawing redux...
CLSA-2025-1756202550 Fix of 9 CVEs
Update up to 1.4.3 LTS - CVE-2025-20260 - CVE-2025-20234 - CVE-2025-20128 - CVE-2024-20505, CVE-2024-20506 - CVE-2023-20197 - CVE-2023-20212 - CVE-2023-20032 - CVE-2023-20052...
CLSA-2025-1756110212 krb5: Fix of 2 CVEs
CVE-2025-3576: prevent spoofing vulnerability in GSSAPI-protected messages using RC4-HMAC-MD5 due to weaknesses in MD5 checksum design - CVE-2025-24528: prevent overflow when calculating ulog block size...
CLSA-2025-1755886747 redis: Fix of CVE-2025-48367
CVE-2025-48367: prevent unauthenticated connections causing IP protocol errors by implementing authentication checks...
CLSA-2025-1755886204 avahi: Fix of CVE-2024-52615
CVE-2024-52615: fix issue with Avahi-daemon relying on fixed source ports for wide-area DNS queries to prevent attacks with injected malicious DNS responses...
CLSA-2025-1755886078 tuned: Fix of CVE-2024-52337
CVE-2024-52337: sanitize API arguments to prevent log spoofing by both escaping ' characters and restricting newlines from being inserted...
CLSA-2025-1755885569 zziplib: Fix of CVE-2020-18770
CVE-2020-18770: fix denial-of-service issue in zzipdiskentrytofileheader function in mmapped.c...
CLSA-2025-1755885175 Fix CVE(s): CVE-2025-29088
SECURITY UPDATE: denial of service via sqlite3dbconfig argument values - debian/patches/CVE-2025-29088.patch: harden the SQLITEDBCONFIGLOOKASIDE interface against misuse, such as described in forum post 48f365daec Enhancements to the SQLITEDBCONFIGLOOKASIDE documentation - CVE-2025-29088...
CLSA-2025-1755791979 krb5: Fix of CVE-2025-24528
CVE-2025-24528: fix buffer overflow vulnerability in iprop log file writing...
CLSA-2025-1755791708 Update of linux-firmware
Addition AMD CPU microcode for processor family 0x19: cpuid:0x00A70FC0ver:0x0A70C005, cpuid:0x00A70F52ver:0x0A705206, cpuid:0x00A00F82ver:0x0A00820C, cpuid:0x00A40F41ver:0x0A404107, cpuid:0x00A70F80ver:0x0A708007, cpuid:0x00A20F10ver:0x0A20102D, cpuid:0x00A70F41ver:0x0A704107,...
CLSA-2025-1755708467 libxml2: Fix of 2 CVEs
CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c - CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c...
CLSA-2025-1755708215 kernel: Fix of 2 CVEs
can: bcm: Fix UAF in bcmprocshow CVE-2023-52922 - udmabuf: fix a buf size overflow issue during udmabuf creation CVE-2025-37803...
CLSA-2025-1755707639 kernel: Fix of 2 CVEs
can: bcm: Fix UAF in bcmprocshow CVE-2023-52922 - udmabuf: fix a buf size overflow issue during udmabuf creation CVE-2025-37803...
CLSA-2025-1755707619 kernel: Fix of CVE-2023-52572
cifs: Fix UAF in cifsdemultiplexthread CVE-2023-52572...
CLSA-2025-1755707175 kernel: Fix of CVE-2023-52572
cifs: Fix UAF in cifsdemultiplexthread CVE-2023-52572...
CLSA-2025-1755682686 kernel: Fix of 10 CVEs
netsched: hfsc: Fix a UAF vulnerability in class handling CVE-2025-37797 - sunrpc: handle SVCGARBAGE during svc auth processing as auth error CVE-2025-38089 - net: ch9200: fix uninitialised access during miinwayrestart CVE-2025-38086 - ext4: fix out-of-bound read in ext4xattrinodedecrefall...
CLSA-2025-1755681456 kernel: Fix of 2 CVEs
can: bcm: Fix UAF in bcmprocshow CVE-2023-52922 - udmabuf: fix a buf size overflow issue during udmabuf creation CVE-2025-37803...
CLSA-2025-1755681299 freetype: Fix of CVE-2025-27363
CVE-2025-27363: fix OOB write when parsing font subglyph structures...
CLSA-2025-1755681073 Update of systemd
Fix deleting job when iSCSi used - /dev/lve is added into the list of private devices...