10488 matches found
CLSA-2025-1754410992 Fix CVE(s): CVE-2025-6965
SECURITY UPDATE: excessive aggregate terms potentially leading to memory corruption - debian/patches/CVE-2025-6965.patch: fix a potential memory corruption if the number of aggregate terms in a query exceeds the maximum number of columns - CVE-2025-6965...
CLSA-2025-1754410836 sqlite: Fix of CVE-2025-6965
CVE-2025-6965: fix memory corruption issue caused by exceeding the number of columns with aggregate terms...
CLSA-2025-1754384758 php: Fix of CVE-2025-6491
CVE-2025-6491: fix buffer overflow vulnerability...
CLSA-2025-1754383150 Update of nss
update to CKBI 2.74 from NSS 3.110 - updated certificates: - Certificate "Entrust.net Premium 2048 Secure Server CA" - Certificate "Entrust Root Certification Authority" - Certificate "AffirmTrust Commercial" - Certificate "AffirmTrust Networking" - Certificate "AffirmTrust Premium" - Certificate...
CLSA-2025-1754382809 Update of nss
update to CKBI 2.78 from NSS 3.113 - updated certificates: - Certificate "Entrust.net Premium 2048 Secure Server CA" - Certificate "Entrust Root Certification Authority" - Certificate "AffirmTrust Commercial" - Certificate "AffirmTrust Networking" - Certificate "AffirmTrust Premium" - Certificate...
CLSA-2025-1754382679 Update of alt-php
Update ca-certificates database to 20250418: - mozilla\certdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.74. - The following certificates were updated: Certificate "Entrust.net Premium 2048 Secure Server CA" Certificate "Entrust Root Certification Authority"...
CLSA-2025-1754382501 Update of alt-php
Update ca-certificates database to 20250418: - mozilla\certdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.74. - The following certificates were updated: Certificate "Entrust Root Certification Authority - G4" Certificate "Security Communication ECC RootCA1"...
CLSA-2025-1754382436 Update of alt-php
Update ca-certificates database to 20250418: - mozilla\certdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.74. - The following certificates were updated: Certificate "Entrust Root Certification Authority - G4" Certificate "Security Communication ECC RootCA1"...
CLSA-2025-1754382311 Update of nss
update to CKBI 2.74 from NSS 3.110 - updated certificates: - Certificate "Entrust.net Premium 2048 Secure Server CA" - Certificate "Entrust Root Certification Authority" - Certificate "AffirmTrust Commercial" - Certificate "AffirmTrust Networking" - Certificate "AffirmTrust Premium" - Certificate...
CLSA-2025-1754381826 microcode_ctl: Fix of 8 CVEs
Update Intel CPU microcode to 20250512 release, addresses CVE-2025-20012, CVE-2025-24495, CVE-2024-43420, CVE-2025-20623, CVE-2024-45332, CVE-2024-28956, CVE-2025-20103, CVE-2025-20054: - Addition of cpuid:806F8/0x10 SPR-HBM B3 microcode in microcode.dat at revision 0x2c0003f7; - Addition of...
CLSA-2025-1754381806 Fix of 8 CVEs
New microcode update packages from upstream up to 2025-05-12: - New microcodes: sig 0x000a06d1, pfmask 0x20, 2025-02-07, rev 0xa0000d1, size 1635328 sig 0x000a06d1, pfmask 0x95, 2025-02-07, rev 0x10003a2, size 1664000 sig 0x000b0650, pfmask 0x80, 2025-03-18, rev 0x000a, size 136192 sig 0x000b06d1...
CLSA-2025-1754381695 Fix of 8 CVEs
New microcode update packages from upstream up to 2025-05-12: - New microcodes: sig 0x000a06d1, pfmask 0x20, 2025-02-07, rev 0xa0000d1, size 1635328 sig 0x000a06d1, pfmask 0x95, 2025-02-07, rev 0x10003a2, size 1664000 sig 0x000b0650, pfmask 0x80, 2025-03-18, rev 0x000a, size 136192 sig 0x000b06d1...
CLSA-2025-1754381655 microcode_ctl: Fix of 6 CVEs
Update Intel CPU microcode to 20250512: - Fixes CVE-2025-20012, CVE-2025-20623, CVE-2025-24495, CVE-2024-28956 CVE-2024-43420, CVE-2024-45332 - Addition of cpuid:806F8/0x10 SPR-HBM B3 microcode in microcode.dat at revision 0x2c0003f7; - Addition of cpuid:806F8/0x87 SPR-SP E5/S3 microcode in...
CLSA-2025-1754381565 Update of nss
update to CKBI 2.74 from NSS 3.110 - updated certificates: - Certificate "certSIGN ROOT CA" - Certificate "ACCVRAIZ1" - Certificate "Entrust Root Certification Authority - G4" - Certificate "Security Communication ECC RootCA1" - Certificate "BJCA Global Root CA1" - Certificate "BJCA Global Root...
CLSA-2025-1754381492 Update of nss
update to CKBI 2.74 from NSS 3.110 - updated certificates: - Certificate "Entrust.net Premium 2048 Secure Server CA" - Certificate "Entrust Root Certification Authority" - Certificate "AffirmTrust Commercial" - Certificate "AffirmTrust Networking" - Certificate "AffirmTrust Premium" - Certificate...
CLSA-2025-1754381424 microcode_ctl: Fix of 8 CVEs
Update Intel CPU microcode to 20250512 release, addresses CVE-2025-20012, CVE-2025-24495, CVE-2024-43420, CVE-2025-20623, CVE-2024-45332, CVE-2024-28956, CVE-2025-20103, CVE-2025-20054: - Addition of cpuid:806F8/0x10 SPR-HBM B3 microcode in microcode.dat at revision 0x2c0003f7; - Addition of...
CLSA-2025-1754381382 git: Fix of CVE-2025-27613
CVE-2025-27613: fix vulnerability where Gitk can write and truncate arbitrary writable files...
CLSA-2025-1754381195 php: Fix of CVE-2025-6491
CVE-2025-6491: fix buffer overflow vulnerability...
CLSA-2025-1754346021 git: Fix of CVE-2025-27613
CVE-2025-27613: fix vulnerability where Gitk can write and truncate arbitrary writable files...
CLSA-2025-1754342893 php: Fix of CVE-2025-6491
CVE-2025-6491: fix buffer overflow vulnerability...
CLSA-2025-1754342507 sqlite: Fix of CVE-2025-6965
CVE-2025-6965: fix a potential memory corruption if the number of aggregate terms in a query exceeds the maximum number of columns...
CLSA-2025-1754341122 java-1.8.0-openjdk: Fix of 4 CVEs
Update to shenandoah-jdk8u462-b08 GA - Security fixes from OpenJDK 8u462-b08: - CVE-2025-30749: fix 2D vulnerability allowing remote attackers to compromise JVM via network access - CVE-2025-30754: fix JSSE vulnerability allowing unauthorized data access via TLS connections - CVE-2025-30761: fix...
CLSA-2025-1754340339 sqlite: Fix of CVE-2025-6965
CVE-2025-6965: fix memory corruption issue caused by a query where the number of aggregate terms could exceed the number of columns available...
CLSA-2025-1754340109 libblockdev: Fix of CVE-2025-6019
CVE-2025-6019: fix local privilege escalation vulnerability by updating libblockdev to prevent mounting of user-provided filesystem images with SUID- root shell...
CLSA-2025-1754339372 redis: Fix of CVE-2025-32023
CVE-2025-32023: fix stack/heap out of bounds write on hyperloglog operations...
CLSA-2025-1754339166 sqlite: Fix of CVE-2025-6965
CVE-2025-6965: fix a potential memory corruption if the number of aggregate terms in a query exceeds the maximum number of columns...
CLSA-2025-1754338696 sqlite: Fix of CVE-2025-6965
CVE-2025-6965: fix memory corruption issue caused by exceeding the number of columns with aggregate terms...
CLSA-2025-1754338599 Fix CVE(s): CVE-2025-6965
SECURITY UPDATE: aggregate term exceeding column count vulnerability - debian/patches/CVE-2025-6965.patch: fix a potential memory corruption if the number of aggregate terms in a query exceeds the maximum number of columns - CVE-2025-6965...
CLSA-2025-1754338597 Fix CVE(s): CVE-2025-6965
SECURITY UPDATE: excessive aggregate terms potentially leading to memory corruption - debian/patches/CVE-2025-6965.patch: fix a potential memory corruption if the number of aggregate terms in a query exceeds the maximum number of columns - CVE-2025-6965...
CLSA-2025-1754338412 libarchive: Fix of CVE-2025-25724
CVE-2025-25724: fix crash in listitemverbose on invalid time...
CLSA-2025-1754337742 Update of nss
update to CKBI 2.74 from NSS 3.110 - updated certificates: - Certificate "Entrust.net Premium 2048 Secure Server CA" - Certificate "Entrust Root Certification Authority" - Certificate "AffirmTrust Commercial" - Certificate "AffirmTrust Networking" - Certificate "AffirmTrust Premium" - Certificate...
CLSA-2025-1754337533 Update of nss
update to CKBI 2.74 from NSS 3.110 - updated certificates: - Certificate "Entrust.net Premium 2048 Secure Server CA" - Certificate "Entrust Root Certification Authority" - Certificate "AffirmTrust Commercial" - Certificate "AffirmTrust Networking" - Certificate "AffirmTrust Premium" - Certificate...
CLSA-2025-1754043770 java-17-openjdk: Fix of 4 CVEs
Update to jdk-17.0.16+8 - CVE-2025-50106: fix 2D component vulnerability in Java SE allowing remote attackers to compromise the Java runtime via crafted input - CVE-2025-30749: fix 2D rendering vulnerability in Java SE that could lead to application crash or remote code execution -...
CLSA-2025-1754037921 Update of alt-php
Bump ABI 4.15.0-250...
CLSA-2025-1754037789 Fix of 5 CVEs
Focal update: v5.4.291 upstream stable release LP: 2106002 // CVE-2025-21760 // CVE-url: https://ubuntu.com/security/CVE-2025-21760 - ndisc: extend RCU protection in ndiscsendskb Focal update: v5.4.291 upstream stable release LP: 2106002 // CVE-2025-21761 // CVE-url:...
CLSA-2025-1754037378 Update of alt-php
Bump ABI 4.4.0-277...
CLSA-2025-1754037187 Fix of 7 CVEs
CVE-url: https://ubuntu.com/security/CVE-2021-47352 - virtio-net: Add validation for used length CVE-url: https://ubuntu.com/security/CVE-2024-46771 - can: bcm: Remove proc entry when dev is unregistered. Bionic update: upstream stable patchset 2023-01-20 LP: 2003596 // CVE- url:...
CLSA-2025-1753988282 avahi: Fix of CVE-2024-52616
CVE-2024-52616: initialize DNS transaction IDs randomly at each startup to prevent predictability and mitigate DNS spoofing attacks...
CLSA-2025-1753987674 iputils: Fix of CVE-2025-47268
CVE-2025-47268: fix denial of service caused by signed 64-bit integer overflow in timestamp multiplication in ping...
CLSA-2025-1753987188 dovecot: Fix of CVE-2024-23185
CVE-2024-23185: fix resource exhaustion caused by very large headers when parsing messages...
CLSA-2025-1753982448 php: Fix of CVE-2025-1735
CVE-2025-1735: add error checking for pgsql extension escape functions, mainly to fix possible issues with multi-byte encoding of Postgres databases...
CLSA-2025-1753982295 java-1.8.0-openjdk: Fix of 4 CVEs
Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u462-b08 GA. That fixes following CVEs: - CVE-2025-30749: better Glyph drawing - CVE-2025-30754: enhance TLS protocol support - CVE-2025-30761: improve scripting supports - CVE-2025-50106: glyph out-of-memory access and crash...
CLSA-2025-1753981912 php: Fix of CVE-2025-1736
CVE-2025-1736: validate end-of-line characters in user-supplied headers to prevent headers from being misinterpreted...
CLSA-2025-1753981054 emacs: Fix of CVE-2025-1244
CVE-2025-1244: fix command injection flaw by sanitizing input...
CLSA-2025-1753967026 java-1.8.0-openjdk: Fix of 4 CVEs
Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u462-b08 GA. That fixes following CVEs: - CVE-2025-30749: better Glyph drawing - CVE-2025-30754: enhance TLS protocol support - CVE-2025-30761: improve scripting supports - CVE-2025-50106: glyph out-of-memory access and crash...
CLSA-2025-1753966983 java-1.8.0-openjdk: Fix of 4 CVEs
Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u462-b08 GA. That fixes following CVEs: - CVE-2025-30749: better Glyph drawing - CVE-2025-30754: enhance TLS protocol support - CVE-2025-30761: improve scripting supports - CVE-2025-50106: glyph out-of-memory access and crash...
CLSA-2025-1753963973 php: Fix of CVE-2025-1735
CVE-2025-1735: add error checking for pgsql extension escape functions, mainly to fix possible issues with multi-byte encoding of Postgres databases...
CLSA-2025-1753953101 php: Fix of CVE-2025-1735
CVE-2025-1735: add error checking for pgsql extension escape functions, mainly to fix possible issues with multi-byte encoding of Postgres databases...