10488 matches found
CLSA-2025-1753207513 pam: Fix of CVE-2025-6020
CVE-2025-6020: privilege elevation to root via multiple symlink attacks and race conditions - Perform regression testing...
CLSA-2025-1753207418 python3: Fix of 5 CVEs
CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4435, CVE-2025-4517: fix multiple tarfile extraction filter bypasses filter="tar"/filter="data"...
CLSA-2025-1753207140 Fix CVE(s): CVE-2025-48384
SECURITY UPDATE: security vulnerability discovered - debian/patches/CVE-2025-48384.patch: quote values containing CR character in config to prevent unintentional stripping when reading - CVE-2025-48384...
CLSA-2025-1753207126 nginx: Fix of 2 CVEs
CVE-2022-41741: fix vulnerability in ngxhttpmp4module leading to potential memory corruption and termination by improving module handling of specially crafted audio/video files - CVE-2022-41742: fix module ngxhttpmp4module vulnerability to prevent worker process crash and memory disclosure from...
CLSA-2025-1753206853 pam: Fix of CVE-2025-6020
CVE-2025-6020: privilege elevation to root via multiple symlink attacks and race conditions - Perform regression testing...
CLSA-2025-1753206847 pam: Fix of CVE-2025-6020
CVE-2025-6020: privilege elevation to root via multiple symlink attacks and race conditions - Perform regression testing...
CLSA-2025-1753131177 libblockdev: Fix of CVE-2025-6019
CVE-2025-6019: don't allow suid and dev set on fs resize...
CLSA-2025-1753131065 libsoup: Fix of 7 CVEs
CVE-2025-32050: fix overflow in appendparamquoted - CVE-2025-32052: fix heap buffer overflow in soupcontentsniffersniff - CVE-2025-32053: fix heap buffer overflow in snifffeedorhtml - CVE-2025-32907: soup-message-headers: correct merge of ranges - CVE-2025-46420: fix leak in...
CLSA-2025-1753124055 libsoup: Fix of 7 CVEs
CVE-2025-32050: fix overflow in appendparamquoted - CVE-2025-32052: fix heap buffer overflow in soupcontentsniffersniff - CVE-2025-32053: fix heap buffer overflow in snifffeedorhtml - CVE-2025-32907: soup-message-headers: correct merge of ranges - CVE-2025-46420: fix leak in...
CLSA-2025-1753121138 webkit2gtk3: Fix of CVE-2024-44309
CVE-2024-44309: fix issue with processing maliciously crafted web content may lead to a cross site scripting attack...
CLSA-2025-1753121050 Fix CVE(s): CVE-2025-48384
SECURITY UPDATE: security vulnerability addressed - debian/patches/CVE-2025-48384.patch: quote values containing CR character to prevent unintended behavior - CVE-2025-48384...
CLSA-2025-1753120992 libsoup: Fix of 7 CVEs
CVE-2025-32050: fix overflow in appendparamquoted - CVE-2025-32052: fix heap buffer overflow in soupcontentsniffersniff - CVE-2025-32053: fix heap buffer overflow in snifffeedorhtml - CVE-2025-32907: soup-message-headers: correct merge of ranges - CVE-2025-46420: fix leak in...
CLSA-2025-1753086336 Update of alt-php
Bump ABI 5.4.0-220...
CLSA-2025-1753085842 Fix of 10 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-46787 - userfaultfd: fix checks for huge PMDs CVE-url: https://ubuntu.com/security/CVE-2025-37798 - schhtb: make htbqlennotify idempotent - schdrr: make drrqlennotify idempotent - schhfsc: make hfscqlennotify idempotent - schqfq: make qfqqlennotify...
CLSA-2025-1753083772 Update of alt-php
Bump ABI 4.15.0-249...
CLSA-2025-1753083608 Fix of 17 CVEs
Focal update: v5.4.292 upstream stable release LP: 2109357 // CVE-url: https://ubuntu.com/security/CVE-2025-37937 - objtool, media: dib8000: Prevent divide-by-zero in dib8000setdds Focal update: v5.4.287 upstream stable release LP: 2095145 // CVE-url: https://ubuntu.com/security/CVE-2024-53197 -...
CLSA-2025-1753083230 Update of alt-php
Bump ABI 4.4.0-276...
CLSA-2025-1753083094 Fix of 10 CVEs
Focal update: v5.4.292 upstream stable release LP: 2109357 // CVE-url: https://ubuntu.com/security/CVE-2025-37937 - objtool, media: dib8000: Prevent divide-by-zero in dib8000setdds Focal update: v5.4.287 upstream stable release LP: 2095145 // CVE-url: https://ubuntu.com/security/CVE-2024-53197 -...
CLSA-2025-1752922753 nodejs: Fix of CVE-2024-27983
CVE-2024-27983: ensure to close stream when destroying session to prevent memory leak...
CLSA-2025-1752922014 webkit2gtk3: Fix of CVE-2025-31257
CVE-2025-31257: fix issue with processing malicious web content can cause a use-after-free issue due to improper memory handling and result in an unexpected crash...
CLSA-2025-1752921642 tigervnc: Fix of CVE-2025-49175
CVE-2025-49175: fix out-of-bounds read in handling of animated cursors...
CLSA-2025-1752750189 emacs: Fix of CVE-2024-30204
CVE-2024-30204: disable LaTeX preview for e-mail attachments to protection when untrusted-content is non-nil...
CLSA-2025-1752749664 libreswan: Fix of CVE-2024-3652
CVE-2024-3652: fix assertion failure and crash caused by requesting AES-GMAC without specifying esp= line...
CLSA-2025-1752749203 jq: Fix of CVE-2025-48060
CVE-2025-48060: fix heap-buffer-overflow in function jvstringvfmt in jqfuzzexecute by adding boundary checks...
CLSA-2025-1752748974 git: Fix of CVE-2025-48384
CVE-2025-48384: config: quote values containing CR character...
CLSA-2025-1752748693 python3.11: Fix of 5 CVEs
CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4435, CVE-2025-4517: fix multiple tarfile extraction filter bypasses filter="tar"/filter="data"...
CLSA-2025-1752747463 libxml2: Fix of CVE-2025-6021
CVE-2025-6021: fix buffer overflow in xmlBuildQName function...
CLSA-2025-1752746954 sudo: Fix of CVE-2025-32462
CVE-2025-32462: prevent listed users from executing commands on unintended machines by updating sudoers file validation...
CLSA-2025-1752683103 git: Fix of CVE-2025-48384
CVE-2025-48384: config: quote values containing CR character...
CLSA-2025-1752656083 git: Fix of CVE-2025-48384
CVE-2025-48384: config: quote values containing CR character...
CLSA-2025-1752655814 git: Fix of CVE-2025-48384
CVE-2025-48384: config: quote values containing CR character...
CLSA-2025-1752655315 git: Fix of CVE-2025-48384
CVE-2025-48384: config: quote values containing CR character...
CLSA-2025-1752655539 git: Fix of CVE-2025-48384
CVE-2025-48384: config: quote values containing CR character...
CLSA-2025-1752655171 libxml2: Fix of 3 CVEs
CVE-2025-49794: fix use-after-free issue triggered by processing certain elements in input XML file. - CVE-2025-49796: fix memory corruption issue triggered by processing certain sch:name elements in input XML file. - CVE-2025-6021: fix integer overflow in buffer size calculations to prevent...
CLSA-2025-1752655009 java-1.8.0-openjdk: Fix of 7 CVEs
CVE-2024-20952: remote data access or modification in sandboxed clients - CVE-2024-20932: modify or access sensitive data in sandboxed client environments - CVE-2024-20918: remote data access or modification in sandboxed clients - CVE-2024-20926: remote data access in sandboxed clients -...
CLSA-2025-1752655000 git: Fix of CVE-2025-48384
CVE-2025-48384: config: quote values containing CR character...
CLSA-2025-1752654760 libxml2: Fix of 3 CVEs
CVE-2025-49794: fix use-after-free issue triggered by processing certain elements in input XML file. - CVE-2025-49796: fix memory corruption issue triggered by processing certain sch:name elements in input XML file. - CVE-2025-6021: fix integer overflow in buffer size calculations to prevent...
CLSA-2025-1752654590 libxml2: Fix of 3 CVEs
CVE-2025-49794: fix use-after-free issue triggered by processing certain elements in input XML file. - CVE-2025-49796: fix memory corruption issue triggered by processing certain sch:name elements from input XML file - CVE-2025-6021: fix integer overflow in buffer size calculations to prevent...
CLSA-2025-1752576917 git: Fix of CVE-2025-48385
CVE-2025-48385: bundle-uri: fix arbitrary file writes via parameter injection...
CLSA-2025-1752516250 nginx: Fix of CVE-2025-23419
CVE-2025-23419: fix issue allowing session resumption to bypass client certificate authentication when multiple server blocks share same IP/port...
CLSA-2025-1751913478 sudo: Fix of CVE-2025-32462
CVE-2025-32462: fix Local Privilege Escalation vulnerability via host option...
CLSA-2025-1752247531 rsync: Fix of CVE-2024-12088
CVE-2024-12088: fix path traversal vulnerability in symbolic link destinations when using --safe-links option...
CLSA-2025-1752247075 mod_auth_openidc: Fix of CVE-2025-3891
CVE-2025-3891: fix denial of service issue caused by sending empty POST request when OIDCPreservePost directive is enabled...
CLSA-2025-1752246531 java-11-openjdk: Fix of 13 CVEs
Upgrade to openjdk-11.0.27+6. The following CVEs were fixed: - CVE-2025-30698: fix buffered image handling to avoid unauthorized access to accessible data - CVE-2025-30691: improve compiler transformations to avoid unauthorized access to accessible data - CVE-2024-21144: invalid header validation...
CLSA-2025-1752238368 Update of gnutls
Fix timing side-channel in deterministic ECDSA RHEL-28958 - Fix potential crash during chain building/verification RHEL-28953...
CLSA-2025-1752189542 Update of kernel
Rebased FIPS patches to 5.14.0-570.25.1...
CLSA-2025-1752091182 Update of tzdata
Fix incorrect tzdb.dat by harding links...
CLSA-2025-1752126532 httpd: Fix of 2 CVEs
CVE-2014-8109: modlua: fix LuaAuthzProvider argument handling issue - CVE-2019-10092: modproxy: fix limited cross-site scripting in modproxy error page...