10488 matches found
CLSA-2025-1751552694 Update of shim
Use both AlmaLinux and CloudLinux certs for checking images - Debrand to TuxCare - No SB support for aarch64 on TuxCare yet...
CLSA-2025-1751551161 Update of grub2
Improve Xen detection so we don't set GRUBENABLEBLSCFG=false for HVM domU guests - Debrand for Cloudlinux...
CLSA-2025-1751551010 Update of nss
Allow RSA-OAEP in FIPS mode...
CLSA-2025-1751550947 Update of nettle
Update to nettle 3.10.1 RHEL-52740...
CLSA-2025-1751550583 Update of libkcapi
Backport fixes for kcapi-hasher target option Related: RHEL-15298 - Fix kcapi tests in FIPS mode Resolves: RHEL-2405...
CLSA-2025-1751538844 libgcrypt: Fix of CVE-2024-2236
Synced to upstream plus ASN.1 patch - Tested on AlmaLinux 9.5 - Fix CVE-2024-2236 RHEL-34579...
CLSA-2025-1751290629 Update of ImageMagick
Fix depedency linkage...
CLSA-2025-1751285777 grub2: Fix of 5 CVEs
CVE-2024-45781: fs/ufs: OOB write in the heap - CVE-2024-45782: fs/hfs: strcpy using the volume name - CVE-2024-56737: fs/hfs: Fix stack OOB write with grubstrcpy - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs:...
CLSA-2025-1751271968 openssl: Fix of CVE-2019-1563
CVE-2019-1563: fix information disclosure in PKCS7dataDecode and CMSdecryptset1pkey...
CLSA-2025-1751271625 httpd: Fix of CVE-2020-35452
CVE-2020-35452: modauthdigest: Fix single zero byte stack overflow...
CLSA-2025-1751145522 python3.11: Fix of CVE-2024-0397
CVE-2024-0397: fix memory race condition in ssl.SSLContext methods certstorestats and getcacerts...
CLSA-2025-1751144978 openssh: Fix of CVE-2025-32728
CVE-2025-32728: fix logic error in DisableForwarding option...
CLSA-2025-1751144408 python3.9: Fix of CVE-2024-0397
CVE-2024-0397: fix memory race condition in ssl module's certstorestats and getcacerts methods by ensuring proper synchronization during certificates loading...
CLSA-2025-1751143797 sssd: Fix of CVE-2023-3758
CVE-2023-3758: fix race condition in adgpo...
CLSA-2025-1751143694 libarchive: Fix of CVE-2025-5914
CVE-2025-5914: fix double free with over 4 billion nodes...
CLSA-2025-1751142973 git: Fix of CVE-2024-52005
CVE-2024-52005: add configuration option to sanitize sideband channel payloads...
CLSA-2025-1751142817 openssl: Fix of CVE-2024-13176
CVE-2024-13176: fix timing side-channel in ECDSA signature computation...
CLSA-2025-1751142388 grafana: Fix of CVE-2022-31130
CVE-2022-31130: fix potential leak of authentication tokens to plugins...
CLSA-2025-1751142056 rsync: Fix of CVE-2024-12747
CVE-2024-12747: fix symlink race condition in sender...
CLSA-2025-1751141865 gstreamer1-plugins-base: Fix of CVE-2023-37328
CVE-2023-37328: fix subrip tag parsing to prevent out-of-bounds access in gstsubparse...
CLSA-2025-1751141320 gstreamer1-plugins-good: Fix of CVE-2024-47613
CVE-2024-47613: fix integer overflow in available data check for image tags...
CLSA-2025-1751141300 libfastjson: Fix of CVE-2020-12762
CVE-2020-12762: fix out of bounds write vulnerability in printbuf...
CLSA-2025-1751135005 curl: Fix of CVE-2024-7264
CVE-2024-7264: fix out-of-bound read in GTime2str function...
CLSA-2025-1751134987 rsync: Fix of CVE-2024-12088
CVE-2024-12088: fix improper verification of symbolic link destinations to prevent path traversal vulnerability...
CLSA-2025-1751133871 libsoup: Fix of CVE-2025-32907
CVE-2025-32907: fix resource consumption vulnerability in HTTP range requests...
CLSA-2025-1751133506 Fix CVE(s): CVE-2025-21587, CVE-2025-30691, CVE-2025-30698
OpenJDK 8u452 release - CVE-2025-21587: better TLS connection support - CVE-2025-30691: improve compiler transformations - CVE-2025-30698: enhance Buffered Image handling - Release notes: https://mail.openjdk.org/pipermail/jdk8u-dev/2025-April/019989.html...
CLSA-2025-1751133420 Fix CVE(s): CVE-2025-21587, CVE-2025-30691, CVE-2025-30698
Update to 8u452-ga fixing a number of CVEs - CVE-2025-21587: better TLS connection support - CVE-2025-30691: improve compiler transformations - CVE-2025-30698: enhance Buffered Image handling - Release notes: https://mail.openjdk.org/pipermail/jdk8u-dev/2025-April/019989.html...
CLSA-2025-1751133361 open-vm-tools: Fix of CVE-2025-22247
CVE-2025-22247: prevent usage of illegal characters in user names and file paths...
CLSA-2025-1751042683 Update of tzdata
Upgrade to tzdata-2025b - New zone for Aysén Region in Chile which moves from -04/-03 to -03. - Paraguay adopted permanent -03 starting spring 2024. - Improve pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Improve historical data for Mexico, Mongolia, and Portugal. - System V...
CLSA-2025-1751042580 Update of tzdata
Upgrade to tzdata-2025b - New zone for Aysén Region in Chile which moves from -04/-03 to -03. - Paraguay adopted permanent -03 starting spring 2024. - Improve pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Improve historical data for Mexico, Mongolia, and Portugal. - System V...
CLSA-2025-1751040804 Update of alt-php
New upstream 2025b version: - New zone for Aysén Region in Chile which moves from -04/-03 to -03. - Paraguay adopted permanent -03 starting spring 2024. - Improve pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Improve historical data for Mexico, Mongolia, and Portugal. - Syst...
CLSA-2025-1751040454 Update of tzdata
Upgrade to tzdata-2025b - New zone for Aysén Region in Chile which moves from -04/-03 to -03. - Paraguay adopted permanent -03 starting spring 2024. - Improve pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Improve historical data for Mexico, Mongolia, and Portugal. - System V...
CLSA-2025-1751039108 Update of alt-php
New upstream 2025b version: - New zone for Aysén Region in Chile which moves from -04/-03 to -03. - Paraguay adopted permanent -03 starting spring 2024. - Improve pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Improve historical data for Mexico, Mongolia, and Portugal. - Syst...
CLSA-2025-1751038683 Update of tzdata
Upgrade to tzdata-2025b - New zone for Aysén Region in Chile which moves from -04/-03 to -03. - Paraguay adopted permanent -03 starting spring 2024. - Improve pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Improve historical data for Mexico, Mongolia, and Portugal. - System V...
CLSA-2025-1751028944 Update of tzdata
Upgrade to tzdata-2025b - New zone for Aysén Region in Chile which moves from -04/-03 to -03. - Paraguay adopted permanent -03 starting spring 2024. - Improve pre-1991 data for the Philippines. - Etc/Unknown is now reserved...
CLSA-2025-1751027703 rsync: Fix of CVE-2016-9840
CVE-2016-9840: fix improper pointer arithmetic in bundled zlib...
CLSA-2025-1750953703 Update of tzdata
Upgrade to tzdata-2025b - New zone for Aysén Region in Chile which moves from -04/-03 to -03. - Paraguay adopted permanent -03 starting spring 2024. - Improve pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Improve historical data for Mexico, Mongolia, and Portugal. - System V...
CLSA-2025-1750879249 Update of tzdata
Upgrade to tzdata-2025b - New zone for Aysén Region in Chile which moves from -04/-03 to -03. - Paraguay adopted permanent -03 starting spring 2024. - Improve pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Improve historical data for Mexico, Mongolia, and Portugal. - System V...
CLSA-2025-1750878491 Update of tzdata
Upgrade to tzdata-2025b - New zone for Aysén Region in Chile which moves from -04/-03 to -03. - Paraguay adopted permanent -03 starting spring 2024. - Improve pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Improve historical data for Mexico, Mongolia, and Portugal. - System V...
CLSA-2025-1750785864 redis: Fix of CVE-2025-21605
CVE-2025-21605: add output buffer limiting for unauthenticated clients...
CLSA-2025-1750785613 Fix CVE(s): CVE-2025-32728
SECURITY UPDATE: DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding. - debian/patches/CVE-2025-32728.patch: fix logic error in DisableForwarding option - CVE-2025-32728...
CLSA-2025-1750785256 curl: Fix of CVE-2024-7264
CVE-2024-7264: fix out-of-bound read in GTime2str function...
CLSA-2025-1750785145 tomcat: Fix of CVE-2025-31651
CVE-2025-31651: enforces rewrite rules to preventing bypass of security constraints in specific configurations...
CLSA-2025-1750784906 curl: Fix of CVE-2024-7264
CVE-2024-7264: fix out-of-bound read in GTime2str function...
CLSA-2025-1750784684 Fix CVE(s): CVE-2025-4802
SECURITY UPDATE: Untrusted LDLIBRARYPATH environment variable vulnerability - debian/patches/any/CVE-2025-4802.patch: Ignore LDLIBRARYPATH and debug env var for setuid for static - CVE-2025-4802...
CLSA-2025-1750784473 libsoup: Fix of 2 CVEs
CVE-2025-32911: fix use-after-free vulnerability in soupmessageheadersgetcontentdisposition function - CVE-2025-32913: fix NULL pointer dereference in soupmessageheadersgetcontentdisposition function...
CLSA-2025-1750784361 java-1.8.0-openjdk: Fix of 2 CVEs
Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u452-b09. That fixes following CVE: CVE-2025-21587, CVE-2025-30698...
CLSA-2025-1750783972 podman: Fix of CVE-2024-9341
CVE-2024-9341: Use securejoin to safely join container paths and prevent symlink-based host escapes...