10488 matches found
CLSA-2025-1749481543 mysql: Fix of 20 CVEs
Update to MySQL 8.0.42 - CVEs fixed: CVE-2025-21574 CVE-2025-21577 CVE-2025-21579 CVE-2025-21581 CVE-2025-21584 CVE-2025-21585 CVE-2025-30681 CVE-2025-30682 CVE-2025-30683 CVE-2025-30684 CVE-2025-30688 CVE-2025-30689 CVE-2025-30695 CVE-2025-30696 CVE-2025-30699 CVE-2025-30703 CVE-2025-30705...
CLSA-2025-1749480611 kernel: Fix of 25 CVEs
rcu-tasks: Fix showrcutaskstracegpkthread buffer overflow CVE-2024-38577 - tcp: fix mptcp DSS corruption due to large pmtu xmit CVE-2024-50083 - vsock: Keep the binding until socket destruction CVE-2025-21756 - memstick: rtsxusbms: Fix slab-use-after-free in rtsxusbmsdrvremove CVE-2025-22020 -...
CLSA-2025-1749479602 gnutls: Fix of 3 CVEs
Keep the broken pkcs11 tests disabled. - Added CVE-2024-0567 PoC test. - CVE-2023-5981-pre1: improve level of randomness for each operations, always use gnutlsswitchlibstate for pk wrappers. - CVE-2023-5981-pre2: add constant time/cache operations to prevent or minimaze timining or cache side...
CLSA-2025-1749478391 gstreamer1-plugins-good: Fix of CVE-2024-47596
CVE-2024-47596: fix integer underflow in MP4/MOV demuxer that can lead to out-of-bounds reads...
CLSA-2025-1748968303 Update of linux-firmware
Addition AMD CPU microcode for processor family 0x17: cpuid:0x00870F10ver:0x08701034, cpuid:0x00860F01ver:0x0860010D, cpuid:0x00860F81ver:0x08608108; - Addition AMD CPU microcode for processor family 0x19: cpuid:0x00A70FC0ver:0x0A70C005, cpuid:0x00A70F52ver:0x0A705206,...
CLSA-2025-1748967240 sssd: Fix of CVE-2023-3758
CVE-2023-3758: fix race condition in adgpo...
CLSA-2025-1748947069 sssd: Fix of CVE-2023-3758
CVE-2023-3758: fix race condition in adgpo...
CLSA-2025-1748945500 golang: Fix of CVE-2024-45341
CVE-2024-45341: properly check for IPv6 hosts in URIs...
CLSA-2025-1748945377 sssd: Fix of CVE-2023-3758
CVE-2023-3758: fix race condition in adgpo...
CLSA-2025-1748945064 Fix CVE(s): CVE-2019-10206, CVE-2019-14856
SECURITY UPDATE: password prompt vulnerability from template expansion - debian/patches/CVE-2019-10206.patch: prevent templating of passwords from prompt to avoid special characters triggering it incorrectly - CVE-2019-10206 - debian/patches/CVE-2019-14856.patch: fix incomplete CVE-2019-10206 pat...
CLSA-2025-1748639719 gstreamer1-plugins-base: Fix of CVE-2024-47835
CVE-2024-47835: fix NULL-pointer dereference in LRC subtitle parser...
CLSA-2025-1748639500 php: Fix of 3 CVEs
CVE-2025-1217: fix handling of folded headers by the http stream parser - CVE-2025-1734: fix validation of http headers with missing colon - CVE-2025-1861: fix incorrect http redirect location truncation...
CLSA-2025-1748638811 grafana: Fix of CVE-2024-24790
CVE-2024-24790: update golang dependency to include fix for CVE-2024-24790...
CLSA-2025-1748638280 gstreamer1-plugins-good: Fix of 4 CVEs
CVE-2024-47775, CVE-2024-47776, CVE-2024-47777, CVE-2024-47778: fix various out-of-bounds reads in the WAV parser that can cause crashes for certain input files...
CLSA-2025-1748638245 python3: Fix of CVE-2024-9287
CVE-2024-9287: fix path names quoting to prevent command injection in virtual environment activation scripts...
CLSA-2025-1748638011 Update of httpd
ELS-1267: merge spec for centos7, rhel7 and oracle7...
CLSA-2025-1748629601 Update of linux-firmware
Addition AMD CPU microcode for processor family 0x19: cpuid:0x00A70FC0ver:0x0A70C005, cpuid:0x00A70F52ver:0x0A705206, cpuid:0x00A00F82ver:0x0A00820C, cpuid:0x00A40F41ver:0x0A404107, cpuid:0x00A70F80ver:0x0A708007, cpuid:0x00A20F10ver:0x0A20102D, cpuid:0x00A70F41ver:0x0A704107,...
CLSA-2025-1748629384 Update of less
Merge package with 458-10 release...
CLSA-2025-1748629211 java-11-openjdk: Fix of 3 CVEs
Upgrade to openjdk-11.0.27+6 GA. The following CVEs were fixed: - CVE-2025-21587: fix TLS connection support to avoid unauthorized access to critical data - CVE-2025-30698: fix buffered image handling to avoid unauthorized access to accessible data - CVE-2025-30691: improve compiler...
CLSA-2025-1748629141 Update of linux-firmware
Addition AMD CPU microcode for processor family 0x19: cpuid:0x00A70FC0ver:0x0A70C005, cpuid:0x00A70F52ver:0x0A705206, cpuid:0x00A00F82ver:0x0A00820C, cpuid:0x00A40F41ver:0x0A404107, cpuid:0x00A70F80ver:0x0A708007, cpuid:0x00A20F10ver:0x0A20102D, cpuid:0x00A70F41ver:0x0A704107,...
CLSA-2025-1748628043 Update of linux-firmware
Addition AMD CPU microcode for processor family 0x19: cpuid:0x00A70FC0ver:0x0A70C005, cpuid:0x00A70F52ver:0x0A705206, cpuid:0x00A00F82ver:0x0A00820C, cpuid:0x00A40F41ver:0x0A404107, cpuid:0x00A70F80ver:0x0A708007, cpuid:0x00A20F10ver:0x0A20102D, cpuid:0x00A70F41ver:0x0A704107,...
CLSA-2025-1748627842 Update of linux-firmware
Addition AMD CPU microcode for processor family 0x19: cpuid:0x00A70FC0ver:0x0A70C005, cpuid:0x00A70F52ver:0x0A705206, cpuid:0x00A00F82ver:0x0A00820C, cpuid:0x00A40F41ver:0x0A404107, cpuid:0x00A70F80ver:0x0A708007, cpuid:0x00A20F10ver:0x0A20102D, cpuid:0x00A70F41ver:0x0A704107,...
CLSA-2025-1748626881 golang: Fix of 2 CVEs
CVE-2024-24789: fix zip parsing to reject EOCDR records with truncated comments - CVE-2024-9355: fix HMAC to pass initialized length to EVPDigestSignFinal, ensuring correct output handling...
CLSA-2025-1748626479 webkit2gtk3: Fix of CVE-2025-24201
CVE-2025-24201: address issue with out-of-bounds write by adding improved checks...
CLSA-2025-1748625592 Update of linux-firmware
Addition AMD CPU microcode for processor family 0x17: cpuid:0x00870F10ver:0x08701034, cpuid:0x00860F01ver:0x0860010D, cpuid:0x00860F81ver:0x08608108; - Addition AMD CPU microcode for processor family 0x19: cpuid:0x00A70FC0ver:0x0A70C005, cpuid:0x00A70F52ver:0x0A705206,...
CLSA-2025-1748464675 git: Fix of CVE-2024-32004
CVE-2024-32004: detect dubious ownership of local repositories, backport the necessary functions...
CLSA-2025-1748451788 Fix CVE(s): CVE-2021-3583
SECURITY UPDATE: template Injection Vulnerability - debian/patches/CVE-2021-3583.patch: fix unsafe preservation across newlines to ensure always having unsafe - CVE-2021-3583...
CLSA-2025-1748366748 kernel: Fix of 12 CVEs
ext4: fix OOB read when checking dotdot dir CVE-2025-37785 - iscsiibft: Fix UBSAN shift-out-of-bounds warning in ibftattrshownic CVE-2025-21993 - media: uvcvideo: Fix double free in error path CVE-2024-57980 - jffs2: Prevent rtime decompress memory corruption CVE-2024-57850 - wifi: iwlegacy:...
CLSA-2025-1748365696 sudo: Fix of CVE-2023-42465
CVE-2023-42465: Make sudo less vulnerable to ROWHAMMER attacks...
CLSA-2025-1748365686 kernel: Fix of 12 CVEs
ext4: fix OOB read when checking dotdot dir CVE-2025-37785 - iscsiibft: Fix UBSAN shift-out-of-bounds warning in ibftattrshownic CVE-2025-21993 - media: uvcvideo: Fix double free in error path CVE-2024-57980 - jffs2: Prevent rtime decompress memory corruption CVE-2024-57850 - wifi: iwlegacy:...
CLSA-2025-1748282295 Fix of 34 CVEs
SECURITY UPDATE: Misc vulnerability fixes - CVE-2019-12418, CVE-2019-17563, CVE-2020-1935, CVE-2020-11996, CVE-2020-13934, CVE-2020-13935, CVE-2020-13943, CVE-2020-17527, CVE-2021-24122, CVE-2021-30639, CVE-2021-30640, CVE-2021-33037, CVE-2021-42340, CVE-2021-43980, CVE-2022-25762, CVE-2022-34305...
CLSA-2025-1748282366 libxml2: Fix of CVE-2025-32415
CVE-2025-32415: fix heap buffer overflow in xmlSchemaIDCFillNodeTables...
CLSA-2025-1748282288 Fix CVE(s): CVE-2025-32414, CVE-2025-32415
SECURITY UPDATE: Out-of-bounds memory access in Python API bindings - debian/patches/CVE-2025-32414.patch: Limit character reads and reserve buffer space for UTF-8 encoding to prevent overflow - CVE-2025-32414 SECURITY UPDATE: Heap buffer under-read in XML schema validation -...
CLSA-2025-1748262659 Update of alt-php
New microcode update packages from upstream up to 2025-04-10: - Addition AMD CPU microcode for processor family 0x17: cpuid:0x00870F10ver:0x08701034, cpuid:0x00860F01ver:0x0860010D, cpuid:0x00860F81ver:0x08608108; - Addition AMD CPU microcode for processor family 0x19:...
CLSA-2025-1748014371 Update of alt-php
New microcode update packages from upstream up to 2025-04-10: - Addition AMD CPU microcode for processor family 0x19: cpuid:0x00A70FC0ver:0x0A70C005, cpuid:0x00A70F52ver:0x0A705206, cpuid:0x00A00F82ver:0x0A00820C, cpuid:0x00A40F41ver:0x0A404107, cpuid:0x00A70F80ver:0x0A708007,...
CLSA-2025-1748014298 Update of alt-php
New microcode update packages from upstream up to 2025-04-10: - Addition AMD CPU microcode for processor family 0x17: cpuid:0x00870F10ver:0x08701034, cpuid:0x00860F01ver:0x0860010D, cpuid:0x00860F81ver:0x08608108; - Addition AMD CPU microcode for processor family 0x19:...
CLSA-2025-1748002217 golang: Fix of CVE-2024-24790
CVE-2024-24790: fix unexpected behavior from Is methods for IPv4-mapped IPv6 addresses...
CLSA-2025-1748001706 gstreamer1-plugins-good: Fix of CVE-2024-47774
CVE-2024-47774: fix an integer overflow in the AVI subtitle parser that can lead to out-of-bounds reads and can cause crashes for certain input files...
CLSA-2025-1748001506 krb5: Fix of CVE-2024-3596
CVE-2024-3596: implement support for Message-Authenticator in libkrad...
CLSA-2025-1747998930 gstreamer1-plugins-base: Fix of CVE-2024-47600
CVE-2024-47600: fixed out-of-bounds read in the gst-discoverer-1.0 command-line tool that could cause crashes...
CLSA-2025-1747926654 binutils: Fix of CVE-2025-0840
CVE-2025-0840: fix stack-buffer-overflow at objdump disassemblebytes...
CLSA-2025-1747926350 Update of python
Version was updated...
CLSA-2025-1747903683 gnutls: Fix of 2 CVEs
CVE-2024-28834: fix side-channel leak in the deterministic ECDSA - CVE-2024-28835: fix crash when verifying a certificate chain with more than 16 certificates...
CLSA-2025-1747903049 giflib: Fix of 2 CVEs
CVE-2023-48161: fix heap-buffer overflow - CVE-2025-31344: fix heap-buffer overflow...
CLSA-2025-1747902752 Fix CVE(s): CVE-2018-16837
SECURITY UPDATE: sensitive data leakage through User module - debian/patches/CVE-2018-16837.patch: do not pass sshkeypassphrase on cmdline, fix passphrase being passed on command line - CVE-2018-16837...
CLSA-2025-1747855403 squid: Fix of 6 CVEs
CVE-2021-28651: fix memory leak in RFC 2169 response parsing - CVE-2021-28652: fix broken cache manager URL parsing - CVE-2021-31806: fix memory management bug - CVE-2021-31807: fix integer overflow problem - CVE-2021-31808: fix input validation bug - CVE-2021-33620: handle more partial responses...
CLSA-2025-1747855200 gnutls: Fix of CVE-2024-12243
CVE-2024-12243: x509: optimize name constraints processing...
CLSA-2025-1747854497 Update of expat
Version was updated...
CLSA-2025-1747854434 Fix CVE(s): CVE-2024-9287
SECURITY UPDATE: Path names provided when creating a virtual environment were not quoted properly - debian/patches/CVE-2024-9287.patch: Quote template strings in venv activation - CVE-2024-9287...