10488 matches found
CLSA-2025-1747849358 Fix CVE(s): CVE-2024-10979
SECURITY UPDATE: Externally controlled reference to resources. - debian/patches/CVE-2024-10979.patch: Remove magic property of ENV in ./src/pl/plperl/plctrusted.pl. Add getenviron to ./src/test/regress/regress.c. - CVE-2024-10979...
CLSA-2025-1747740986 php: Fix of 3 CVEs
CVE-2025-1217: fix handling of folded headers by the http stream parser - CVE-2025-1734: fix validation of http headers with missing colon - CVE-2025-1861: fix incorrect http redirect location truncation...
CLSA-2025-1747739840 Update of microcode_ctl
Update Intel CPU microcode to 20250211: - Addition of cpuid:806F8/0x10 SPR-HBM B3 microcode in microcode.dat at revision 0x2c0003e0; - Addition of cpuid:806F8/0x87 SPR-SP E5/S3 microcode in microcode.dat at revision 0x2b000620; - Addition of cpuid:90672/0x07 ADL-HX/S 8+8 C0 microcode in...
CLSA-2025-1747739502 Update of microcode_ctl
Remove old firmware versions: 06-8f-04, 06-8f-05, 06-8f-06, 06-ba-08;...
CLSA-2025-1747738545 Update of microcode_ctl
Update Intel CPU microcode to 20250211: - Addition of cpuid:806F8/0x10 SPR-HBM B3 microcode in microcode.dat at revision 0x2c0003e0; - Addition of cpuid:806F8/0x87 SPR-SP E5/S3 microcode in microcode.dat at revision 0x2b000620; - Addition of cpuid:90672/0x07 ADL-HX/S 8+8 C0 microcode in...
CLSA-2025-1747725447 kernel: Fix of 35 CVEs
ext4: fix OOB read when checking dotdot dir CVE-2025-37785 - wifi: iwlwifi: limit printed string from FW file CVE-2025-21905 - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpudiscoveryregbaseinit' CVE-2024-27042 - dm-crypt: don't modify the data when using authenticated encryption...
CLSA-2025-1747726439 Update of microcode_ctl
Update Intel CPU microcode to 20250211: - Addition of cpuid:806F8/0x10 SPR-HBM B3 microcode in microcode.dat at revision 0x2c0003e0; - Addition of cpuid:806F8/0x87 SPR-SP E5/S3 microcode in microcode.dat at revision 0x2b000620; - Addition of cpuid:90672/0x07 ADL-HX/S 8+8 C0 microcode in...
CLSA-2025-1747725732 Update of microcode_ctl
Update Intel CPU microcode to 20250211: - Addition of cpuid:806F8/0x10 SPR-HBM B3 microcode in microcode.dat at revision 0x2c0003e0; - Addition of cpuid:806F8/0x87 SPR-SP E5/S3 microcode in microcode.dat at revision 0x2b000620; - Addition of cpuid:90672/0x07 ADL-HX/S 8+8 C0 microcode in...
CLSA-2025-1747725530 Update of microcode_ctl
Update Intel CPU microcode to 20250211: - Addition of cpuid:806F8/0x10 SPR-HBM B3 microcode in microcode.dat at revision 0x2c0003e0; - Addition of cpuid:806F8/0x87 SPR-SP E5/S3 microcode in microcode.dat at revision 0x2b000620; - Addition of cpuid:90672/0x07 ADL-HX/S 8+8 C0 microcode in...
CLSA-2025-1747693305 Update of microcode_ctl
Update Intel CPU microcode to 20250211: - Addition of cpuid:806F8/0x10 SPR-HBM B3 microcode in microcode.dat at revision 0x2c0003e0; - Addition of cpuid:806F8/0x87 SPR-SP E5/S3 microcode in microcode.dat at revision 0x2b000620; - Addition of cpuid:90672/0x07 ADL-HX/S 8+8 C0 microcode in...
CLSA-2025-1747691270 Update of microcode_ctl
Update Intel CPU microcode to 20250211: - Addition of cpuid:806F8/0x10 SPR-HBM B3 microcode in microcode.dat at revision 0x2c0003e0; - Addition of cpuid:806F8/0x87 SPR-SP E5/S3 microcode in microcode.dat at revision 0x2b000620; - Addition of cpuid:90672/0x07 ADL-HX/S 8+8 C0 microcode in...
CLSA-2025-1747690840 php: Fix of 3 CVEs
CVE-2025-1217: fix handling of folded headers by the http stream parser - CVE-2025-1734: fix validation of http headers with missing colon - CVE-2025-1861: fix incorrect http redirect location truncation...
CLSA-2025-1747690052 gnutls: Fix of CVE-2024-12243
CVE-2024-12243: x509: optimize name constraints processing...
CLSA-2025-1747690042 gnutls: Fix of CVE-2024-12243
CVE-2024-12243: x509: optimize name constraints processing...
CLSA-2025-1747689263 Fix CVE(s): CVE-2025-32414, CVE-2025-32415
SECURITY UPDATE: Out-of-bounds memory access in Python API bindings - debian/patches/CVE-2025-32414.patch: Limit character reads and reserve buffer space for UTF-8 encoding to prevent overflow - CVE-2025-32414 SECURITY UPDATE: Heap buffer under-read in XML schema validation -...
CLSA-2025-1747688831 kernel: Fix of 20 CVEs
drm/dpmst: Ensure mstprimary pointer is valid in drmdpmsthandleupreq CVE-2024-57798 - block: Fix handling of offline queues in blkmqallocrequesthctx CVE-2022-49720 - drm: nv04: Fix out of bounds access CVE-2024-27008 - parport: Proper fix for array out-of-bounds access CVE-2024-50074 - Bluetooth:...
CLSA-2025-1747688581 kernel: Fix of 15 CVEs
media: uvcvideo: Fix double free in error path CVE-2024-57980 - vrf: use RCU protection in l3mdevl3out CVE-2025-21791 - geneve: Fix use-after-free in genevefinddev. CVE-2025-21858 - ibmvnic: Don't reference skb after sending to VIOS CVE-2025-21855 - pfifotailenqueue: Drop new packet when...
CLSA-2025-1747688514 kernel: Fix of 19 CVEs
block: Fix handling of offline queues in blkmqallocrequesthctx CVE-2022-49720 - drm: nv04: Fix out of bounds access CVE-2024-27008 - parport: Proper fix for array out-of-bounds access CVE-2024-50074 - drm/dpmst: Ensure mstprimary pointer is valid in drmdpmsthandleupreq CVE-2024-57798 - media:...
CLSA-2025-1747432102 postgresql: Fix of CVE-2024-10978
CVE-2024-10978: fix privilege assignment issue to prevent less-privileged user from viewing or changing unauthorized rows...
CLSA-2025-1747431414 podman: Fix of CVE-2025-22869
CVE-2025-22869: fix vulnerability in golang.org/x/crypto module by updating podman archive. Fix the same vulnerability in gvisor-tap-vsock by applying patch for crypto/ssh module - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel...
CLSA-2025-1747431252 Update of alt-php
Bump ABI 4.4.0-274...
CLSA-2025-1747431041 Fix CVE(s): CVE-2024-10976, CVE-2024-10977
SECURITY UPDATE: incomplete tracking of row security allows unauthorized access to data - debian/patches/CVE-2024-10976.patch: Ensure cached plans to be correctly marked as dependent on role to fix the issue of neglected marking which could lead to incorrect row visibility. - CVE-2024-10976...
CLSA-2025-1747431031 Update of alt-php
Bump ABI 4.15.0-247...
CLSA-2025-1747430870 cups-filters: Fix of 2 CVEs
CVE-2024-47175: prevent PPD generation based on invalid IPP response - CVE-2024-47850: do not generate PPD for remote raw queues and add system-cups.slice...
CLSA-2025-1747430081 Fix of 50 CVEs
CVE-url: https://ubuntu.com/security/CVE-2021-47352 - virtio-net: Add validation for used length CVE-url: https://ubuntu.com/security/CVE-2024-46745 - Input: uinput - reject requests with unreasonable number of slots CVE-url: https://ubuntu.com/security/CVE-2024-44952 - driver core: Fix ueventsho...
CLSA-2025-1747430034 Fix of 54 CVEs
Bionic update: upstream stable patchset 2022-04-13 LP: 1968932 // CVE- url: https://ubuntu.com/security/CVE-2022-23041 - xen/gnttab: fix gnttabendforeignaccess without page specified Bionic update: upstream stable patchset 2023-01-20 LP: 2003596 // CVE- url:...
CLSA-2025-1747260502 kernel: Fix of 5 CVEs
ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices CVE-2024-53197 - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2capsendcmd CVE-2025-21969 - ext4: fix OOB read when checking dotdot dir CVE-2025-37785 - iscsiibft: Fix UBSAN shift-out-of-bounds warning in...
CLSA-2025-1747253770 libreoffice: Fix of CVE-2023-1183
CVE-2023-1183: disable script command file dump to prevent arbitrary writes...
CLSA-2025-1747251688 corosync: Fix of CVE-2025-30472
CVE-2025-30472: fix stack-based buffer overflow in orftokenendianconvert by adding input validation for large UDP packets...
CLSA-2025-1747251218 kernel: Fix of 5 CVEs
ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices CVE-2024-53197 - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2capsendcmd CVE-2025-21969 - ext4: fix OOB read when checking dotdot dir CVE-2025-37785 - iscsiibft: Fix UBSAN shift-out-of-bounds warning in...
CLSA-2025-1747251120 buildah: Fix of 2 CVEs
Rebuild with new golang version to address the following CVEs: - CVE-2023-45287: Timing Side Channel attack in RSA based TLS key exchanges - CVE-2024-34156: panic due to stack exhaustion for Decoder.Decode...
CLSA-2025-1747058736 libxml2: Fix of CVE-2025-32415
CVE-2025-32415: fix heap buffer overflow in xmlSchemaIDCFillNodeTables...
CLSA-2025-1747058711 libxml2: Fix of CVE-2025-32415
CVE-2025-32415: fix heap buffer overflow in xmlSchemaIDCFillNodeTables...
CLSA-2025-1747058667 golang: Fix of 2 CVEs
CVE-2024-45336: fix potential sending of sensitive headers in chain of redirections - CVE-2023-45289: fix potential sending of sensitive headers and cookies on IPv6 zones...
CLSA-2025-1747058432 libtasn1: Fix of CVE-2024-12133
Fix CVE-2024-12133: improve handling of specific certificate data...
CLSA-2025-1747058033 libxml2: Fix of CVE-2025-32415
CVE-2025-32415: fix heap buffer overflow in xmlSchemaIDCFillNodeTables...
CLSA-2025-1747057793 libxml2: Fix of CVE-2025-32415
CVE-2025-32415: fix heap buffer overflow in xmlSchemaIDCFillNodeTables...
CLSA-2025-1746792339 libxml2: Fix of 2 CVEs
CVE-2025-32415: fix heap-based buffer under-read in xmlSchemaIDCFillNodeTables function - CVE-2025-32414: fix out-of-bounds memory access in Python API by correcting return value in xmlPythonFileRead and xmlPythonFileReadRaw...
CLSA-2025-1746792031 golang: Fix of 2 CVEs
CVE-2024-34156: prevent prevents stack exhaustion when attempting to decode a message that contains an extremely deeply nested struct - CVE-2023-45287: replace big.Int for encryption and decryption...
CLSA-2025-1746791922 libxml2: Fix of 2 CVEs
CVE-2025-32415: fix heap-based buffer under-read in xmlSchemaIDCFillNodeTables function - CVE-2025-32414: fix out-of-bounds memory access in Python API by correcting return value in xmlPythonFileRead and xmlPythonFileReadRaw...
CLSA-2025-1746655592 grafana: Fix of CVE-2025-30204
CVE-2025-30204: update golang-jwt/jwt to v4.5.2 to prevent a vulnerability that could lead to excessive memory allocation when parsing untrusted JWT tokens using ParseUnverified...
CLSA-2025-1746655009 mod_auth_openidc: Fix of CVE-2024-24814
CVE-2024-24814: fix DoS when OIDCSessionType client-cookie is set and a crafted Cookie header is supplied...
CLSA-2025-1746654810 php: Fix of CVE-2025-1736
CVE-2025-1736: add checking of http user header crlf...
CLSA-2025-1746654462 Fix CVE(s): CVE-2020-1739
SECURITY UPDATE: insecure password handling in svn module - debian/patches/CVE-2020-1739.patch: Update subversion module to provide password securely with --password-from-stdin option to prevent leaking in case of outdated svn versions - CVE-2020-1739...
CLSA-2025-1746654460 libsoup: Fix of CVE-2024-52532
CVE-2024-52532: websocket process the frame as soon as we read data...
CLSA-2025-1746654421 libxml2: Fix of CVE-2025-32415
CVE-2025-32415: fix heap-based buffer under-read in xmlSchemaIDCFillNodeTables...
CLSA-2025-1746653948 Fix CVE(s): CVE-2025-32414, CVE-2025-32415
SECURITY UPDATE: OOB access in python API - debian/patches/CVE-2025-32414-pre1.patch: fix SAX driver with character streams in python/drvlibxml2.py. - debian/patches/CVE-2025-32414-1.patch: read at most len/4 characters in python/libxml.c. - debian/patches/CVE-2025-32414-2.patch: add a test in...
CLSA-2025-1746653856 ruby: Fix of 2 CVEs
upgrade rexml version to 3.3.3 - CVE-2024-41946: fix DoS vulnerability when parsing many entity expansions with SAX2 or pull parser API - CVE-2024-41123: fix DoS vulnerability when parsing XML with specific characters...