CLSA-2025-1744926275 libsoup: Fix of CVE-2024-52531

CVE-2024-52531: fix buffer overflow caused by conversion to UTF-8...

CLSA-2025-1744926159 Update of openssl

Backport the implicit rejection mechanism for RSA PKCS1 v1.5 to prevent Bleichenbacher attacks; add an option to disable the mechanism...

CLSA-2025-1744925460 gcc: Fix of CVE-2020-11023

CVE-2020-11023: Fix issue in DOM manipulation methods to prevent execution of untrusted code...

CLSA-2025-1744925221 gcc: Fix of CVE-2020-11023

CVE-2020-11023: Fix issue in DOM manipulation methods to prevent execution of untrusted code...

CLSA-2025-1744924875 libsoup: Fix of CVE-2024-52531

CVE-2024-52531: fix buffer overflow caused by conversion to UTF-8...

CLSA-2025-1744892440 Update of libsoup

Bump up version...

CLSA-2025-1744892170 gcc: Fix of CVE-2020-11023

CVE-2020-11023: sanitize HTML content passed to DOM manipulation methods to prevent execution of untrusted code...

CLSA-2025-1744875533 php: Fix of CVE-2025-1736

CVE-2025-1736: add checking of http user header crlf...

CLSA-2025-1744875112 gcc: Fix of CVE-2020-11023

CVE-2020-11023: Fix issue where untrusted HTML containing elements could execute untrusted code in DOM manipulation methods...

CLSA-2025-1744874696 Fix CVE(s): CVE-2024-7592

SECURITY UPDATE: Quadratic complexity, resulting in excess CPU while parsing - debian/patches/CVE-2024-7592.patch: fix quadratic complexity in parsing "-quoted cookie values with backslashes - CVE-2024-7592...

CLSA-2025-1744783252 php: Fix of CVE-2025-1861

CVE-2025-1861: move allocation of location from heap to stack, add error checking for location length...

CLSA-2025-1744782967 ghostscript: Fix of 3 CVEs

CVE-2024-33871: fix arbitrary code execution by restricting Driver parameter to load only known dynamic libraries in gdevopvp.c - CVE-2023-38559: fix buffer overflow flaw in devnpcxwriterle function by adding input validation checks - CVE-2024-29510: fix memory corruption and SAFER sandbox bypass...

CLSA-2025-1744782851 php: Fix of CVE-2025-1736

CVE-2025-1736: add checking of http user header crlf...

CLSA-2025-1744727573 Fix CVE(s): CVE-2024-5594

SECURITY UPDATE: Improper PUSHREPLY sanitization allows attackers to inject arbitrary data into third-party executables - debian/patches/CVE-2024-5594.patch: Properly handle null bytes and invalid characters in control - CVE-2024-5594...

CLSA-2025-1744710425 Fix CVE(s): CVE-2024-5594

SECURITY UPDATE: Improper PUSHREPLY sanitization allows attackers to inject arbitrary data into third-party executables - debian/patches/CVE-2024-5594.patch: Properly handle null bytes and invalid characters in control - CVE-2024-5594 UPDATE CERTIFICATES: Renew sample keys -...

CLSA-2025-1744724536 grub2: Fix of 5 CVEs

CVE-2025-0624: net: Out-of-bounds write in grubnetsearchconfigfile - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap...

CLSA-2025-1744723558 php: Fix of CVE-2025-1734

CVE-2025-1734: fail http headers without colon...

CLSA-2025-1744723009 php: Fix of CVE-2025-1861

CVE-2025-1861: move allocation of location from heap to stack, add error checking for location length...

CLSA-2025-1744721593 c-ares: Fix of 4 CVEs

CVE-2024-25629: fix invalid memory read issue in aresreadline - CVE-2023-31130: fix buffer underflow in aresinetnetpton for certain ipv6 addresses - CVE-2023-31147: fix issue of using weak random numbers in DNS query ids by replacing rand with a modern OS-provided CSPRNG like arc4random -...

CLSA-2025-1744719966 Fix CVE(s): CVE-2020-10729

SECURITY UPDATE: insufficiently random password generation vulnerability - debian/patches/CVE-2020-10729.patch: Fix issue with caching Jinja2 expressions, only cache results of single variable names - CVE-2020-10729...

CLSA-2025-1744717794 grub2: Fix of 5 CVEs

CVE-2025-0624: net: Out-of-bounds write in grubnetsearchconfigfile - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap...

CLSA-2025-1744716861 cups-filters: Fix of CVE-2024-47176

CVE-2024-47176: fix remote code execution vulnerability...

CLSA-2025-1744714100 Update of alt-php

Bump ABI 4.4.0-273...

CLSA-2025-1744713316 Fix of 50 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-26872 - RDMA/srpt: Do not register event handler until srpt device is fully setup CVE-url: https://ubuntu.com/security/CVE-2024-53179 - smb: client: fix use-after-free of signing key CVE-url: https://ubuntu.com/security/CVE-2021-47357 - atm: iphase: f...

CLSA-2025-1744709445 Fix CVE(s): CVE-2020-10729

SECURITY UPDATE: insufficiently Random Passwords Leakage - debian/patches/CVE-2020-10729.patch: Fix caching of Jinja2 expressions to prevent caching dynamic results - CVE-2020-10729...

CLSA-2025-1744633827 nginx: Fix of CVE-2024-7347

CVE-2024-7347: fix MP4 stsc cropping: prevent overflow and buffer underread causing invalid seeks and possible segfault...

CLSA-2025-1744632481 tigervnc: Fix of CVE-2023-5380

CVE-2023-5380: xorg-x11-server: fix use-after-free flaw causing X server crash in specific multi-screen Zaphod mode configuration by handling window destruction properly...

CLSA-2025-1744632037 php: Fix of CVE-2024-11235

CVE-2024-11235: fix Use-after-free for ??= due to incorrect live-range calculation...

CLSA-2025-1744631931 libjpeg-turbo: Fix of CVE-2021-29390

CVE-2021-29390: fix buffer overrun with certain narrow prog JPEGs...

CLSA-2025-1744631408 php: Fix of CVE-2024-11235

CVE-2024-11235: fix Use-after-free for ??= due to incorrect live-range calculation...

CLSA-2025-1744631318 poppler: Fix of CVE-2024-6239

CVE-2024-6239: Fix crash caused by malformed input files when using -dests parameter in pdfinfo utility...

CLSA-2025-1744628858 grub2: Fix of 5 CVEs

CVE-2025-0624: net: Out-of-bounds write in grubnetsearchconfigfile - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap...

CLSA-2025-1744628407 dnsmasq: Fix of CVE-2023-28450

CVE-2023-28450: Set the default maximum DNS UDP packet size to 1232...

CLSA-2025-1744628190 Fix CVE(s): CVE-2019-14846

SECURITY UPDATE: security vulnerability in logging credentials at DEBUG level - debian/patches/CVE-2019-14846.patch: Fix plugins leaking boto credentials to logs by switching logging level to INFO - CVE-2019-14846...

CLSA-2025-1744623757 libxslt: Fix of CVE-2024-55549

CVE-2024-55549: fix use-after-free issue related to exclusion of result prefixes...

CLSA-2025-1744623473 python3.11: Fix of CVE-2024-7592

CVE-2024-7592: fix quadratic complexity in parsing "-quoted cookie values with backslashes...

CLSA-2024-1729546540 openssl: Fix of CVE-2024-6119

CVE-2024-6119: avoid type errors in EAI-related name check logic...

CLSA-2025-1744390816 gnutls: Fix of CVE-2024-0567

CVE-2024-0567: detect loop in certificate chain...

CLSA-2024-1709548308 openssl: Fix of CVE-2023-5363

CVE-2023-5363: process key length and iv length early if present...

CLSA-2025-1743193221 Update of kernel

Backported els3..els12 patches and changelog...

CLSA-2025-1744372501 kernel: Fix of CVE-2024-1086

Backported els0..els3 patches and changelog including CVE-2024-1086...

CLSA-2025-1744368964 openssl: Fix of CVE-2023-2650

Fix possible DoS translating ASN.1 object identifiers Resolves: CVE-2023-2650 - Release the DRBG in global default libctx early Resolves: rhbz2211340...

CLSA-2025-1744359874 Update of gnutls

fips: Zeroize temporary values in integrity check RHEL-21870...

CLSA-2025-1737656427 libgcrypt: Fix of CVE-2024-2236

Synced to upstream plus ASN.1 patch - Tested on AlmaLinux 9.5 - Fix CVE-2024-2236 RHEL-34579...

CLSA-2025-1744312522 Update of nss

Fix ecc DER wrapping...

CLSA-2025-1744308182 Update of nettle

Rebuild in new side-tag...

CLSA-2025-1744303053 Update of nettle

Rebuild in new side-tag...

CLSA-2025-1744301726 libgcrypt: Fix of CVE-2024-2236

Synced to upstream plus ASN.1 patch - Tested on AlmaLinux 9.5 - Fix CVE-2024-2236 RHEL-34579...

CLSA-2025-1744291208 Update of nss

Fix ecc DER wrapping...

CLSA-2025-1744223313 tigervnc: Fix of 3 CVEs

CVE-2024-31080: xorg-x11-server: fix heap-based buffer over-read vulnerability in ProcXIGetSelectedEvents by avoiding byte-swapped length values in replies - CVE-2024-9632: xorg-x11-server: fix improperly tracked allocation size in XkbSetCompatMap to prevent buffer overflow condition -...