10511 matches found
CLSA-2025-1744632037 php: Fix of CVE-2024-11235
CVE-2024-11235: fix Use-after-free for ??= due to incorrect live-range calculation...
CLSA-2025-1744631931 libjpeg-turbo: Fix of CVE-2021-29390
CVE-2021-29390: fix buffer overrun with certain narrow prog JPEGs...
CLSA-2025-1744631408 php: Fix of CVE-2024-11235
CVE-2024-11235: fix Use-after-free for ??= due to incorrect live-range calculation...
CLSA-2025-1744631318 poppler: Fix of CVE-2024-6239
CVE-2024-6239: Fix crash caused by malformed input files when using -dests parameter in pdfinfo utility...
CLSA-2025-1744628858 grub2: Fix of 5 CVEs
CVE-2025-0624: net: Out-of-bounds write in grubnetsearchconfigfile - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap...
CLSA-2025-1744628407 dnsmasq: Fix of CVE-2023-28450
CVE-2023-28450: Set the default maximum DNS UDP packet size to 1232...
CLSA-2025-1744628190 Fix CVE(s): CVE-2019-14846
SECURITY UPDATE: security vulnerability in logging credentials at DEBUG level - debian/patches/CVE-2019-14846.patch: Fix plugins leaking boto credentials to logs by switching logging level to INFO - CVE-2019-14846...
CLSA-2025-1744623757 libxslt: Fix of CVE-2024-55549
CVE-2024-55549: fix use-after-free issue related to exclusion of result prefixes...
CLSA-2025-1744623473 python3.11: Fix of CVE-2024-7592
CVE-2024-7592: fix quadratic complexity in parsing "-quoted cookie values with backslashes...
CLSA-2024-1729546540 openssl: Fix of CVE-2024-6119
CVE-2024-6119: avoid type errors in EAI-related name check logic...
CLSA-2025-1744390816 gnutls: Fix of CVE-2024-0567
CVE-2024-0567: detect loop in certificate chain...
CLSA-2024-1709548308 openssl: Fix of CVE-2023-5363
CVE-2023-5363: process key length and iv length early if present...
CLSA-2025-1743193221 Update of kernel
Backported els3..els12 patches and changelog...
CLSA-2025-1744372501 kernel: Fix of CVE-2024-1086
Backported els0..els3 patches and changelog including CVE-2024-1086...
CLSA-2025-1744368964 openssl: Fix of CVE-2023-2650
Fix possible DoS translating ASN.1 object identifiers Resolves: CVE-2023-2650 - Release the DRBG in global default libctx early Resolves: rhbz2211340...
CLSA-2025-1744359874 Update of gnutls
fips: Zeroize temporary values in integrity check RHEL-21870...
CLSA-2025-1737656427 libgcrypt: Fix of CVE-2024-2236
Synced to upstream plus ASN.1 patch - Tested on AlmaLinux 9.5 - Fix CVE-2024-2236 RHEL-34579...
CLSA-2025-1744312522 Update of nss
Fix ecc DER wrapping...
CLSA-2025-1744308182 Update of nettle
Rebuild in new side-tag...
CLSA-2025-1744303053 Update of nettle
Rebuild in new side-tag...
CLSA-2025-1744301726 libgcrypt: Fix of CVE-2024-2236
Synced to upstream plus ASN.1 patch - Tested on AlmaLinux 9.5 - Fix CVE-2024-2236 RHEL-34579...
CLSA-2025-1744291208 Update of nss
Fix ecc DER wrapping...
CLSA-2025-1744223313 tigervnc: Fix of 3 CVEs
CVE-2024-31080: xorg-x11-server: fix heap-based buffer over-read vulnerability in ProcXIGetSelectedEvents by avoiding byte-swapped length values in replies - CVE-2024-9632: xorg-x11-server: fix improperly tracked allocation size in XkbSetCompatMap to prevent buffer overflow condition -...
CLSA-2025-1744222859 grub2: Fix of 5 CVEs
CVE-2025-0624: net: Out-of-bounds write in grubnetsearchconfigfile - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap...
CLSA-2025-1744219291 Update of alt-php
Bump ABI 4.15.0-246...
CLSA-2025-1744213437 tigervnc: Fix of 3 CVEs
CVE-2023-6816: xorg-x11-server: fix use-after-free issue by adding check to allocate sufficient space for logical button maps to prevent heap overflow in DeviceFocusEvent and XIQueryPointer replies - CVE-2023-5367: xorg-x11-server: correct buffer offset handling in XIChangeDeviceProperty and...
CLSA-2025-1744213211 grub2: Fix of 5 CVEs
CVE-2025-0624: net: Out-of-bounds write in grubnetsearchconfigfile - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap...
CLSA-2025-1744213128 Fix of 55 CVEs
CVE-url: https://ubuntu.com/security/CVE-2025-21858 - geneve: Fix use-after-free in genevefinddev. CVE-url: https://ubuntu.com/security/CVE-2024-36921 - wifi: iwlwifi: mvm: guard against invalid STA ID on removal CVE-url: https://ubuntu.com/security/CVE-2023-52621 - bpf: Check rcureadlocktracehel...
CLSA-2025-1744116893 c-ares: Fix of CVE-2022-4904
CVE-2022-4904: fix missing checks in aressetsortlist to prevent possible stack overflow...
CLSA-2025-1744116383 libtiff: Fix of 4 CVEs
CVE-2024-7006: check return value of TIFFCreateAnonField to avoid potential DoS via memory allocation failures - CVE-2023-6228: validate input image codec in tiffcp to prevent heap-based buffer overflow and potential application crash - CVE-2022-40090: improve IFD loop handling in...
CLSA-2025-1744116044 Fix CVE(s): CVE-2016-8614
SECURITY UPDATE: improper verification of key fingerprints in aptkey module - debian/patches/CVE-2016-8614.patch: fix use of long key IDs for delete, check for keyid presence and fix keyid length for verification. Fix reversed order of return values in parsekeyid function - CVE-2016-8614...
CLSA-2025-1743763948 libxslt: Fix of CVE-2025-24855
CVE-2025-24855: fix use-after-free issue in numbers.c by restoring XPath context node in nested XPath evaluations...
CLSA-2025-1743676155 kernel: Fix of 2 CVEs
drm: nv04: Fix out of bounds access CVE-2024-27008 - media: uvcvideo: Fix double free in error path CVE-2024-57980...
CLSA-2025-1743675732 avahi: Fix of 8 CVEs
CVE-2021-3468: handle termination event on avahi Unix socket to prevent infinite loop - CVE-2023-1981: prevent avahi daemon crash by emitting an error if the requested D-Bus service is not found - CVE-2021-3502: fix avahi-daemon crashing from NULL pointer assertions - CVE-2023-38469: reject...
CLSA-2025-1743675538 kernel: Fix of 2 CVEs
drm: nv04: Fix out of bounds access CVE-2024-27008 - media: uvcvideo: Fix double free in error path CVE-2024-57980...
CLSA-2025-1743409093 libxml2: Fix of CVE-2024-56171
CVE-2024-56171: Fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c...
CLSA-2025-1743184619 bind: Fix of CVE-2023-4408
Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update...
CLSA-2025-1743164157 Fix CVE(s): CVE-2023-44487
SECURITY UPDATE: Denial of service - debian/patches/CVE-2023-44487.patch: Improvements to HTTP/2 overhead protection - CVE-2023-44487...
CLSA-2025-1743103421 freeradius: Fix of CVE-2024-3596
CVE-2024-3596: fix chosen-prefix collision attack against MD5 Response Authenticator signature that allowed malicious modification of valid RADIUS responses...
CLSA-2025-1743071343 tigervnc: Fix of CVE-2025-26601
CVE-2025-26601: xorg-x11-server: fix use-after-free issue by adding check to ensure new sync object is added before alarm triggers...
CLSA-2025-1743012551 Update of shim
Fix installation on systems having Almalinux signed kernels...
CLSA-2025-1743011981 postgresql: Fix of CVE-2024-10979
CVE-2024-10979: fix incorrect control of environment variables in PostgreSQL PL/Perl...
CLSA-2025-1742926404 freetype: Fix of CVE-2025-27363
CVE-2025-27363: fix OOB write when parsing font subglyph structures...
CLSA-2025-1742926277 openssh: Fix of CVE-2025-26465
CVE-2025-26465: fix vulnerability in OpenSSH when the VerifyHostKeyDNS option is enabled - enlarge format buffer size for certificate serial number so the log message can record any 64-bit integer without truncation openssh bz3012 Orabug: 30448895...
CLSA-2025-1742924802 tomcat: Fix of CVE-2023-46589
CVE-2023-46589: fix improper input validation vulnerability...
CLSA-2025-1742924432 postgresql: Fix of CVE-2025-1094
CVE-2025-1094: fix potential SQL injections allowed by an improper encoding validation in data quoting functions - enable modules test...
CLSA-2025-1742923385 ghostscript: Fix of CVE-2023-28879
CVE-2023-28879: Fix buffer overflow in base/sbcp.c by correctly handling write buffer for BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode functions...
CLSA-2025-1742920518 tigervnc: Fix of CVE-2025-26595
CVE-2025-26595: xorg-x11-server: fix buffer overflow in XkbVModMaskText...
CLSA-2025-1742919946 python3.9: Fix of 2 CVEs
CVE-2024-11168: fix improper validation of bracketed hosts in urllib.parse.urlsplit and urlparse functions - CVE-2025-0938: fix incomplete algorithm of validating hosts by disallowing square brackets in domain names...