22624 matches found
CLSA-2026-1778266904 kernel: Fix of 189 CVEs
rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present - xfrm: esp: avoid in-place decrypt on shared skb frags - clk: Fix clkhwgetclk when dev is NULL CVE-2022-49187 - x86/sgx: Add overflow check in sgxvalidateoffsetlength CVE-2022-49785 - ext4: init quota for 'old.inode' in...
CLSA-2026-1777616064 kernel: Fix of 264 CVEs
crypto: algifaead - Fix minimum RX size check for decryption CVE-2026-31431 - crypto: afalg - Fix page reassignment overflow in afalgpulltsgl CVE-2026-31431 - crypto: authencesn - reject too-short AAD assoclen8 to match ESP/ESN spec CVE-2026-31431 - crypto: authencesn - Fix src offset when...
CLSA-2026-1777946242 php: Fix of 13 CVEs
CVE-2018-14883: fix int overflow leading to heap overflow in exifthumbnailextract - CVE-2019-6977: fix imagecolormatch out-of-bounds write on heap in GD - CVE-2019-9022: fix memcpy with negative length via crafted DNS response - CVE-2019-9640: fix invalid read in exifprocessSOFn - CVE-2019-11042:...
CLSA-2026-1776386163 TuxCare security update for io.netty (7 CVEs)
TuxCare rebuilt 47 io.netty packages to address 7 CVEs. Fixed in 4.1.92.Final-tuxcare.1...
CLSA-2026-1773139548 kernel: Fix of 78 CVEs
fix: fbdev: fix potential buffer overflow in doregisterframebuffer - qed: Don't collect too many protection override GRC elements CVE-2025-39949 - drm/amd/display: Avoid a NULL pointer dereference CVE-2025-39693 - pNFS: Fix uninited ptr deref in block/scsi layout CVE-2025-38691 - netfilter:...
CLSA-2026-1790875447 TuxCare security update for org.springframework.integration (5 CVEs)
TuxCare rebuilt 5 org.springframework.integration packages to address 5 CVEs. Fixed in 5.5.16-tuxcare.1...
CLSA-2026-1789494210 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.17.2-tuxcare.1...
CLSA-2026-1777614651 kernel: Fix of 55 CVEs
crypto: algifaead - Fix minimum RX size check for decryption - crypto: afalg - Fix page reassignment overflow in afalgpulltsgl - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authenc - use...
CLSA-2026-1776879963 php: Fix of 9 CVEs
CVE-2019-9020: fix heap out-of-bounds read in xmlrpcdecode - CVE-2019-9021: fix heap buffer overflow in phardetectpharfnameext - CVE-2019-9023: fix heap buffer over-reads in mbstring regex functions - CVE-2019-9641: fix uninitialized read in exifprocessIFDinTIFF - CVE-2019-11034: fix...
CLSA-2026-1771408532 java-21-openjdk: Fix of 3 CVEs
Update to jdk-21.0.10+7 - CVE-2026-21945: fix possible DOS - CVE-2025-65018: fix libpng heap buffer overflow in pngimagefinishread when processing 16-bit interlaced PNGs with 8-bit output format - CVE-2025-64720: fix libpng out-of-bounds read in pngimagereadcomposite when processing palette...
CLSA-2026-1790876638 TuxCare security update for io.netty (7 CVEs)
TuxCare rebuilt 6 io.netty packages to address 7 CVEs. Fixed in 4.1.82.Final-tuxcare.8...
CLSA-2026-1782867618 TuxCare security update for highcharts (1 CVE)
TuxCare rebuilt highcharts to address 1 CVE. Fixed in 7.2.0-tuxcare.1...
CLSA-2026-1779434490 kernel: Fix of 100 CVEs
tracing: Verify event formats that have "%p.." CVE-2025-37938 - HID: pidff: Fix null pointer dereference in pidfffindfields CVE-2025-37862 - scsi: st: Fix array overflow in stsetup CVE-2025-37857 - drm/amdkfd: debugfs hanghws skip GPU with MES CVE-2025-37853 - mm/vmscan: don't try to reclaim...
CLSA-2026-1771239384 kernel: Fix of 75 CVEs
net/sched: Make cakeenqueue return NETXMITCN when past bufferlimit CVE-2025-39766 - NFSD: Avoid calling OPDESC with ops-opnum == OPILLEGAL CVE-2023-53680 - scsi: target: iscsi: Fix buffer overflow in liotargetnaclinfoshow CVE-2023-53676 - KVM: x86: use arrayindexnospec with indices that come from...
CLSA-2026-1790202437 TuxCare security update for nodemailer (4 CVEs)
TuxCare rebuilt nodemailer to address 4 CVEs. Fixed in 2.7.2-tuxcare.6...
CLSA-2026-1777462768 cups: Fix of CVE-2023-4504
CVE-2023-4504: validate PPD PostScript input length to prevent heap-based buffer overflow in raster-interpret.c...
CLSA-2026-1782262689 TuxCare security update for follow-redirects (2 CVEs)
TuxCare rebuilt follow-redirects to address 2 CVEs. Fixed in 1.15.9-tuxcare.1...
CLSA-2026-1790457826 TuxCare security update for astro (2 CVEs)
TuxCare rebuilt astro to address 2 CVEs. Fixed in 5.18.1-tuxcare.8...
CLSA-2026-1779375889 kernel: Fix of 95 CVEs
perf/x86/intel/uncore: Fix die ID init and look up bugs CVE-2026-43344 - x86/apic: Disable x2apic on resume if the kernel expects so CVE-2026-43363 - drm/amdgpu: Fix use-after-free race in VM acquire CVE-2026-43370 - dm: remove fake timeout to avoid leak request CVE-2026-43314 - md/bitmap: fix...
CLSA-2026-1771237797 kernel: Fix of 13 CVEs
fbdev: Fix vmalloc out-of-bounds write in fastimageblit CVE-2025-38685 - cnic: Fix use-after-free bugs in cnicdeletetask CVE-2025-39945 - scsi: bfa: Double-free fix CVE-2025-38699 - fbdev: fix potential buffer overflow in doregisterframebuffer CVE-2025-38702 - scsi: ses: Fix slab-out-of-bounds in...
CLSA-2026-1768774361 kernel: Fix of 31 CVEs
ip6vti: fix slab-use-after-free in decodesession6 CVE-2023-53821 - ACPICA: Add AMLNOOPERANDRESOLVE flag to Timer CVE-2023-53395 - wifi: mac80211hwsim: drop short frames CVE-2023-53321 - ext4: add bounds checking in getmaxinlinexattrvaluesize CVE-2023-53285 - md/raid10: fix null-ptr-deref in...
CLSA-2026-1778932682 python3: Fix of CVE-2024-4032
CVE-2024-4032: update ipaddress module to reflect latest IANA Special-Purpose Address Registries...
CLSA-2026-1778276927 kernel: Fix of 33 CVEs
rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present - xfrm: esp: avoid in-place decrypt on shared skb frags - ext4: avoid OOB when system.data xattr changes underneath the filesystem CVE-2024-47701 - gpiolib: cdev: fix uninitialised kfifo CVE-2024-36898 - wifi: mt76: Fix...
CLSA-2026-1768775579 kernel: Fix of 49 CVEs
scsi: ses: Fix slab-out-of-bounds in sesenclosuredataprocess CVE-2023-53803 - md/raid1: Fix stack memory use after return in raid1reshape CVE-2025-38445 - ALSA: usb-audio: Fix out-of-bounds read in sndusbgetaudioformatuac3 CVE-2025-38249 - atm: clip: Fix infinite recursive call of clippush...
CLSA-2025-1764677738 lasso: Fix of CVE-2025-47151
CVE-2025-47151: fix type confusion vulnerability in the lassonodeimplinitfromxml functionality...
CLSA-2026-1789457556 TuxCare security update for pillow (3 CVEs)
TuxCare rebuilt pillow to address 3 CVEs. Fixed in 8.4.0.post5+tuxcare...
CLSA-2026-1771081379 kernel: Fix of 76 CVEs
HID: core: ensure the allocated report buffer can contain the reserved report ID CVE-2025-38495 - fs/proc: fix uaf in procreaddirde CVE-2025-40271 - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer CVE-2025-40269 - Bluetooth: ISO: Fix possible UAF on isoconnfree CVE-2025-40141 -...
CLSA-2026-1789484097 TuxCare security update for com.fasterxml.jackson.core:jackson-core (4 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 4 CVEs. Fixed in 2.17.2-tuxcare.1...
CLSA-2025-1759866837 kernel: Fix of 44 CVEs
mm: zswap: fix missing folio cleanup in writeback race path CVE-2024-26832 - mm: fix zswap writeback race condition CVE-2023-53178 - dm array: fix releasing a faulty array block twice in dmarraycursorend CVE-2024-57929 - drm/dpmst: Fix MST sideband message body length check CVE-2024-56616 - gpio:...
CLSA-2026-1779193855 ImageMagick: Fix of CVE-2026-42050
CVE-2026-42050: fix stack buffer overflow in XTileImage when loading malicious MIFF in display tool...
CLSA-2026-1785204577 TuxCare security update for react-server-dom-esm (1 CVE)
TuxCare rebuilt react-server-dom-esm to address 1 CVE. Fixed in 19.2.0-tuxcare.6...
CLSA-2026-1779266445 binutils: Fix of 4 CVEs
CVE-2026-3441: XCOFF linker XTYLD xscnlen out-of-bounds read - CVE-2026-3442: XCOFF linker rsymndx out-of-bounds read in objxcoffsymhashes - CVE-2025-7545: objcopy heap buffer overflow on --interleave with crafted small input - CVE-2025-5245: objdump SEGV / NULL deref in debugtypesamep and...
CLSA-2025-1747430081 Fix of 47 CVEs
CVE-url: https://ubuntu.com/security/CVE-2021-47352 - virtio-net: Add validation for used length CVE-url: https://ubuntu.com/security/CVE-2024-46745 - Input: uinput - reject requests with unreasonable number of slots CVE-url: https://ubuntu.com/security/CVE-2024-44952 - driver core: Fix ueventsho...
CLSA-2026-1791908220 TuxCare security update for dompurify (2 CVEs)
TuxCare rebuilt dompurify to address 2 CVEs. Fixed in 3.0.8-tuxcare.1...
CLSA-2026-1789050616 TuxCare security update for nodemailer (7 CVEs)
TuxCare rebuilt nodemailer to address 7 CVEs. Fixed in 2.7.2-tuxcare.5...
CLSA-2026-1769509482 python3.9: Fix of CVE-2025-12084
CVE-2025-12084: fix denial-of-service by removing quadratic behavior in xml.dom.minidom node ID cache clearing when building deeply nested documents...
CLSA-2026-1767799681 expat: Fix of 3 CVEs
Rebase to version 2.5.0 - CVE-2024-28757: prevent billion laughs attacks in isolated external parser part of 839, reject direct parameter entity recursion part of 839 - CVE-2025-59375: fix memory amplification and add allocation tracker - CVE-2013-0340: properly handle entities expansion...
CLSA-2025-1760548275 protobuf-c: Fix of CVE-2022-48468
CVE-2022-48468: fix unsigned integer overflow in parserequiredmember...
CLSA-2026-1771077729 kernel: Fix of 108 CVEs
net/ieee802154: don't warn zero-sized rawsendmsg CVE-2022-50706 - bpf: Don't redirect packets with invalid pktlen CVE-2022-49975 - media: uvcvideo: Fix 1-byte out-of-bounds read in uvcparseformat CVE-2025-38680 - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network...
CLSA-2026-1784596306 TuxCare security update for dompurify (3 CVEs)
TuxCare rebuilt dompurify to address 3 CVEs. Fixed in 2.5.9-tuxcare.4...
CLSA-2026-1771839565 libpng: Fix of CVE-2026-25646
CVE-2026-25646: fix out-of-bounds read and potential heap buffer overflow in pngsetquantize caused by stale palette indices during color pruning...
CLSA-2026-1790854662 TuxCare security update for nodemailer (4 CVEs)
TuxCare rebuilt nodemailer to address 4 CVEs. Fixed in 9.1.0-tuxcare.4...
CLSA-2026-1776818212 TuxCare security update for io.netty (4 CVEs)
TuxCare rebuilt 3 io.netty packages to address 4 CVEs. Fixed in 4.1.115.Final-tuxcare.4...
CLSA-2026-1777614769 kernel: Fix of 18 CVEs
crypto: algifaead - Fix minimum RX size check for decryption - crypto: afalg - Fix page reassignment overflow in afalgpulltsgl - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authenc - use...
CLSA-2026-1777311274 Fix CVE(s): CVE-2026-22801, CVE-2026-25646
SECURITY UPDATE: Heap buffer over-read in pngwriteimage due to truncation of ptrdifft row stride to pnguint16 - debian/patches/CVE-2026-22801.patch: remove incorrect truncation casts from pngwriteimage16bit, pngwriteimage8bit, and pngimagewritemain so large 65535 and negative row strides are...
CLSA-2026-1773047921 kernel: Fix of 70 CVEs
wifi: iwlwifi: mvm: guard against invalid STA ID on removal CVE-2024-36921 - ASoC: topology: Fix references to freed memory CVE-2024-41069 - net/sched: actmirred: don't override retval if we already lost the skb CVE-2024-26739 - drivers: base: Free devm resources when unregistering a device...
CLSA-2026-1772450608 libpng15: Fix of CVE-2026-25646
CVE-2026-25646: fix heap buffer overflow in pngsetquantize caused by stale palette indices in the color distance hash table...
CLSA-2026-1773479849 python: Fix of CVE-2025-12084
CVE-2025-12084: fix quadratic algorithm when building nested XML elements with appendChild...