16562 matches found
CLSA-2026-1783731814 TuxCare security update for swiper (1 CVE)
TuxCare rebuilt swiper to address 1 CVE. Fixed in 8.4.7-tuxcare.1...
CLSA-2026-1782954029 TuxCare security update for highcharts (1 CVE)
TuxCare rebuilt highcharts to address 1 CVE. Fixed in 8.2.2-tuxcare.1...
CLSA-2026-1782694759 TuxCare security update for gunicorn (1 CVE)
TuxCare rebuilt gunicorn to address 1 CVE. Fixed in 23.0.0.post1+tuxcare...
CLSA-2026-1779324473 TuxCare security update for postcss (4 CVEs)
TuxCare rebuilt postcss to address 4 CVEs. Fixed in 7.0.32-tuxcare.1...
CLSA-2026-1778805972 TuxCare security update for picomatch (2 CVEs)
TuxCare rebuilt picomatch to address 2 CVEs. Fixed in 4.0.2-tuxcare.1...
CLSA-2026-1776731777 TuxCare security update for tree-kill (2 CVEs)
TuxCare rebuilt tree-kill to address 2 CVEs. Fixed in 1.2.1-tuxcare.1...
CLSA-2026-1774484506 TuxCare security update for minimatch (2 CVEs)
TuxCare rebuilt minimatch to address 2 CVEs. Fixed in 1.0.0-tuxcare.1...
CLSA-2025-1766016491 TuxCare security update for io.undertow (4 CVEs)
TuxCare rebuilt 8 io.undertow packages to address 4 CVEs. Fixed in 2.3.10.Final-tuxcare.1...
CLSA-2026-1779467038 unbound: Fix of CVE-2026-33278
CVE-2026-33278: fix dangling pointer use-after-free in dnsmsgdeepcopyregion...
CLSA-2026-1779462193 Fix CVE(s): CVE-2026-33515
SECURITY UPDATE: out-of-bounds read when handling malformed ICP traffic - debian/patches/CVE-2026-33515.patch: validate ICP packet sizes and URLs in icpGetUrl; reject non-NUL-terminated URLs, URLs with embedded NULs or trailing garbage; guard icpHandleUdp against a nil icpOutgoingConn pointer -...
CLSA-2026-1779370563 grub2: Fix of CVE-2025-0677
CVE-2025-0677: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks...
CLSA-2026-1779359429 expat: Fix of CVE-2026-45186
CVE-2026-45186: fix quadratic runtime in attribute collision detection by using a hash table for default attribute names instead of an On^2 loop...
CLSA-2026-1779282813 Fix CVE(s): CVE-2026-42945
SECURITY UPDATE: heap buffer overflow in ngxhttprewritemodule when an unnamed PCRE capture group with '?' in the replacement is followed by another rewrite, if, or set directive - debian/patches/CVE-2026-42945.patch: clear isargs flag at the start of ngxhttpscriptregexendcode in...
CLSA-2026-1779118679 Fix of 8 CVEs
SECURITY UPDATE: modproxyajp heap buffer over-read in ajpmsggetstring - debian/patches/CVE-2026-34032.patch: add buffer checks in modules/proxy/ajpmsg.c. - CVE-2026-34032 SECURITY UPDATE: AJP getter functions off-by-one out-of-bounds reads - debian/patches/CVE-2026-33857.patch: fix length checks ...
CLSA-2026-1778880543 python3: Fix of CVE-2024-4032
CVE-2024-4032: fix incorrect isprivate/isglobal ranges in ipaddress module...
CLSA-2026-1778839424 gnutls: Fix of CVE-2026-3833
CVE-2026-3833: fix excludedSubtrees/permittedSubtrees bypass by performing case-insensitive comparison of dNSName and rfc822Name domain labels in X.509 nameConstraints processing...
CLSA-2026-1778493573 samba: Fix of CVE-2017-15275
CVE-2017-15275: Fix server heap memory information leak by zeroing unused area when messagepushstring grows the talloc buffer...
CLSA-2026-1778614426 httpd: Fix of 9 CVEs
CVE-2026-24072: fix modrewrite apexpr privilege escalation in htaccess - CVE-2026-28780: fix modproxyajp ajpmsgcheckheader buffer over-read - CVE-2026-29169: fix moddavlock NULL pointer dereference - CVE-2026-33006: fix modauthdigest timing attack - CVE-2026-33007: fix modauthnsocache NULL...
CLSA-2026-1778603120 Fix CVE(s): CVE-2026-6735
SECURITY UPDATE: XSS in PHP-FPM status endpoint - debian/patches/CVE-2026-6735.patch: HTML-encode proc.requesturi and tighten querystring entity flags in sapi/fpm/fpm/fpmstatus.c. - CVE-2026-6735...
CLSA-2026-1778267481 Update of kernel-uek
rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present - xfrm: esp: avoid in-place decrypt on shared skb frags...
CLSA-2026-1778238067 dovecot: Fix of CVE-2026-27857
CVE-2026-27857: fix excessive memory usage from many '' in IMAP commands...
CLSA-2026-1777942153 openssh: Fix of CVE-2026-35385
CVE-2026-35385: fix scp legacy protocol receiver to clear setuid/setgid bits from downloaded files when -p preserve mode is not set...
CLSA-2026-1778007485 libnbd: Fix of CVE-2023-5215
CVE-2023-5215: fix nbdgetsize returning negative value for sizes larger than INT64MAX...
CLSA-2026-1778004214 vim: Fix of 5 CVEs
CVE-2022-2124: fix out-of-bounds read in currentquote when searching for quotes goes over the end of the line textobject.c, upstream patch 8.2.5120 - CVE-2022-2126: fix invalid index use in suggesttriewalk when tsfidx is zero spellsuggest.c, upstream patch 8.2.5123 - CVE-2022-2207: fix read...
CLSA-2026-1777976295 Fix CVE(s): CVE-2026-28690
SECURITY UPDATE: stack buffer overflow in MNG/JNG encoder — missing NULL check after ImageToBlob in WriteOneJNGImage could propagate a NULL blob pointer into later stack buffer operations GHSA-7h7q-j33q-hvpf. - debian/patches/CVE-2026-28690.patch: bail out of WriteOneJNGImage when ImageToBlob...
CLSA-2026-1777944610 grafana: Fix of CVE-2026-27877
CVE-2026-27877: fix exposure of direct data-source passwords via public dashboards by limiting frontend settings to data sources actually used by the dashboard - Note: upstream test additions in pkg/api/frontendsettingstest.go are not backported. The %check stage only runs the Jest frontend suite...
CLSA-2026-1777941808 libcap: Fix of CVE-2026-4878
CVE-2026-4878: fix TOCTOU race in capsetfile by performing xattr writes via an ONOFOLLOW file descriptor instead of the user-supplied path...
CLSA-2026-1777939266 libssh: Fix of CVE-2026-0966
CVE-2026-0966: fix heap buffer underflow in sshgethexa on NULL or zero-length input, remotely reachable via GSSAPI authentication logging...
CLSA-2026-1777939234 libssh: Fix of CVE-2026-0966
CVE-2026-0966: fix heap buffer underflow in sshgethexa on NULL or zero-length input, remotely reachable via GSSAPI authentication logging...
CLSA-2026-1777882062 gdk-pixbuf2: Fix of CVE-2026-5201
CVE-2026-5201: fix heap-based buffer overflow in JPEG loader due to improper validation of color component counts...
CLSA-2026-1777540774 php: Fix of 4 CVEs
CVE-2018-14883: fix integer overflow leading to heap buffer overflow in exifthumbnailextract - CVE-2019-19246: fix heap buffer overflow in oniguruma strlowercasematch - CVE-2018-19518: disable imap rsh/ssh by default to prevent argument injection imap.enableinsecurersh INI added - CVE-2018-20783:...
CLSA-2026-1777455188 vim: Fix of CVE-2022-3520
CVE-2022-3520: fix heap buffer overflow in doput when Visual-block put causes the end-column to underflow to a negative value...
CLSA-2026-1777569671 python3: Fix of CVE-2026-6100
CVE-2026-6100: clear dangling nextin pointer on MemoryError in bz2/lzma decompressors to avoid use-after-free on instance reuse...
CLSA-2026-1777470383 less: Fix of 2 CVEs
Extend ELS coverage to rhel7els, oraclelinux7els and cloudlinux7els. - CVE-2022-48624 and CVE-2024-32487 were already fixed in 458-10.tuxcare.els1; this release reships those fixes to the additional platforms...
CLSA-2026-1777445847 grafana-pcp: Fix of CVE-2026-25679
Rebuild against recent Go compiler - CVE-2026-25679: fix net/url insufficient validation of host in url.Parse...
CLSA-2026-1777392623 cups: Fix of CVE-2026-34980
CVE-2026-34980: filter control characters from IPP option values and allowlist PPD keywords returned by filters so a remote attacker cannot inject cupsFilter/cupsFilter2 entries on a shared PostScript queue and gain code execution as the cupsd user...
CLSA-2026-1777308690 python3: Fix of CVE-2026-1299
CVE-2026-1299: reject newline injection in email module's BytesGenerator when serializing headers - Skip test.testxmletree.XMLPullParserTest.testsimplexml during RPM build; unrelated expat-2.1.0-15.0.7.tuxcare.els1 regression breaks XMLPullParser chunked-feed semantics in TuxCare ELS el7 build...
CLSA-2026-1777307149 libarchive: Fix of CVE-2021-31566
CVE-2021-31566: extend backport with upstream 8a1bd5c and ede459d2 to close the trailing-slash variant of the fixup-list symlink-follow attack...
CLSA-2026-1777052042 sqlite: Fix of CVE-2018-8740
CVE-2018-8740: avoid a NULL pointer dereference when the sqlitemaster schema contains a corrupt CREATE TABLE AS entry...
CLSA-2026-1776778859 gstreamer1-plugins-base: Fix of CVE-2026-2921
CVE-2026-2921: fix integer overflow in RIFF palette handling...
CLSA-2026-1776427525 golang: Fix of 3 CVEs
CVE-2025-61723: fix non-linear processing time when parsing invalid PEM inputs that could lead to denial of service - CVE-2025-58187: fix quadratic complexity when checking name constraints in crypto/x509 certificate validation - CVE-2025-58188: fix panic when validating certificates with DSA...
CLSA-2026-1776328800 libtasn1: Fix of CVE-2025-13151
CVE-2025-13151: fix stack-based buffer overflow in asn1expandoctetstring, asn1expandobjectid...
CLSA-2026-1776257772 ImageMagick: Fix of CVE-2026-32636
CVE-2026-32636: out-of-bounds write of a single zero byte in ConvertUTF16ToUTF8 via NewXMLTree when resizing UTF-8 buffer...
CLSA-2026-1776177493 Fix CVE(s): CVE-2025-11082
SECURITY UPDATE: fix heap-based buffer overflow in bfdelfparseehframe - debian/patches/CVE-2025-11082.patch: add bounds check before reading buf1 in the legacy "eh" CIE path - CVE-2025-11082...
CLSA-2026-1775148022 binutils: Fix of 3 CVEs
CVE-2025-66862: fix heap-buffer-overflow in gnuspecial in cplus-dem.c - CVE-2025-66863: fix SEGV in ddiscriminator in cp-demangle.c - CVE-2025-66865: fix stack overflow in dprintcomp in cp-demangle.c...
CLSA-2026-1775040432 golang: Fix of CVE-2025-61731
CVE-2025-61731: fix pkg-config --log-file argument injection via cgo pkg-config directive...
CLSA-2026-1774605210 expat: Fix of 2 CVEs
CVE-2026-32777: fix infinite loop while parsing DTD content - CVE-2026-32778: fix NULL pointer dereference in setContext on retry after OOM...
CLSA-2026-1774009875 Fix CVE(s): CVE-2026-25210
SECURITY UPDATE: integer overflow in doContent tag buffer reallocation. - debian/patches/CVE-2026-25210.patch: add overflow check for tag buffer reallocation - CVE-2026-25210...
CLSA-2026-1773930007 Fix CVE(s): CVE-2026-3731
SECURITY UPDATE: out-of-bounds read from manipulated SFTP extension index - debian/patches/CVE-2026-3731.patch: Fix out-of-bound read in sftp extensions by replacing '' with '=' in index checks; cause: off-by-one error in index comparison allowing idx equal count. - CVE-2026-3731...