10560 matches found
CLSA-2024-1716269479 Fix of 42 CVEs
CVE-url: https://ubuntu.com/security/CVE-2023-47233 - wifi: brcmfmac: Fix use-after-free bug in brcmfcfg80211detach CVE-url: https://ubuntu.com/security/CVE-2023-52601 - jfs: Fix memleak in dbAdjCtl CVE-url: https://ubuntu.com/security/CVE-2024-26801 - Bluetooth: Avoid potential use-after-free in...
CLSA-2024-1715000325 kernel: Fix of 25 CVEs
IB/hfi1: Fix bugs with non-PAGESIZE-end multi-iovec user SDMA requests CVE-2023-52474 - afunix: Fix null-ptr-deref in unixstreamsendpage. CVE-2023-4622 - sched/rt: picknextrtentity: check listentry CVE-2023-1077 - RDMA/irdma: Prevent zero-length STAG registration CVE-2023-25775 - block: add check...
CLSA-2024-1710945589 Fix of 9 CVEs
CVE-url: https://ubuntu.com/security/CVE-2023-52449 - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier Bionic update: upstream stable patchset 2018-08-29 LP: 1789666 // CVE- url: https://ubuntu.com/security/CVE-2022-20567 - l2tp: fix refcount leakage on PPPoL2TP sockets Bionic upda...
CLSA-2024-1708427636 Fix CVE(s): CVE-2024-25062
SECURITY UPDATE: Use-after-free in xmlValidatePopElement - debian/patches/CVE-2024-25062.patch: Fix use-after-free if XML Reader when used with DTD validation and XInclude expansion - CVE-2024-25062...
CLSA-2024-1707420507 Fix CVE(s): CVE-2023-5869
SECURITY UPDATE: A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. - debian/patches/CVE-2023-5869.patch: Detect integer overflow while computing new array dimensions. - CVE-2023-58...
CLSA-2023-1702495193 openssl: Fix of CVE-2023-5363
CVE-2023-5363: evp: process key length and iv length early if present...
CLSA-2023-1698689944 nginx: Fix of CVE-2023-44487
CVE-2023-44487: HTTP/2 - per-iteration stream handling limit...
CLSA-2023-1697463600 Fix CVE(s): CVE-2023-42116, CVE-2023-42114
SECURITY UPDATE: Multiple security issues - debian/patches/CVE-2023-42114.patch: fix possible OOB read in SPA authenticator - CVE-2023-42114 - debian/patches/CVE-2023-42116.patch: fix possible OOB write in SPA authenticator - CVE-2023-42116...
CLSA-2023-1695046791 Fix of 7 CVEs
Bionic update: upstream stable patchset 2022-12-01 LP: 1998542 // CVE-2022-26373 - x86/speculation: Add RSB VM Exit protections Bionic update: upstream stable patchset 2022-12-01 LP: 1998542 - Revert "x86/cpu: Add a steppings field to struct x86cpuid" - x86/cpufeature: Add facility to check for m...
CLSA-2023-1693424916 kernel: Fix of 18 CVEs
netfilter: nftsetpipapo: fix improper element removal CVE-2023-4004 - net: tun: fix bugs for oversize packet when napi frags enabled CVE-2023-3812 - net/sched: clsfw: Fix improper refcount update leads to use-after-free CVE-2023-3776 - net/sched: schqfq: account for stab overhead in qfqenqueue...
CLSA-2023-1692295639 Update of microcode_ctl
Update Intel CPU microcode to microcode-20230512 release: - Addition of 06-9a-04/0x40 microcode at revision 0x4; - Addition of 06-be-00/0x01 microcode at revision 0x10; - Update of 06-55-03/0x97 SKX-SP B1 microcode from revision 0x1000161 up to 0x1000171; - Update of 06-55-04/0xb7 SKX-D/SP/W/X...
CLSA-2023-1689885378 python2: Fix of CVE-2023-24329
CVE-2023-24329: part2: Start stripping C0 control and space chars in urlsplit - Also correct the first CVE-2023-24329 patch: Fix testattributesbadscheme to check for non-ascii symbol as first character of url...
CLSA-2023-1689701064 Fix CVE(s): CVE-2021-3737
SECURITY UPDATE: Denial of service - debian/patches/CVE-2021-3737.patch: Fix http client infinite line reading DoS after a HTTP 100 continue in Lib/httplib.py, Lib/test/testhttplib.py. - CVE-2021-3737 take building tests into account, fix failed tests - debian/patches/expat-regression.patch: fix...
CLSA-2023-1689009963 Fix CVE(s): CVE-2022-29885
SECURITY UPDATE: EncryptInterceptor only provides partial protection on untrusted network - debian/patches/CVE-2022-29885.patch: Update the documentation to state that the EncryptInterceptor does not provide sufficient protection to run Tomcat clustering over an untrusted network. - CVE-2022-2988...
CLSA-2023-1682705952 kernel: Fix of 7 CVEs
mISDN: fix use-after-free bugs in l1oip timer handlers CVE-2022-3565 - media: rc: Fix use-after-free bugs caused by enetxirqsim CVE-2023-1118 - Bluetooth: btsdio: fix use after free bug in btsdioremove due to unfinished work CVE-2023-1989 - proc: procskipspaces shouldn't think it is working on C...
CLSA-2023-1678396353 Fix CVE(s): CVE-2023-24329
SECURITY UPDATE: urllib.parse.urlparse does not enforce that a scheme must begin with an ASCII-character - debian/patches/CVE-2023-24329.patch: Prevent urllib.parse.urlparse from accepting schemes that don't begin with an alphabetical ASCII character - CVE-2023-24329...
CLSA-2022-1670606563 Fix CVE(s): CVE-2019-0221
SECURITY UPDATE: The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided data without escaping and is, therefore, vulnerable to XSS. - debian/patches/CVE-2019-0221.patch: Escape debug output to aid readability - CVE-2019-0221...
CLSA-2022-1657561005 Fixed CVE-2020-12723 in perl-5.10.1
CVE-2020-12723: fix a buffer overflow caused by a crafted regular expression because of recursive Sstudychunk calls...
CLSA-2022-1643727489 Fix of CVE: CVE-2021-23840, CVE-2021-3712, CVE-2021-23841
CVE-2021-3712: openssl: Read buffer overruns processing ASN.1 strings - CVE-2021-23840: openssl: integer overflow in CipherUpdate - CVE-2021-23841: openssl: NULL pointer dereference in X509issuerandserialhash...
CLSA-2022-1643637294 Fix CVE(s): CVE-2021-38198
CVE-2021-38198 - ELSCVE-686: KVM: MMU: return page fault error code from permissionfault - ELSCVE-686: kvm: x86: MMU support for EPT accessed/dirty bits - ELSCVE-686: KVM: nVMX: fix EPT permissions as reported in exit qualification - ELSCVE-686: KVM: X86: MMU: Use the correct inherited permission...
CLSA-2022-1643212149 Fix of CVE: CVE-2021-4034
CVE-2021-4034: polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector...
CLSA-2021-1634925719 Fixed CVEs in vim: CVE-2021-3778, CVE-2021-3796
CVE-2021-3778: crafted input leads to heap-based buffer overflow - CVE-2021-3796: crafted input leads to use-after-free...
CLSA-2021-1634922881 Fixed CVEs in openssl: CVE-2018-0739, CVE-2018-0732, CVE-2021-3712, CVE-2018-0737
fix CVE-2021-3712 - handling ASN.1 string as NULL terminated leads to read buffer overrun - Port patches from oracle6els branch, original changelog entry: - Oracle bug 28730228: backport CVE-2018-0732 - Oracle bug 28758493: backport CVE-2018-0737 - Merge upstream patch to fix CVE-2018-0739 -...
CLSA-2026-1791377424 TuxCare security update for aiohttp (7 CVEs)
TuxCare rebuilt aiohttp to address 7 CVEs. Fixed in 3.8.1.post16+tuxcare...
CLSA-2026-1791051095 TuxCare security update for figlet (1 CVE)
TuxCare rebuilt figlet to address 1 CVE. Fixed in 1.9.1-tuxcare.1...
CLSA-2026-1790718594 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.18-tuxcare.4...
CLSA-2026-1790154692 TuxCare security update for pillow (1 CVE)
TuxCare rebuilt pillow to address 1 CVE. Fixed in 11.2.1.post7+tuxcare...
CLSA-2026-1790109128 TuxCare security update for nodemailer (2 CVEs)
TuxCare rebuilt nodemailer to address 2 CVEs. Fixed in 6.10.1-tuxcare.10...
CLSA-2026-1789465861 TuxCare security update for valibot (2 CVEs)
TuxCare rebuilt valibot to address 2 CVEs. Fixed in 0.41.0-tuxcare.1...
CLSA-2026-1787557465 TuxCare security update for log4j:log4j (4 CVEs)
TuxCare rebuilt log4j:log4j to address 4 CVEs. Fixed in 1.2.15-tuxcare.1...
CLSA-2026-1787326456 TuxCare security update for org.apache.commons:commons-compress (1 CVE)
TuxCare rebuilt org.apache.commons:commons-compress to address 1 CVE. Fixed in 1.25.0-tuxcare.1...
CLSA-2026-1787326082 TuxCare security update for io.micronaut (4 CVEs)
TuxCare rebuilt 36 io.micronaut packages to address 4 CVEs. Fixed in 3.8.5-tuxcare.1...
CLSA-2026-1787223739 TuxCare security update for dompdf/dompdf (6 CVEs)
TuxCare rebuilt dompdf/dompdf to address 6 CVEs. Fixed in 1.2.2-p2+tuxcare...
CLSA-2026-1783731814 TuxCare security update for swiper (1 CVE)
TuxCare rebuilt swiper to address 1 CVE. Fixed in 8.4.7-tuxcare.1...
CLSA-2026-1782694759 TuxCare security update for gunicorn (1 CVE)
TuxCare rebuilt gunicorn to address 1 CVE. Fixed in 23.0.0.post1+tuxcare...
CLSA-2026-1781830594 TuxCare security update for @angular (9 CVEs)
TuxCare rebuilt 16 @angular packages to address 9 CVEs. Fixed in 18.2.14-tuxcare.11...
CLSA-2026-1778805972 TuxCare security update for picomatch (2 CVEs)
TuxCare rebuilt picomatch to address 2 CVEs. Fixed in 4.0.2-tuxcare.1...
CLSA-2026-1777336772 TuxCare security update for 21 packages (1 CVE)
TuxCare rebuilt 21 packages to address 1 CVE. Fixed in 0.14.25-tuxcare.1...
CLSA-2026-1776904648 TuxCare security update for league/commonmark (2 CVEs)
TuxCare rebuilt league/commonmark to address 2 CVEs. Fixed in 2.7.1-p1+tuxcare...
CLSA-2026-1774830249 TuxCare security update for mlflow (5 CVEs)
TuxCare rebuilt mlflow to address 5 CVEs. Fixed in 2.9.1.post1+tuxcare...
CLSA-2026-1774484506 TuxCare security update for minimatch (2 CVEs)
TuxCare rebuilt minimatch to address 2 CVEs. Fixed in 1.0.0-tuxcare.1...
CLSA-2026-1773015253 TuxCare security update for com.google.guava (2 CVEs)
TuxCare rebuilt 4 com.google.guava packages to address 2 CVEs. Fixed in 27.1-android-tuxcare.1...
CLSA-2026-1773015273 TuxCare security update for karma (2 CVEs)
TuxCare rebuilt karma to address 2 CVEs. Fixed in 4.4.1-tuxcare.1...
CLSA-2025-1766016491 TuxCare security update for io.undertow (4 CVEs)
TuxCare rebuilt 8 io.undertow packages to address 4 CVEs. Fixed in 2.3.10.Final-tuxcare.1...
CLSA-2026-1780055179 Fix CVE(s): CVE-2026-46483
SECURITY UPDATE: command injection in tar plugin Vimuntar - debian/patches/CVE-2026-46483.patch: pass shellescapetartail, 1 instead of shellescapetartail in the two :!gunzip / :!gzip -d lines of runtime/autoload/tar.vim::tarVimuntar so Vim's special characters !, %, are escaped before the filenam...
CLSA-2026-1779893247 Fix of 5 CVEs
SECURITY UPDATE: add case sensitive attribute to LockOutRealm - debian/patches/CVE-2026-43513.patch: add case sensitive attribute to LockOutRealm - CVE-2026-43513 SECURITY UPDATE: fix the handling of invalid users with DIGEST authentication - debian/patches/CVE-2026-43512.patch: fix the handling ...
CLSA-2026-1779581754 tigervnc: Fix of CVE-2026-34000
CVE-2026-34000: widen bounds check in CheckSetGeom to cover both key alias names 2 XkbKeyNameLength and prevent out-of-bounds read of uninitialized memory in XkbAddGeomKeyAlias...
CLSA-2026-1779437608 dnsmasq: Fix of 5 CVEs
CVE-2026-2291: fix buffer overflow in union bigname - CVE-2026-4890: fix NSEC bitmap parsing infinite loop and OOB reads - CVE-2026-4891: verify rdlen field in RRSIG packets - CVE-2026-4892: fix buffer overflow in helper.c with large CLIDs - CVE-2026-4893: fix broken client subnet validation...
CLSA-2026-1779437548 dnsmasq: Fix of 5 CVEs
CVE-2026-2291: fix buffer overflow in union bigname - CVE-2026-4890: fix NSEC bitmap parsing infinite loop and OOB reads - CVE-2026-4891: verify rdlen field in RRSIG packets - CVE-2026-4892: fix buffer overflow in helper.c with large CLIDs - CVE-2026-4893: fix broken client subnet validation...
CLSA-2026-1779436377 cups: Fix of CVE-2026-27447
CVE-2026-27447: fix authorization bypass in cupsd by replacing case-insensitive username comparisons with byte-exact strcmp against pw-pwname; also include upstream follow-up commit 849fba7d "Fix unauthenticated print policies", Issue 1557 to restore behavior for CUPSDAUTHNONE policies with named...