16515 matches found
CLSA-2025-1738592614 kernel: Fix of 26 CVEs
xsk: fix OOB map writes when deleting elements CVE-2024-56614 - hvsock: Initializing vsk-trans to NULL to prevent a dangling pointer CVE-2024-53103 - scsi: sg: Fix slab-use-after-free read in sgrelease CVE-2024-56631 - net: inet: do not leave a dangling sk pointer in inetcreate CVE-2024-56601 -...
CLSA-2024-1734542452 php: Fix of CVE-2023-0568
CVE-2023-0568: fix array overrun when appending slash to paths...
CLSA-2024-1733142968 Fix of 13 CVEs
CVE-url: https://ubuntu.com/security/CVE-2023-52614 - time: Introduce jiffies64tomsecs - PM / devfreq: Modify the indentation of transstat sysfs for readability - PM / devfreq: Do not show statistics if it's not ready. - PM / devfreq: Fix buffer overflow in transstatshow Bionic update: upstream...
CLSA-2024-1728583613 Fix of 18 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-46802 - drm/amd/display: added NULL check at start of dcvalidatestream CVE-url: https://ubuntu.com/security/CVE-2024-46818 - drm/amd/display: fix sporadic multiple aux transaction failure - drm/amd/display: Check gpioid before used as array index...
CLSA-2024-1726769331 krb5: Fix of 2 CVEs
CVE-2024-37370: prevent modification of Extra Count field in GSS krb5 wrap token to avoid appearing truncated to application - CVE-2024-37371: fix invalid memory reads during GSS message token handling...
CLSA-2024-1726655093 kernel: Fix of 8 CVEs
blktrace: fix dereference after null check CVE-2019-19768 - blktrace: Protect q-blktrace with RCU CVE-2019-19768 - blktrace: fix unlocked access to init/start-stop/teardown - blktrace: Fix potential deadlock between delete & sysfs ops - net: fix out-of-bounds access in opsinit CVE-2024-36883 -...
CLSA-2024-1726609578 kernel: Fix of 8 CVEs
blktrace: fix dereference after null check CVE-2019-19768 - blktrace: Protect q-blktrace with RCU CVE-2019-19768 - blktrace: fix unlocked access to init/start-stop/teardown - blktrace: Fix potential deadlock between delete & sysfs ops - net: fix out-of-bounds access in opsinit CVE-2024-36883 -...
CLSA-2024-1724260328 Fix CVE(s): CVE-2024-0450
SECURITY UPDATE: exploit “quoted-overlap” zip-bombs with a high compression ratio - debian/patches/CVE-2024-0450.patch: Protect zipfile from "quoted-overlap" zipbomb - CVE-2024-0450 replace TLSv1 by TLSv1.2 since TLSv1 is not supported in the following tests: - Lib/test/testftplib.py -...
CLSA-2024-1723623068 java-1.8.0-openjdk: Fix of 6 CVEs
Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u422-b05. That fixes following CVEs: - CVE-2024-21131: UTF8 size overflow - CVE-2024-21138: Infinite loop vunlerability in SymbolTable - CVE-2024-21140: Int overflow/underflow in Range Check Elimination RCE - CVE-2024-21144: Invalid header...
CLSA-2024-1723567849 kernel: Fix of 20 CVEs
net: fix dstnegativeadvice race CVE-2024-36971 - spec: update shim Conflicts, Provides keys - ipv6: fib6rules: avoid possible NULL dereference in fib6ruleaction CVE-2024-36902 - ipv6: prevent NULL dereference in ip6output CVE-2024-36901 - drm/amd/display: Atom Integrated System Info v22 for DCN35...
CLSA-2024-1721929402 openssh: Fix of CVE-2024-6409
CVE-2024-6409: fix signal handler race condition vulnerability in sshd server...
CLSA-2024-1720548691 python3: Fix of 2 CVEs
CVE-2023-6597: Prevent tempfile.TemporaryDirectory class dereference symlinks - CVE-2024-0450: Make zipfile module reject zip archives which overlap entries in the archive. Prevent “quoted-overlap” zip-bombs exploit...
CLSA-2024-1720094351 glibc: Fix of 2 CVEs
Fix a memory leak in converthostenttogaihaddrtuple function with AIALL - CVE-2023-4806: fix memory access issue in getaddrinfo function by implementing nssgethostbyname3r hook - CVE-2023-4813: fix memory leakage in gaihinet function to prevent application crash when getaddrinfo function is called...
CLSA-2024-1717678054 libwebp: Fix of CVE-2023-4863
CVE-2023-4863: fix OOB write in BuildHuffmanTable...
CLSA-2024-1709204660 kernel: Fix of 7 CVEs
KVM: nSVM: avoid picking up unsupported bits from L2 in intctl CVE-2021-3653 CVE-2021-3653 - xen/netfront: fix leaking data in shared pages CVE-2022-33740 - xfs: fix up non-directory creation in SGID directories CVE-2021-4037 - netsched: clsroute: remove from list when handle is 0 CVE-2022-2588 -...
CLSA-2024-1706696899 java-1.8.0-openjdk: Fix of 8 CVEs
Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop...
CLSA-2024-1705941083 Update of alt-php
Update ca-certificates database to 20231207: - mozilla/certdata.txt,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.64. - The following certificares were updated: Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - The following certificates authoriti...
CLSA-2023-1700160963 Fix CVE(s): CVE-2023-42117, CVE-2023-42119
SECURITY UPDATE: Remote code execution because of improper neutralization of special elements - debian/patches/CVE-2023-42117.patch: fix stringisipaddress - CVE-2023-42117 SECURITY UPDATE: dnsdb out-of-bounds read information disclosure - debian/patches/CVE-2023-42119.patch: harden dnsdb against...
CLSA-2023-1697817547 nginx: Fix of CVE-2023-44487
CVE-2023-44487: HTTP/2 - per-iteration stream handling limit...
CLSA-2023-1697739734 python: Fix of 2 CVEs
CVE-2022-45061: fix quadratic time idna decoding - CVE-2021-3737: fix http client infinite line reading DoS after a HTTP 100 Continue...
CLSA-2023-1695901043 Fix of 5 CVEs
CVE-url: https://ubuntu.com/security/CVE-2023-42753 - netfilter: ipset: add the missing IPSETHASHWITHNET0 macro for ipsethashnetportnet.c CVE-2022-40982 // CVE-url: https://ubuntu.com/security/CVE-2022-40982 - init: Provide archcpufinalizeinit - x86/cpu: Switch to archcpufinalizeinit - init: Remo...
CLSA-2023-1695319921 Fix CVE(s): CVE-2023-39417
SECURITY UPDATE: Extension script @substitutions@ within quoting allow SQL injection - debian/patches/CVE-2023-39417.patch: filter each substitution through quoteidentifier - CVE-2023-39417...
CLSA-2023-1693827560 Fix of 9 CVEs
Jammy update: v5.15.86 upstream stable release LP: 2005113 // CVE-url: https://ubuntu.com/security/CVE-2022-3606 - libbpf: Fix null-pointer dereference in findprogbysecinsn Jammy update: v5.15.87 upstream stable release LP: 2007441 // CVE-url: https://ubuntu.com/security/CVE-2023-23454 - net:...
CLSA-2023-1692295986 Fix CVE(s): CVE-2023-30577, CVE-2022-37705
SECURITY UPDATE: privilege escalation through runtar SUID program - debian/patches/CVE-2022-37705.patch: filter tar options - CVE-2022-37705 SECURITY UPDATE: privilege escalation through runtar SUID program - debian/patches/CVE-2023-30577.patch: introduce tar option allow list - CVE-2023-30577...
CLSA-2023-1690287378 kernel: Fix of 28 CVEs
ALSA: pcm: Fix races among concurrent prealloc proc writes CVE-2022-1048 - ALSA: pcm: Fix races among concurrent prepare and hwparams/hwfree calls CVE-2022-1048 - ALSA: pcm: Fix races among concurrent read/write and buffer changes CVE-2022-1048 - ALSA: pcm: Fix races among concurrent hwparams and...
CLSA-2023-1688679628 java-1.8.0-openjdk: Fix of 7 CVEs
Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u372-b07. That fixes following CVEs: - CVE-2023-21930: Improper connection handling during TLS handshake 8294474 - CVE-2023-21937: Missing string checks for NULL characters 8296622 - CVE-2023-21938: Incorrect handling of NULL characters in...
CLSA-2023-1678136626 python: Fix of CVE-2023-24329
CVE-2023-24329: Prevent urllib.parse.urlparse from accepting schemes that don't begin with an alphabetical ASCII character...
CLSA-2023-1676981312 Update of ca-certificates
update to CKBI 2.60 from NSS 3.86 - removed old certificates: - Certificate "EC-ACC" - Certificate "GlobalSign ECC Root CA - R4" - Certificate "GTS Root R1" - Certificate "GTS Root R2" - Certificate "GTS Root R3" - Certificate "GTS Root R4" - Certificate "Hellenic Academic and Research...
CLSA-2022-1655757814 Fix CVE(s): CVE-2020-1938, CVE-2020-9484, CVE-2021-25329
Fix build process: - debian/keystores/.pem|.jks: update expiring certs and keystores - debian/patches/0028-update-expiring-test-certs.patch: update expiring test certs - debian/patches/0029-fix-path-to-valid-keystore.patch: fix path to valid keystore - debian/patches/0030-use-tls12-in-tests.patch...
CLSA-2022-1653920195 Fixed CVEs in python3: CVE-2021-3737, CVE-2021-3426, CVE-2021-4189, CVE-2022-0391
CVE-2021-3426: Remove the pydoc getfile feature which could lead to information disclosure rhbz1935913 - CVE-2021-3737: urllib: HTTP client possible infinite loop on a 100 Continue response rhbz2036020 - CVE-2021-4189: ftplib should not use the host from the PASV response rhbz2036020 -...
CLSA-2022-1653507078 Fixed of 5 CVEs in java-1.8.0-openjdk
Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u332-b09. That fixes following CVEs: - CVE-2022-21476: Defective secure validation in Apache Santuario - CVE-2022-21496: URI parsing inconsistencies - CVE-2022-21434: Improper object-to-string conversion in AnnotationInvocationHandler -...
CLSA-2022-1652987318 Fixed CVE-2018-25032 in rsync
CVE-2018-25032: zlib: A flaw found in zlib when compressing not decompressing certain inputs...
CLSA-2022-1646935701 Update of ca-certificates
remove old certificate - Removing: - Certificate "DST Root CA X3" - Update to CKBI 2.50 from NSS 3.67 - Update to CKBI 2.48 from NSS 3.66 - Removing: - Certificate "Verisign Class 3 Public Primary Certification Authority - G3" - Certificate "GeoTrust Global CA" - Certificate "GeoTrust Universal...
CLSA-2022-1644855718 Fix of CVE: CVE-2022-0351, CVE-2022-0368, CVE-2022-0359, CVE-2022-0361
CVE-2022-0351: fix crash caused by too depth recursion - CVE-2022-0359: fix illegal memory access with large tabstop in ex mode - CVE-2022-0361: fix illegal memory access when copying lines in visual mode - CVE-2022-0368: fix illegal memory access when undo makes visual area invalid...
CLSA-2022-1641903536 Fix of 8 CVEs
CVE-2021-3517.patch: validate UTF8 in xmlEncodeEntities - CVE-2021-3518.patch: fix user-after-free with 'xmllint --xinclude --dropdtd' - CVE-2021-3537.patch: propagate error in xmlParseElementChildrenContentDeclPriv - CVE-2021-3541.patch: parser fix for the billion laughs attack -...
CLSA-2021-1639681829 Fix CVE(s): CVE-2021-35624, CVE-2021-35604
SECURITY UPDATE: Update to 5.7.36 to fix security issues - CVE-2021-35604, CVE-2021-35624...
CLSA-2026-1790097561 TuxCare security update for org.springframework.integration (12 CVEs)
TuxCare rebuilt 43 org.springframework.integration packages to address 12 CVEs. Fixed in 6.4.10-tuxcare.3...
CLSA-2026-1789220666 TuxCare security update for 40 packages (2 CVEs)
TuxCare rebuilt 40 packages to address 2 CVEs. Fixed in 10.1.42-tuxcare.10...
CLSA-2026-1789040951 TuxCare security update for nodemailer (4 CVEs)
TuxCare rebuilt nodemailer to address 4 CVEs. Fixed in 6.10.1-tuxcare.8...
CLSA-2026-1788457323 TuxCare security update for fastify (2 CVEs)
TuxCare rebuilt fastify to address 2 CVEs. Fixed in 5.11.3-tuxcare.1...
CLSA-2026-1787931895 TuxCare security update for com.squareup.okhttp3 (1 CVE)
TuxCare rebuilt 10 com.squareup.okhttp3 packages to address 1 CVE. Fixed in 4.10.0-tuxcare.3...
CLSA-2026-1787795581 TuxCare security update for 86 packages (2 CVEs)
TuxCare rebuilt 86 packages to address 2 CVEs. Fixed in 9.4.64.tuxcare0001...
CLSA-2026-1786365605 TuxCare security update for 5 packages (4 CVEs)
TuxCare rebuilt 5 packages to address 4 CVEs. Fixed in 4.16.19-tuxcare.3...
CLSA-2026-1785917160 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.5.1-tuxcare.1...
CLSA-2026-1784769522 TuxCare security update for @babel (2 CVEs)
TuxCare rebuilt 116 @babel packages to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...
CLSA-2026-1784769543 TuxCare security update for marked (3 CVEs)
TuxCare rebuilt marked to address 3 CVEs. Fixed in 0.3.19-tuxcare.1...
CLSA-2026-1783904633 TuxCare security update for phpoffice/phpspreadsheet (5 CVEs)
TuxCare rebuilt phpoffice/phpspreadsheet to address 5 CVEs. Fixed in 4.5.0-p2+tuxcare...
CLSA-2026-1784077482 TuxCare security update for http-proxy-middleware (1 CVE)
TuxCare rebuilt http-proxy-middleware to address 1 CVE. Fixed in 2.0.7-tuxcare.1...