CLSA-2023-1701266210 Fix of 10 CVEs

CVE-2023-31085 // CVE-url: https://ubuntu.com/security/CVE-2023-31085 - ubi: Refuse attaching if mtd's erasesize is 0 Jammy update: v5.15.121 upstream stable release LP: 2032689 // CVE-url: https://ubuntu.com/security/CVE-2023-4132 - media: usb: siano: Fix warning due to null workfunct function...

CLSA-2023-1700160963 Fix CVE(s): CVE-2023-42117, CVE-2023-42119

SECURITY UPDATE: Remote code execution because of improper neutralization of special elements - debian/patches/CVE-2023-42117.patch: fix stringisipaddress - CVE-2023-42117 SECURITY UPDATE: dnsdb out-of-bounds read information disclosure - debian/patches/CVE-2023-42119.patch: harden dnsdb against...

CLSA-2023-1697817547 nginx: Fix of CVE-2023-44487

CVE-2023-44487: HTTP/2 - per-iteration stream handling limit...

CLSA-2023-1697739734 python: Fix of 2 CVEs

CVE-2022-45061: fix quadratic time idna decoding - CVE-2021-3737: fix http client infinite line reading DoS after a HTTP 100 Continue...

CLSA-2023-1693827560 Fix of 9 CVEs

Jammy update: v5.15.86 upstream stable release LP: 2005113 // CVE-url: https://ubuntu.com/security/CVE-2022-3606 - libbpf: Fix null-pointer dereference in findprogbysecinsn Jammy update: v5.15.87 upstream stable release LP: 2007441 // CVE-url: https://ubuntu.com/security/CVE-2023-23454 - net:...

CLSA-2023-1690287378 kernel: Fix of 28 CVEs

ALSA: pcm: Fix races among concurrent prealloc proc writes CVE-2022-1048 - ALSA: pcm: Fix races among concurrent prepare and hwparams/hwfree calls CVE-2022-1048 - ALSA: pcm: Fix races among concurrent read/write and buffer changes CVE-2022-1048 - ALSA: pcm: Fix races among concurrent hwparams and...

CLSA-2023-1688679628 java-1.8.0-openjdk: Fix of 7 CVEs

Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u372-b07. That fixes following CVEs: - CVE-2023-21930: Improper connection handling during TLS handshake 8294474 - CVE-2023-21937: Missing string checks for NULL characters 8296622 - CVE-2023-21938: Incorrect handling of NULL characters in...

CLSA-2023-1678136626 python: Fix of CVE-2023-24329

CVE-2023-24329: Prevent urllib.parse.urlparse from accepting schemes that don't begin with an alphabetical ASCII character...

CLSA-2023-1676981312 Update of ca-certificates

update to CKBI 2.60 from NSS 3.86 - removed old certificates: - Certificate "EC-ACC" - Certificate "GlobalSign ECC Root CA - R4" - Certificate "GTS Root R1" - Certificate "GTS Root R2" - Certificate "GTS Root R3" - Certificate "GTS Root R4" - Certificate "Hellenic Academic and Research...

CLSA-2022-1653507078 Fixed of 5 CVEs in java-1.8.0-openjdk

Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u332-b09. That fixes following CVEs: - CVE-2022-21476: Defective secure validation in Apache Santuario - CVE-2022-21496: URI parsing inconsistencies - CVE-2022-21434: Improper object-to-string conversion in AnnotationInvocationHandler -...

CLSA-2022-1652987318 Fixed CVE-2018-25032 in rsync

CVE-2018-25032: zlib: A flaw found in zlib when compressing not decompressing certain inputs...

CLSA-2026-1791377112 TuxCare security update for io.projectreactor (2 CVEs)

TuxCare rebuilt 3 io.projectreactor packages to address 2 CVEs. Fixed in 3.6.18-tuxcare.1...

CLSA-2026-1790843991 TuxCare security update for pyjwt (6 CVEs)

TuxCare rebuilt pyjwt to address 6 CVEs. Fixed in 2.8.0.post4+tuxcare...

CLSA-2026-1789220666 TuxCare security update for 40 packages (2 CVEs)

TuxCare rebuilt 40 packages to address 2 CVEs. Fixed in 10.1.42-tuxcare.10...

CLSA-2026-1789040951 TuxCare security update for nodemailer (4 CVEs)

TuxCare rebuilt nodemailer to address 4 CVEs. Fixed in 6.10.1-tuxcare.8...

CLSA-2026-1788457323 TuxCare security update for fastify (2 CVEs)

TuxCare rebuilt fastify to address 2 CVEs. Fixed in 5.11.3-tuxcare.1...

CLSA-2026-1787931895 TuxCare security update for com.squareup.okhttp3 (1 CVE)

TuxCare rebuilt 10 com.squareup.okhttp3 packages to address 1 CVE. Fixed in 4.10.0-tuxcare.3...

CLSA-2026-1787795581 TuxCare security update for 86 packages (2 CVEs)

TuxCare rebuilt 86 packages to address 2 CVEs. Fixed in 9.4.64.tuxcare0001...

CLSA-2026-1786365605 TuxCare security update for 5 packages (4 CVEs)

TuxCare rebuilt 5 packages to address 4 CVEs. Fixed in 4.16.19-tuxcare.3...

CLSA-2026-1785917160 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)

TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.5.1-tuxcare.1...

CLSA-2026-1784683093 TuxCare security update for webpack-dev-server (1 CVE)

TuxCare rebuilt webpack-dev-server to address 1 CVE. Fixed in 2.7.1-tuxcare.1...

CLSA-2026-1784769522 TuxCare security update for @babel (2 CVEs)

TuxCare rebuilt 109 @babel packages to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

CLSA-2026-1783904633 TuxCare security update for phpoffice/phpspreadsheet (5 CVEs)

TuxCare rebuilt phpoffice/phpspreadsheet to address 5 CVEs. Fixed in 4.5.0-p2+tuxcare...

CLSA-2026-1784077482 TuxCare security update for http-proxy-middleware (1 CVE)

TuxCare rebuilt http-proxy-middleware to address 1 CVE. Fixed in 2.0.7-tuxcare.1...

CLSA-2026-1783558975 TuxCare security update for nuxt (10 CVEs)

TuxCare rebuilt nuxt to address 10 CVEs. Fixed in 4.0.3-tuxcare.4...

CLSA-2026-1782781184 TuxCare security update for 2 packages (3 CVEs)

TuxCare rebuilt 2 packages to address 3 CVEs. Fixed in 9.10.9-tuxcare.1...

CLSA-2026-1779324470 TuxCare security update for svgo (1 CVE)

TuxCare rebuilt svgo to address 1 CVE. Fixed in 2.8.0-tuxcare.1...

CLSA-2026-1779238045 TuxCare security update for nuxt (2 CVEs)

TuxCare rebuilt nuxt to address 2 CVEs. Fixed in 4.0.3-tuxcare.3...

CLSA-2026-1777249675 TuxCare security update for 2 packages (4 CVEs)

TuxCare rebuilt 2 packages to address 4 CVEs. Fixed in 5.4.14-tuxcare.2...

CLSA-2026-1774916752 TuxCare security update for org.apache.thrift (1 CVE)

TuxCare rebuilt 2 org.apache.thrift packages to address 1 CVE. Fixed in 0.9.3-tuxcare.4...

CLSA-2026-1774916708 TuxCare security update for minimist (2 CVEs)

TuxCare rebuilt minimist to address 2 CVEs. Fixed in 1.2.0-tuxcare.1...

CLSA-2026-1774916733 TuxCare security update for node-forge (6 CVEs)

TuxCare rebuilt node-forge to address 6 CVEs. Fixed in 0.10.0-tuxcare.4...

CLSA-2026-1774484497 TuxCare security update for tar-fs (5 CVEs)

TuxCare rebuilt tar-fs to address 5 CVEs. Fixed in 1.5.1-tuxcare.1...

CLSA-2026-1779694248 mpg123: Fix of CVE-2024-10573

CVE-2024-10573: Out-of-bounds write during PCM decoding of crafted streams could lead to heap corruption and potential arbitrary code execution; decode the MPEG header into a temporary copy that is only applied to the live handle after the frame body is validated upstream svn-r5442, main fix, and...

CLSA-2026-1779465893 postgresql: Fix of CVE-2026-6473

CVE-2026-6473: tsearch: bound StartSel/StopSel/FragmentDelimiter length to PGINT16MAX in tsheadline - CVE-2026-6473: contrib/ltree: guard lquery parsing against numvar and totallen wraparound - CVE-2026-6473: regex: add overflow-checked MALLOCARRAY/REALLOCARRAY and bound NFA state/color products...

CLSA-2026-1778861508 gimp: Fix of 2 CVEs

CVE-2026-4153: fix heap-based buffer overflow in PSP file parser by computing proper linewidth for bit depths 1 and 4 with small widths - CVE-2026-4154: fix integer overflow and buffer overflow in XPM file parser by adding GIMPMAXIMAGESIZE bounds checks and using gtrynew...

CLSA-2026-1779455173 Fix CVE(s): CVE-2026-43618

SECURITY UPDATE: integer overflow in compressed-token decoder allows memory disclosure to a malicious sender - debian/patches/CVE-2026-43618.patch: cap rxtoken at MAXTOKENINDEX and add overflow checks in recvcompressedtokennum/run; add CHUNKSIZE bound check in simplerecvtoken; initialize data=NUL...

CLSA-2026-1779378574 dovecot: Fix of 2 CVEs

CVE-2026-42006: lib-imap: fix listcountlimit to actually count open '' instead of close '', preventing an imap-login memory-exhaustion DoS that bypassed the CVE-2026-27857 fix...

CLSA-2026-1779358660 curl: Fix of 2 CVEs

CVE-2026-5773: wrong reuse of SMB connection; disable connection reuse for SMBS so a subsequent transfer cannot wrongfully reuse a pooled connection to a different share - CVE-2026-6276: clear stale custom-Host cookiehost between requests on the same easy handle cookie leak across origins...

CLSA-2026-1779126860 nginx: Fix of CVE-2026-42945

CVE-2026-42945: fix heap buffer overrun in ngxhttprewritemodule when rewrite is followed by set/if/rewrite with unnamed PCRE captures...

CLSA-2026-1778894153 libarchive: Fix of CVE-2025-60753

CVE-2025-60753: denial of service in bsdtar -s substitution when the regular expression matches a zero-length string, causing an infinite loop in applysubstitution...

CLSA-2026-1778893359 libarchive: Fix of CVE-2025-60753

CVE-2025-60753: denial of service in bsdtar -s substitution when the regular expression matches a zero-length string, causing an infinite loop in applysubstitution...

CLSA-2026-1778887961 firewalld: Fix of CVE-2026-4948

CVE-2026-4948: use PKACTIONCONFIG for setZoneSettings2/setPolicySettings to require write authorization...

CLSA-2026-1778751841 php: Fix of CVE-2026-6735

CVE-2026-6735: HTML-encode proc.requesturi and tighten querystring entity flags in sapi/fpm/fpm/fpmstatus.c to fix XSS in PHP-FPM status endpoint...

CLSA-2026-1777365744 libarchive: Fix of CVE-2026-5121

Fix CVE-2026-5121: heap buffer overflow in ISO9660 reader via invalid pzlog2bs value in Rock Ridge ZF extension...

CLSA-2026-1778670864 php: Fix of CVE-2026-6735

CVE-2026-6735: HTML-encode proc.requesturi and tighten querystring entity flags in sapi/fpm/fpm/fpmstatus.c to fix XSS in PHP-FPM status endpoint...

CLSA-2026-1778662869 libsoup: Fix of CVE-2026-2369

CVE-2026-2369: fix integer underflow in sniffunknown on zero-length buffer that caused an out-of-bounds read in the content sniffer...

CLSA-2026-1778489013 spice: Fix of CVE-2021-20201

CVE-2021-20201: fix DoS via uncontrolled TLS renegotiation by disabling client-initiated renegotiation...

CLSA-2026-1778661102 ruby: Fix of CVE-2023-28756

CVE-2023-28756: fix ReDoS in Time.rfc2822 by linearizing the RFC2822 parser regex in lib/time.rb to prevent quadratic backtracking on crafted invalid input...

CLSA-2026-1778617167 freeipmi: Fix of CVE-2026-33554

CVE-2026-33554: fix buffer overflows in ipmi-oem response handling for dell get-last-post-code, supermicro extra-firmware-info, and wistron read-proprietary-string subcommands...