16939 matches found
CLSA-2025-1758635329 Fix CVE(s): CVE-2025-57807
SECURITY UPDATE: heap out-of-bounds write in BlobStream WriteBlob - debian/patches/CVE-2025-57807.patch: enforce extent ≥ offset + length when forward-seeking before writes in MagickCore/blob.c - CVE-2025-57807...
CLSA-2025-1758295568 Update of kernel
Rebased FIPS patches to 5.14.0-570.44.1...
CLSA-2025-1758293394 postgresql: Fix of 2 CVEs
CVE-2025-8714: prevent execution of unsafe meta-commands in plain-text dumps pgdump/pgrestore/pgdumpall, psql restricted mode - CVE-2025-8715: sanitize newlines in object names to avoid unsafe SQL comments in dumps...
CLSA-2025-1758228293 Fix CVE(s): CVE-2025-7425
SECURITY UPDATE: memory corruption vulnerability in attribute type flags - debian/patches/CVE-2025-7425.patch: fix heap-use-after-free in xmlFreeID caused by atype corruption - CVE-2025-7425...
CLSA-2025-1758101854 Fix CVE(s): CVE-2025-8194
SECURITY UPDATE: defect in TarFile module leading to infinite loop and deadlock - debian/patches/CVE-2025-8194.patch: Validate archives to ensure member offsets are non-negative - CVE-2025-8194...
CLSA-2025-1758023679 ruby: Fix of CVE-2016-2339
CVE-2016-2339: fix heap overflow vulnerability in Fiddle::Function.new 'initialize' function...
CLSA-2025-1758022908 ruby: Fix of 2 CVEs
CVE-2024-39908: fix performance issue caused by using repeated characters to avoid DoS vulnerabilities when it parses an XML - CVE-2024-43398: improve namespace conflicted attribute check to avoid DoS vulnerability when it parses an XML...
CLSA-2025-1757947030 nettle: Fix of CVE-2018-16869
Port side-channel silent functions from 3.4.1. Partially fix for CVE-2018-16869 - CVE-2018-16869: Add side-channel silent memory, math, PKCS1, RSA functions - Added tests for side-channel silent implementations...
CLSA-2025-1757700075 glibc: Fix of CVE-2019-9169
CVE-2019-9169: fix heap-based buffer over-read in proceednextnode in posix/regexec.c...
CLSA-2025-1757015069 Fix CVE(s): CVE-2025-6021
SECURITY UPDATE: stack-based buffer overflow via integer overflows in buffer size calculations in xmlBuildQName function - debian/patches/CVE-2025-6021.patch: Fix integer overflow in xmlBuildQName that affects memory safety - CVE-2025-6021...
CLSA-2025-1756751597 squid: Fix of CVE-2023-46846
CVE-2023-46846: fix Request/Response chunk smuggling in HTTP/1.1 and ICAP...
CLSA-2025-1756409018 subversion: Fix of CVE-2024-46901
CVE-2024-46901: fix moddavsvn denial-of-service via control characters in paths...
CLSA-2025-1755271152 dmidecode: Fix of CVE-2023-30630
CVE-2023-30630: prevent --dump-bin from overwriting local files to address privilege escalation vulnerability...
CLSA-2025-1755003990 libvpx: Fix of CVE-2024-5197
CVE-2024-5197: fix integer overflows in image allocation and wrapping logic, validate dimensions and alignment to prevent invalid buffer calculations...
CLSA-2025-1754940060 Fix CVE(s): CVE-2025-27613, CVE-2025-27614, CVE-2025-46835
SECURITY UPDATE: multiple vulnerabilities in Gitk and Git GUI - debian/patches/CVE-2025-27614CVE-2025-27613CVE-2025-46835.patch: Prevent script execution via specially crafted filenames in Gitk. Sanitize filename handling to avoid unintended file creation/truncation. Validate directory names in G...
CLSA-2025-1754412669 gstreamer1-plugins-bad-free: Fix of CVE-2023-44446
CVE-2023-44446: fix use-after-free in MXF demuxer by storing essence tracks in fixed allocations...
CLSA-2025-1754382809 Update of nss
update to CKBI 2.78 from NSS 3.113 - updated certificates: - Certificate "Entrust.net Premium 2048 Secure Server CA" - Certificate "Entrust Root Certification Authority" - Certificate "AffirmTrust Commercial" - Certificate "AffirmTrust Networking" - Certificate "AffirmTrust Premium" - Certificate...
CLSA-2025-1754382436 Update of alt-php
Update ca-certificates database to 20250418: - mozilla\certdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.74. - The following certificates were updated: Certificate "Entrust Root Certification Authority - G4" Certificate "Security Communication ECC RootCA1"...
CLSA-2025-1754381424 microcode_ctl: Fix of 8 CVEs
Update Intel CPU microcode to 20250512 release, addresses CVE-2025-20012, CVE-2025-24495, CVE-2024-43420, CVE-2025-20623, CVE-2024-45332, CVE-2024-28956, CVE-2025-20103, CVE-2025-20054: - Addition of cpuid:806F8/0x10 SPR-HBM B3 microcode in microcode.dat at revision 0x2c0003f7; - Addition of...
CLSA-2025-1754043770 java-17-openjdk: Fix of 4 CVEs
Update to jdk-17.0.16+8 - CVE-2025-50106: fix 2D component vulnerability in Java SE allowing remote attackers to compromise the Java runtime via crafted input - CVE-2025-30749: fix 2D rendering vulnerability in Java SE that could lead to application crash or remote code execution -...
CLSA-2025-1753981912 php: Fix of CVE-2025-1736
CVE-2025-1736: validate end-of-line characters in user-supplied headers to prevent headers from being misinterpreted...
CLSA-2025-1753799801 Fix CVE(s): CVE-2025-32462
SECURITY UPDATE: unauthorized command execution on remote hosts - debian/patches/CVE-2025-32462.patch: restrict user from setting remote host for command unless listing privileges - CVE-2025-32462...
CLSA-2025-1753780501 php: Fix of CVE-2025-1220
CVE-2025-1220: fix null byte termination in hostnames...
CLSA-2025-1753465703 php: Fix of 3 CVEs
CVE-2025-1220: error if host contains null bytes in the middle of the string - CVE-2025-6491: fix NULL pointer dereference vulnerability in soap - CVE-2025-1735: add error error checks for escape function is pgsql and pdopgsql extensions...
CLSA-2025-1753374348 java-1.8.0-openjdk: Fix of 4 CVEs
Upgrade to shenandoah-jdk8u462-b08 GA fixing the following CVEs: - CVE-2025-30749: better Glyph drawing - CVE-2025-30754: enhance TLS protocol support - CVE-2025-30761: improve scripting supports - CVE-2025-50106: glyph out-of-memory access and crash...
CLSA-2025-1753298604 Fix CVE(s): CVE-2025-49794, CVE-2025-49796
SECURITY UPDATE: memory vulnerabilities in schematron - debian/patches/CVE-2025-49794CVE-2025-49796.patch: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements and memory corruption issue triggered by processing sch:name elements in input XML file - CVE-2025-49794 -...
CLSA-2025-1753120992 libsoup: Fix of 7 CVEs
CVE-2025-32050: fix overflow in appendparamquoted - CVE-2025-32052: fix heap buffer overflow in soupcontentsniffersniff - CVE-2025-32053: fix heap buffer overflow in snifffeedorhtml - CVE-2025-32907: soup-message-headers: correct merge of ranges - CVE-2025-46420: fix leak in...
CLSA-2025-1752088235 emacs: Fix of CVE-2024-39331
CVE-2024-39331: fix org-link-expand-abbrev to not expand unsafe link abbreviations...
CLSA-2025-1752082142 Update of alt-php
Update ca-certificates database to 20250416: - mozilla\certdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.74. - The following certificates were updated: Certificate "certSIGN ROOT CA" Certificate "ACCVRAIZ1" Certificate "Entrust Root Certification Authority - G4"...
CLSA-2025-1751892444 krb5: Fix of CVE-2025-3576
CVE-2025-3576: possible spoofing of GSSAPI-protected messages using RC4-HMAC-MD5...
CLSA-2025-1751144978 openssh: Fix of CVE-2025-32728
CVE-2025-32728: fix logic error in DisableForwarding option...
CLSA-2025-1751141865 gstreamer1-plugins-base: Fix of CVE-2023-37328
CVE-2023-37328: fix subrip tag parsing to prevent out-of-bounds access in gstsubparse...
CLSA-2025-1750879249 Update of tzdata
Upgrade to tzdata-2025b - New zone for Aysén Region in Chile which moves from -04/-03 to -03. - Paraguay adopted permanent -03 starting spring 2024. - Improve pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Improve historical data for Mexico, Mongolia, and Portugal. - System V...
CLSA-2025-1750784361 java-1.8.0-openjdk: Fix of 2 CVEs
Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u452-b09. That fixes following CVE: CVE-2025-21587, CVE-2025-30698...
CLSA-2025-1750782430 yelp: Fix of CVE-2025-3155
CVE-2025-3155: fix execution of arbitrary scripts in help documents, preventing malicious file exfiltration...
CLSA-2025-1750781004 rsync: Fix of CVE-2024-12088
CVE-2024-12088: fix improper verification of symbolic link destinations to prevent path traversal vulnerability...
CLSA-2025-1750780979 freetype: Fix of CVE-2025-27363
CVE-2025-27363: fix OOB write when parsing font subglyph structures...
CLSA-2025-1750780819 Fix CVE(s): CVE-2025-31651
SECURITY UPDATE: Improper Neutralization of Escape, Meta, or Control Sequences vulnerability - debian/patches/CVE-2025-31651.patch: Enforces rewrite rules to preventing bypass of security constraints in specific configurations - CVE-2025-31651...
CLSA-2025-1749481598 mysql: Fix of 20 CVEs
Update to MySQL 8.0.42 - CVEs fixed: CVE-2025-21574 CVE-2025-21577 CVE-2025-21579 CVE-2025-21581 CVE-2025-21584 CVE-2025-21585 CVE-2025-30681 CVE-2025-30682 CVE-2025-30683 CVE-2025-30684 CVE-2025-30688 CVE-2025-30689 CVE-2025-30695 CVE-2025-30696 CVE-2025-30699 CVE-2025-30703 CVE-2025-30705...
CLSA-2025-1748945064 Fix CVE(s): CVE-2019-10206, CVE-2019-14856
SECURITY UPDATE: password prompt vulnerability from template expansion - debian/patches/CVE-2019-10206.patch: prevent templating of passwords from prompt to avoid special characters triggering it incorrectly - CVE-2019-10206 - debian/patches/CVE-2019-14856.patch: fix incomplete CVE-2019-10206 pat...
CLSA-2025-1748639500 php: Fix of 3 CVEs
CVE-2025-1217: fix handling of folded headers by the http stream parser - CVE-2025-1734: fix validation of http headers with missing colon - CVE-2025-1861: fix incorrect http redirect location truncation...
CLSA-2025-1746654810 php: Fix of CVE-2025-1736
CVE-2025-1736: add checking of http user header crlf...
CLSA-2025-1746653948 Fix CVE(s): CVE-2025-32414, CVE-2025-32415
SECURITY UPDATE: OOB access in python API - debian/patches/CVE-2025-32414-pre1.patch: fix SAX driver with character streams in python/drvlibxml2.py. - debian/patches/CVE-2025-32414-1.patch: read at most len/4 characters in python/libxml.c. - debian/patches/CVE-2025-32414-2.patch: add a test in...
CLSA-2025-1746188134 buildah: Fix of CVE-2024-9341
CVE-2024-9341: fix insecure handling of file paths inside vendored c/common...
CLSA-2025-1745945560 harfbuzz: Fix of CVE-2023-25193
CVE-2023-25193: fix On^2 growth triggered by consecutive marks during mark attachment...
CLSA-2025-1745588411 libX11: Fix of CVE-2023-43785
CVE-2023-43785: fix out-of-bounds memory access in XkbReadKeySyms...
CLSA-2025-1745426658 buildah: Fix of CVE-2024-9675
CVE-2024-9675: fix incorrect handling of paths in cache mounts that allows mounting of arbitrary directories in a container...
CLSA-2025-1744716861 cups-filters: Fix of CVE-2024-47176
CVE-2024-47176: fix remote code execution vulnerability...