17524 matches found
CLSA-2026-1776791358 libexif: Fix of 3 CVEs
CVE-2026-32775: fix buffer overwrite via integer underflow in MakerNote entry value handling - CVE-2026-40385: fix unsigned 32-bit integer overflow in Nikon MakerNote handling - CVE-2026-40386: fix integer underflow in Fuji/Olympus MakerNote size checks...
CLSA-2026-1776763910 libsoup: Fix of 2 CVEs
CVE-2026-1467: validate URI host characters when checking if a URI is valid - CVE-2026-1539: fix proxy credentials leak on cross-origin HTTP redirect...
CLSA-2026-1776701249 libssh: Fix of CVE-2026-0968
CVE-2026-0968: sanitize input handling in sftpparselongname to prevent OOB read when processing malformed SFTP longname fields, add unit tests...
CLSA-2026-1776430169 libarchive: Fix of CVE-2026-5745
CVE-2026-5745: fix NULL pointer dereference in ACL parsing in archiveaclfromtextw...
CLSA-2026-1776243051 expat: Fix of 2 CVEs
CVE-2022-25313: prevent stack exhaustion in buildmodel - CVE-2024-50602: make XMLStopParser refuse to stop/suspend an unstarted parser...
CLSA-2026-1776170814 ImageMagick: Fix of CVE-2025-57803
CVE-2025-57803: fix integer overflow in BMP reader stride computation...
CLSA-2026-1776169648 python3.9: Fix of CVE-2026-4519
CVE-2026-4519: reject leading dashes in webbrowser URLs - Update pubkeys.txt with refreshed Łukasz Langa GPG key expired 2025-05-12...
CLSA-2026-1775748729 ImageMagick: Fix of 4 CVEs
CVE-2026-25968: stack buffer overflow in MSL image-processing language via WriteMSLImage recursion - CVE-2026-25897: out-of-bounds heap write in SUN decoder on 32-bit systems via integer overflow in pixel buffer allocation - CVE-2025-53014: out-of-bounds read in InterpretImageFilename when...
CLSA-2026-1775654402 python3.9: Fix of CVE-2026-4519
CVE-2026-4519: fix webbrowser.open leading dash injection...
CLSA-2026-1775652408 Fix CVE(s): CVE-2026-24484
SECURITY UPDATE: denial of service from multi-layer nested MVG to SVG conversion - debian/patches/CVE-2026-24484.patch: Add recursion-depth check for graphic-context and prevent excessive nested vector graphics that cause crashes or resource exhaustion due to unbounded recursion. -...
CLSA-2026-1775224602 gnutls: Fix of CVE-2025-9820
CVE-2025-9820: fix stack-based buffer overflow in gnutlspkcs11tokeninit when processing overly long PKCS11 token labels...
CLSA-2026-1775211239 openexr: Fix of 4 CVEs
CVE-2025-12495 CVE-2025-12839 CVE-2025-12840: fix heap buffer overflows in the C core decoding pipeline missing nread validation in exrreadchunk, missing packed/unpacked size check for uncompressed tiles, missing storagemode guard in chunk offset computation - CVE-2025-64181: fix use of...
CLSA-2026-1775210556 ghostscript: Fix of 4 CVEs
CVE-2025-27830: fix potential buffer overflow with DollarBlend in font serialization - CVE-2025-27831: prevent Unicode decoding overrun in txtwrite/docxwrite devices - CVE-2025-27835: fix confusion between bytes and shorts in glyph to Unicode conversion - CVE-2025-27836: fix potential print...
CLSA-2026-1775059689 python: Fix of CVE-2025-15367
CVE-2025-15367: reject control characters in POP3 commands to prevent command injection via newlines...
CLSA-2026-1775033286 Fix CVE(s): CVE-2026-21925, CVE-2026-21932, CVE-2026-21933, CVE-2026-21945
OpenJDK 11.0.30 release, build 7. - CVE-2026-21925: Improve JMX connections - CVE-2026-21932: Enhance handling of URIs AWT/JavaFX - CVE-2026-21933: Improve HttpServer request handling - CVE-2026-21945: Enhance certificate checking - Release notes:...
CLSA-2026-1774859936 tomcat: Fix of CVE-2026-24733
CVE-2026-24733: limit HTTP/0.9 requests to GET method only...
CLSA-2026-1774431305 python-pyasn1: Fix of CVE-2026-23490
CVE-2026-23490: fix DoS when malicious stream parsed...
CLSA-2026-1774460133 Fix CVE(s): CVE-2025-66614
SECURITY UPDATE: client certificate authentication bypass through mismatched SNI and HTTP Host header - debian/patches/CVE-2025-66614.patch: Add strictSNI connector attribute and implement SNI/protocol host name matching for NIO, NIO2, and APR connectors; prevent requests being served by mismatch...
CLSA-2026-1774375084 libarchive: Fix of CVE-2026-4111
CVE-2026-4111: Fix infinite loop in RAR5 decompression caused by blocklength exceeding half the window size, leading to CPU-consuming denial-of-service...
CLSA-2026-1774373706 Update of lkrg
Split RPM specs according to Fedora kmod packaging guidelines, one spec for kmod, one for userspace - Import modsign macros if requested by the module build - Make lkrg into a meta package which pulls lkrg-kmod and the systemd unit definition - Add lkrgtest module for testing and demonstrating...
CLSA-2026-1774347657 capstone: Fix of CVE-2025-68114
CVE-2025-68114: fix stack buffer underflow/overflow in SStreamconcat...
CLSA-2026-1774283473 Fix CVE(s): CVE-2026-25210
SECURITY UPDATE: Improve determination of buffer size bufSize in function doContent - debian/patches/CVE-2026-25210.patch: fix integer overflow in doContent tag buffer reallocation - CVE-2026-25210...
CLSA-2026-1773925534 expat: Fix of CVE-2026-25210
Fix CVE-2026-25210: integer overflow in doContent tag buffer reallocation...
CLSA-2026-1774266009 exiv2: Fix of 2 CVEs
CVE-2026-25884: fix out-of-bounds read in CRW image parser - CVE-2026-27596: fix integer underflow in preview component...
CLSA-2026-1774028594 Update of postgresql11
Initial backport of PostgreSQL 11.22 for RHEL 7 - Based on Fedora/RHEL 8 spec files for PostgreSQL 10 and 12 - Adapted for RHEL 7 compatibility: - Disabled ICU support by default not readily available on RHEL 7 - Disabled plpython3 by default may need SCL for Python 3 - Removed perl-generators...
CLSA-2026-1774002757 Fix CVE(s): CVE-2026-25898
SECURITY UPDATE: global buffer overflow read in UIL and XPM encoders. - debian/patches/CVE-2026-25898.patch: clamp negative pixel index values to zero in WriteUILImage, WritePICONImage, and WriteXPMImage before using them as array subscripts into the Cixel table. - CVE-2026-25898...
CLSA-2026-1773829377 libtiff: Fix of CVE-2025-61145
CVE-2025-61145: fix double-free and memory leak in tiffcrop, avoid dangling pointer in loadImage by clearing readptr after free...
CLSA-2026-1773225871 Fix CVE(s): CVE-2026-25796, CVE-2026-25798, CVE-2026-25799, CVE-2026-26066
SECURITY UPDATE: division-by-zero during image loading resulting in reliable denial-of-service - debian/patches/CVE-2026-25799.patch: Fix sampling-factor validation by replacing && with || so invalid horizontal or vertical factors trigger an error; cause: incorrect boolean expression required bot...
CLSA-2026-1773137055 avahi: Fix of CVE-2026-24401
CVE-2026-24401: fix uncontrolled recursion in lookuphandlecname caused by recursive CNAMEs...
CLSA-2026-1773056241 kernel: Fix of 21 CVEs
i40e: fix IRQ freeing in i40evsirequestirqmsix error path CVE-2025-39911 - media: rc: fix races with imondisconnect CVE-2025-39993 - VMCI: fix race between vmcihostsetupnotify and vmcictxunsetnotify CVE-2025-38102 - partitions: mac: fix handling of bogus partition table CVE-2025-21772 - tracing:...
CLSA-2026-1773047152 kernel: Fix of 21 CVEs
i40e: fix IRQ freeing in i40evsirequestirqmsix error path CVE-2025-39911 - media: rc: fix races with imondisconnect CVE-2025-39993 - VMCI: fix race between vmcihostsetupnotify and vmcictxunsetnotify CVE-2025-38102 - partitions: mac: fix handling of bogus partition table CVE-2025-21772 - tracing:...
CLSA-2026-1772812991 skopeo: Fix of 3 CVEs
rebuild with newer golang version 1.22.9-1.el92.tuxcare.els6 to fix the following CVEs - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages...
CLSA-2026-1772452097 ImageMagick: Fix of 9 CVEs
CVE-2026-25798: fix NULL pointer dereference in ClonePixelCacheRepository - CVE-2026-24481: fix heap information disclosure in PSD handler - CVE-2026-25799: fix division-by-zero in YUV sampling factor validation - CVE-2026-26284: fix out-of-bounds read in PCD Huffman decoder - CVE-2026-25897: fix...
CLSA-2026-1772192033 python2: Fix of 2 CVEs
CVE-2026-1299: raise exceptions for malformed input to prevent processing invalid or dangerous headers - CVE-2024-6923: encode newlines in headers and verify headers are sound...
CLSA-2026-1771926895 python: Fix of 2 CVEs
CVE-2018-1060: fix catastrophic backtracking in APOP method, prevent denial of service, add input validation and enforce backtracking limits - CVE-2018-1061: fix catastrophic backtracking in the difflib.ISLINEJUNK method...
CLSA-2026-1771497630 ImageMagick: Fix of CVE-2025-68618
CVE-2025-68618: added recursion depth check in MSL and SVG coders - Check that image exists before we destroy it...
CLSA-2026-1771415778 Update of linux-firmware
Addition AMD CPU microcode for processor family 0x1a: cpuid:0x00B00F21ver:0x0B002161, cpuid:0x00B00F81ver:0x0B008121, cpuid:0x00B10F10ver:0x0B101058, cpuid:0x00B20F40ver:0x0B204037, cpuid:0x00B40F40ver:0x0B404035, cpuid:0x00B40F41ver:0x0B404108, cpuid:0x00B60F00ver:0x0B600037,...
CLSA-2026-1771412648 Update of alt-php
Update ca-certificates database to 20260210: - mozilla\certdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.82. - The following certificates were updated: Certificate "ePKI Root Certification Authority" - The following certificates were added: Certificate "TrustAsia...
CLSA-2026-1771412328 glib2: Fix of CVE-2025-14087
CVE-2025-14087: fix integer overflow when parsing bytestrings...
CLSA-2026-1771010890 freerdp: Fix of 5 CVEs
CVE-2026-22859: fix out-of-bounds access due to missing interface index validation in urbdrc channel - CVE-2026-23732: fix out-of-bounds read due to missing input length check in glyph conversion - CVE-2026-23883: fix integer overflow in cursor pixel allocation and surface-to-surface rectangle...
CLSA-2026-1770820922 openssl: Fix of CVE-2025-69421
CVE-2025-69421: fix NULL dereference in PKCS12itemdecryptd2iex...
CLSA-2026-1771004705 Fix CVE(s): CVE-2025-68168, CVE-2025-69204
SECURITY UPDATE: stack overflow via deeply nested MSL/SVG elements - debian/patches/CVE-2025-68168.patch: add recursion depth checking in MSLStartElement and SVGStartElement to prevent stack exhaustion - CVE-2025-68168 SECURITY UPDATE: integer overflow in SVG PathPrimitive processing -...
CLSA-2026-1771002358 libpng: Fix of CVE-2026-22801
CVE-2026-22801: fix heap buffer over-read in pngimagewrite...
CLSA-2026-1770909956 Fix CVE(s): CVE-2026-23876
SECURITY UPDATE: out of bounds write vulnerability in XBM decoder - debian/patches/CVE-2026-23876.patch: add overflow checks to prevent out of bounds write in coders/xbm.c - CVE-2026-23876...
CLSA-2026-1770734875 expat: Fix of CVE-2026-24515
CVE-2026-24515: Fix a null pointer dereference in the XML parser caused by the failure to copy user data for unknown encoding handlers...
CLSA-2026-1770394049 expat: Fix of CVE-2026-24515
CVE-2026-24515: fix NULL pointer dereference in XMLExternalEntityParserCreate...
CLSA-2026-1770025166 glib2: Fix of CVE-2025-13601
CVE-2025-13601: fix incorrect buffer size calculation in gescapeuristring - add fuzz tests for gfilenameto,fromuri...
CLSA-2026-1769701814 gimp: Fix of 2 CVEs
CVE-2025-14425: fix JP2 image loader buffer overflow by validating pixel buffer size calculation to prevent potential remote code execution - CVE-2025-14422: fix parsing of PNM files to prevent integer overflow leading to remote code execution...