17537 matches found
CLSA-2025-1761744879 Fix CVE(s): CVE-2019-9923
SECURITY UPDATE: NULL pointer dereference - debian/patches/CVE-2019-9923.patch: fix a NULL pointer dereference when parsing certain archives that have malformed extended headers in paxdecodeheader in sparse.c - CVE-2019-9923...
CLSA-2025-1761673667 Fix CVE(s): CVE-2019-20044
SECURITY UPDATE: insecure privilege dropping vulnerability - debian/patches/CVE-2019-20044-.patch: improve error handling in setopt command, add OpenSSH-based setresuid/setresgid wrappers, simplify and secure privilege dropping logic, add comprehensive tests for PRIVILEGED option - CVE-2019-20044...
CLSA-2025-1761140674 Update of alt-php
Bump ABI 4.4.0-279...
CLSA-2025-1760648945 Update of alt-php
Bump ABI 5.4.0-222...
CLSA-2025-1760459898 Update of libndp
bump version to 1.2-10.0.1...
CLSA-2025-1760112150 nss: Fix of CVE-2020-25648
CVE-2020-25648: fix DoS in case of receiving multiple CCS messages - extended tests...
CLSA-2025-1760021660 qemu-kvm: Fix of 3 CVEs
CVE-2021-3750: fix for DMA reentrancy use-after-free - CVE-2023-2680: final fix for CVE-2021-3750 - CVE-2023-0330: fix reentrancy in LSI53c895a SCSI controller...
CLSA-2025-1760020311 Fix CVE(s): CVE-2025-9714
SECURITY UPDATE: uncontrolled recursion leading to stack overflow via crafted XPath expressions - debian/patches/CVE-2025-9714.patch: Make XPath depth check work with recursive invocations to prevent stack overflows - CVE-2025-9714...
CLSA-2025-1760019285 Fix CVE(s): CVE-2025-55212
SECURITY UPDATE: crash triggered by passing a colon to montage -geometry - debian/patches/CVE-2025-55212.patch: Fix invalid height and width checks in ThumbnailImage using MagickSafeReciprocal - CVE-2025-55212...
CLSA-2025-1759413150 openexr: Fix of CVE-2024-31047
CVE-2024-31047: fix denial of service issue in convert function of exrmultipart.cpp...
CLSA-2025-1759336419 libxml2: Fix of CVE-2025-7425
Fix typo in CVE-2025-7425 fix...
CLSA-2025-1759246699 python3: Fix of CVE-2025-8194
CVE-2025-8194: tarfile: validate archives to ensure non-negative member offsets...
CLSA-2025-1759223618 Update of kernel
Rebased FIPS patches to 5.14.0-570.46.1...
CLSA-2025-1758892982 php: Fix of CVE-2017-9228
CVE-2017-9228: fix heap out-of-bounds write in bitsetsetrange and parsecharclass functions...
CLSA-2025-1758705954 Fix CVE(s): CVE-2025-57807
SECURITY UPDATE: heap out-of-bounds write in BlobStream WriteBlob - debian/patches/CVE-2025-57807.patch: enforce extent ≥ offset + length when forward-seeking before writes in MagickCore/blob.c - CVE-2025-57807...
CLSA-2025-1758639838 Update of microcode_ctl
Update Intel CPU microcode to 20250812: - Addition of cpuid:806F8/0x10 SPR-HBM B3 microcode in microcode.dat at revision 0x2c000401; - Addition of cpuid:806F8/0x87 SPR-SP E5/S3 microcode in microcode.dat at revision 0x2b000643; - Addition of cpuid:90672/0x07 ADL-HX/S 8+8 C0 microcode in...
CLSA-2025-1758292868 Fix CVE(s): CVE-2025-7425
SECURITY UPDATE: memory corruption vulnerability in attribute type flags - debian/patches/CVE-2025-7425.patch: Fix heap-use-after-free caused by atype corruption - CVE-2025-7425...
CLSA-2025-1758228073 Fix CVE(s): CVE-2023-30630
SECURITY UPDATE: Overwrite a local file - debian/patches/CVE-2023-30630.patch: Prevent --dump-bin from overwriting local files to address privilege escalation vulnerability - CVE-2023-30630...
CLSA-2025-1758031287 httpd: Fix of 2 CVEs
CVE-2024-47252: escape user-supplied data in modssl to prevent untrusted SSL/TLS clients from inserting escape characters into log files - CVE-2025-49812: remove support for TLS upgrade to prevent HTTP desynchronisation attack...
CLSA-2025-1758031199 httpd: Fix of 2 CVEs
CVE-2024-47252: escape user-supplied data in modssl to prevent untrusted SSL/TLS clients from inserting escape characters into log files - CVE-2025-49812: remove support for TLS upgrade to prevent HTTP desynchronisation attack...
CLSA-2025-1758010124 Update of alt-php
Bump ABI 4.4.0-278...
CLSA-2025-1757947715 php: Fix of 3 CVEs
CVE-2017-9224: fix out-of-bounds read of a stack in matchat function - CVE-2017-9226: fix out-of-bounds write or read of a heap in nextstateval function - CVE-2017-9227: fix out-of-bounds read of a stack in mbcenclen function...
CLSA-2025-1756751564 webkit2gtk3: Fix of 18 CVEs
Update to 2.48.5. The following CVEs were fixed: - CVE-2025-6558: fix processing maliciously crafted web content which may lead to an unexpected Safari crash - CVE-2025-31273: fix processing maliciously crafted web content which may lead to memory corruption - CVE-2025-31278: fix processing...
CLSA-2025-1757662405 xorg-x11-server: Fix of CVE-2025-49178
CVE-2025-49178: fix request handling flaw causing potential denial of service...
CLSA-2025-1757531273 pam: Fix of CVE-2025-6020
CVE-2025-6020: fix potential privilege escalation in pamnamspace...
CLSA-2025-1757148562 Update of kernel
Rebased FIPS patches to 5.14.0-570.39.1...
CLSA-2025-1757017511 protobuf: Fix of CVE-2024-7254
CVE-2024-7254: prevent stack overflow by limiting recursion depth when parsing nested Protocol Buffers data...
CLSA-2025-1757016520 squid34: Fix of CVE-2025-54574
CVE-2025-54574: fix buffer overflow in URN handling...
CLSA-2025-1756760036 gnutls: Fix of CVE-2025-32988
CVE-2025-32988: fix double-free vulnerability when exporting othernames in SAN...
CLSA-2025-1756409662 xorg-x11-server: Fix of 8 CVEs
CVE-2025-26594: refuse to free the root cursor and keep its ref - CVE-2025-26595: fix buffer overflow in XkbVModMaskText - CVE-2025-26596: xkb: fix computation of XkbSizeKeySyms - CVE-2025-26597: xkb: fix buffer overflow in XkbChangeTypesOfKey - CVE-2025-26598: Xi: Fix barrier device search -...
CLSA-2025-1755270846 ncurses: Fix of CVE-2022-29458
CVE-2022-29458: fix out-of-bounds read and segmentation violation...
CLSA-2025-1755113592 Fix CVE(s): CVE-2025-3576
SECURITY UPDATE: prevent spoofing vulnerability in GSSAPI-protected messages using RC4-HMAC-MD5 due to weaknesses in MD5 checksum design - debian/patches/CVE-2025-3576: don't issue session keys with deprecated enctypes. Updates tests. - CVE-2025-3576...
CLSA-2025-1755113204 Fix CVE(s): CVE-2025-29088
SECURITY UPDATE: denial of service issue due to incorrect memory allocations - debian/patches/CVE-2025-29088.patch: harden the SQLITEDBCONFIGLOOKASIDE interface against misuse, such as described in forum post 48f365daec Enhancements to the SQLITEDBCONFIGLOOKASIDE documentation - CVE-2025-29088...
CLSA-2025-1755008582 dmidecode: Fix of CVE-2023-30630
CVE-2023-30630: do not let --dump-bin overwrite an existing file...
CLSA-2025-1754941200 openssh: Fix of 3 CVEs
CVE-2018-20685: fix a vulnerability scp client where a malicious server could bypass intended access restrictions and modify target directory permissions via crafted filenames - CVE-2019-6109: fix scp client where a malicious server could manipulate the client's progress display output due to...
CLSA-2025-1754939966 Fix CVE(s): CVE-2025-48386
SECURITY UPDATE: security vulnerability in package - debian/patches/CVE-2025-48386.patch: fix buffer overflow in wcsncat caused by off-by-one error and length not accounted for in wcsncat calls - CVE-2025-48386...
CLSA-2025-1754552473 libxml2: Fix of CVE-2025-7425
CVE-2025-7425: fix heap-use-after-free in xmlFreeID caused by atype corruption...
CLSA-2025-1754413251 git: Fix of 2 CVEs
CVE-2025-27614: fix a vulnerability in Gitk that allowed arbitrary script execution via specially crafted filenames in a repository - CVE-2025-27614: fix a vulnerability in Gitk that allowed arbitrary file creation/truncation - CVE-2025-46835: fix a vulnerability in Git GUI where editing files in...
CLSA-2025-1754413156 git: Fix of 2 CVEs
CVE-2025-27614: fix a vulnerability in Gitk that allowed arbitrary script execution via specially crafted filenames in a repository - CVE-2025-27614: fix a vulnerability in Gitk that allowed arbitrary file creation/truncation - CVE-2025-46835: fix a vulnerability in Git GUI where editing files in...
CLSA-2025-1754411369 sqlite: Fix of CVE-2025-6965
CVE-2025-6965: reject queries with aggregate terms exceeding column limit to prevent memory corruption...
CLSA-2025-1754381806 Fix of 8 CVEs
New microcode update packages from upstream up to 2025-05-12: - New microcodes: sig 0x000a06d1, pfmask 0x20, 2025-02-07, rev 0xa0000d1, size 1635328 sig 0x000a06d1, pfmask 0x95, 2025-02-07, rev 0x10003a2, size 1664000 sig 0x000b0650, pfmask 0x80, 2025-03-18, rev 0x000a, size 136192 sig 0x000b06d1...
CLSA-2025-1754342893 git: Fix of 2 CVEs
CVE-2025-27614: fix a vulnerability in Gitk that allowed arbitrary script execution via specially crafted filenames in a repository - CVE-2025-27614: fix a vulnerability in Gitk that allowed arbitrary file creation/truncation - CVE-2025-46835: fix a vulnerability in Git GUI where editing files in...
CLSA-2025-1753988282 avahi: Fix of CVE-2024-52616
CVE-2024-52616: initialize DNS transaction IDs randomly at each startup to prevent predictability and mitigate DNS spoofing attacks...
CLSA-2025-1753298759 kernel: Fix of 18 CVEs
udf: Fix a slab-out-of-bounds write bug in udffindentry CVE-2022-49846 - Bluetooth: hcisync: Fix queuing commands when HCIUNREGISTER is set CVE-2022-49136 - Bluetooth: Fix use after free in hcisendacl CVE-2022-49111 - NFSv4/pnfs: Fix a use-after-free bug in open CVE-2022-50072 - NFSv4: Don't hold...
CLSA-2025-1753207140 Fix CVE(s): CVE-2025-48384
SECURITY UPDATE: security vulnerability discovered - debian/patches/CVE-2025-48384.patch: quote values containing CR character in config to prevent unintentional stripping when reading - CVE-2025-48384...
CLSA-2025-1752090268 Update of tzdata
Fix incorrect tzdb.dat by harding links...
CLSA-2025-1752089153 redis: Fix of CVE-2024-31449
CVE-2024-31449: fix stack buffer overflow in bit library triggered by Lua script execution...
CLSA-2025-1752087052 Update of ca-certificates
update to CKBI 2.74 from NSS 3.110 - updated certificates: - Certificate "Entrust.net Premium 2048 Secure Server CA" - Certificate "Entrust Root Certification Authority" - Certificate "AffirmTrust Commercial" - Certificate "AffirmTrust Networking" - Certificate "AffirmTrust Premium" - Certificate...
CLSA-2025-1751913634 xdg-utils: Fix of 2 CVEs
xdg-email: disable special support for Thunderbird to address following vulnerabilities: - CVE-2020-27748: local file inclusion vulnerability - CVE-2022-4055: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments...