17537 matches found
CLSA-2022-1656962023 Fixed CVE-2016-10009 in openssh-5.3p1
CVE-2016-10009: add whitelist of paths which may ssh-agent load from in order to prevent execution of arbitrary local pkcs11...
CLSA-2022-1655819051 Fixed CVE-2022-22576 in curl
CVE-2022-22576: check additional SASL parameters for connection reuse...
CLSA-2022-1654717100 Fix CVE(s): CVE-2022-1664
SECURITY UPDATE: Directory traversal issue in dpkg-source - scripts/Dpkg/Source/Archive.pm: Prevent directory traversal for in-place extracts. - CVE-2022-1664...
CLSA-2022-1651685129 Fix CVE(s): CVE-2019-18276
SECURITY UPDATE: privilege gain via setuid - debian/patches/CVE-2019-18276.patch: replace the use of setuid and setgid when possible with setresuid and setresgid, respectively. - CVE-2019-18276...
CLSA-2022-1649170601 Fix CVE(s): CVE-2022-0547
SECURITY UPDATE: authentication bypass via multiple deferred authentication plug-ins - debian/patches/CVE-2022-0547.patch: disallow multiple deferred authentication plug-ins in doc/openvpn.8, src/openvpn/plugin.c. - CVE-2022-0547...
CLSA-2022-1648067906 Fix of CVE: CVE-2020-25717
CVE-2020-25717: Fix username map script regression rhbz2046174 - Fix possible segfault while joining a domain rhbz2046160...
CLSA-2022-1647958678 Fixed CVE-2021-3737 in python
CVE-2021-3737: Fix HTTP client infinite line reading DoS after receiving a '100 Continue' HTTP response...
CLSA-2022-1646666491 Fix of CVE: CVE-2021-3445
CVE-2021-3445: fix signature verification bypass leading to code execution RhBug:1932079...
CLSA-2022-1646071990 Fix of CVE: CVE-2021-3667, CVE-2021-3631
CVE-2021-3631: security: fix SELinux label generation logic - CVE-2021-3667: storagedriver: Unlock object on ACL fail in storagePoolLookupByTargetPath...
CLSA-2022-1646061301 Fix of CVE: CVE-2022-24407
CVE-2022-24407: Fix failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands rhbz2055846...
CLSA-2022-1645701000 Fix of CVE: CVE-2021-21703
CVE-2021-21703: fix oob R/W in root process leading to privelege escalation...
CLSA-2022-1643918500 Fix of CVE: CVE-2022-23305
CVE-2022-23305: disable JDBCAppender by default. Add optional parameter for enabling it...
CLSA-2021-1640271821 Fix CVE(s): CVE-2020-28024, CVE-2020-28025, CVE-2020-28026, CVE-2020-28020, CVE-2020-28021, CVE-2020-28022, CVE-2020-28011, CVE-2020-28013, CVE-2020-28012, CVE-2020-28015, CVE-2020-28007, CVE-2020-28017, CVE-2021-27216, CVE-2020-28008, CVE-2020-28009, CVE-2020-28014
SECURITY UPDATE: Multiple security issues - debian/patches/CVE-2020-28007.patch - debian/patches/CVE-2020-28008.patch - debian/patches/CVE-2020-28009.patch - debian/patches/CVE-2020-28011.patch - debian/patches/CVE-2020-28012.patch - debian/patches/CVE-2020-28013.patch -...
CLSA-2021-1640002354 Fix of CVE: CVE-2021-43527
CVE-2021-43527: Fix memory corruption in decodeECorDsaSignature with DSA signatures and RSA-PSS - Update to CKBI 2.50 from NSS 3.67 - Removing: - Certificate "Verisign Class 3 Public Primary Certification Authority - G3" - Certificate "AddTrust Low-Value Services Root" - Certificate "AddTrust...
CLSA-2021-1638804072 Fix CVE(s): CVE-2021-3426
SECURITY UPDATE: directory traversal - debian/patches/CVE-2021-3426.patch: remove 'getfile' feature from pydoc which can be used to leak sensitive data to unauthorized actors. - CVE-2021-3426...
CLSA-2021-1635459350 Fix CVE(s): CVE-2021-23017
SECURITY UPDATE: Off-by-one in ngxresolvercopy when labels are followed by a pointer to a root domain name - debian/patches/fix-off-by-one-heap-write-vulnerability.patch - CVE-2021-23017...
CLSA-2021-1634922517 Fixed CVE-2021-22925 in curl
telnet stack contents disclosure again CVE-2021-22925...
CLSA-2021-1633601543 Fix of CVE: CVE-2020-35452
CVE-2020-35452: fix stack overflow in modauthdigest due to crafted digest nonce...
CLSA-2021-1632262296 Fix of CVE: CVE-2021-38160, CVE-2021-3573, CVE-2021-38205, CVE-2021-3178, CVE-2021-20265, CVE-2021-3612, CVE-2021-32399, CVE-2021-37159, CVE-2014-4508, CVE-2021-28972, CVE-2021-34693, CVE-2021-20292
ELSCVE-666: CVE-2021-34693: can: bcm: fix infoleak in struct bcmmsghead - ELSCVE-705: CVE-2021-38160: virtioconsole: Assure used length from device is limited - ELSCVE-769: CVE-2014-4508: x8632, entry: Do syscall exit work on badsys CVE-2014-4508 - ELSCVE-844: CVE-2021-3573: Bluetooth: use...
CLSA-2021-1632262236 Fix of CVE: CVE-2021-22924
fix connection reuse checks for issuer cert and case sensitivity CVE-2021-22924...
CLSA-2021-1632262065 Update of nscd, glibc-headers, glibc, glibc-utils, glibc-static, glibc-static, glibc-devel, glibc-devel, glibc, glibc-common
More precise DNS name checks accepting dash-.example.com, among other things...
CLSA-2026-1791906184 TuxCare security update for org.springframework.integration (14 CVEs)
TuxCare rebuilt 43 org.springframework.integration packages to address 14 CVEs. Fixed in 6.5.10-tuxcare.2...
CLSA-2026-1791834096 TuxCare security update for private-ip (1 CVE)
TuxCare rebuilt private-ip to address 1 CVE. Fixed in 2.3.4-tuxcare.1...
CLSA-2026-1791629172 TuxCare security update for postcss (2 CVEs)
TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.5.2-tuxcare.2...
CLSA-2026-1791372571 TuxCare security update for aiohttp (5 CVEs)
TuxCare rebuilt aiohttp to address 5 CVEs. Fixed in 3.8.5.post18+tuxcare...
CLSA-2026-1777538339 binutils: Fix of 4 CVEs
CVE-2025-66862: fix buffer overflow in gnuspecial cplus-dem.c - CVE-2025-66863: fix denial of service in ddiscriminator cp-demangle.c - CVE-2025-66865: fix denial of service in dprintcompinner cp-demangle.c...
CLSA-2026-1791279062 TuxCare security update for vm2 (8 CVEs)
TuxCare rebuilt vm2 to address 8 CVEs. Fixed in 3.11.7-tuxcare.1...
CLSA-2026-1791267859 TuxCare security update for pypdf (5 CVEs)
TuxCare rebuilt pypdf to address 5 CVEs. Fixed in 5.9.0.post18+tuxcare...
CLSA-2026-1790624011 TuxCare security update for katex (3 CVEs)
TuxCare rebuilt katex to address 3 CVEs. Fixed in 0.12.0-tuxcare.1...
CLSA-2026-1790597933 TuxCare security update for fast-xml-parser (2 CVEs)
TuxCare rebuilt fast-xml-parser to address 2 CVEs. Fixed in 4.5.1-tuxcare.4...
CLSA-2026-1789749920 TuxCare security update for js-yaml (1 CVE)
TuxCare rebuilt js-yaml to address 1 CVE. Fixed in 4.3.0-tuxcare.1...
CLSA-2026-1789479340 TuxCare security update for 2 packages (2 CVEs)
TuxCare rebuilt 2 packages to address 2 CVEs. Fixed in 0.7.4-tuxcare.1...
CLSA-2026-1789473405 TuxCare security update for 22 packages (1 CVE)
TuxCare rebuilt 22 packages to address 1 CVE. Fixed in 16.0.6-tuxcare.4...
CLSA-2026-1789465756 TuxCare security update for mlflow (1 CVE)
TuxCare rebuilt mlflow to address 1 CVE. Fixed in 2.9.1.post9+tuxcare...
CLSA-2026-1789455724 TuxCare security update for org.springframework.hateoas:spring-hateoas (2 CVEs)
TuxCare rebuilt org.springframework.hateoas:spring-hateoas to address 2 CVEs. Fixed in 2.2.5-tuxcare.1...
CLSA-2026-1789415252 TuxCare security update for org.springframework.ldap (1 CVE)
TuxCare rebuilt 6 org.springframework.ldap packages to address 1 CVE. Fixed in 2.3.2.RELEASE-tuxcare.1...
CLSA-2026-1789289706 TuxCare security update for fast-xml-parser (1 CVE)
TuxCare rebuilt fast-xml-parser to address 1 CVE. Fixed in 4.5.1-tuxcare.1...
CLSA-2026-1789155227 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 2.5.9-tuxcare.7...
CLSA-2026-1789146534 TuxCare security update for org.springframework.ldap (1 CVE)
TuxCare rebuilt 8 org.springframework.ldap packages to address 1 CVE. Fixed in 2.4.1-tuxcare.2...
CLSA-2026-1789139223 TuxCare security update for dompurify (3 CVEs)
TuxCare rebuilt dompurify to address 3 CVEs. Fixed in 3.2.7-tuxcare.2...
CLSA-2026-1788806164 TuxCare security update for org.springframework.graphql (3 CVEs)
TuxCare rebuilt 2 org.springframework.graphql packages to address 3 CVEs. Fixed in 1.4.6-tuxcare.1...
CLSA-2026-1788526386 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 25 org.springframework packages to address 1 CVE. Fixed in 6.0.15-tuxcare.3...
CLSA-2026-1788422148 TuxCare security update for org.springframework.data:spring-data-keyvalue (4 CVEs)
TuxCare rebuilt org.springframework.data:spring-data-keyvalue to address 4 CVEs. Fixed in 3.3.13-tuxcare.4...
CLSA-2026-1788354808 TuxCare security update for postcss (2 CVEs)
TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.2.15-tuxcare.3...
CLSA-2026-1788257456 TuxCare security update for league/commonmark (6 CVEs)
TuxCare rebuilt league/commonmark to address 6 CVEs. Fixed in 2.8.2-p2+tuxcare...
CLSA-2026-1787915974 TuxCare security update for aiohttp (2 CVEs)
TuxCare rebuilt aiohttp to address 2 CVEs. Fixed in 3.8.6.post11+tuxcare...
CLSA-2026-1787846138 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 21 org.springframework packages to address 1 CVE. Fixed in 4.3.30.RELEASE-tuxcare.8...
CLSA-2026-1787823934 TuxCare security update for tar (4 CVEs)
TuxCare rebuilt tar to address 4 CVEs. Fixed in 6.0.2-tuxcare.1...