17404 matches found
CLSA-2025-1759336419 libxml2: Fix of CVE-2025-7425
Fix typo in CVE-2025-7425 fix...
CLSA-2025-1759246699 python3: Fix of CVE-2025-8194
CVE-2025-8194: tarfile: validate archives to ensure non-negative member offsets...
CLSA-2025-1759222758 ruby: Fix of 4 CVEs
CVE-2016-2337: Fix type confusion in canceleval Ruby's TclTkIp class method to prevent arbitrary code execution - CVE-2017-9224: Fix stack out-of-bounds read in matchat during regular expression searching - CVE-2017-9227: Fix stack out-of-bounds read in mbcenclen and invalid pointer dereference...
CLSA-2025-1758896552 dovecot: Fix of CVE-2020-12674
CVE-2020-12674: fix mishandling of zero length in RPA request to prevent auth service crash...
CLSA-2025-1758896397 php: Fix of CVE-2017-9228
CVE-2017-9228: fix heap out-of-bounds write in bitsetsetrange and parsecharclass functions...
CLSA-2025-1758896312 libtiff: Fix of CVE-2017-5225
CVE-2017-5225: fix heap buffer overflow in tools/tiffcp by restricting BitsPerSample values...
CLSA-2025-1758635382 openssl: Fix of CVE-2023-3446
CVE-2023-3446: fix DHcheck excessive time with over sized modulus...
CLSA-2025-1758039948 protobuf: Fix of CVE-2022-1941
CVE-2022-1941: fix parsing vulnerability in MessageSet type to prevent out of memory failures and DoS attacks...
CLSA-2025-1756751564 webkit2gtk3: Fix of 18 CVEs
Update to 2.48.5. The following CVEs were fixed: - CVE-2025-6558: fix processing maliciously crafted web content which may lead to an unexpected Safari crash - CVE-2025-31273: fix processing maliciously crafted web content which may lead to memory corruption - CVE-2025-31278: fix processing...
CLSA-2025-1757700003 glibc: Fix of CVE-2025-4802
CVE-2025-4802: prevent untrusted LDLIBRARYPATH from loading dynamically shared libraries in statically compiled binaries that call dlopen...
CLSA-2025-1757690876 glibc: Fix of CVE-2019-9169
CVE-2019-9169: fix heap-based buffer over-read in proceednextnode in posix/regexec.c...
CLSA-2025-1757662747 gdk-pixbuf2: Fix of CVE-2025-7345
CVE-2025-7345: fix heap buffer overflow during base64 encoding in gdkpixbufjpegimageloadincrement...
CLSA-2025-1757574151 pam: Fix of CVE-2025-6020
CVE-2025-6020: fix potential privilege escalation in pamnamspace...
CLSA-2025-1757427057 grafana: Fix of CVE-2022-23552
CVE-2022-23552: sanitize SVG inputs in GeoMap by adding a dompurify preprocessor step, preventing stored XSS where malicious SVG could execute arbitrary JavaScript...
CLSA-2025-1757415450 libxml2: Fix of 2 CVEs
CVE-2025-7425: fix heap-use-after-free in xmlFreeID caused by 'atype' corruption - CVE-2025-6021: fix integer overflows in buffer size calculations...
CLSA-2025-1757411388 Fix CVE(s): CVE-2025-53014
SECURITY UPDATE: heap buffer overflow in InterpretImageFilename function - debian/patches/CVE-2025-53014.patch: fix out of bounds read of a single byte in image file interpretation - CVE-2025-53014...
CLSA-2025-1757076677 Fix CVE(s): CVE-2025-54574
SECURITY UPDATE: Disable URN protocol access to prevent potential security vulnerabilities - debian/patches/CVE-2025-54574.patch: Add ACL rules to deny URN protocol access by default - CVE-2025-54574...
CLSA-2025-1757076484 squid: Fix of CVE-2025-54574
CVE-2025-54574: fix buffer overflow in URN handling...
CLSA-2025-1757015268 Fix CVE(s): CVE-2025-7545
SECURITY UPDATE: heap-based buffer overflow in copysection function - debian/patches/CVE-2025-7545.patch: Don't extend output section size beyond input section size to fix section contents from being copied - CVE-2025-7545...
CLSA-2025-1757012227 ImageMagick: Fix of CVE-2025-53014
CVE-2025-53014: fix heap buffer overflow in InterpretImageFilename...
CLSA-2025-1756929133 git: Fix of CVE-2025-27613
CVE-2025-27613: fix issue with file creation and truncation when running gitk without additional command arguments from untrusted repositories...
CLSA-2025-1756483990 php: Fix of 3 CVEs
CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation...
CLSA-2025-1756305640 nodejs: Fix of CVE-2024-28863
CVE-2024-28863: prevent extraction in excessively deep sub-folders to address unlimited sub-folders vulnerability...
CLSA-2025-1755791979 krb5: Fix of CVE-2025-24528
CVE-2025-24528: fix buffer overflow vulnerability in iprop log file writing...
CLSA-2025-1755272015 tomcat: Fix of CVE-2025-24813
CVE-2025-24813: fix path equivalence vulnerability leading to remote code execution and information disclosure...
CLSA-2025-1755113204 Fix CVE(s): CVE-2025-29088
SECURITY UPDATE: denial of service issue due to incorrect memory allocations - debian/patches/CVE-2025-29088.patch: harden the SQLITEDBCONFIGLOOKASIDE interface against misuse, such as described in forum post 48f365daec Enhancements to the SQLITEDBCONFIGLOOKASIDE documentation - CVE-2025-29088...
CLSA-2025-1754940505 git: Fix of CVE-2025-27613
CVE-2025-27613: fix issue where untrusted repositories could create and truncate files, with the fix implemented in versions 2.43.7 and later...
CLSA-2025-1754648780 git: Fix of CVE-2024-52006
CVE-2024-52006: fix newline confusion in credential helpers that can lead to credential exfiltration...
CLSA-2025-1754552473 libxml2: Fix of CVE-2025-7425
CVE-2025-7425: fix heap-use-after-free in xmlFreeID caused by atype corruption...
CLSA-2025-1754410836 sqlite: Fix of CVE-2025-6965
CVE-2025-6965: fix memory corruption issue caused by exceeding the number of columns with aggregate terms...
CLSA-2025-1754342507 sqlite: Fix of CVE-2025-6965
CVE-2025-6965: fix a potential memory corruption if the number of aggregate terms in a query exceeds the maximum number of columns...
CLSA-2025-1754337742 Update of nss
update to CKBI 2.74 from NSS 3.110 - updated certificates: - Certificate "Entrust.net Premium 2048 Secure Server CA" - Certificate "Entrust Root Certification Authority" - Certificate "AffirmTrust Commercial" - Certificate "AffirmTrust Networking" - Certificate "AffirmTrust Premium" - Certificate...
CLSA-2025-1754037378 Update of alt-php
Bump ABI 4.4.0-277...
CLSA-2025-1753801728 LibRaw: Fix of CVE-2023-1729
CVE-2023-1729: fix heap-buffer-overflow in raw2imageex to prevent application crash...
CLSA-2025-1753800294 mod_auth_openidc: Fix of CVE-2022-23527
CVE-2022-23527: fix open redirect vulnerability caused by improper URL validation...
CLSA-2025-1753793859 php: Fix of 3 CVEs
CVE-2025-1220: error if host contains null bytes in the middle of the string - CVE-2025-6491: fix NULL pointer dereference vulnerability in soap - CVE-2025-1735: add error error checks for escape function is pgsql and pdopgsql extensions...
CLSA-2025-1753780622 php: Fix of CVE-2025-1220
CVE-2025-1220: error if host contains null bytes in the middle of the string...
CLSA-2025-1753769031 glib2: Fix of CVE-2025-4373
CVE-2025-4373: fix integer overflow in gstringinsertunichar function to prevent buffer underwrite...
CLSA-2025-1753729385 git: Fix of CVE-2025-48385
CVE-2025-48385: bundle-uri: fix arbitrary file writes via parameter injection...
CLSA-2025-1753298447 libxml2: Fix of 2 CVEs
CVE-2025-49794: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements - CVE-2025-49796: fix memory corruption issue triggered by processing sch:name elements in input XML file...
CLSA-2025-1753207513 pam: Fix of CVE-2025-6020
CVE-2025-6020: privilege elevation to root via multiple symlink attacks and race conditions - Perform regression testing...
CLSA-2025-1753207126 nginx: Fix of 2 CVEs
CVE-2022-41741: fix vulnerability in ngxhttpmp4module leading to potential memory corruption and termination by improving module handling of specially crafted audio/video files - CVE-2022-41742: fix module ngxhttpmp4module vulnerability to prevent worker process crash and memory disclosure from...
CLSA-2025-1753083230 Update of alt-php
Bump ABI 4.4.0-276...
CLSA-2025-1752126532 httpd: Fix of 2 CVEs
CVE-2014-8109: modlua: fix LuaAuthzProvider argument handling issue - CVE-2019-10092: modproxy: fix limited cross-site scripting in modproxy error page...
CLSA-2025-1752089153 redis: Fix of CVE-2024-31449
CVE-2024-31449: fix stack buffer overflow in bit library triggered by Lua script execution...
CLSA-2025-1751913242 sudo: Fix of CVE-2025-32462
CVE-2025-32462: fix Local Privilege Escalation vulnerability via host option...
CLSA-2025-1751895517 krb5: Fix of CVE-2025-3576
CVE-2025-3576: possible spoofing of GSSAPI-protected messages using RC4-HMAC-MD5...
CLSA-2025-1751888871 openssl: Fix of CVE-2024-13176
CVE-2024-13176: fix timing side-channel in ECDSA signature computation...