17202 matches found
CLSA-2022-1654011190 Fix CVE(s): CVE-2022-1473, CVE-2022-1292
SECURITY UPDATE: Improper Neutralization - debian/patches/CVE-2022-1292.patch: restrict using shell to invoke openssl due to possible privilege escalation - debian/patches/CVE-2022-1473.patch: fix bug OPENSSLLHflush memory releasing leading to DoS - CVE-2022-1292 - CVE-2022-1473...
CLSA-2022-1653506138 Fixed CVE-2021-33515 in dovecot
CVE-2021-33515: fix possible command injection by stopping reading commands when input was locked by the STARTTLS command...
CLSA-2022-1653499822 Fix CVE(s): CVE-2022-0318
SECURITY UPDATE: Reading beyond the end of a line - debian/patches/CVE-2022-0318.patch: For block insert only use the offset for correcting the length, adjust expected output of the relevant UTF8 block insertion test - CVE-2022-0318...
CLSA-2022-1653328424 Fixed CVEs in vim: CVE-2022-1616, CVE-2022-1621, CVE-2022-1620, CVE-2022-1629, CVE-2022-1619
CVE-2022-1619: fix going before the command line start with latin1 encoding - CVE-2022-1620: fix NULL pointer dereference when using invalig regexp - CVE-2022-1621: fix to avoid adding invalid bytes with :spellgood - CVE-2022-1629: fix reading past end of line if ended with trailing backslash -...
CLSA-2022-1653004535 Fixed CVE-2018-25032 in rsync
CVE-2018-25032: Fix memory corruption when deflating if the input has many distant matches...
CLSA-2022-1652986558 Fixed CVE-2018-25032 in rsync
CVE-2018-25032: Fix memory corruption when deflating if the input has many distant matches...
CLSA-2022-1652801135 Fixed CVE-2022-1271 in gzip
CVE-2022-1271: Fix arbitrary file override with crafted file names...
CLSA-2022-1649696332 Fix of CVE: CVE-2021-3618
CVE-2021-3618: drop the connection after reaching the specified number of invalid protocol commmands...
CLSA-2022-1649695737 Fix CVE(s): CVE-2021-3618
SECURITY UPDATE: Vulnerability against application layer protocol content confusion attack - debian/patches/CVE-2021-3618.patch: Drop the connection after reaching the specified number of invalid protocol commmands - CVE-2021-3618...
CLSA-2022-1649170882 Fixed CVE-2022-0547 in openvpn
CVE-2022-0547: Fix authentication bypass via multiple deferred authentication plug-ins...
CLSA-2022-1648138003 Fix CVE(s): CVE-2019-20044, CVE-2021-45444
SECURITY UPDATE: Regain dropped privileges - debian/patches/CVE-2019-20044-pre.patch: change the order of the calls to setgid this should go first and setuid in Src/options.c. - debian/patches/CVE-2019-20044-1.patch: add extra checks to drop privileges securely in Src/options.c. -...
CLSA-2022-1648068022 Fix of CVE: CVE-2022-0847
lib/ioviter: initialize "flags" in new pipebuffer Max Kellermann CVE-2022-0847...
CLSA-2022-1647550273 Fix of CVE: CVE-2022-0778
CVE-2022-0778: Fix possible infinite loop in BNmodsqrt...
CLSA-2022-1646915634 Fixed CVEs in vim: CVE-2022-0729, CVE-2022-0572, CVE-2022-0554, CVE-2022-0685
CVE-2022-0554: fix ending up with no current buffer - CVE-2022-0572: fix crashing when repeatedly using :retab - CVE-2022-0685: fix crashing when using special multi-byte character - CVE-2022-0729: fix crashing with specific regexp pattern and string...
CLSA-2022-1646061301 Fix of CVE: CVE-2022-24407
CVE-2022-24407: Fix failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands rhbz2055846...
CLSA-2022-1643917481 Fix of CVE: CVE-2021-44142
CVE-2021-44142: Fix out-of-bounds heap read/write vulnerability in VFS module vfsfruitrhbz2046152...
CLSA-2022-1643637259 Fix CVE(s): CVE-2017-12424, CVE-2018-7169
SECURITY UPDATE: Crash or buffer overflow - debian/patches/CVE-2017-12424.patch: fix buffer overflow if NULL line is present in db in lib/commonio.c. - CVE-2017-12424 SECURITY UPDATE: Access to privileged information - debian/patches/CVE-2018-7169.patch: newgidmap: enforce setgroups=deny if...
CLSA-2022-1643112395 Fix of CVE: CVE-2021-44038
CVE-2021-44038: low privilege escalation during package installation/update due to insecure chmod in spec file...
CLSA-2022-1642084196 Fix of CVE: CVE-2021-3800
CVE-2021-3800: Fix privilege escalation...
CLSA-2021-1640700669 Fixed 8 CVEs in libxml2
CVE-2021-3517.patch: validate UTF8 in xmlEncodeEntities - CVE-2021-3518.patch: fix user-after-free with 'xmllint --xinclude --dropdtd' - CVE-2021-3537.patch: propagate error in xmlParseElementChildrenContentDeclPriv - CVE-2021-3541.patch: parser fix for the billion laughs attack -...
CLSA-2021-1640621325 Fix of CVE: CVE-2021-3973, CVE-2021-3974, CVE-2021-4019, CVE-2021-4069, CVE-2021-3984
CVE-2021-3974: fix using freed memory with regexp using a mark - CVE-2021-3984: fix illegal memory access when C-indenting - CVE-2021-3973: fix crash when using CTRL-W f without finding a file name - CVE-2021-4019: fix buffer overflow with long help argument - CVE-2021-4069: fix using freed...
CLSA-2021-1639681613 Fix CVE(s): CVE-2021-2388
Fix CVE-2021-2388 OpenJDK: Incorrect comparison during range check elimination Add JDK-8165323.diff: fs Files.getFileStore fails with "Mount point not found" in chroot environment...
CLSA-2021-1639578644 Fix CVE(s): CVE-2021-43527
SECURITY REGRESSION: Broken SSL connections - debian/patches/CVE-2021-43527.patch: Add missing break statement...
CLSA-2021-1635430087 Fix CVE(s): CVE-2021-3737, CVE-2021-3733
SECURITY UPDATE: Denial of service - debian/patches/CVE-2021-3737-.patch: Fix http client infinite line reading DoS after a HTTP 100 continue in Lib/http/client.py, Lib/test/testhttplib.py. - CVE-2021-3737 SECURITY UPDATE: Denial of service - debian/patches/CVE-2021-3733.patch: fix a ReDoS in...
CLSA-2021-1632262236 Fix of CVE: CVE-2021-22924
fix connection reuse checks for issuer cert and case sensitivity CVE-2021-22924...
CLSA-2020-1608724009 Fix of CVE: CVE-2020-8284
trusting FTP PASV responses CVE-2020-8284...
CLSA-2026-1791839080 TuxCare security update for fastify (3 CVEs)
TuxCare rebuilt fastify to address 3 CVEs. Fixed in 5.11.3-tuxcare.6...
CLSA-2026-1791668940 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 3.4.8-tuxcare.5...
CLSA-2026-1791626840 TuxCare security update for fastify (1 CVE)
TuxCare rebuilt fastify to address 1 CVE. Fixed in 4.29.1-tuxcare.5...
CLSA-2026-1791571542 TuxCare security update for @xmldom/xmldom (1 CVE)
TuxCare rebuilt @xmldom/xmldom to address 1 CVE. Fixed in 0.9.8-tuxcare.4...
CLSA-2026-1791442911 TuxCare security update for io.projectreactor (2 CVEs)
TuxCare rebuilt 3 io.projectreactor packages to address 2 CVEs. Fixed in 3.6.16-tuxcare.1...
CLSA-2026-1791381930 TuxCare security update for org.springframework.data (1 CVE)
TuxCare rebuilt 5 org.springframework.data packages to address 1 CVE. Fixed in 3.3.13-tuxcare.6...
CLSA-2026-1791320698 TuxCare security update for 2 packages (1 CVE)
TuxCare rebuilt 2 packages to address 1 CVE. Fixed in 17.3.17-tuxcare.5...
CLSA-2026-1791320540 TuxCare security update for 2 packages (1 CVE)
TuxCare rebuilt 2 packages to address 1 CVE. Fixed in 19.2.27-tuxcare.2...
CLSA-2026-1791215922 TuxCare security update for brace-expansion (1 CVE)
TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 2.1.4-tuxcare.1...
CLSA-2026-1790872587 TuxCare security update for @nestjs/websockets (2 CVEs)
TuxCare rebuilt @nestjs/websockets to address 2 CVEs. Fixed in 11.2.2-tuxcare.1...
CLSA-2026-1790774766 TuxCare security update for 86 packages (8 CVEs)
TuxCare rebuilt 86 packages to address 8 CVEs. Fixed in 9.4.65.tuxcare0001...
CLSA-2026-1790450789 TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 6 @angular packages to address 2 CVEs. Fixed in 7.2.16-tuxcare.12...
CLSA-2026-1789474443 TuxCare security update for org.apache.httpcomponents.client5 (1 CVE)
TuxCare rebuilt 6 org.apache.httpcomponents.client5 packages to address 1 CVE. Fixed in 5.0.3-tuxcare.1...
CLSA-2026-1789467187 TuxCare security update for 2 packages (1 CVE)
TuxCare rebuilt 2 packages to address 1 CVE. Fixed in 9.20.3-tuxcare.1...
CLSA-2026-1789454911 TuxCare security update for gitpython (2 CVEs)
TuxCare rebuilt gitpython to address 2 CVEs. Fixed in 3.1.31.post13+tuxcare...
CLSA-2026-1789371263 TuxCare security update for org.springframework.amqp (3 CVEs)
TuxCare rebuilt 7 org.springframework.amqp packages to address 3 CVEs. Fixed in 3.2.12-tuxcare.1...
CLSA-2026-1789132119 TuxCare security update for aiohttp (6 CVEs)
TuxCare rebuilt aiohttp to address 6 CVEs. Fixed in 3.8.1.post13+tuxcare...
CLSA-2026-1788988502 TuxCare security update for multer (2 CVEs)
TuxCare rebuilt multer to address 2 CVEs. Fixed in 1.4.5-lts.2-tuxcare.5...
CLSA-2026-1788970571 TuxCare security update for drupal/colorbox (1 CVE)
TuxCare rebuilt drupal/colorbox to address 1 CVE. Fixed in 7.2.19-p1+tuxcare...
CLSA-2026-1788420664 TuxCare security update for org.springframework.data:spring-data-commons (1 CVE)
TuxCare rebuilt org.springframework.data:spring-data-commons to address 1 CVE. Fixed in 3.3.13-tuxcare.5...
CLSA-2026-1788276305 TuxCare security update for org.springframework (25 CVEs)
TuxCare rebuilt 26 org.springframework packages to address 25 CVEs. Fixed in 6.2.13-tuxcare.2...
CLSA-2026-1788274092 TuxCare security update for org.springframework (20 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 20 CVEs. Fixed in 6.1.15-tuxcare.4...