17202 matches found
CLSA-2026-1774225202 TuxCare security update for bson (3 CVEs)
TuxCare rebuilt bson to address 3 CVEs. Fixed in 0.5.7-tuxcare.1...
CLSA-2026-1774311639 TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 23 org.springframework packages to address 5 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.1...
CLSA-2026-1774225188 TuxCare security update for com.google.oauth-client (1 CVE)
TuxCare rebuilt 7 com.google.oauth-client packages to address 1 CVE. Fixed in 1.25.0-tuxcare.2...
CLSA-2026-1774311624 TuxCare security update for printf (1 CVE)
TuxCare rebuilt printf to address 1 CVE. Fixed in 0.5.3-tuxcare.1...
CLSA-2026-1774311647 TuxCare security update for formidable (4 CVEs)
TuxCare rebuilt formidable to address 4 CVEs. Fixed in 2.1.2-tuxcare.1...
CLSA-2026-1773793042 TuxCare security update for cross-spawn (1 CVE)
TuxCare rebuilt cross-spawn to address 1 CVE. Fixed in 0.2.9-tuxcare.1...
CLSA-2026-1774052346 TuxCare security update for angular (2 CVEs)
TuxCare rebuilt angular to address 2 CVEs. Fixed in 1.7.9-tuxcare.3...
CLSA-2026-1773706638 TuxCare security update for angular (7 CVEs)
TuxCare rebuilt angular to address 7 CVEs. Fixed in 1.7.9-tuxcare.1...
CLSA-2026-1773965926 TuxCare security update for angular (8 CVEs)
TuxCare rebuilt angular to address 8 CVEs. Fixed in 1.8.3-tuxcare.1...
CLSA-2026-1773965918 TuxCare security update for copy-anything (1 CVE)
TuxCare rebuilt copy-anything to address 1 CVE. Fixed in 2.0.6-tuxcare.1...
CLSA-2026-1773965922 TuxCare security update for org.apache.thrift (5 CVEs)
TuxCare rebuilt 2 org.apache.thrift packages to address 5 CVEs. Fixed in 0.9.1-tuxcare.3...
CLSA-2026-1773274564 TuxCare security update for tunnel-agent (1 CVE)
TuxCare rebuilt tunnel-agent to address 1 CVE. Fixed in 0.4.3-tuxcare.1...
CLSA-2026-1773533800 TuxCare security update for basic-auth-connect (1 CVE)
TuxCare rebuilt basic-auth-connect to address 1 CVE. Fixed in 1.0.0-tuxcare.1...
CLSA-2026-1773274551 TuxCare security update for qs (2 CVEs)
TuxCare rebuilt qs to address 2 CVEs. Fixed in 2.4.2-tuxcare.3...
CLSA-2026-1773533794 TuxCare security update for tar (6 CVEs)
TuxCare rebuilt tar to address 6 CVEs. Fixed in 6.2.1-tuxcare.1...
CLSA-2026-1773274561 TuxCare security update for tunnel-agent (1 CVE)
TuxCare rebuilt tunnel-agent to address 1 CVE. Fixed in 0.3.0-tuxcare.1...
CLSA-2026-1773015274 TuxCare security update for express (4 CVEs)
TuxCare rebuilt express to address 4 CVEs. Fixed in 3.21.2-tuxcare.1...
CLSA-2026-1773101691 TuxCare security update for qs (3 CVEs)
TuxCare rebuilt qs to address 3 CVEs. Fixed in 5.1.0-tuxcare.1...
CLSA-2026-1772756021 TuxCare security update for bl (2 CVEs)
TuxCare rebuilt bl to address 2 CVEs. Fixed in 1.0.0-tuxcare.1...
CLSA-2026-1772669616 TuxCare security update for printf (1 CVE)
TuxCare rebuilt printf to address 1 CVE. Fixed in 0.2.5-tuxcare.1...
CLSA-2026-1772496734 TuxCare security update for pdfkit (1 CVE)
TuxCare rebuilt pdfkit to address 1 CVE. Fixed in 0.6.1.post1+tuxcare...
CLSA-2026-1772583176 TuxCare security update for three (1 CVE)
TuxCare rebuilt three to address 1 CVE. Fixed in 0.71.0-tuxcare.1...
CLSA-2026-1772496678 TuxCare security update for trim-newlines (1 CVE)
TuxCare rebuilt trim-newlines to address 1 CVE. Fixed in 1.0.0-tuxcare.1...
CLSA-2026-1770595754 TuxCare security update for 35 packages (2 CVEs)
TuxCare rebuilt 35 packages to address 2 CVEs. Fixed in 8.5.100-tuxcare.6...
CLSA-2026-1771373383 TuxCare security update for org.yaml:snakeyaml (7 CVEs)
TuxCare rebuilt org.yaml:snakeyaml to address 7 CVEs. Fixed in 1.28-tuxcare.1...
CLSA-2025-1766534903 TuxCare security update for io.undertow (4 CVEs)
TuxCare rebuilt 8 io.undertow packages to address 4 CVEs. Fixed in 2.3.10.Final-tuxcare.2...
CLSA-2025-1764029254 TuxCare security update for org.springframework.boot (1 CVE)
TuxCare rebuilt 76 org.springframework.boot packages to address 1 CVE. Fixed in 2.7.18-tuxcare.10...
CLSA-2025-1767053309 TuxCare security update for ch.qos.logback (3 CVEs)
TuxCare rebuilt 4 ch.qos.logback packages to address 3 CVEs. Fixed in 1.4.14-tuxcare.1...
CLSA-2025-1760313983 TuxCare security update for org.springframework.webflow (2 CVEs)
TuxCare rebuilt 5 org.springframework.webflow packages to address 2 CVEs. Fixed in 2.3.3.RELEASE-tuxcare.1...
CLSA-2025-1756080325 TuxCare security update for com.google.protobuf:protobuf-java (2 CVEs)
TuxCare rebuilt com.google.protobuf:protobuf-java to address 2 CVEs. Fixed in 2.5.0-tuxcare.1...
CLSA-2025-1751328256 TuxCare security update for org.yaml:snakeyaml (1 CVE)
TuxCare rebuilt org.yaml:snakeyaml to address 1 CVE. Fixed in 1.30.tuxcare.1...
CLSA-2025-1752105760 TuxCare security update for org.yaml:snakeyaml (3 CVEs)
TuxCare rebuilt org.yaml:snakeyaml to address 3 CVEs. Fixed in 1.26.tuxcare.2...
CLSA-2026-1780406874 Fix CVE(s): CVE-2026-3039, CVE-2026-5946
SECURITY UPDATE: Multiple assertion failures in named when handling DNS messages with non-IN class CHAOS, HESIOD or meta-classes ANY, NONE in UPDATE, NOTIFY, and recursion paths - debian/patches/CVE-2026-5946.patch: disable recursion for non-IN views, reject UPDATE and NOTIFY for non-IN classes,...
CLSA-2026-1780062671 Fix CVE(s): CVE-2026-41035
SECURITY UPDATE: receiver use-after-free in receivexattr via a wire-supplied xattr count passed to qsort: - debian/patches/els/0007-CVE-2026-41035.patch: sort tempxattr.count stored items instead of the untrusted wire count. - CVE-2026-41035...
CLSA-2026-1779797547 Fix CVE(s): CVE-2026-29168
SECURITY UPDATE: fix denial of service in modmd OCSP response handling by enforcing size limit and timeouts - debian/patches/CVE-2026-29168.patch: fix denial of service in modmd OCSP response handling by enforcing size limit and timeouts - CVE-2026-29168...
CLSA-2026-1779372207 curl: Fix of CVE-2026-7168
CVE-2026-7168: clear proxy Digest auth state when CURLOPTPROXY is reassigned to a different proxy host on the same easy handle so a stale Proxy-Authorization header is not replayed to the new proxy...
CLSA-2026-1779462894 rsync: Fix of CVE-2026-43620
CVE-2026-43620: prevent client-side out-of-bounds read in receiver when a malicious server sends a crafted file-list with parentndx0...
CLSA-2026-1779360288 dovecot: Fix of CVE-2026-42006
CVE-2026-42006: fix imap-login listcountlimit to actually limit open '' characters; the previous fix limited closing '' instead, leaving the bracing memory exhaustion vector open...
CLSA-2026-1779355433 Fix CVE(s): CVE-2026-3833
SECURITY UPDATE: nameConstraints case-sensitive comparison bypass - debian/patches/CVE-2026-3833.patch: perform case-insensitive comparison of dNSName and rfc822Name domain labels in X.509 nameConstraints processing, fixing excludedSubtrees / permittedSubtrees bypass via letter-casing in the SAN....
CLSA-2026-1779296233 sos: Fix of CVE-2022-2806
CVE-2022-2806: ovirt plugin: filter out all password keys in answer files...
CLSA-2026-1779214855 bind: Fix of CVE-2026-1519
CVE-2026-1519: fix unbounded NSEC3 iterations when validating referrals to unsigned delegations...
CLSA-2026-1779214181 vim: Fix of 4 CVEs
CVE-2022-3278: fix crash when using NUL in buffer that uses :source; don't get a next line when skipping over NL in evalnextnonblank eval.c, upstream patch 9.0.0552 - CVE-2023-48234: fix overflow when getting count for normal z command; break out of nvzet count loop when n LONGMAX/10 normal.c,...
CLSA-2026-1779183235 vim: Fix of 6 CVEs
CVE-2021-4069: copy mlgetcurline in exopen so a flushed line buffer is not used after vimregexec - CVE-2022-2000: truncate IObuff with "..." in appendcommand when remaining space is below threshold - CVE-2022-3099: guard docmdline breakpoint lookup with linesga.galen currentline check -...
CLSA-2026-1779152708 grafana: Fix of CVE-2026-32283
CVE-2026-32283: rebuild against golang = 1.25.7-1.el96.tuxcare.els5 to fix crypto/tls DoS where multiple post-handshake KeyUpdate messages in a single TLS 1.3 record deadlock the connection setReadTrafficSecret reacquired the conn mutex via sendAlert...
CLSA-2026-1779095842 memcached: Fix of CVE-2021-37519
CVE-2021-37519: heap buffer overflow in authfileload when the auth file lacks a trailing newline; missing bounds check on fgets and missing NUL check in the user-entry parse loop allow local DoS via a crafted --auth-file...
CLSA-2026-1778946135 subversion: Fix of CVE-2018-11782
CVE-2018-11782: fix svnserve DoS via well-formed read-only get-deleted-rev request...
CLSA-2026-1778882329 dovecot: Fix of CVE-2026-27857
CVE-2026-27857: improve fix by enforcing listcountlimit on '' openlist instead of '' closelist; the previous fix did not actually limit memory growth from many '' characters...
CLSA-2026-1778874422 postfix: Fix of CVE-2026-43964
CVE-2026-43964: fix buffer over-read in dsnsplit when an enhanced status code is not followed by other text...