17202 matches found
CLSA-2026-1778142589 python3: Fix of 2 CVEs
CVE-2026-4519: reject leading dashes in webbrowser URLs to block command-line option injection via webbrowser.open - CVE-2026-4786: validate the post-substitution URL in webbrowser UnixBrowser.open so that "%action" cannot smuggle a dash-prefixed flag past the CVE-2026-4519 dash-prefix check...
CLSA-2026-1778131952 unzip: Fix of 3 CVEs
CVE-2021-4217: fix null pointer dereference in EFUNIPATH extra field handling - CVE-2022-0529: fix heap-based buffer overflow in widetolocalstring - CVE-2022-0530: fix null pointer dereference on invalid UTF-8 input...
CLSA-2026-1777947090 shadow-utils: Fix of CVE-2017-12424
CVE-2017-12424: fix heap buffer overflow in commoniosort when an entry has a NULL line...
CLSA-2026-1777566580 openssl: Fix of CVE-2026-28390
CVE-2026-28390: fix NULL pointer dereference in rsacmsdecrypt when CMS RSA-OAEP pSourceFunc is missing its parameter...
CLSA-2026-1777996005 dmidecode: Fix of CVE-2023-30630
CVE-2023-30630: do not let --dump-bin overwrite an existing file...
CLSA-2026-1777947331 Fix CVE(s): CVE-2023-35945
SECURITY UPDATE: HTTP/2 memory leak in nghttp2 codec - debian/patches/CVE-2023-35945.patch: fix memory leak in nghttp2sessionmemsendinternal when stream close callback fails with a fatal error - CVE-2023-35945...
CLSA-2026-1777946712 python: Fix of CVE-2026-4519
CVE-2026-4519: reject leading dashes in webbrowser URLs that could be treated as command-line options by external browsers; also close a %action-substitution bypass of the check in UnixBrowser.open...
CLSA-2026-1777944317 Fix CVE(s): CVE-2025-8194, CVE-2026-4519, CVE-2026-4786
SECURITY UPDATE: tarfile DoS via negative member offsets - debian/patches/CVE-2025-8194.patch: validate that member offsets are non-negative in Lib/tarfile.py. - CVE-2025-8194 SECURITY UPDATE: webbrowser.open accepts URLs with leading dashes - debian/patches/CVE-2026-4519-CVE-2026-4786.patch:...
CLSA-2026-1777941038 LibRaw: Fix of CVE-2026-21413
CVE-2026-21413: fix heap-based buffer overflow in LibRaw::losslessjpegloadraw by adding unsignedcol rawwidth bounds check before the RAWrow, col write...
CLSA-2026-1777889241 vim: Fix of 2 CVEs
CVE-2026-35177: fix path traversal bypass in zip.vim by using simplify to detect attacks that circumvent the previous regex-only check - CVE-2026-39881: fix command injection in netbeans interface via unsanitized defineAnnoType and specialKeys parameters...
CLSA-2026-1777878036 curl: Fix of 2 CVEs
CVE-2019-5436: tftp: use the current blksize for recvfrom - CVE-2016-8615: cookie: replace use of fgets with custom version...
CLSA-2026-1777451880 babel: Fix of CVE-2021-42771
CVE-2021-42771: fix directory traversal in Locale.exists/load...
CLSA-2026-1777541514 binutils: Fix of 3 CVEs
CVE-2025-66862: fix buffer overflow in gnuspecial cplus-dem.c - CVE-2025-66863: fix denial of service in ddiscriminator cp-demangle.c - CVE-2025-66865: fix denial of service in dprintcompinner cp-demangle.c...
CLSA-2026-1777547052 openssl: Fix of CVE-2026-28389
CVE-2026-28389: fix NULL pointer dereference in dhcmssetsharedinfo and ecdhcmssetsharedinfo when the CMS KeyEncryptionAlgorithmIdentifier parameter field is omitted...
CLSA-2026-1777642326 ImageMagick: Fix of CVE-2026-24481
CVE-2026-24481: heap information disclosure in PSD format handler via uninitialized memory in ZIP-compressed layer data...
CLSA-2026-1777567716 vim: Fix of CVE-2026-39881
CVE-2026-39881: fix command injection in netbeans interface by validating defineAnnoType typeName/fg/bg and specialKeys tokens against an allowlist of safe characters before interpolating them into Ex commands...
CLSA-2026-1777566732 Fix CVE(s): CVE-2018-10841
SECURITY UPDATE: privilege escalation on glusterd nodes via the CLI RPC program being exposed on the TCP listener when management-plane SSL is enabled, allowing a TLS-authenticated client outside the trusted storage pool to issue privileged volume-management commands via gluster --remote-host -...
CLSA-2026-1777548161 Fix CVE(s): CVE-2023-31486
SECURITY UPDATE: HTTP::Tiny does not verify TLS certificates by default - debian/patches/CVE-2023-31486.patch: flip verifySSL default from 0 to 1 in cpan/HTTP-Tiny/lib/HTTP/Tiny.pm; add PERLHTTPTINYSSLINSECUREBYDEFAULT escape-hatch env var; update POD SSL SUPPORT - TLS/SSL SUPPORT,...
CLSA-2026-1777546646 gdk-pixbuf2: Fix of CVE-2026-5201
CVE-2026-5201: jpeg loader rejects unsupported component counts in the non-incremental code path...
CLSA-2026-1777539688 sysstat: Fix of 2 CVEs
CVE-2022-39377: sizet overflow in allocatestructures sacommon.c may cause buffer overflow leading to RCE - CVE-2023-33204: integer overflow in checkoverflow common.c - incomplete fix for CVE-2022-39377...
CLSA-2026-1777480556 Fix CVE(s): CVE-2025-69720
SECURITY UPDATE: stack-based buffer overflow in infocmp - debian/patches/CVE-2025-69720.patch: add a bounds check on strlencp in analyzestring in progs/infocmp.c and grow buf2 by one byte so a maliciously long SGR parameter list can no longer overflow the stack buffer. - CVE-2025-69720...
CLSA-2026-1777463593 curl: Fix of CVE-2023-27533
CVE-2023-27533: telnet: only accept option arguments in ascii...
CLSA-2026-1777456062 python3: Fix of CVE-2026-4519
CVE-2026-4519: reject leading dashes in webbrowser URLs...
CLSA-2026-1777453307 ntp: Fix of 2 CVEs
CVE-2018-7185: unauthenticated packet with a zero-origin timestamp can reset an authenticated interleave association leading to denial of service. - CVE-2019-8936: NULL pointer dereference triggered by an authenticated mode 6 control packet with no value field...
CLSA-2026-1777446368 vim: Fix of CVE-2026-33412
CVE-2026-33412: fix command injection via newline character in glob on Unix-like systems by escaping '\n' in SHELLSPECIAL...
CLSA-2025-1737465408 php: Fix of 3 CVEs
CVE-2024-8927: fix bypass of cgi.forceredirect configuration - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode filter - CVE-2024-11234: fix HTTP fulluri CRLF injection...
CLSA-2026-1777445542 libssh2: Fix of 2 CVEs
CVE-2019-3858: fix zero-byte allocation in sftppacketread - CVE-2019-3859: fix out-of-bounds reads in libssh2packetrequire...
CLSA-2026-1777397602 gimp: Fix of CVE-2026-4887
CVE-2026-4887 fix heap buffer over-read in PCX file loader by adding bpp validation, tolerating off-by-one bytesperline values, and allocating one extra byte for line buffers...
CLSA-2026-1777385906 vim: Fix of CVE-2026-33412
CVE-2026-33412: fix command injection via newline character in glob on Unix-like systems by escaping '\n' in SHELLSPECIAL...
CLSA-2026-1777389615 Fix CVE(s): CVE-2024-45802
SECURITY UPDATE: multiple vulnerabilities in Edge Side Includes ESI processing - debian/rules: build with --disable-esi to remove the vulnerable ESI response processor matches the upstream Squid 6.10 default, where ESI support is disabled by default. - debian/control: drop libexpat1-dev and...
CLSA-2026-1777308424 pcre2: Fix of CVE-2022-41409
CVE-2022-41409 diagnose negative repeat value in pcre2test subject line upstream 94e1c001 and change pcre2grep length variables from int to sizet to reject negative --buffer-size / --max-buffer-size upstream 7549fdca...
CLSA-2026-1776956583 bzip2: Fix of 2 CVEs
CVE-2019-12900: fix out-of-bounds write in BZ2decompress when many selectors are present - CVE-2016-3189: fix use-after-free in bzip2recover...
CLSA-2026-1776957467 libinput: Fix of CVE-2022-1215
CVE-2022-1215: strip format directives from device name...
CLSA-2026-1776849467 jasper: Fix of 3 CVEs
CVE-2021-26926: prevent out-of-bounds read in jp2decode by hard-erroring on inconsistent IHDR/BPCC component metadata - CVE-2021-26927: prevent out-of-bounds read in jp2decode by hard-erroring on inconsistent IHDR/BPCC component metadata - CVE-2021-3272: prevent heap-based buffer over-read in...
CLSA-2026-1777056907 tigervnc: Fix of CVE-2026-34352
CVE-2026-34352: prevent other users reading x0vncserver screen...
CLSA-2026-1777042487 Fix CVE(s): CVE-2026-34980
SECURITY UPDATE: filter control characters from option values in the scheduler to prevent PPD keyword injection via Print-Job. - debian/patches/CVE-2026-34980.patch: filter out control characters from IPP option values in scheduler/job.c and filter out special PPD keywords in the CUPSDLOGPPD bran...
CLSA-2026-1777046565 ImageMagick: Fix of 5 CVEs
CVE-2026-33900: fix integer truncation in viff encoder leading to heap out-of-bounds write on 32-bit builds - CVE-2026-33905: fix out-of-bounds read in -sample operation via sample:offset define - CVE-2026-34238: fix integer overflow in despeckle operation causing heap buffer overflow on 32-bit...
CLSA-2026-1777043727 tar: Fix of CVE-2019-9923
CVE-2019-9923: fix possible NULL dereference in paxdecodeheader...
CLSA-2026-1777040413 dmidecode: Fix of CVE-2023-30630
CVE-2023-30630: do not let --dump-bin overwrite an existing file...
CLSA-2026-1777036238 libsoup: Fix of CVE-2026-5119
CVE-2026-5119: do not send cookies to a HTTP proxy for a HTTPS request...
CLSA-2026-1772465492 podman: Fix of 4 CVEs
rebuild with newer golang version 1.25.7-1.el96.tuxcare.els1 to fix the following CVEs - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry - CVE-2025-61726: limit parsed URL query parameters to...
CLSA-2026-1776952176 ruby: Fix of 4 CVEs
CVE-2024-39908: fix ReDoS in REXML parser for repeated / character reference payloads - CVE-2024-41123: fix ReDoS in REXML source.match when no terminator string is specified - CVE-2024-41946: add XML entity expansion limit to REXML SAX and pull parsers - CVE-2024-43398: fix DoS via deep elements...
CLSA-2026-1776948287 vim: Fix of CVE-2022-3234
CVE-2022-3234 fix heap buffer overflow in opreplace when replacing NUL after Tab in virtualedit mode...
CLSA-2026-1776880278 sysstat: Fix of 2 CVEs
CVE-2022-39377: check an overflow and exit if it be - CVE-2023-33204: fix possible buffer overflow in an incomplete fix for CVE-2022-39377...
CLSA-2026-1776877737 squid: Fix of CVE-2021-28116
CVE-2021-28116: fix out-of-bounds read in WCCPv2 message parsing via stricter bounds validation of security, service, router, view, and capability items...
CLSA-2026-1776605836 glibc: Fix of 3 CVEs
CVE-2018-6485: fix integer overflows in memalign and malloc - CVE-2018-1000001: fix realpath buffer underflow via getcwd - CVE-2018-19591: fix ifnametoindex descriptor leak...
CLSA-2026-1776431757 c-ares: Fix of CVE-2022-4904
CVE-2022-4904: fix stack overflow in aressetsortlist due to missing input validation...
CLSA-2026-1776788664 perl: Fix of CVE-2023-31486
CVE-2023-31486: add verifySSL=1 to HTTP::Tiny default configuration...