17202 matches found
CLSA-2026-1767629031 mod_md: Fix of CVE-2025-55753
CVE-2025-55753: fix integer overflow in ACME backoff timer - Fix test failure on i686 for boolean refcount assertion...
CLSA-2026-1767626618 Fix CVE(s): CVE-2025-11083
SECURITY UPDATE: Heap-based buffer overflow in elfswapshdr function - debian/patches/CVE-2025-11083.patch: Don't swap in nor match corrupt section header in linker input to avoid linker crash. Changed elfswapshdrin to return bfdboolean and reject corrupt section headers in linker input files. -...
CLSA-2026-1767609927 httpd: Fix of CVE-2025-58098
CVE-2025-58098: don't pass querry string args as command line arguments to SSI-invoked CGI scripts...
CLSA-2025-1767098873 tomcat: Fix of CVE-2025-55752
CVE-2025-55752: fix path traversal vulnerability in URL normalization and improve QSA/QSD rewrite handling...
CLSA-2025-1767098038 Update of java-11-openjdk
Upgrade to openjdk-11.0.29+7 GA...
CLSA-2025-1767001153 pam: Fix of CVE-2025-8941
CVE-2025-8941: fix additiinally potential privilege escalationvia multiple symlink attacks and race conditions...
CLSA-2025-1767000167 php: Fix of CVE-2025-1735
CVE-2025-1735: add error checks to prevent crashes and improperly escaped data when PostgreSQL rejects invalid strings...
CLSA-2025-1766568231 webkit2gtk3: Fix of CVE-2025-43392
CVE-2025-43392: fix cross-origin image data leak by correctly tainting OffscreenCanvas when transferring a cross-origin ImageBitmap...
CLSA-2025-1766567499 Fix CVE(s): CVE-2020-1472
SECURITY UPDATE: elevation of privilege vulnerability - debian/patches/CVE-2020-1472.patch: fix vulnerability when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol MS-NRPC - CVE-2020-1472...
CLSA-2025-1766502382 keylime: Fix of CVE-2025-13609
CVE-2025-13609: enforce TPM identity immutability for agent UUIDs in registrar, add shared memory for multiprocess synchronization...
CLSA-2025-1765899262 java-1.8.0-openjdk: Fix of 2 CVEs
Upgrade to shenandoah-jdk8u472-b08 GA fixing the following CVEs: - CVE-2025-53057: enhance certificate handling - CVE-2025-53066: enhance Path Factories...
CLSA-2025-1765898779 java-1.8.0-openjdk: Fix of 2 CVEs
Upgrade to shenandoah-jdk8u472-b08 GA fixing the following CVEs: - CVE-2025-53057: enhance certificate handling - CVE-2025-53066: enhance Path Factories...
CLSA-2025-1765376235 python3.11-pip: Fix of CVE-2007-4559
CVE-2007-4559: fix for tarfile directory traversal vulnarability...
CLSA-2025-1765293700 buildah: Fix of CVE-2025-58183
CVE-2025-58183: fix cap GNU tar pax 1.0 sparse region size to prevent unbounded memory allocation...
CLSA-2025-1765289483 elfutils: Fix of 3 CVEs
CVE-2025-1352: fix memory corruption when using -w option with a specially crafted input file - CVE-2025-1365: fix buffer overflow when using the -D and -a options with a specially crafted input file - CVE-2025-1372: fix buffer overflow when using the -z and -x options with a specially crafted...
CLSA-2025-1765285897 Fix CVE(s): CVE-2021-3738
SECURITY UPDATE: use after free in Samba AD DC RPC server - debian/patches/CVE-2021-3738-pre.patch: prepare service routines before fixing CVE-2021-3738 - debian/patches/CVE-2021-3738.patch: avoids a crash caused by use-after-free in Samba AD DC RPC server - CVE-2021-3738.patch...
CLSA-2025-1765012494 gimp: Fix of 2 CVEs
CVE-2025-10922: fix heap-based buffer overflow in DCM file parser by adding safety checks and proper GError handling to prevent potential RCE - CVE-2025-10934: fix heap-based buffer overflow in XWD file parser by validating colormap offsets to prevent potential RCE...
CLSA-2025-1764773600 Fix CVE(s): CVE-2025-62171
SECURITY UPDATE: integer overflow vulnerability in BMP decoder on 32-bit systems - debian/patches/CVE-2025-62171.patch: add extra check to resolve issue on 32-bit systems caused by memory allocation failure - CVE-2025-62171...
CLSA-2025-1764773365 curl: Fix of CVE-2024-9681
CVE-2024-9681: improve HSTS subdomain handling to prevent incorrectly overriding parent domain entries...
CLSA-2025-1764615000 python3.11-setuptools: Fix of CVE-2024-6345
CVE-2024-6345: Fix code injection vulnerability in package download functions...
CLSA-2025-1764331947 golang: Fix of CVE-2025-58183
CVE-2025-58183: fix unbounded memory consumption when reading GNU pax 1.0 sparse files...
CLSA-2025-1764325574 gstreamer1-plugins-good: Fix of CVE-2024-47606
CVE-2024-47606: qtdemux: avoid integer overflow when parsing Theora extension - Fix documentation build with the newer gtk-doc...
CLSA-2025-1764324770 Fix CVE(s): CVE-2022-30688
SECURITY UPDATE: insecure regex patterns for interpreter detection - debian/patches/CVE-2022-30688.patch: prevent local privilege escalation by anchoring interpreter regex patterns - CVE-2022-30688...
CLSA-2025-1764152160 squid: Fix of CVE-2025-62168
CVE-2025-62168: fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure - emailerrdata directive now defaults to 'off' for security previously 'on'...
CLSA-2025-1764080949 pcp: Fix of CVE-2024-3019
CVE-2024-3019: Fix default pmproxy configuration to restrict access to Redis server backend, preventing remote command execution...
CLSA-2025-1763647795 Update of python-setuptools
Merge python-setuptools-0.9.8-7.0.1.el7.src.rpm...
CLSA-2025-1763558418 xorg-x11-server-Xwayland: Fix of CVE-2023-6377
CVE-2023-6377: fix buffer overwrite caused by allocating too few XkbActions for device buttons, preventing writes past the intended action array...
CLSA-2025-1763388821 squid34: Fix of CVE-2025-62168
CVE-2025-62168: Redact HTTP authentication credentials in error handling to prevent information disclosure...
CLSA-2025-1763138343 tigervnc: Fix of CVE-2025-62231
CVE-2025-62231: fix improper bounds checking in XkbSetCompatMap function to prevent unsigned short overflow and potential memory corruption or crash...
CLSA-2025-1763054281 python: Fix of CVE-2025-8194
CVE-2025-8194: fix infinite loop and deadlock in TarFile extraction and entry enumeration APIs...
CLSA-2025-1763033941 python: Fix of CVE-2025-8194
CVE-2025-8194: fix infinite loop and deadlock in TarFile extraction and entry enumeration APIs...
CLSA-2025-1762958892 python3: Fix of 5 CVEs
CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4435, CVE-2025-4517: fix multiple tarfile extraction filter bypasses filter="tar"/filter="data"...
CLSA-2025-1762800667 Fix CVE(s): CVE-2021-44038
SECURITY UPDATE: Unsafe chown/chmod operations in .service files - debian/patches/CVE-2021-44038.patch: remove chown/chmod commands from the .service files - CVE-2021-44038...
CLSA-2025-1762792127 libsoup: Fix of 3 CVEs
CVE-2025-4948: fix integer underflow in soupmultipartnewfrommessage - CVE-2025-32049: fix Denial of Service attack to websocket server - CVE-2025-32914: fix OOB Read through soupmultipartnewfrommessage...
CLSA-2025-1762544767 gstreamer1-plugins-base: Fix of CVE-2024-47538
CVE-2024-47538: fix stack-buffer overflow in vorbishandleidentificationpacket function by limiting writing beyond boundaries of position array...
CLSA-2025-1762544321 giflib: Fix of CVE-2023-48161
CVE-2023-48161: fix Buffer Overflow vulnerability in DumpSCreen2RGB function...
CLSA-2025-1762512792 Update of kernel
Rebased FIPS patches to 5.14.0-570.60.1...
CLSA-2025-1762361695 nodejs: Fix of CVE-2023-39333
CVE-2023-39333: fix maliciously crafted export names injection of JavaScript code...
CLSA-2025-1762361016 libssh: Fix of CVE-2025-5987
CVE-2025-5987: fix missing error detection in ChaCha20 initialization that could leave cipher context partially uninitialized...
CLSA-2025-1762269073 Fix CVE(s): CVE-2018-1000500, CVE-2022-28391, CVE-2023-39810
SECURITY UPDATE: missing SSL certificate validation vulnerability in wget - debian/patches/CVE-2018-1000500-1.patch: implement TLS verification with CENABLEFEATUREWGETOPENSSL - debian/patches/CVE 2018-1000500-2.patch: fix openssl options for cert verification - CVE-2018-1000500 SECURITY UPDATE:...
CLSA-2025-1762198875 Update of kernel
Rebased FIPS patches to 5.14.0-570.58.1...
CLSA-2025-1762192914 gnutls: Fix of CVE-2025-6395
CVE-2025-6395: fix NULL pointer dereference flaw in gnutlsfigurecommonciphersuite...
CLSA-2025-1762192315 gnutls: Fix of CVE-2025-6395
CVE-2025-6395: fix NULL pointer dereference flaw in gnutlsfigurecommonciphersuite...
CLSA-2025-1762191563 qt5-qtbase: Fix of CVE-2023-51714
CVE-2023-51714: fix incorrect HPack integer overflow check in hpacktable.cpp...
CLSA-2025-1762181347 containernetworking-plugins: Fix of CVE-2023-24540
rebuild with newer golang to fix CVE-2023-24540 sanitize templates with whitespace outside the allowed character set in JavaScript contexts...
CLSA-2025-1762180717 Fix CVE(s): CVE-2022-2343, CVE-2022-2522
SECURITY UPDATE: Reading past end of completion with a long line and 'infercase' set - debian/patches/CVE-2022-2343.patch: Allocate the string if needed - CVE-2022-2343 SECURITY UPDATE: Accessing uninitialized memory when completing long line - debian/patches/CVE-2022-2522.patch: Terminate string...
CLSA-2025-1762180511 Fix CVE(s): CVE-2025-1000876
SECURITY UPDATE: fix integer overflow in libbfd - debian/patches/CVE-2025-1000876.patch: Add overflow checks to prevent potential memory allocation issues from integer overflow - CVE-2025-1000876...
CLSA-2025-1761902260 Fix CVE(s): CVE-2024-45490
SECURITY UPDATE: Improper restriction of XML External Entity Reference - debian/patches/CVE-2024-45490.patch: Reject negative len for XMLParseBuffer - CVE-2024-45490...