17404 matches found
CLSA-2026-1774366791 Fix CVE(s): CVE-2026-24484
SECURITY UPDATE: denial-of-service from nested multi-layer MVG-to-SVG conversions - debian/patches/CVE-2026-24484.patch: Throw VectorGraphicsNestedTooDeeply when vector-graphics nesting reaches MagickMaxRecursionDepth; fix crashes caused by unbounded nesting of graphic-context elements. -...
CLSA-2026-1774260216 Fix CVE(s): CVE-2026-1965, CVE-2026-3783, CVE-2026-3784
SECURITY UPDATE: reuse of connections using HTTP Negotiate - debian/patches/CVE-2026-1965.patch: fix reuse of connections using HTTP Negotiate and fix copy and paste urlmatchauthnego mistake. - CVE-2026-1965 Bearer token sent without checking auth is allowed - debian/patches/CVE-2026-3783.patch:...
CLSA-2026-1774017701 postgresql: Fix of CVE-2026-2006
CVE-2026-2006: fix missing validation of multibyte character length in text manipulation; add proper length checks and bounds validation; prevent crafted queries from triggering buffer overrun and enabling arbitrary code execution...
CLSA-2026-1773999754 Fix CVE(s): CVE-2026-25898
SECURITY UPDATE: global buffer overflow read via negative pixel index in UIL and XPM image encoders - debian/patches/CVE-2026-25898.patch: clamp negative pixel index values to zero in WriteUILImage, WritePICONImage, and WriteXPMImage before using them as array subscripts into the Cixel table. -...
CLSA-2026-1773924658 expat: Fix of CVE-2026-25210
Fix CVE-2026-25210: integer overflow in doContent tag buffer reallocation...
CLSA-2026-1773924425 expat: Fix of CVE-2026-25210
Fix CVE-2026-25210: integer overflow in doContent tag buffer reallocation...
CLSA-2026-1773827924 glibc: Fix of CVE-2025-15281
CVE-2025-15281: fix process crash in wordexp when attempting to reuse and append to previous expansion results due to uninitialized memory access...
CLSA-2026-1773505564 vim: Fix of CVE-2026-26269
CVE-2026-26269: fix stack-based buffer overflow in NetBeans integration that could lead to a crash or arbitrary code execution via a malicious server...
CLSA-2026-1773481701 python3.9: Fix of CVE-2025-6075
CVE-2025-6075: fix quadratic complexity in os.path.expandvars...
CLSA-2026-1773310506 osbuild-composer: Fix of 4 CVEs
rebuild with newer golang version 1.25.7-1.el96.tuxcare.els1 to fix the following CVEs - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry - CVE-2025-61726: limit parsed URL query parameters to...
CLSA-2026-1773315820 postgresql: Fix of CVE-2026-2003
CVE-2026-2003: guard against unexpected dimensions of oidvector/int2vector...
CLSA-2026-1773308416 cups-filters: Fix of 2 CVEs
CVE-2025-64503: fix out-of-bounds write in pdftoraster filter caused by integer overflow when processing PDFs with large MediaBox values - CVE-2025-57812: fix out-of-bounds read/write in imagetoraster TIFF processing caused by incorrect buffer size calculation in cupsImageLut...
CLSA-2026-1773153207 curl: Fix of 2 CVEs
CVE-2025-15079: libssh global knownhosts file override - CVE-2025-14524: bearer token leak on cross-protocol redirect...
CLSA-2026-1773145958 Fix CVE(s): CVE-2024-37370, CVE-2024-37371
SECURITY UPDATE: Fix vulnerabilities in GSS message token handling - debian/patches/CVE-2024-37370-CVE-2024-37371.patch: Verify Extra Count field in CFX wrap tokens, validate plaintext length in gssunwrap, and prevent IOV unwrap header buffer overrun - CVE-2024-37370 - CVE-2024-37371...
CLSA-2026-1772574874 libtiff: Fix of CVE-2025-61144
CVE-2025-61144: fix stack-based buffer overflow occurs in tiffcrop...
CLSA-2026-1772620440 skopeo: Fix of 3 CVEs
rebuild with newer golang version 1.25.7-1.el96.tuxcare.els1 to fix the following CVEs - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry - CVE-2025-61726: limit parsed URL query parameters to...
CLSA-2026-1772576551 python: Fix of CVE-2025-8194
CVE-2025-8194: tarfile now validates archives to ensure member offsets are non-negative...
CLSA-2026-1772574256 389-ds-base: Fix of CVE-2025-14905
CVE-2025-14905: fix heap buffer overflow in schemaattrenumcallback allows Remote Code Execution and Denial of Service...
CLSA-2026-1772453362 protobuf: Fix of CVE-2026-0994
CVE-2026-0994: recursion depth bypass in jsonformat.ParseDict...
CLSA-2026-1772443907 Fix CVE(s): CVE-2025-14524
SECURITY UPDATE: bearer token leakage to IMAP/LDAP/POP3/SMTP hosts via cross-protocol redirects - debian/patches/CVE-2025-14524.patch: Require permission when redirected for bearer use and prevent sending bearer token to other hosts; fix unconditional reuse of oauth bearer during redirects. -...
CLSA-2026-1772213586 zlib: Fix of CVE-2016-9843
CVE-2016-9843: avoid pre-decrement of pointer in big-endian CRC calculation...
CLSA-2026-1772120702 Update of linux-firmware
Addition AMD CPU microcode for processor family 0x1a: cpuid:0x00B00F81ver:0x0B008121, cpuid:0x00B20F40ver:0x0B204037, cpuid:0x00B40F40ver:0x0B404035, cpuid:0x00B40F41ver:0x0B404108, cpuid:0x00B60F00ver:0x0B600037, cpuid:0x00B60F80ver:0x0B608038, cpuid:0x00B70F00ver:0x0B700037; - Update AMD CPU...
CLSA-2026-1772102739 openssl: Fix of CVE-2025-69419
CVE-2025-69419: fix one-byte write-before-buffer triggered by malicious PKCS12 BMPString containing non-ASCII BMP code point; validate UTF8putc return and use correct destination capacity during conversion from UTF-16BE into UTF-8...
CLSA-2026-1772033549 libpng: Fix of CVE-2026-25646
CVE-2026-25646: fix a heap buffer overflow in pngsetquantize...
CLSA-2026-1771927168 python: Fix of 2 CVEs
CVE-2018-1060: fix catastrophic backtracking in APOP method, prevent denial of service, add input validation and enforce backtracking limits - CVE-2018-1061: fix catastrophic backtracking in the difflib.ISLINEJUNK method...
CLSA-2026-1771857684 Fix CVE(s): CVE-2025-14087, CVE-2025-14512
SECURITY UPDATE: Buffer underflow in GVariant parser leads to heap corruption - debian/patches/CVE-2025-1408714512.patch: Fix integer overflows in GVariant text format parser when processing input longer than INTMAX - CVE-2025-14087 SECURITY UPDATE: Integer overflow in escapebytestring leads to...
CLSA-2026-1771857466 Fix CVE(s): CVE-2025-14087
SECURITY UPDATE: Buffer underflow / integer overflow in GVariant text format parser - debian/patches/CVE-2025-14087.patch: fix potential integer overflow parsing strings, bytestrings, and child element counts in gvariant-parser.c - CVE-2025-14087...
CLSA-2026-1771857296 Fix CVE(s): CVE-2025-14087
SECURITY UPDATE: Buffer underflow in GVariant parser leads to heap corruption - debian/patches/CVE-2025-14087.patch: Fix integer overflows in GVariant text format parser when processing input longer than INTMAX, and fix integer overflow in escapebytestring for byte strings with many invalid...
CLSA-2026-1771411317 Update of ca-certificates
update to CKBI 2.82 from NSS 3.120 - updated certificates: - Certificate "GlobalSign Root CA" - Certificate "Entrust.net Premium 2048 Secure Server CA" - Certificate "Comodo AAA Services root" - Certificate "XRamp Global CA Root" - Certificate "Go Daddy Class 2 CA" - Certificate "Starfield Class...
CLSA-2026-1771412648 Update of alt-php
Update ca-certificates database to 20260210: - mozilla\certdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.82. - The following certificates were updated: Certificate "ePKI Root Certification Authority" - The following certificates were added: Certificate "TrustAsia...
CLSA-2026-1771005481 Update of nss
update to CKBI 2.82 from NSS 3.120 - updated certificates: - Certificate "ePKI Root Certification Authority" - Certificate "GlobalSign Root CA" - Certificate "Entrust.net Premium 2048 Secure Server CA" - Certificate "Comodo AAA Services root" - Certificate "XRamp Global CA Root" - Certificate "Go...
CLSA-2026-1770741587 expat: Fix of CVE-2026-24515
CVE-2026-24515: fix NULL pointer dereference in XMLExternalEntityParserCreate...
CLSA-2026-1770140694 kernel-uek: Fix of 43 CVEs
crypto: afalg - Fix incorrect boolean values in afalgctx CVE-2025-40022 - arm64: pensando: Must boot Ortano kernel with spin-table - net/sched: adjust device watchdog timer to detect stopped queue at right time - net/mlx5: Mark the mellanox gracefulperiod fix as out-of-tree change -...
CLSA-2026-1770117675 java-1.8.0-openjdk: Fix of CVE-2026-21945
Update to openjdk-shenandoah-jdk8u-shenandoah-jdk8u482-b03. - CVE-2026-21945: Security component vulnerability allowing unauthenticated attacker with network access to cause hang or crash DoS...
CLSA-2026-1769693558 cups: Fix of CVE-2025-58436
CVE-2025-58436: fix issue where slow messages could delay cupsd...
CLSA-2026-1769542154 libxml2: Fix of CVE-2022-23308
CVE-2022-23308-fix.patch: fix undefined reference to ID variable and apply upstream regression fix to CVE-2022-23308 patch...
CLSA-2026-1769508535 python2: Fix of CVE-2025-12084
CVE-2025-12084: fix quadratic algorithm in clearidcache method when building nested elements using xml.dom.minidom appendChild method...
CLSA-2026-1769182554 gnupg2: Fix of CVE-2025-68973
CVE-2025-68973: fix memory corruption in the armor parser that leads to out-of-bounds write for malicious input...
CLSA-2026-1769164237 php: Fix of CVE-2025-14178
CVE-2025-14178: fix heap buffer overflow in arraymerge by correcting integer overflow in precomputation of element counts using zendhashnumelements...
CLSA-2026-1769092364 curl: Fix of CVE-2025-9086
CVE-2025-9086: cookie: don't treat the leading slash as trailing...
CLSA-2026-1769084959 python3.11: Fix of CVE-2025-12084
CVE-2025-12084: fix denial-of-service by removing quadratic behavior in xml.dom.minidom node ID cache clearing when building deeply nested documents...
CLSA-2026-1768834296 podman: Fix of CVE-2025-47913
CVE-2025-47913: fix ssh/agent client panic on unexpected message types...
CLSA-2026-1768301920 git: Fix of CVE-2024-50349
CVE-2024-50349: fix ANSI escape sequence vulnerability that occurs when asking for credentials interactively...
CLSA-2026-1768211704 unbound: Fix of 2 CVEs
CVE-2023-50387: evaluate DNSSEC responses to prevent KeyTrap denial of service issue - CVE-2023-50868: fix Closest Encloser Proof aspect to prevent CPU consumption for SHA-1 computations in random subdomain attacks...
CLSA-2026-1767950442 git: Fix of CVE-2024-32021
CVE-2024-32021: checking whether the hardlinked destination file matches the source file and abort in case it doesn't...
CLSA-2026-1767955216 openssh: Fix of 2 CVEs
CVE-2025-61984: fix username handling by rejecting control characters from untrusted sources to prevent ProxyCommand code execution - CVE-2025-61985: disallowed NUL characters in ssh:// URI parsing to prevent ProxyCommand-based code execution...
CLSA-2026-1767950193 httpd: Fix of CVE-2025-58098
CVE-2025-58098: fix passes the shell-escaped query string to exec cmd="..." directives...
CLSA-2026-1767629031 mod_md: Fix of CVE-2025-55753
CVE-2025-55753: fix integer overflow in ACME backoff timer - Fix test failure on i686 for boolean refcount assertion...