17202 matches found
CLSA-2025-1759157126 libwebp: Fix of 3 CVEs
CVE-2020-36329: fix use-after-free vulnerability by delaying thread termination - CVE-2020-36330: fix out-of-bounds read in ChunkVerifyAndAssign function - CVE-2020-36331: fix out-of-bounds read in ChunkAssignData function...
CLSA-2025-1759145639 Fix CVE(s): CVE-2025-53019
SECURITY UPDATE: memory leak when specifying multiple %d format specifiers in filename template - debian/patches/CVE-2025-53019.patch: Fix memory leak when entering StreamImage multiple times - CVE-2025-53019...
CLSA-2025-1758914697 httpd: Fix of 4 CVEs
CVE-2025-49630: fix assertion caused by untrusted clients triggering denial of service attack in modproxyhttp2 - CVE-2025-23048: fix access control bypass by trusted clients using TLS 1.3 session resumption - CVE-2024-47252: escape user-supplied data to prevent log file injection in modssl -...
CLSA-2025-1758896312 libtiff: Fix of CVE-2017-5225
CVE-2017-5225: fix heap buffer overflow in tools/tiffcp by restricting BitsPerSample values...
CLSA-2025-1758705538 glib2: Fix of CVE-2024-52533
CVE-2024-52533: fix off-by-one error leading to buffer overflow in gsocks4aproxy.c...
CLSA-2025-1758704282 Fix CVE(s): CVE-2025-57807
SECURITY UPDATE: heap out-of-bounds write in BlobStream WriteBlob - debian/patches/CVE-2025-57807.patch: enforce extent ≥ offset + length when forward-seeking before writes in MagickCore/blob.c - CVE-2025-57807...
CLSA-2025-1758010245 kernel: Fix of 3 CVEs
posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - schqfq: make qfqqlennotify idempotent CVE-2025-38177 - schhfsc: make hfscqlennotify idempotent CVE-2025-38177 - schdrr: make drrqlennotify idempotent CVE-2025-38177 - schhtb: make htbqlennotify...
CLSA-2025-1757962152 libreswan: Fix of CVE-2023-38712
CVE-2023-38712: fix a NULL pointer dereference caused by a duplicated Delete/Notify message which causes the pluto daemon to crash and restart...
CLSA-2025-1757925072 Update of microcode_ctl
Update Intel CPU microcode to 20250812: - Addition of cpuid:806F8/0x10 SPR-HBM B3 microcode in microcode.dat at revision 0x2c000401; - Addition of cpuid:806F8/0x87 SPR-SP E5/S3 microcode in microcode.dat at revision 0x2b000643; - Addition of cpuid:90672/0x07 ADL-HX/S 8+8 C0 microcode in...
CLSA-2025-1757700003 glibc: Fix of CVE-2025-4802
CVE-2025-4802: prevent untrusted LDLIBRARYPATH from loading dynamically shared libraries in statically compiled binaries that call dlopen...
CLSA-2025-1757699693 kernel-uek: Fix of 16 CVEs
Bluetooth: afbluetooth: Fix Use-After-Free in btsockrecvmsg CVE-2024-21803 - net: defer final 'struct net' free in netns dismantle CVE-2024-56658 - netfilter: validate user input for expected length CVE-2024-35896 - drm/amd/display: Fix out-of-bounds access in 'dcn21linkencodercreate'...
CLSA-2025-1757690477 glibc: Fix of CVE-2025-4802
CVE-2025-4802: prevent untrusted LDLIBRARYPATH from loading dynamically shared libraries in statically compiled binaries that call dlopen...
CLSA-2025-1757666519 xorg-x11-server: Fix of CVE-2025-49178
CVE-2025-49178: fix request handling flaw causing potential denial of service...
CLSA-2025-1757663300 git: Fix of CVE-2024-50349
CVE-2024-50349: fix ANSI escape sequence vulnerability that occurs when asking for credentials interactively...
CLSA-2025-1757662405 xorg-x11-server: Fix of CVE-2025-49178
CVE-2025-49178: fix request handling flaw causing potential denial of service...
CLSA-2025-1757608893 c-ares: Fix of CVE-2016-5180
CVE-2016-5180: fix heap-based buffer overflow in the arescreatequery causing DoS...
CLSA-2025-1757500267 python3.9: Fix of CVE-2025-8194
CVE-2025-8194: fix tarfile deadlock/infinite loop by rejecting negative member offsets...
CLSA-2025-1757415450 libxml2: Fix of 2 CVEs
CVE-2025-7425: fix heap-use-after-free in xmlFreeID caused by 'atype' corruption - CVE-2025-6021: fix integer overflows in buffer size calculations...
CLSA-2025-1757016520 squid34: Fix of CVE-2025-54574
CVE-2025-54574: fix buffer overflow in URN handling...
CLSA-2025-1757016400 python3-setuptools: Fix of CVE-2025-47273
CVE-2025-47273: fix path traversal vulnerability in PackageIndex...
CLSA-2025-1757015268 Fix CVE(s): CVE-2025-7545
SECURITY UPDATE: heap-based buffer overflow in copysection function - debian/patches/CVE-2025-7545.patch: Don't extend output section size beyond input section size to fix section contents from being copied - CVE-2025-7545...
CLSA-2025-1757014900 Fix CVE(s): CVE-2025-49812
SECURITY UPDATE: modssl TLS upgrade attack - debian/patches/CVE-2025-49812.patch: remove antiquated 'SSLEngine optional' TLS upgrade in modules/ssl/sslengineconfig.c, modules/ssl/sslengineinit.c, modules/ssl/sslenginekernel.c, modules/ssl/sslprivate.h. - CVE-2025-49812...
CLSA-2025-1757014652 Fix CVE(s): CVE-2025-1217, CVE-2025-1734, CVE-2025-1736, CVE-2025-1861
SECURITY UPDATE: misinterpretation of HTTP response headers - debian/patches/CVE-2025-1217.patch: adds HTTP header folding support for HTTP wrapper response headers in ext/standard/httpfopenwrapper.c - CVE-2025-1217 SECURITY UPDATE: insufficient HTTP header validation -...
CLSA-2025-1757010850 squid: Fix of CVE-2025-54574
CVE-2025-54574: fix heap buffer overflow in URN parsing...
CLSA-2025-1756932191 buildah: Fix of CVE-2024-9407
CVE-2024-9407: validate input for bind-propagation option in Dockerfile RUN --mount instruction to prevent arbitrary parameter passing and potential file modification...
CLSA-2025-1756931716 golang: Fix of CVE-2025-4674
CVE-2025-4674: disallow multiple VCS metadata dirs in one module to prevent VCS injection attacks...
CLSA-2025-1756409595 clamav: Fix of 4 CVEs
Update to 1.4.3 LTS - CVE-2025-20260: Fixed a possible buffer overflow write bug in the PDF file parser - CVE-2025-20234: Fixed a possible buffer overflow read bug in the UDF file parser - CVE-2025-20128: Fixed a possible buffer overflow read bug in the OLE2 file parser - CVE-2024-20506: Changed...
CLSA-2025-1755708467 libxml2: Fix of 2 CVEs
CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c - CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c...
CLSA-2025-1755707639 kernel: Fix of 2 CVEs
can: bcm: Fix UAF in bcmprocshow CVE-2023-52922 - udmabuf: fix a buf size overflow issue during udmabuf creation CVE-2025-37803...
CLSA-2025-1755682686 kernel: Fix of 10 CVEs
netsched: hfsc: Fix a UAF vulnerability in class handling CVE-2025-37797 - sunrpc: handle SVCGARBAGE during svc auth processing as auth error CVE-2025-38089 - net: ch9200: fix uninitialised access during miinwayrestart CVE-2025-38086 - ext4: fix out-of-bound read in ext4xattrinodedecrefall...
CLSA-2025-1755623284 Update of amazon-efs-utils
Bump release...
CLSA-2025-1755618159 Update of rust
Bootstrap for ALmaLinux 9.2 ESU...
CLSA-2025-1755113613 bluez: Fix of 2 CVEs
CVE-2023-50229: fix heap-based buffer overflow vulnerability in handling Phone Book Access profile by adding proper validation of user-supplied data length before copying to buffer - CVE-2023-50230: fix heap-based buffer overflow vulnerability in Phone Book Access profile to prevent arbitrary...
CLSA-2025-1755008210 git: Fix of CVE-2025-46835
CVE-2025-46835: fix vulnerability where Git GUI can create and overwrite arbitrary writable files...
CLSA-2025-1754648780 git: Fix of CVE-2024-52006
CVE-2024-52006: fix newline confusion in credential helpers that can lead to credential exfiltration...
CLSA-2025-1754554806 libxml2: Fix of CVE-2025-7425
CVE-2025-7425: fix heap-use-after-free in xmlFreeID caused by atype corruption...
CLSA-2025-1754552192 libxml2: Fix of CVE-2025-7425
CVE-2025-7425: fix heap-use-after-free in xmlFreeID caused by atype corruption...
CLSA-2025-1754411171 sqlite: Fix of CVE-2025-6965
CVE-2025-6965: fix memory corruption issue caused by exceeding the number of columns with aggregate terms...
CLSA-2025-1754410992 Fix CVE(s): CVE-2025-6965
SECURITY UPDATE: excessive aggregate terms potentially leading to memory corruption - debian/patches/CVE-2025-6965.patch: fix a potential memory corruption if the number of aggregate terms in a query exceeds the maximum number of columns - CVE-2025-6965...
CLSA-2025-1754410836 sqlite: Fix of CVE-2025-6965
CVE-2025-6965: fix memory corruption issue caused by exceeding the number of columns with aggregate terms...
CLSA-2025-1754382501 Update of alt-php
Update ca-certificates database to 20250418: - mozilla\certdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.74. - The following certificates were updated: Certificate "Entrust Root Certification Authority - G4" Certificate "Security Communication ECC RootCA1"...
CLSA-2025-1754339166 sqlite: Fix of CVE-2025-6965
CVE-2025-6965: fix a potential memory corruption if the number of aggregate terms in a query exceeds the maximum number of columns...
CLSA-2025-1754338696 sqlite: Fix of CVE-2025-6965
CVE-2025-6965: fix memory corruption issue caused by exceeding the number of columns with aggregate terms...
CLSA-2025-1753800763 iptraf-ng: Fix of CVE-2024-52949
CVE-2024-52949: fix stack-based buffer overflow in src/ifaces.c by controlling the size in the strcpy function...
CLSA-2025-1753798945 php: Fix of 3 CVEs
CVE-2025-1220: error if host contains null bytes in the middle of the string - CVE-2025-6491: fix NULL pointer dereference vulnerability in soap - CVE-2025-1735: add error error checks for escape function is pgsql and pdopgsql extensions...
CLSA-2025-1753793859 php: Fix of 3 CVEs
CVE-2025-1220: error if host contains null bytes in the middle of the string - CVE-2025-6491: fix NULL pointer dereference vulnerability in soap - CVE-2025-1735: add error error checks for escape function is pgsql and pdopgsql extensions...
CLSA-2025-1753377886 libxml2: Fix of 2 CVEs
CVE-2025-49794: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements - CVE-2025-49796: fix memory corruption issue triggered by processing sch:name elements in input XML file...
CLSA-2025-1753375058 ruby: Fix of CVE-2024-27281
CVE-2024-27281: fix object injection and remote code execution in .rdocoptions and documentation cache loading...