16562 matches found
CLSA-2025-1765293700 buildah: Fix of CVE-2025-58183
CVE-2025-58183: fix cap GNU tar pax 1.0 sparse region size to prevent unbounded memory allocation...
CLSA-2025-1765289483 elfutils: Fix of 3 CVEs
CVE-2025-1352: fix memory corruption when using -w option with a specially crafted input file - CVE-2025-1365: fix buffer overflow when using the -D and -a options with a specially crafted input file - CVE-2025-1372: fix buffer overflow when using the -z and -x options with a specially crafted...
CLSA-2025-1765233700 Update of grub2
Handle special kernel parameter characters properly - Resolves: RHEL-111748...
CLSA-2025-1765209058 xorg-x11-server: Fix of 4 CVEs
CVE-2025-9632: fix buffer overflow in XkbSetCompatMap - CVE-2025-62229: fix use-after-free condition due improper error handling during notification creation leading to DoS - CVE-2025-62230: fix use-after-free condition due freeing certain data structures without properly detaching related...
CLSA-2025-1764773365 curl: Fix of CVE-2024-9681
CVE-2024-9681: improve HSTS subdomain handling to prevent incorrectly overriding parent domain entries...
CLSA-2025-1764688910 binutils: Fix of CVE-2025-0840
CVE-2025-0840: fix stack-based buffer overflow in disassemblebytes function...
CLSA-2025-1764680377 php: Fix of CVE-2025-1735
CVE-2025-1735: fix missing error checking that could result in SQL injection and crashes...
CLSA-2025-1764584370 bind: Fix of CVE-2025-40778
CVE-2025-40778: fix issue with BIND being too lenient when accepting records from answers to prevent injection of forged data into the cache...
CLSA-2025-1764325574 gstreamer1-plugins-good: Fix of CVE-2024-47606
CVE-2024-47606: qtdemux: avoid integer overflow when parsing Theora extension - Fix documentation build with the newer gtk-doc...
CLSA-2025-1764325377 gstreamer1-plugins-base: Fix of CVE-2024-47615
CVE-2024-47615: fix OOB-Write in gstparsevorbissetuppacket by validating integer size input to prevent memory corruption...
CLSA-2025-1764080949 pcp: Fix of CVE-2024-3019
CVE-2024-3019: Fix default pmproxy configuration to restrict access to Redis server backend, preventing remote command execution...
CLSA-2025-1763651916 xorg-x11-server-Xwayland: Fix of 4 CVEs
CVE-2023-1393: fix use-after-free in compositor overlay window by clearing dangling COW pointer - CVE-2024-31080: prevent heap over-read in ProcXIGetSelectedEvents caused by using byte-swapped length values in replies. - CVE-2024-31081: fix buffer over-read in ProcXIPassiveGrabDevice by using...
CLSA-2025-1763043157 Fix CVE(s): CVE-2025-55160
SECURITY UPDATE: UBSan function-type-mismatch - debian/patches/CVE-2025-55160.patch: Fix UBSan function-type-mismatch in cloning functions - CVE-2025-55160...
CLSA-2025-1762958892 python3: Fix of 5 CVEs
CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4435, CVE-2025-4517: fix multiple tarfile extraction filter bypasses filter="tar"/filter="data"...
CLSA-2025-1762958654 python3: Fix of 5 CVEs
CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4435, CVE-2025-4517: fix multiple tarfile extraction filter bypasses filter="tar"/filter="data"...
CLSA-2025-1762957887 perl-App-cpanminus: Fix of CVE-2024-45321
CVE-2024-45321: patch the code to use https instead of http...
CLSA-2025-1762792127 libsoup: Fix of 3 CVEs
CVE-2025-4948: fix integer underflow in soupmultipartnewfrommessage - CVE-2025-32049: fix Denial of Service attack to websocket server - CVE-2025-32914: fix OOB Read through soupmultipartnewfrommessage...
CLSA-2025-1762540530 Fix CVE(s): CVE-2020-10745, CVE-2022-42898
SECURITY UPDATE: DNS string buffer overflow - debian/patches/CVE-2020-10745.patch: add input validation to prevent buffer overflows when handling DNS/NBT names with consecutive dots or exceeding RFC 1035 255-byte limit. The fix enforces proper bounds checking and component length validation in...
CLSA-2025-1762538077 dpdk: Fix of CVE-2024-11614
CVE-2024-11614: add bounds check in vhostdequeueoffload to prevent checksum computation overflow...
CLSA-2025-1762363908 libuv: Fix of CVE-2024-24806
CVE-2024-24806: fix issue where uvgetaddrinfo function truncates hostnames, potentially allowing crafted payloads to resolve to unintended IP addresses, by handling hostnameascii variable properly in uvgetaddrinfo and uvidnatoascii functions...
CLSA-2025-1762361695 nodejs: Fix of CVE-2023-39333
CVE-2023-39333: fix maliciously crafted export names injection of JavaScript code...
CLSA-2025-1762192914 gnutls: Fix of CVE-2025-6395
CVE-2025-6395: fix NULL pointer dereference flaw in gnutlsfigurecommonciphersuite...
CLSA-2025-1762192315 gnutls: Fix of CVE-2025-6395
CVE-2025-6395: fix NULL pointer dereference flaw in gnutlsfigurecommonciphersuite...
CLSA-2025-1761673925 libxml2: Fix of CVE-2022-49043
CVE-2022-49043: fix use-after-free in xmlXIncludeAddNode, free URI after reporting the error to avoid use-after-free...
CLSA-2025-1761596679 Update of gcc
gcc48-cfns-fix-protos: fix arm cross building inline issue...
CLSA-2025-1761576180 Fix CVE(s): CVE-2025-31651
SECURITY UPDATE: Bypassing of some rewrite rules by a specially crafted request - debian/patches/CVE-2025-31651.patch: better handling of URLs - CVE-2025-31651...
CLSA-2025-1761323193 libpq: Fix of CVE-2025-1094
CVE-2025-1094: fix potential SQL injections allowed by an improper encoding validation in data quoting functions...
CLSA-2025-1760649409 Fix CVE(s): CVE-2025-6965
SECURITY UPDATE: excessive aggregate terms potentially leading to memory corruption - debian/patches/CVE-2025-6965.patch: fix a potential memory corruption if the number of aggregate terms in a query exceeds the maximum number of columns - CVE-2025-6965...
CLSA-2025-1761139574 libxml2: Fix of CVE-2022-49043
CVE-2022-49043: fix use-after-free in xmlXIncludeAddNode, free URI after reporting the error to avoid use-after-free...
CLSA-2025-1761084810 nodejs: Fix of CVE-2023-38552
CVE-2023-38552: use tamper-proof integrity check function to prevent tampering with Hash class internals in policy mechanism...
CLSA-2025-1761056680 xorg-x11-server: Fix of CVE-2025-49176
Additional fix for CVE-2025-49176...
CLSA-2025-1760646561 tigervnc: Fix of 13 CVEs
Rebuilt with xorg-x11-server-1.20.4-99.el79.tuxcare.els7, mitigating the security vulnerabilities identified by the following CVEs: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597 CVE-2025-26598, CVE-2025-26599, CVE-2025-26600 and CVE-2025-26601, CVE-2025-49175, CVE-2025-49176,...
CLSA-2025-1760543414 open-vm-tools: Fix of CVE-2025-41244
CVE-2025-41244: fix local privilege escalation in the SDMP plugin by disabling execution of the get-versions.sh script disabled by default...
CLSA-2025-1760373685 glibc: Fix of CVE-2025-0395
CVE-2025-0395: fix underallocation of abortmsgs struct that could lead to buffer overflow when printing assertion failures...
CLSA-2025-1760026282 jasper: Fix of CVE-2025-8837
CVE-2025-8837: fix use-after-free vulnerability in jpcdecdump...
CLSA-2025-1760023801 Fix CVE(s): CVE-2025-57803
SECURITY UPDATE: 32-bit integer overflow in BMP encoder allows attacker- controlled heap corruption - debian/patches/CVE-2025-57803.patch: Fix buffer overflow issue in BMP decoder caused by insufficient memory allocation - CVE-2025-57803...
CLSA-2025-1760023353 openssl: Fix of 2 CVEs
CVE-2019-1547: fix side-channel vulnerability in ECDSA when using explicit EC parameters without cofactor - CVE-2025-9230: fix incorrect check of unwrapped key size...
CLSA-2025-1760022476 opensc: Fix of CVE-2023-2977
CVE-2023-2977: correct left length calculation to fix buffer overrun bug...
CLSA-2025-1760019942 jasper: Fix of CVE-2025-8836
CVE-2025-8836: fix manipulation in function jpcfloorlog2 to prevent reachable assertion...
CLSA-2025-1760017744 Fix CVE(s): CVE-2025-6491
SECURITY UPDATE: fix NULL pointer dereference in SOAP with huge QName - debian/patches/CVE-2025-6491.patch: Add safeguard in ext/soap/soap.c to handle invalid XML node names produced by libxml2 with extremely large namespace prefixes - CVE-2025-6491...
CLSA-2025-1759951300 libssh: Fix of CVE-2025-5372
CVE-2025-5372: uninitialized key buffers caused by inconsistent sshkdf return value...
CLSA-2025-1759864646 jasper: Fix of CVE-2025-8837
CVE-2025-8837: fix use-after-free vulnerability in jpcdecdump...
CLSA-2025-1759856402 Fix CVE(s): CVE-2025-57803
SECURITY UPDATE: integer Overflow in BMP Encoder - debian/patches/CVE-2025-57803.patch: Fix buffer overflow issue in BMP decoder caused by insufficient memory allocation - CVE-2025-57803...
CLSA-2025-1759506149 krb5: Fix of CVE-2025-24528
CVE-2025-24528: fix buffer overflow vulnerability in iprop log file writing...
CLSA-2025-1759505734 podman: Fix of CVE-2025-9566
CVE-2025-9566: fix kube play vulnerability that allows following volume symlinks onto the host filesystem. Prevent symlink-based host escapes in ConfigMap and Secret volumes...
CLSA-2025-1759498325 jasper: Fix of CVE-2025-8837
CVE-2025-8837: fix use after free vulnerability in jpcdecdump function...
CLSA-2025-1759418654 cups: Fix of CVE-2025-58060
CVE-2025-58060: fix authentication bypass issue caused by not checking password when AuthType is not Basic...
CLSA-2025-1759411642 libxml2: Fix of CVE-2025-9714
CVE-2025-9714: preserve recursion depth across recursive calls to prevent stack overflow in XPath evaluation...