16562 matches found
CLSA-2025-1759334959 gnutls: Fix of CVE-2025-32990
CVE-2025-32990: fix heap-buffer-overflow flaw in template parsing logic to prevent OOB NULL pointer write and memory corruption...
CLSA-2025-1759319631 Update of kernel
Rebased to 5.14.0-570.21.1 to add CVE fixes...
CLSA-2025-1759157346 libssh: Fix of CVE-2025-5318
CVE-2025-5318: fix out-of-bounds read in sftphandle function to prevent potential memory disclosure...
CLSA-2025-1759157126 libwebp: Fix of 3 CVEs
CVE-2020-36329: fix use-after-free vulnerability by delaying thread termination - CVE-2020-36330: fix out-of-bounds read in ChunkVerifyAndAssign function - CVE-2020-36331: fix out-of-bounds read in ChunkAssignData function...
CLSA-2025-1758824659 gdk-pixbuf2: Fix of CVE-2022-48622
CVE-2022-48622: fix heap memory corruption issue in ANI decoder to prevent denial of service or code execution attack...
CLSA-2025-1758822697 perl-CPAN: Fix of 2 CVEs
CVE-2023-31484: verify TLS certificates when downloading distributions over HTTPS - CVE-2020-16156: fix Signature Verification Bypass...
CLSA-2025-1758820840 dovecot: Fix of CVE-2020-12674
CVE-2020-12674: fix mishandling of zero length in RPA request to prevent auth service crash...
CLSA-2025-1758709744 gimp: Fix of CVE-2025-5473
CVE-2025-5473: fix parsing integer overflow issue in ICO file to prevent remote code execution...
CLSA-2025-1758709327 glib2: Fix of CVE-2024-52533
CVE-2024-52533: fix off-by-one error leading to buffer overflow in gsocks4aproxy.c...
CLSA-2025-1758705181 glib2: Fix of CVE-2020-35457
CVE-2020-35457: fix integer overflow in goptiongroupaddentries to prevent potential out-of-bounds write - Bug775510: avoid calling Standard C string/array functions with NULL arguments...
CLSA-2025-1758704282 Fix CVE(s): CVE-2025-57807
SECURITY UPDATE: heap out-of-bounds write in BlobStream WriteBlob - debian/patches/CVE-2025-57807.patch: enforce extent ≥ offset + length when forward-seeking before writes in MagickCore/blob.c - CVE-2025-57807...
CLSA-2025-1758645375 libwebp: Fix of CVE-2020-36328
CVE-2020-36328: fix a heap-based buffer overflow in WebPDecodeInto functions...
CLSA-2025-1758292868 Fix CVE(s): CVE-2025-7425
SECURITY UPDATE: memory corruption vulnerability in attribute type flags - debian/patches/CVE-2025-7425.patch: Fix heap-use-after-free caused by atype corruption - CVE-2025-7425...
CLSA-2025-1758040547 git: Fix of CVE-2024-52006
CVE-2024-52006: fix issue where single Carriage Return characters could be interpreted as newlines by some ecosystems in Git's line-based protocol...
CLSA-2025-1757962152 libreswan: Fix of CVE-2023-38712
CVE-2023-38712: fix a NULL pointer dereference caused by a duplicated Delete/Notify message which causes the pluto daemon to crash and restart...
CLSA-2025-1757945157 python3.11: Fix of CVE-2025-8194
CVE-2025-8194: fix defect in 'TarFile' extraction and entry enumeration APIs to prevent infinite loop and deadlock when processing tar archives with negative offsets...
CLSA-2025-1757944976 php: Fix of 3 CVEs
CVE-2017-9224: fix out-of-bounds read of a stack in matchat function - CVE-2017-9226: fix out-of-bounds write or read of a heap in nextstateval function - CVE-2017-9227: fix out-of-bounds read of a stack in mbcenclen function...
CLSA-2025-1757944902 php: Fix of 3 CVEs
CVE-2017-9224: fix out-of-bounds read of a stack in matchat function - CVE-2017-9226: fix out-of-bounds write or read of a heap in nextstateval function - CVE-2017-9227: fix out-of-bounds read of a stack in mbcenclen function...
CLSA-2025-1757923104 glibc: Fix of CVE-2019-9169
CVE-2019-9169: fix heap-based buffer over-read in proceednextnode function in posix/regexec.c...
CLSA-2025-1757690477 glibc: Fix of CVE-2025-4802
CVE-2025-4802: prevent untrusted LDLIBRARYPATH from loading dynamically shared libraries in statically compiled binaries that call dlopen...
CLSA-2025-1757663410 git: Fix of CVE-2024-50349
CVE-2024-50349: fix ANSI escape sequence vulnerability that occurs when asking for credentials interactively...
CLSA-2025-1757662747 gdk-pixbuf2: Fix of CVE-2025-7345
CVE-2025-7345: fix heap buffer overflow during base64 encoding in gdkpixbufjpegimageloadincrement...
CLSA-2025-1757608893 c-ares: Fix of CVE-2016-5180
CVE-2016-5180: fix heap-based buffer overflow in the arescreatequery causing DoS...
CLSA-2025-1757608663 rsync: Fix of CVE-2024-12087
CVE-2024-12087: fix a path traversal issue in --inc-recursive mode that let a malicious server escape the destination directory...
CLSA-2025-1757428404 Fix CVE(s): CVE-2025-23048
SECURITY UPDATE: access control bypass by trusted clients via TLS 1.3 session resumption - debian/patches/CVE-2025-23048.patch: update SNI validation to fix compatibility issue - CVE-2025-23048...
CLSA-2025-1756932191 buildah: Fix of CVE-2024-9407
CVE-2024-9407: validate input for bind-propagation option in Dockerfile RUN --mount instruction to prevent arbitrary parameter passing and potential file modification...
CLSA-2025-1756930773 glibc: Fix of CVE-2025-8058
CVE-2025-8058: fix double free vulnerability in regcomp function...
CLSA-2025-1756928514 libvpx: Fix of CVE-2025-5283
CVE-2025-5283: fix use after free vulnerability in libvpx to prevent potential heap corruption via crafted HTML page...
CLSA-2025-1756483693 php: Fix of 3 CVEs
CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation...
CLSA-2025-1756408700 nodejs: Fix of CVE-2024-25629
CVE-2024-25629: prevent reading before buffer start when parsing config files containing an embedded NULL as the first character of a line by discarding such lines in aresreadline...
CLSA-2025-1755623284 Update of amazon-efs-utils
Bump release...
CLSA-2025-1755272015 tomcat: Fix of CVE-2025-24813
CVE-2025-24813: fix path equivalence vulnerability leading to remote code execution and information disclosure...
CLSA-2025-1755007232 glibc: Fix of CVE-2025-8058
CVE-2025-8058: fix double-free after allocation failure in regcomp...
CLSA-2025-1754554806 libxml2: Fix of CVE-2025-7425
CVE-2025-7425: fix heap-use-after-free in xmlFreeID caused by atype corruption...
CLSA-2025-1754552791 taglib: Fix of CVE-2023-47466
CVE-2023-47466: Fix segmentation violation and application crash during tag writing via crafted WAV file...
CLSA-2025-1753987188 dovecot: Fix of CVE-2024-23185
CVE-2024-23185: fix resource exhaustion caused by very large headers when parsing messages...
CLSA-2025-1753800763 iptraf-ng: Fix of CVE-2024-52949
CVE-2024-52949: fix stack-based buffer overflow in src/ifaces.c by controlling the size in the strcpy function...
CLSA-2025-1753780622 php: Fix of CVE-2025-1220
CVE-2025-1220: error if host contains null bytes in the middle of the string...
CLSA-2025-1753768865 glib2: Fix of CVE-2025-4373
CVE-2025-4373: fix integer overflow in gstringinsertunichar function to prevent buffer underwrite...
CLSA-2025-1753729863 php: Fix of CVE-2025-1220
CVE-2025-1220: fix null byte termination in hostnames...
CLSA-2025-1753375058 ruby: Fix of CVE-2024-27281
CVE-2024-27281: fix object injection and remote code execution in .rdocoptions and documentation cache loading...
CLSA-2025-1753374522 libxml2: Fix of 2 CVEs
CVE-2025-49794: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements - CVE-2025-49796: fix memory corruption issue triggered by processing sch:name elements in input XML file...
CLSA-2025-1753303283 libxml2: Fix of 2 CVEs
CVE-2025-49794: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements - CVE-2025-49796: fix memory corruption issue triggered by processing sch:name elements in input XML file...
CLSA-2025-1753131065 libsoup: Fix of 7 CVEs
CVE-2025-32050: fix overflow in appendparamquoted - CVE-2025-32052: fix heap buffer overflow in soupcontentsniffersniff - CVE-2025-32053: fix heap buffer overflow in snifffeedorhtml - CVE-2025-32907: soup-message-headers: correct merge of ranges - CVE-2025-46420: fix leak in...
CLSA-2025-1753124055 libsoup: Fix of 7 CVEs
CVE-2025-32050: fix overflow in appendparamquoted - CVE-2025-32052: fix heap buffer overflow in soupcontentsniffersniff - CVE-2025-32053: fix heap buffer overflow in snifffeedorhtml - CVE-2025-32907: soup-message-headers: correct merge of ranges - CVE-2025-46420: fix leak in...
CLSA-2025-1752921642 tigervnc: Fix of CVE-2025-49175
CVE-2025-49175: fix out-of-bounds read in handling of animated cursors...
CLSA-2025-1752749664 libreswan: Fix of CVE-2024-3652
CVE-2024-3652: fix assertion failure and crash caused by requesting AES-GMAC without specifying esp= line...
CLSA-2025-1752656083 git: Fix of CVE-2025-48384
CVE-2025-48384: config: quote values containing CR character...
CLSA-2025-1752655171 libxml2: Fix of 3 CVEs
CVE-2025-49794: fix use-after-free issue triggered by processing certain elements in input XML file. - CVE-2025-49796: fix memory corruption issue triggered by processing certain sch:name elements in input XML file. - CVE-2025-6021: fix integer overflow in buffer size calculations to prevent...