16562 matches found
CLSA-2025-1741779141 binutils: Fix of CVE-2025-0840
CVE-2025-0840: fix stack-buffer-overflow at objdump disassemblebytes...
CLSA-2025-1741637055 cups: Fix of CVE-2024-47175
CVE-2024-47175: fix improper input validation in cups for PPD files...
CLSA-2025-1741635940 python3: Fix of 2 CVEs
CVE-2024-11168: fix improper validation of bracketed hosts in urllib.parse.urlsplit and urlparse functions - CVE-2025-0938: fix incomplete algorithm of validating hosts by disallowing square brackets in domain names...
CLSA-2025-1741629104 libxml2: Fix of CVE-2025-27113
CVE-2025-27113: fix compilation of explicit child axis...
CLSA-2025-1741628775 libxml2: Fix of CVE-2025-27113
CVE-2025-27113: fix compilation of explicit child axis...
CLSA-2025-1741291038 expat: Fix of CVE-2024-28757
CVE-2024-28757: Prevent billion laughs attacks in isolated external parser part of 839 Reject direct parameter entity recursion part of 839...
CLSA-2025-1741286016 libxml2: Fix of CVE-2025-27113
CVE-2025-27113: fix compilation of explicit child axis...
CLSA-2025-1741216880 bind: Fix of CVE-2024-11187
CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9...
CLSA-2025-1741216108 bind: Fix of CVE-2024-11187
CVE-2024-11187: limit additional section record while queries processing to prevent CPU exhaustion...
CLSA-2025-1741215575 Fix CVE(s): CVE-2024-31068, CVE-2024-36293, CVE-2024-39279
New microcode update packages from upstream up to 2025-02-11: - New microcodes: sig 0x000a06f3, pfmask 0x01, 2024-11-22, rev 0x3000330, size 1533952 sig 0x000b0674, pfmask 0x32, 2024-09-25, rev 0x012c, size 211968 sig 0x000b06f6, pfmask 0x07, 2024-08-01, rev 0x0038, size 225280 sig 0x000b06f7,...
CLSA-2025-1741126840 dhcp: Fix of CVE-2023-4408
CVE-2023-4408: use hashtable when parsing a message...
CLSA-2025-1741126041 bind: Fix of CVE-2024-11187
CVE-2024-11187: fix excessive resource usage by limiting additional section processing and adjusting resolver tests...
CLSA-2025-1741033614 libvirt: Fix of CVE-2024-2494
CVE-2024-2494: check for negative array lengths before allocation in remotedaemondispatch...
CLSA-2025-1740823970 bind: Fix of CVE-2024-11187
CVE-2024-11187: Limit the additional processing for large RDATA sets...
CLSA-2025-1740656525 kernel: Fix of 3 CVEs
NFSv4.0: Fix a use-after-free problem in the asynchronous open CVE-2024-53173 - ALSA: usb-audio: Fix out of bounds reads when finding clock sources CVE-2024-53150 - misc/libmasm/module: Fix two use after free in ibmasminitone CVE-2021-47334...
CLSA-2025-1740645663 python3: Fix of CVE-2007-4559
CVE-2007-4559: implement PEP 706 - a filter in the tarfile module to prevent directory traversal vulnerability...
CLSA-2025-1740645491 python3.11: Fix of CVE-2023-27043
CVE-2023-27043: add a strict parsing mode to prevent incorrect address interpretation. By default, strict=True is enabled. If you need the legacy behavior, explicitly set strict=False when calling parseaddr or getaddresses - Additionally, strict parsing can be disabled globally by setting the...
CLSA-2025-1740471603 python3.11: Fix of CVE-2007-4559
CVE-2007-4559: add security filter in the tarfile module to prevent directory traversal attacks. Uses filter="data" by default to block unsafe filenames; set filter="tar" to keep legacy behavior...
CLSA-2025-1740132301 krb5: Fix of CVE-2024-3596
CVE-2024-3596: Generate and verify message MACs in libkrad for vulnerability in RADIUS protocol which allows attackers to forge authentication responses...
CLSA-2025-1739825397 freerdp: Fix of 6 CVEs
CVE-2024-32458: fix missing input length checks - CVE-2024-32459: fix missing input length check - CVE-2024-32460: fix out-of-bound read in interleaveddecompress - CVE-2024-32039: fix integer overflow - CVE-2024-32040: fix missing check - CVE-2024-32041: fix integer overflow...
CLSA-2025-1739821812 php: Fix of 3 CVEs
CVE-2024-8925: fix erroneous parsing of multipart form data contained in an HTTP POST request - CVE-2024-9026: fix log tampering in PHP-FPM - CVE-2024-5458: fix early-out for ipv6 hostname validation, ensure full check is performed...
CLSA-2025-1739525173 Fix CVE(s): CVE-2024-53104
CVE-url: https://ubuntu.com/security/CVE-2024-53104 - media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat...
CLSA-2025-1739387995 krb5: Fix of CVE-2024-3596
CVE-2024-3596: implement support for Message-Authenticator in libkrad...
CLSA-2025-1739387678 tomcat: Fix of CVE-2023-42795
CVE-2023-42795: improve handling of failures during recycle methods...
CLSA-2025-1739386692 libvirt: Fix of 2 CVEs
CVE-2024-2496: fix memory corruption listing interfaces - CVE-2024-4418: fix stack use-after-free in event loop...
CLSA-2025-1739386567 git: Fix of 2 CVEs
CVE-2024-32020: fix issue where local clones may hardlink files into target repository's object database when owned by different user - CVE-2024-32021: fix issue with hardlinks to arbitrary user-readable files when cloning local source repository containing symlinks...
CLSA-2025-1738958235 rsync: Fix of CVE-2024-12087
CVE-2024-12087: fix path traversal vulnerability that allows write files outside of the client's intended destination directory by malicious server...
CLSA-2025-1738632106 rsync: Fix of 2 CVEs
CVE-2024-12086: fix infoleak when connect to malicious server - CVE-2024-12088: properly verify if a symbolic link destination contains another symbolic link within it when using the '--safe-links' option...
CLSA-2025-1738632046 Fix CVE(s): CVE-2024-12086, CVE-2024-12087, CVE-2024-12088
SECURITY UPDATE: possible information leak via checksum comparison - debian/patches/CVE-2024-12086.patch: fix info leak when connecting to malicious server - CVE-2024-12086 SECURITY UPDATE: arbitraty file write via inproper symlink verification - debian/patches/CVE-2024-12087.patch: fix writing...
CLSA-2025-1738170437 hivex: Fix of CVE-2021-3622
CVE-2021-3622: fix possible stack overflow by adding the depth of recursion in the getchildren...
CLSA-2025-1738170434 Fix CVE(s): CVE-2024-12747
SECURITY UPDATE: race condition during rsync's handling of symbolic links - debian/patches/CVE-2024-12747.patch: prevent symlink race preventing a normal file from being replaced by a symlink - CVE-2024-12747 debian/rules, debian/patches/series: use series file to manage patches...
CLSA-2025-1737993483 vim: Fix of CVE-2023-0049
CVE-2023-0049: fix invalid memory access with bad 'statusline' value...
CLSA-2025-1737464476 rsync: Fix of CVE-2024-12085
CVE-2024-12085: prevent leak of uninitialised stack data in hashsearch...
CLSA-2025-1737153996 squid34: Fix of CVE-2024-25617
CVE-2024-25617: Improve handling of expanding HTTP header values to prevent DoS...
CLSA-2025-1737153672 git: Fix of CVE-2024-32002
CVE-2024-32002: fix submodule paths to not contain symlinks...
CLSA-2025-1736859209 libgcrypt: Fix of CVE-2024-2236
CVE-2024-2236: fix timing-based side-channel vulnerability in RSA implementation...
CLSA-2025-1736856534 python3.11: Fix of CVE-2024-9287
CVE-2024-9287: Quote path names when creating virtual environments to prevent command injection in activation scripts...
CLSA-2025-1736503077 Fix of 5 CVEs
New microcode update packages from upstream up to 2024-11-12: - Updated microcodes: sig 0x000806f4, pfmask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x000806f5, pfmask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x000806f6, pfmask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig...
CLSA-2025-1736502911 Fix of 5 CVEs
New microcode update packages from upstream up to 2024-11-12: - Updated microcodes: sig 0x000806f4, pfmask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x000806f5, pfmask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x000806f6, pfmask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig...
CLSA-2024-1735310784 Fix CVE(s): CVE-2024-11233
SECURITY UPDATE: Out-of-bounds read in quoted-printable decoder - debian/patches/CVE-2024-11233.patch: Fix buffer handling in convert.quoted-printable-decode filter to prevent one-byte out-of-bounds read - CVE-2024-11233...
CLSA-2024-1735300164 pam: Fix of CVE-2024-10963
CVE-2024-10963: pamaccess: rework resolving of tokens as hostname...
CLSA-2024-1735130624 php: Fix of CVE-2024-8929
CVE-2024-8929: Fix leak partial content of the heap through heap buffer over-read issue...
CLSA-2024-1735128985 Fix CVE(s): CVE-2024-50602
SECURITY UPDATE: Crash in XMLResumeParser due to XMLStopParser issue - debian/patches/CVE-2024-50602.patch: Refuse to stop/suspend an unstarted parser due to XMLERRORNOTSTARTED - debian/patches/CVE-2024-50602-1.patch: Explicitly specify XMLPARSING in XMLStopParser to ensure correct parsing status...
CLSA-2024-1735127885 Fix CVE(s): CVE-2022-38076
CVE-2022-38076 - linux-firmware: Update for Intel Dual Band Wireless AC 3168 - linux-firmware: Upadte for Intel Wireless 7265 Rev D Family - linux-firmware: Update for Intel Dual Band Wireless AC 3165 - linux-firmware: Update for Intel Wireless AC 9560 - linux-firmware: Update for Intel Wireless ...
CLSA-2024-1735065830 Fix CVE(s): CVE-2024-11233
SECURITY UPDATE: Security vulnerability in package - debian/patches/CVE-2024-11233.patch: fix error in convert.quoted printable-decode filter certain data leading to buffer overread. Fix segfault with streams and invalid data. - CVE-2024-11233...
CLSA-2024-1734704732 Fix CVE(s): CVE-2024-11234
SECURITY UPDATE: improper sanitization of URIs leading to HTTP request smuggling - debian/patches/CVE-2024-11234.patch: Fix HTTP wrapper full URI path to disallow CR or LF characters - CVE-2024-11234...
CLSA-2024-1734643401 Fix CVE(s): CVE-2024-6923
SECURITY UPDATE: Improper quoting of newlines in email headers - debian/patches/CVE-2024-6923.patch: Fix serialization of display name in originator or destination address fields with both encoded words and special chars - CVE-2024-6923...
CLSA-2024-1734543983 php: Fix of CVE-2024-11233
CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode filter...