16515 matches found
CLSA-2022-1643819053 Fixed CVEs in glibc: CVE-2022-23218, CVE-2022-23219
CVE-2022-23218: fix possible buffer overflow in svcunixcreate - CVE-2022-23219: fix possible buffer overflow in clntcreate...
CLSA-2022-1643747494 Fix of CVE: CVE-2020-7071, CVE-2020-7068, CVE-2020-7069, CVE-2020-7070, CVE-2021-21702
CVE-2020-7068: php: Use of freed hash key in the pharparsezipfile function - CVE-2020-7069: php: Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV - CVE-2020-7070: php: URL decoding of cookie names can lead to different interpretation of cookies between browser and server -...
CLSA-2022-1643640508 Fix of CVE: CVE-2022-0261, CVE-2022-0213
CVE-2022-0213: fix going over the end of status line buffer - CVE-2022-0261: fix block insert goes over the end of the line...
CLSA-2022-1643112395 Fix of CVE: CVE-2021-44038
CVE-2021-44038: low privilege escalation during package installation/update due to insecure chmod in spec file...
CLSA-2022-1642084196 Fix of CVE: CVE-2021-3800
CVE-2021-3800: Fix privilege escalation...
CLSA-2022-1641904053 Fix of 14 CVEs
CVE-2018-9138: Fix stack exhaustion - CVE-2018-12641: Fix stack exhaustion - CVE-2018-12697: Fix NULL pointer dereference - CVE-2018-12698: Fix memory consumption - CVE-2018-12699: Fix heap-based buffer overflow - CVE-2018-12700: Fix infinite recursion - CVE-2018-17794: Fix NULL pointer...
CLSA-2021-1640697114 Fix CVE(s): CVE-2021-44224, CVE-2021-44970
SECURITY UPDATE: buffer overflow in the modlua multipart parser - debian/patches/CVE-2021-44970.patch: add test to prevent integer overflow in reqparsebody - CVE-2021-44970 SECURITY UPDATE: null pointer dereference in reverse proxy module - debian/patches/CVE-2021-44224.patch: add tests for retur...
CLSA-2021-1639681859 Fix CVE(s): CVE-2021-3927, CVE-2021-3928
SECURITY UPDATE: Fix heap-based buffer overflow when reading character past end of line - debian/patches/CVE-2021-3927.patch: Correct the cursor column in src/exdocmd.c. - CVE-2021-3927 SECURITY UPDATE: Fix stack-based buffer overflow when reading uninitialized memory when giving spell suggestion...
CLSA-2021-1639578644 Fix CVE(s): CVE-2021-43527
SECURITY REGRESSION: Broken SSL connections - debian/patches/CVE-2021-43527.patch: Add missing break statement...
CLSA-2021-1638804072 Fix CVE(s): CVE-2021-3426
SECURITY UPDATE: directory traversal - debian/patches/CVE-2021-3426.patch: remove 'getfile' feature from pydoc which can be used to leak sensitive data to unauthorized actors. - CVE-2021-3426...
CLSA-2021-1637770001 Fixed CVEs in vim: CVE-2021-3928, CVE-2021-3927
CVE-2021-3927: fix heap-based buffer overflow when reading character past end of line - CVE-2021-3928: fix stack-based buffer overflow when reading uninitialized memory when giving spell suggestions...
CLSA-2021-1636378490 Fix of CVE: CVE-2017-20005
CVE-2017-20005: fix buffer overflow for years that exceed four digits...
CLSA-2021-1635459163 Fix CVE(s): CVE-2021-22946, CVE-2021-22947
SECURITY UPDATE: Protocol downgrade required TLS bypassed - debian/patches/CVE-2021-22946-pre1.patch: separate FTPS from FTP over HTTPS proxy in lib/ftp.c, lib/urldata.h. - debian/patches/CVE-2021-22946-pre2.patch: support PREAUTH response code in lib/imap.c, lib/imap.h, tests/data/Makefile.inc,...
CLSA-2021-1635459154 Fix CVE(s): CVE-2021-28831
SECURITY UPDATE: operation on invalid pointer - debian/patches/CVE-2021-28831.patch: decompressgunzip.c mishandles the error bit on the huftbuild result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data. - CVE-2021-28831...
CLSA-2021-1635459149 Fix CVE(s): CVE-2021-3487
SECURITY UPDATE: - CVE-2021-3487.patch: excessive debug section size can cause excessive memory consumption in bfd's dwarf2.c readsection. - CVE-2021-3487...
CLSA-2021-1635458969 Fix CVE(s): CVE-2021-40438, CVE-2021-34798, CVE-2021-39275
SECURITY UPDATE: Buffer overflow with crafted input - debian/patches/CVE-2021-39275.patch:apescapequotes may write beyond the end of a buffer when given malicious input - CVE-2021-39275 SECURITY UPDATE: Malformed requests may cause the server to dereference a NULL pointer -...
CLSA-2021-1635439636 Fix of CVE: CVE-2017-6363, CVE-2021-40145
CVE-2021-40145: check for memory allocation errors processing GD2 images - CVE-2017-6363: make sure transparent index is within bounds of the palette...
CLSA-2021-1634925634 Fixed 9 CVEs in squid34
CVE-2020-15049: fix incorrect validation of Content-Length field leading to Http smuggling and Poisoning attack - CVE-2020-14058: fix handling of unknown SSL errors which resulted in denial of service - CVE-2020-25097: fix improper input validation allowing HTTP smuggling from trusted client -...
CLSA-2021-1634922666 Fixed CVE-2021-39275 in httpd
CVE-2021-39275: apescapequotes algorithm which led to buffer overflow...
CLSA-2021-1634922588 Fixed CVE-2021-28153 in glib2
Fixed CVE-2021-28153: gfilereplace with GFILECREATEREPLACEDESTINATION creates empty target for dangling symlink...
CLSA-2021-1634922250 Fixed CVEs in bind: CVE-2021-25214, CVE-2021-25216, CVE-2021-25215
A broken inbound incremental zone update IXFR can cause named to terminate unexpectedly CVE-2021-25214 - An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself CVE-2021-25215 - A second vulnerability in BIND's GSSAPI security...
CLSA-2021-1634919016 Fixed CVEs in gd: CVE-2017-6363, CVE-2021-40145
CVE-2021-40145: check for memory allocation errors processing GD2 images - CVE-2017-6363: make sure transparent index is within bounds of the palette...
CLSA-2021-1632262221 Fix of CVE: CVE-2020-8517, CVE-2021-28651, CVE-2020-15049, CVE-2020-8449, CVE-2020-8450, CVE-2020-24606, CVE-2020-25097, CVE-2020-11945, CVE-2020-14058
CVE-2020-15049: fix incorrect validation of Content-Length field leading to Http smuggling and Poisoning attack - CVE-2020-14058: fix handling of unknown SSL errors which resulted in denial of service - CVE-2020-25097: fix improper input validation allowing HTTP smuggling from trusted client -...
CLSA-2021-1632261987 Fix of CVE: CVE-2021-33909
ELS-130: netfilter: xtables: add missing tables zeroing - CLKRN-800: CVE-2021-33909: seqfile: disallow extremely large seq buffer allocation...
CLSA-2021-1632261705 Fix of CVE: CVE-2021-25215, CVE-2021-25214, CVE-2021-25216
A broken inbound incremental zone update IXFR can cause named to terminate unexpectedly CVE-2021-25214 - An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself CVE-2021-25215 - A second vulnerability in BIND's GSSAPI security...
CLSA-2021-1629902677 Fix of CVE: CVE-2020-14058, CVE-2020-15049
CVE-2020-14058: fix handling of unknown SSL errors which resulted in denial of service - CVE-2020-15049: fix incorrect validation of Content-Length field leading to Http smuggling and Poisoning attack...
CLSA-2021-1623075923 Fix of CVE: CVE-2021-28153
Fixed CVE-2021-28153: gfilereplace with GFILECREATEREPLACEDESTINATION creates empty target for dangling symlink...
CLSA-2026-1791926769 TuxCare security update for org.asynchttpclient (13 CVEs)
TuxCare rebuilt 14 org.asynchttpclient packages to address 13 CVEs. Fixed in 2.12.1-tuxcare.1...
CLSA-2026-1791742369 TuxCare security update for league/flysystem (1 CVE)
TuxCare rebuilt league/flysystem to address 1 CVE. Fixed in 1.0.70-p2+tuxcare...
CLSA-2026-1791629281 TuxCare security update for fastify (2 CVEs)
TuxCare rebuilt fastify to address 2 CVEs. Fixed in 3.29.5-tuxcare.7...
CLSA-2026-1791626237 TuxCare security update for vm2 (1 CVE)
TuxCare rebuilt vm2 to address 1 CVE. Fixed in 3.11.7-tuxcare.2...
CLSA-2026-1791359284 TuxCare security update for shell-quote (1 CVE)
TuxCare rebuilt shell-quote to address 1 CVE. Fixed in 1.8.3-tuxcare.1...
CLSA-2026-1791279062 TuxCare security update for vm2 (8 CVEs)
TuxCare rebuilt vm2 to address 8 CVEs. Fixed in 3.11.7-tuxcare.1...
CLSA-2026-1791228558 TuxCare security update for org.springframework.integration (1 CVE)
TuxCare rebuilt 39 org.springframework.integration packages to address 1 CVE. Fixed in 5.5.20-tuxcare.7...
CLSA-2026-1791218487 TuxCare security update for org.springframework (28 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 28 CVEs. Fixed in 4.3.21.RELEASE-tuxcare.1...
CLSA-2026-1791034160 TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 18.2.12-tuxcare.8...
CLSA-2026-1791030849 TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 3 @angular packages to address 1 CVE. Fixed in 16.2.11-tuxcare.6...
CLSA-2026-1790965180 TuxCare security update for devalue (3 CVEs)
TuxCare rebuilt devalue to address 3 CVEs. Fixed in 5.9.0-tuxcare.3...
CLSA-2026-1790845807 TuxCare security update for django (2 CVEs)
TuxCare rebuilt django to address 2 CVEs. Fixed in 5.0.post16+tuxcare...
CLSA-2026-1790774766 TuxCare security update for 86 packages (8 CVEs)
TuxCare rebuilt 86 packages to address 8 CVEs. Fixed in 9.4.65.tuxcare0001...
CLSA-2026-1790755853 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.18-tuxcare.5...
CLSA-2026-1790604916 TuxCare security update for webpack-dev-middleware (1 CVE)
TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 5.3.4-tuxcare.1...
CLSA-2026-1790597633 TuxCare security update for @angular (8 CVEs)
TuxCare rebuilt 13 @angular packages to address 8 CVEs. Fixed in 19.2.14-tuxcare.1...
CLSA-2026-1790469964 TuxCare security update for @angular (3 CVEs)
TuxCare rebuilt 3 @angular packages to address 3 CVEs. Fixed in 15.0.3-tuxcare.6...
CLSA-2026-1790458446 TuxCare security update for sharp (1 CVE)
TuxCare rebuilt sharp to address 1 CVE. Fixed in 0.27.2-tuxcare.2...
CLSA-2026-1790451381 TuxCare security update for @angular (3 CVEs)
TuxCare rebuilt 3 @angular packages to address 3 CVEs. Fixed in 13.3.0-tuxcare.6...
CLSA-2026-1790431292 TuxCare security update for @angular (3 CVEs)
TuxCare rebuilt 5 @angular packages to address 3 CVEs. Fixed in 10.1.0-tuxcare.7...
CLSA-2026-1790183894 TuxCare security update for qs (1 CVE)
TuxCare rebuilt qs to address 1 CVE. Fixed in 6.2.6-tuxcare.1...