10560 matches found
CLSA-2026-1773015268 TuxCare security update for trim-newlines (1 CVE)
TuxCare rebuilt trim-newlines to address 1 CVE. Fixed in 2.0.0-tuxcare.1...
CLSA-2026-1773015249 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 21 org.springframework packages to address 1 CVE. Fixed in 4.3.30.RELEASE-tuxcare.2...
CLSA-2026-1773101684 TuxCare security update for moment (3 CVEs)
TuxCare rebuilt moment to address 3 CVEs. Fixed in 2.10.6-tuxcare.1...
CLSA-2026-1773620080 TuxCare security update for fastify (2 CVEs)
TuxCare rebuilt fastify to address 2 CVEs. Fixed in 3.29.5-tuxcare.3...
CLSA-2026-1773101683 TuxCare security update for form-data (1 CVE)
TuxCare rebuilt form-data to address 1 CVE. Fixed in 0.2.0-tuxcare.1...
CLSA-2026-1773101692 TuxCare security update for debug (1 CVE)
TuxCare rebuilt debug to address 1 CVE. Fixed in 2.3.3-tuxcare.2...
CLSA-2026-1772756024 TuxCare security update for org.apache.thrift (4 CVEs)
TuxCare rebuilt 2 org.apache.thrift packages to address 4 CVEs. Fixed in 0.9.3-tuxcare.2...
CLSA-2026-1772669617 TuxCare security update for concat-stream (1 CVE)
TuxCare rebuilt concat-stream to address 1 CVE. Fixed in 1.5.0-tuxcare.1...
CLSA-2025-1765930332 TuxCare security update for mysql-connector-python (1 CVE)
TuxCare rebuilt mysql-connector-python to address 1 CVE. Fixed in 8.4.0.post1+tuxcare...
CLSA-2025-1763943168 TuxCare security update for urllib3 (1 CVE)
TuxCare rebuilt urllib3 to address 1 CVE. Fixed in 1.26.4.post2+tuxcare...
CLSA-2025-1755475972 TuxCare security update for uvicorn (2 CVEs)
TuxCare rebuilt uvicorn to address 2 CVEs. Fixed in 0.11.6.post1+tuxcare...
CLSA-2026-1772496675 TuxCare security update for socket.io-parser (3 CVEs)
TuxCare rebuilt socket.io-parser to address 3 CVEs. Fixed in 3.2.0-tuxcare.1...
CLSA-2026-1772496676 TuxCare security update for d3-color (1 CVE)
TuxCare rebuilt d3-color to address 1 CVE. Fixed in 1.4.1-tuxcare.1...
CLSA-2025-1753747897 TuxCare security update for django (1 CVE)
TuxCare rebuilt django to address 1 CVE. Fixed in 5.0.1.post1+tuxcare...
CLSA-2026-1770595751 TuxCare security update for org.apache.commons:commons-lang3 (1 CVE)
TuxCare rebuilt org.apache.commons:commons-lang3 to address 1 CVE. Fixed in 3.17.0-tuxcare.1...
CLSA-2026-1770163741 TuxCare security update for 86 packages (2 CVEs)
TuxCare rebuilt 86 packages to address 2 CVEs. Fixed in 9.4.59.tuxcare00001...
CLSA-2026-1771200578 TuxCare security update for marked (2 CVEs)
TuxCare rebuilt marked to address 2 CVEs. Fixed in 4.0.9-tuxcare.1...
CLSA-2026-1771546205 TuxCare security update for flat (1 CVE)
TuxCare rebuilt flat to address 1 CVE. Fixed in 2.0.1-tuxcare.1...
CLSA-2026-1771978232 TuxCare security update for 38 packages (1 CVE)
TuxCare rebuilt 38 packages to address 1 CVE. Fixed in 9.0.90-tuxcare.3...
CLSA-2025-1765930090 TuxCare security update for 38 packages (9 CVEs)
TuxCare rebuilt 38 packages to address 9 CVEs. Fixed in 9.0.75-tuxcare.2...
CLSA-2025-1763338014 TuxCare security update for 38 packages (10 CVEs)
TuxCare rebuilt 38 packages to address 10 CVEs. Fixed in 9.0.90-tuxcare.1...
CLSA-2025-1765411678 TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 5 CVEs. Fixed in 5.3.29-tuxcare.2...
CLSA-2025-1759709173 TuxCare security update for commons-lang:commons-lang (1 CVE)
TuxCare rebuilt commons-lang:commons-lang to address 1 CVE. Fixed in 2.6-tuxcare.1...
CLSA-2025-1762906008 TuxCare security update for org.springframework (13 CVEs)
TuxCare rebuilt 23 org.springframework packages to address 13 CVEs. Fixed in 5.2.0.RELEASE-tuxcare.1...
CLSA-2025-1759363571 TuxCare security update for 206 packages (1 CVE)
TuxCare rebuilt 206 packages to address 1 CVE. Fixed in 3.5.9.tuxcare.1...
CLSA-2025-1752105760 TuxCare security update for org.yaml:snakeyaml (3 CVEs)
TuxCare rebuilt org.yaml:snakeyaml to address 3 CVEs. Fixed in 1.26.tuxcare.2...
CLSA-2025-1751328254 TuxCare security update for org.yaml:snakeyaml (1 CVE)
TuxCare rebuilt org.yaml:snakeyaml to address 1 CVE. Fixed in 1.29.tuxcare.1...
CLSA-2026-1780054328 Fix CVE(s): CVE-2026-3039
SECURITY UPDATE: GSS-API resource leak triggered by multi-round TKEY - debian/patches/CVE-2026-3039.patch: reject GSSSCONTINUENEEDED in dstgssapiacceptctx and release the partial security context and gouttoken so they don't accumulate per malicious TKEY query. - CVE-2026-3039...
CLSA-2026-1779789531 Fix CVE(s): CVE-2026-9256
SECURITY UPDATE: fix heap buffer overflow in ngxhttprewritemodule with overlapping captures - debian/patches/CVE-2026-9256.patch: fix heap buffer overflow in ngxhttprewritemodule with overlapping captures - CVE-2026-9256...
CLSA-2026-1779694338 rsync: Fix of CVE-2026-29518
CVE-2026-29518: fix daemon-no-chroot sender TOCTOU symlink race by opening source files via securerelativeopen from module root...
CLSA-2025-1754940263 Fix CVE(s): CVE-2024-46901
SECURITY UPDATE: Insufficient validation of filenames against control characters in repositories served via moddavsvn - debian/patches/CVE-2024-46901.patch: fix moddavsvn denial-of-service via control characters in paths...
CLSA-2026-1779358120 Fix CVE(s): CVE-2026-5773
SECURITY UPDATE: wrong reuse of SMB connection - debian/patches/CVE-2026-5773.patch: disable connection reuse for SMBS in lib/smb.c. - CVE-2026-5773...
CLSA-2026-1779356706 vim: Fix of 2 CVEs
CVE-2022-2343: heap-buffer-overflow in inscompladdinfercase on long line with 'infercase' upstream vim 9.0.0045 - CVE-2022-3296: stack underflow in exfinally / exendtry when :finally lacks an enclosing :try upstream vim 9.0.0577...
CLSA-2025-1751297888 Update of shim-signed
Make this package installable on a system having an either Cloudlinux or RHEL7 signed kernel - SBAT variables are used now...
CLSA-2026-1779272835 gnutls: Fix of CVE-2026-42010
CVE-2026-42010: fix RSA-PSK identity truncation allowing authentication bypass via NUL byte in client-supplied username...
CLSA-2026-1779215113 fribidi: Fix of CVE-2022-25308
CVE-2022-25308: fix stack-based buffer overflow...
CLSA-2026-1779183103 vim: Fix of 6 CVEs
CVE-2021-3903: do not set VALIDBOTLINE in updatetopline when screen is invalid - CVE-2022-1616: tighten appendcommand loop bound + pre-write length check to avoid buffer overflow with composing chars - CVE-2022-2042: initialize attr in spellmoveto and capture emptyline before mlgetbuf invalidates...
CLSA-2026-1779153000 golang: Fix of CVE-2026-32283
CVE-2026-32283: fix TLS 1.3 deadlock in crypto/tls handleKeyUpdate when a peer sends multiple key update messages requesting a response in a single record by adding a locked flag to setReadTrafficSecret so it calls sendAlertLocked instead of re-locking the connection mutex...
CLSA-2026-1779152708 grafana: Fix of CVE-2026-32283
CVE-2026-32283: rebuild against golang = 1.25.7-1.el96.tuxcare.els5 to fix crypto/tls DoS where multiple post-handshake KeyUpdate messages in a single TLS 1.3 record deadlock the connection setReadTrafficSecret reacquired the conn mutex via sendAlert...
CLSA-2026-1779120418 git-lfs: Fix of CVE-2026-32283
rebuild with golang 1.25.7-1.el96.tuxcare.els5 to fix CVE-2026-32283 - CVE-2026-32283: prevent denial of service in crypto/tls caused by multiple TLS 1.3 key update messages in a single record...
CLSA-2026-1779131668 rsync: Fix of CVE-2026-41035
CVE-2026-41035: receiver use-after-free in receivexattr via untrusted xattr count passed to qsort...
CLSA-2026-1779129979 vim: Fix of 3 CVEs
CVE-2022-0261: fix heap-based buffer overflow in blockinsert in src/ops.c - CVE-2022-0318: fix heap-based buffer overflow in utfheadoff in mbyte.c - CVE-2022-3520: clamp bopend.col = 0 in doput to prevent Visual block put underflow...
CLSA-2026-1779129362 Fix CVE(s): CVE-2026-45186
SECURITY UPDATE: fix quadratic complexity in attribute name collision check - debian/patches/CVE-2026-45186.patch: fix quadratic complexity in attribute name collision check - CVE-2026-45186...
CLSA-2026-1779124827 log4j: Fix of CVE-2026-34479
CVE-2026-34479: fix Log4j1XmlLayout invalid XML 1.0 character escape...
CLSA-2026-1778939818 Fix of 6 CVEs
SECURITY UPDATE: fix out-of-bounds read in urldecode via signed-char to ctype.h GHSA-m8rr-4c36-8gq4 - debian/patches/CVE-2026-7258.patch: fix out-of-bounds read in urldecode via signed-char to ctype.h GHSA-m8rr-4c36-8gq4 - CVE-2026-7258 SECURITY UPDATE: fix stale SOAPGLOBAL refmap pointer with...
CLSA-2026-1778895590 nginx: Fix of CVE-2026-42945
CVE-2026-42945: fix heap buffer overflow in ngxhttprewritemodule...
CLSA-2026-1778881275 samba: Fix of CVE-2023-42669
CVE-2023-42669: disable rpcecho server by default; rpcecho allowed a blocking sleep in the single-threaded rpc worker, enabling a DoS...
CLSA-2026-1778845249 redis: Fix of 2 CVEs
CVE-2026-23631: fix use-after-free in readSyncBulkPayload when fullsync happens while a Lua script is timed out on the replica - CVE-2026-25243: fix invalid memory access in RESTORE on crafted zipmap, listpack and stream PEL payloads...
CLSA-2026-1778838399 golang: Fix of CVE-2026-32282
CVE-2026-32282: fix TOCTOU race in os.Root.Chmod on Linux that allowed symlink-based escapes from the restricted root by switching to fchmodat2 with /proc/self/fd fallback...