10560 matches found
CLSA-2026-1772638779 cups-filters: Fix of CVE-2025-57812
CVE-2025-57812: fix out-of-bounds read/write when processing crafted TIFF images; validate bytes-per-pixel and use correct pixel buffer size, preventing memory access outside the buffer...
CLSA-2026-1772572505 munge: Fix of CVE-2026-25506
CVE-2026-25506: fix buffer overflow in message parsing and add bounds checks and input validation for address length; prevent leak of cryptographic MAC subkey and forging of arbitrary credentials...
CLSA-2026-1772571803 munge: Fix of CVE-2026-25506
CVE-2026-25506: fix buffer overflow in message parsing and add bounds checks and input validation for address length; prevent leak of cryptographic MAC subkey and forging of arbitrary credentials...
CLSA-2026-1772469540 edk2: Fix of CVE-2025-9230
CVE-2025-9230: fix out-of-bounds read & write in RFC 3211 KEK Unwrap in openssl bundled package...
CLSA-2026-1772464109 Fix CVE(s): CVE-2026-25897, CVE-2026-26284
SECURITY UPDATE: security vulnerability CVE-2026-25897 - debian/patches/CVE-2026-25897.patch: prevent integer overflow during pixel buffer size calculation by using checked multiplication and validating rows addition; issue caused by unvalidated header values allowing overflow and incorrect...
CLSA-2026-1772452374 ImageMagick: Fix of 9 CVEs
CVE-2026-25798: fix NULL pointer dereference in ClonePixelCacheRepository - CVE-2026-24481: fix heap information disclosure in PSD handler - CVE-2026-25799: fix division-by-zero in YUV sampling factor validation - CVE-2026-26284: fix out-of-bounds read in PCD Huffman decoder - CVE-2026-25897: fix...
CLSA-2026-1772448804 grafana-pcp: Fix of 3 CVEs
Rebuild against recent Go compiler - CVE-2025-61726: fix net/url excessive memory consumption when parsing large forms with many unique query parameters - CVE-2025-61729: fix crypto/x509 certificate verification allowing excessive resource consumption via HostnameError.Error - CVE-2025-68121: fix...
CLSA-2026-1772186153 glibc: Fix of CVE-2025-15281
CVE-2025-15281: fix wordexp with WRDEREUSE and WRDEAPPEND returning uninitialized pointers in wewordv by resetting wewordc after wordfree...
CLSA-2026-1772102739 openssl: Fix of CVE-2025-69419
CVE-2025-69419: fix one-byte write-before-buffer triggered by malicious PKCS12 BMPString containing non-ASCII BMP code point; validate UTF8putc return and use correct destination capacity during conversion from UTF-16BE into UTF-8...
CLSA-2026-1772101256 httpd: Fix of CVE-2024-42516
CVE-2024-42516: fix HTTP response splitting by reordering header validation to occur after full response header assembly...
CLSA-2026-1772098723 openssl: Fix of CVE-2025-69419
CVE-2025-69419: fix one-byte write-before-buffer triggered by malicious PKCS12 BMPString containing non-ASCII BMP code point; validate UTF8putc return and use correct destination capacity during conversion from UTF-16BE into UTF-8...
CLSA-2026-1771956748 gimp: Fix of CVE-2025-15059
CVE-2025-15059: fix PSP file loader to validate channel types for grayscale images, preventing invalid memory access from incorrect offset computation...
CLSA-2026-1771955371 openssl: Fix of CVE-2025-69419
CVE-2025-69419: fix one-byte write-before-buffer triggered by malicious PKCS12 BMPString containing non-ASCII BMP code point; validate UTF8putc return and use correct destination capacity during conversion from UTF-16BE into UTF-8...
CLSA-2026-1771931183 python2: Fix of CVE-2025-15367
CVE-2025-15367: reject control characters in POP3 commands to prevent command injection via embedded newlines...
CLSA-2026-1771858411 golang: Fix of CVE-2025-61728
CVE-2025-61728: fix denial-of-service in archive/zip by replacing super-linear index construction with an efficient algorithm...
CLSA-2026-1771857969 Fix CVE(s): CVE-2025-14087, CVE-2025-14512
SECURITY UPDATE: Buffer underflow in GVariant parser leads to heap corruption - debian/patches/CVE-2025-1408714512.patch: Fix integer overflows in GVariant text format parser when processing input longer than INTMAX - CVE-2025-14087 SECURITY UPDATE: Integer overflow in escapebytestring leads to...
CLSA-2026-1771854105 glib2: Fix of CVE-2025-14087
CVE-2025-14087: fix integer overflow in GVariant parser leading to heap corruption via buffer underflow when processing malicious input strings...
CLSA-2026-1771597605 Fix CVE(s): CVE-2025-15367
SECURITY UPDATE: defect in poplib module, when passed a user-controlled command, commands can be injected using newlines - debian/patches/CVE-2025-15367.patch: Fix command injection by rejecting commands containing control characters - CVE-2025-15367...
CLSA-2026-1771597308 Fix CVE(s): CVE-2025-15366
SECURITY UPDATE: defect in imaplib module, when passed a user-controlled command, commands can be injected using newlines - debian/patches/CVE-2025-15366.patch: Fix command injection by rejecting commands containing control characters - CVE-2025-15366...
CLSA-2026-1771580716 glib2: Fix of CVE-2025-14087
CVE-2025-14087: Fix integer overflow in GVariant parser leading to heap corruption via buffer underflow when processing malicious input strings...
CLSA-2026-1771519029 libsoup: Fix of 2 CVEs
CVE-2026-1761: fix stack-based buffer overflow in multipart HTTP response parsing caused by incorrect length calculation in soupfilterinputstreamreaduntil - CVE-2026-0719: fix stack-based buffer overflow in NTLM authentication caused by integer overflow in md4sum with excessively long passwords...
CLSA-2026-1771518763 libsoup: Fix of 2 CVEs
CVE-2026-1761: fix stack-based buffer overflow in multipart HTTP response parsing caused by incorrect length calculation in soupfilterinputstreamreaduntil - CVE-2026-0719: fix stack-based buffer overflow in NTLM authentication caused by integer overflow in md4sum with excessively long passwords...
CLSA-2026-1771501223 curl: Fix of CVE-2025-15079
CVE-2025-15079: fix accepting hosts not present in the specified knownhosts during SSH-based SCP/SFTP transfers when global knownhosts contained them restrict host verification to the specified knownhosts file...
CLSA-2026-1771494614 python3: Fix of 3 CVEs
CVE-2025-15366: reject control characters in IMAP commands - CVE-2025-15367: reject control characters in POP3 commands - CVE-2026-1299: reject the incorrectly folded headers in "BytesGenerator"...
CLSA-2026-1771407667 freerdp: Fix of CVE-2026-22856
CVE-2026-22856: fix heap use-after-free in createirpthread...
CLSA-2026-1771425162 ImageMagick: Fix of 2 CVEs
CVE-2025-68618: fix DOS when processing a specially crafted malicious SVG file - CVE-2025-69204: fix DOS due to buffer overflow during image processing of a specially crafted SVG image...
CLSA-2026-1771412927 glib2: Fix of CVE-2025-14087
CVE-2025-14087: fix integer overflow when parsing bytestrings...
CLSA-2026-1771329952 Fix CVE(s): CVE-2025-13601
SECURITY UPDATE: Heap-based buffer overflow - debian/patches/CVE-2025-13601.patch: Fix heap-based buffer overflow by correcting buffer size calculation in gescapeuristring - CVE-2025-13601...
CLSA-2026-1771237525 Fix CVE(s): CVE-2025-69419
SECURITY UPDATE: check return code of UTF8putc - debian/patches/CVE-2025-69419.patch: add missing return code checks for UTF8putc in astrex.c and OPENSSLuni2utf8 in p12utl.c. - CVE-2025-69419...
CLSA-2026-1771236630 nodejs: Fix of CVE-2026-21637
CVE-2026-21637: route callback exceptions through error handlers...
CLSA-2026-1770911837 brotli: Fix of CVE-2025-6176
CVE-2025-6176: fix excessive resource consumption during brotli decompression...
CLSA-2026-1770717529 Fix CVE(s): CVE-2025-69421
SECURITY UPDATE: check oct argument for NULL in PKCS12itemdecryptd2ie - debian/patches/CVE-2025-69421.patch: fix a NULL pointer dereference in the PKCS12itemdecryptd2iex function. - CVE-2025-69421...
CLSA-2026-1770395482 Fix CVE(s): CVE-2026-24515
SECURITY UPDATE: XMLExternalEntityParserCreate does not copy unknown encoding handler user data - debian/patches/CVE-2026-24515.patch: Fix a null pointer dereference in the XML parser caused by the failure to copy user data for unknown encoding handlers - CVE-2026-24515...
CLSA-2026-1770370767 curl: Fix of CVE-2025-9086
CVE-2025-9086: cookie: don't treat the leading slash as trailing...
CLSA-2026-1770219452 binutils: Fix of CVE-2022-47673
Fix CVE-2022-47673 patch...
CLSA-2026-1770111651 glib2: Fix of CVE-2025-13601
CVE-2025-13601: Fixed incorrect buffer size calculation in gescapeuristring and added fuzz tests - 4-0001-fix-gdatetime-test: fixes gdatetime test failing...
CLSA-2026-1769773749 net-snmp: Fix of CVE-2025-68615
CVE-2025-68615: fix buffer overflow vulnerability in net-snmp snmptrapd daemon...
CLSA-2026-1769597819 Fix CVE(s): CVE-2025-58436
SECURITY UPDATE: cupsd DoS via slow client connections - debian/patches/CVE-2025-58436.patch: implement non-blocking I/O and connection timeouts to prevent slow clients from blocking cupsd. - CVE-2025-58436...
CLSA-2026-1769593159 gpsd-minimal: Fix of 2 CVEs
CVE-2025-67268: fix heap-based out-of-bounds write in NMEA2000 Driver - CVE-2025-67269: fix integer underflow leading to DoS in NAVCOM packet parsing...
CLSA-2026-1769542154 libxml2: Fix of CVE-2022-23308
CVE-2022-23308-fix.patch: fix undefined reference to ID variable and apply upstream regression fix to CVE-2022-23308 patch...
CLSA-2026-1769507695 Fix CVE(s): CVE-2024-50349
SECURITY UPDATE: Confusing users into sending their passwords to sites under the attacker’s control using crafted URLs - debian/patches/CVE-2024-50349.patch: also encode : in credentialformat, sanitize the user prompt - CVE-2024-50349...
CLSA-2026-1769507433 cups: Fix of CVE-2025-58436
CVE-2025-58436: fix issue where slow messages could delay cupsd...
CLSA-2026-1769506462 Fix CVE(s): CVE-2025-8225
SECURITY UPDATE: debuginformation memory leak in processdebuginfo - debian/patches/CVE-2025-8225.patch: prevent memory leak by checking allocnumdebuginfoentries instead of numdebuginfoentries to determine whether debuginformation has been allocated - CVE-2025-8225...
CLSA-2026-1769445556 php: Fix of CVE-2025-14178
CVE-2025-14178: fix heap buffer overflow in arraymerge due to integer overflow in zendhashnumelements precomputation...
CLSA-2026-1769426059 gnupg2: Fix of CVE-2025-68973
CVE-2025-68973: fix possible memory corruption in the armor parser that could lead to out-of-bounds write for crafted input...
CLSA-2026-1769433341 gnupg2: Fix of CVE-2025-68973
CVE-2025-68973: fix memory corruption in the armor parser that leads to out-of-bounds write for malicious input...
CLSA-2026-1769424492 gpsd-minimal: Fix of 2 CVEs
CVE-2025-67268: fix heap-based buffer overrun in NMEA2000 GNSS satellite handling - CVE-2025-67269: fix integer underflow in NAVCOM packet parsing to prevent excessive payload length and CPU-exhaustion...
CLSA-2026-1768943030 libxml2: Fix of CVE-2025-9714
revert fixes for CVE-2025-9714 due to build failures due to XPath error...