CLSA-2025-1757574151 pam: Fix of CVE-2025-6020

CVE-2025-6020: fix potential privilege escalation in pamnamspace...

CLSA-2025-1757500267 python3.9: Fix of CVE-2025-8194

CVE-2025-8194: fix tarfile deadlock/infinite loop by rejecting negative member offsets...

CLSA-2025-1757016520 squid34: Fix of CVE-2025-54574

CVE-2025-54574: fix buffer overflow in URN handling...

CLSA-2025-1757016400 python3-setuptools: Fix of CVE-2025-47273

CVE-2025-47273: fix path traversal vulnerability in PackageIndex...

CLSA-2025-1757014652 Fix CVE(s): CVE-2025-1217, CVE-2025-1734, CVE-2025-1736, CVE-2025-1861

SECURITY UPDATE: misinterpretation of HTTP response headers - debian/patches/CVE-2025-1217.patch: adds HTTP header folding support for HTTP wrapper response headers in ext/standard/httpfopenwrapper.c - CVE-2025-1217 SECURITY UPDATE: insufficient HTTP header validation -...

CLSA-2025-1757012227 ImageMagick: Fix of CVE-2025-53014

CVE-2025-53014: fix heap buffer overflow in InterpretImageFilename...

CLSA-2025-1756931716 golang: Fix of CVE-2025-4674

CVE-2025-4674: disallow multiple VCS metadata dirs in one module to prevent VCS injection attacks...

CLSA-2025-1756930773 glibc: Fix of CVE-2025-8058

CVE-2025-8058: fix double free vulnerability in regcomp function...

CLSA-2025-1756928514 libvpx: Fix of CVE-2025-5283

CVE-2025-5283: fix use after free vulnerability in libvpx to prevent potential heap corruption via crafted HTML page...

CLSA-2025-1756483693 php: Fix of 3 CVEs

CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation...

CLSA-2025-1755682686 kernel: Fix of 10 CVEs

netsched: hfsc: Fix a UAF vulnerability in class handling CVE-2025-37797 - sunrpc: handle SVCGARBAGE during svc auth processing as auth error CVE-2025-38089 - net: ch9200: fix uninitialised access during miinwayrestart CVE-2025-38086 - ext4: fix out-of-bound read in ext4xattrinodedecrefall...

CLSA-2025-1755008210 git: Fix of CVE-2025-46835

CVE-2025-46835: fix vulnerability where Git GUI can create and overwrite arbitrary writable files...

CLSA-2025-1755005189 glibc: Fix of CVE-2025-8058

CVE-2025-8058: fix double-free after allocation failure in regcomp...

CLSA-2025-1754552791 taglib: Fix of CVE-2023-47466

CVE-2023-47466: Fix segmentation violation and application crash during tag writing via crafted WAV file...

CLSA-2025-1754411171 sqlite: Fix of CVE-2025-6965

CVE-2025-6965: fix memory corruption issue caused by exceeding the number of columns with aggregate terms...

CLSA-2025-1754382311 Update of nss

update to CKBI 2.74 from NSS 3.110 - updated certificates: - Certificate "Entrust.net Premium 2048 Secure Server CA" - Certificate "Entrust Root Certification Authority" - Certificate "AffirmTrust Commercial" - Certificate "AffirmTrust Networking" - Certificate "AffirmTrust Premium" - Certificate...

CLSA-2025-1753987188 dovecot: Fix of CVE-2024-23185

CVE-2024-23185: fix resource exhaustion caused by very large headers when parsing messages...

CLSA-2025-1753801728 LibRaw: Fix of CVE-2023-1729

CVE-2023-1729: fix heap-buffer-overflow in raw2imageex to prevent application crash...

CLSA-2025-1753780622 php: Fix of CVE-2025-1220

CVE-2025-1220: error if host contains null bytes in the middle of the string...

CLSA-2025-1753768865 glib2: Fix of CVE-2025-4373

CVE-2025-4373: fix integer overflow in gstringinsertunichar function to prevent buffer underwrite...

CLSA-2025-1753768618 glib2: Fix of CVE-2025-4373

CVE-2025-4373: fix integer overflow in gstringinsertunichar to prevent buffer underwrite...

CLSA-2025-1753729945 gstreamer1-plugins-bad-free: Fix of CVE-2025-3887

CVE-2025-3887: fix H265 slice header parsing to validate numlongtermpics and prevent stack overflow...

CLSA-2025-1753729863 php: Fix of CVE-2025-1220

CVE-2025-1220: fix null byte termination in hostnames...

CLSA-2025-1753376162 graphviz: Fix of CVE-2023-46045

CVE-2023-46045: fix out-of-bounds read via crafted config6a file...

CLSA-2025-1753303283 libxml2: Fix of 2 CVEs

CVE-2025-49794: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements - CVE-2025-49796: fix memory corruption issue triggered by processing sch:name elements in input XML file...

CLSA-2025-1753131065 libsoup: Fix of 7 CVEs

CVE-2025-32050: fix overflow in appendparamquoted - CVE-2025-32052: fix heap buffer overflow in soupcontentsniffersniff - CVE-2025-32053: fix heap buffer overflow in snifffeedorhtml - CVE-2025-32907: soup-message-headers: correct merge of ranges - CVE-2025-46420: fix leak in...

CLSA-2025-1752922753 nodejs: Fix of CVE-2024-27983

CVE-2024-27983: ensure to close stream when destroying session to prevent memory leak...

CLSA-2025-1752921642 tigervnc: Fix of CVE-2025-49175

CVE-2025-49175: fix out-of-bounds read in handling of animated cursors...

CLSA-2025-1752749664 libreswan: Fix of CVE-2024-3652

CVE-2024-3652: fix assertion failure and crash caused by requesting AES-GMAC without specifying esp= line...

CLSA-2025-1752091182 Update of tzdata

Fix incorrect tzdb.dat by harding links...

CLSA-2025-1752090398 Update of tzdata

Fix incorrect tzdb.dat by harding links...

CLSA-2025-1752090137 Update of tzdata

Fix incorrect tzdb.dat by harding links...

CLSA-2025-1752087138 Update of ca-certificates

update to CKBI 2.74 from NSS 3.110 - updated certificates: - Certificate "Entrust.net Premium 2048 Secure Server CA" - Certificate "Entrust Root Certification Authority" - Certificate "AffirmTrust Commercial" - Certificate "AffirmTrust Networking" - Certificate "AffirmTrust Premium" - Certificate...

CLSA-2025-1751913683 Fix CVE(s): CVE-2025-21587, CVE-2025-30691, CVE-2025-30698

OpenJDK 11.0.27 release, build 6. - CVE-2025-21587: better TLS connection support - CVE-2025-30691: improve compiler transformations - CVE-2025-30698: enhance Buffered Image handling - Release notes: https://mail.openjdk.org/pipermail/jdk-updates-dev/2025-April/043306.html...

CLSA-2025-1751913256 rsync: Fix of CVE-2024-12087

CVE-2024-12087: fix path traversal vulnerability by adding a proper symlink verification and deduplication checks on a per-file-list basis...

CLSA-2025-1751895848 sudo: Fix of CVE-2025-32462

CVE-2025-32462: fix privilege escalation vulnerability by restricting unauthorized users from gaining elevated system privileges via the Sudo host option...

CLSA-2025-1751892313 libfastjson: Fix of CVE-2020-12762

CVE-2020-12762: fix out of bounds write vulnerability in printbuf...

CLSA-2025-1751612441 rsync: Fix of CVE-2024-12087

CVE-2024-12087: fix path traversal vulnerability by adding a proper symlink verification and deduplication checks on a per-file-list basis...

CLSA-2025-1751550583 Update of libkcapi

Backport fixes for kcapi-hasher target option Related: RHEL-15298 - Fix kcapi tests in FIPS mode Resolves: RHEL-2405...

CLSA-2025-1751538844 libgcrypt: Fix of CVE-2024-2236

Synced to upstream plus ASN.1 patch - Tested on AlmaLinux 9.5 - Fix CVE-2024-2236 RHEL-34579...

CLSA-2025-1751143797 sssd: Fix of CVE-2023-3758

CVE-2023-3758: fix race condition in adgpo...

CLSA-2025-1751141320 gstreamer1-plugins-good: Fix of CVE-2024-47613

CVE-2024-47613: fix integer overflow in available data check for image tags...

CLSA-2025-1751135005 curl: Fix of CVE-2024-7264

CVE-2024-7264: fix out-of-bound read in GTime2str function...

CLSA-2025-1751027703 rsync: Fix of CVE-2016-9840

CVE-2016-9840: fix improper pointer arithmetic in bundled zlib...

CLSA-2025-1750785613 Fix CVE(s): CVE-2025-32728

SECURITY UPDATE: DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding. - debian/patches/CVE-2025-32728.patch: fix logic error in DisableForwarding option - CVE-2025-32728...

CLSA-2025-1750785256 curl: Fix of CVE-2024-7264

CVE-2024-7264: fix out-of-bound read in GTime2str function...

CLSA-2025-1750782908 squashfs-tools: Fix of CVE-2021-40153

CVE-2021-40153: fix directory traversal vulnerability in squashfsopendir by validating filenames before creating new files...

CLSA-2025-1750688636 gcc: Fix of CVE-2020-11023

CVE-2020-11023: sanitize HTML content passed to DOM manipulation methods to prevent execution of untrusted code...

CLSA-2025-1750352922 git: Fix of CVE-2025-52005

CVE-2025-52005: add sideband.allowControlCharacters config which gives a possibility to avoid control characters in sideband - fix multiple memory leaks in config...

CLSA-2025-1749826758 ghostscript: Fix of CVE-2024-46956

CVE-2024-46956: fix out-of-bounds data access in filenameforall to prevent arbitrary code execution...