10560 matches found
CLSA-2022-1650910003 Fix of CVE: CVE-2019-18276
CVE-2019-18276: Fix priviledge dropping when running with effective UID not equal to real UID...
CLSA-2022-1650909007 Fixed CVE-2019-18276 in bash
CVE-2019-18276: Fix priviledge dropping when running with effective UID not equal to real UID...
CLSA-2022-1650575892 Update of php 5.3: Remove mariadb102 patch to eliminate faulty functionality
Remove mariadb102 patch to eliminate faulty functionality...
CLSA-2022-1650376845 Update of microcode_ctl
Update Intel CPU microcode to microcode-20220207 release: - Fixes in releasenote.md file...
CLSA-2022-1649869347 Fix of CVE: CVE-2022-1154
CVE-2022-1154: fix buffer usage after free...
CLSA-2022-1649172186 Update of openvpn-devel, openvpn
Rebuilt for tuxcare.els...
CLSA-2022-1649170534 Fix CVE(s): CVE-2022-0943
SECURITY UPDATE: Heap-based buffer overflow - debian/patches/CVE-2022-0943.patch: Don't include the NULL to the end of the line - CVE-2022-0943...
CLSA-2022-1648567705 Fix of CVE: CVE-2021-45444
CVE-2021-45444: do not expand PROMPTSUBST within argument of prompt-expansion sequences such as file.file to avoid arbitrary code execution...
CLSA-2022-1648142109 Fix CVE(s): CVE-2020-27762, CVE-2020-27770, CVE-2020-27760, CVE-2020-25665, CVE-2020-19667, CVE-2020-25674, CVE-2017-13144, CVE-2020-25676, CVE-2020-25664, CVE-2020-27753, CVE-2020-27750
SECURITY UPDATE: Crash if image dimensions are too large - debian/patches/CVE-2017-13144-.patch: Fix memory leak in MPC image format - CVE-2017-13144 SECURITY UPDATE: Stack-based buffer overflow - debian/patches/CVE-2020-19667.patch: Zero-out memory before use - CVE-2020-19667 SECURITY UPDATE:...
CLSA-2022-1648136177 Fix of CVE: CVE-2022-22721, CVE-2022-22720
CVE-2022-22720: simpler connection close logic if discarding the request body fails - CVE-2022-22721: make sure and check that LimitXMLRequestBody fits in system memory...
CLSA-2022-1648067859 Fix of CVE: CVE-2022-0847
lib/ioviter: initialize "flags" in new pipebuffer Max Kellermann CVE-2022-0847...
CLSA-2022-1647255880 Fix of CVE: CVE-2022-23308
CVE-2022-23308: fix use-after-free of ID and IDREF attributes...
CLSA-2022-1647254655 Fix CVE(s): CVE-2022-0391
SECURITY UPDATE: incorrect URL parsing - debian/patches/CVE-2022-0391.patch: add stripping ASCII newline and tabs from the url by urllib.parse - CVE-2022-0391...
CLSA-2022-1646915745 Fix of CVE: CVE-2021-40145
CVE-2021-40145: Fix a double free in gdImageGd2Ptr in gdgd2.c in the GD Graphics Library...
CLSA-2022-1646665957 Fix of CVE: CVE-2022-0391
CVE-2022-0391: Add stripping ASCII newline and tabs from the url by urllib.parse...
CLSA-2022-1646085758 Fix of CVE: CVE-2021-23017
CVE-2021-23017: Off-by-one in ngxresolvercopy when labels are followed by a pointer to a root domain name...
CLSA-2022-1646085735 Fix of CVE: CVE-2021-45078
CVE-2021-45078: Fix out-of-bounds write in stabxcoffbuiltintype in stabs.c...
CLSA-2022-1646085619 Fix of CVE: CVE-2020-27619, CVE-2021-23336
CVE-2020-27619: Unsafe use of eval on data retrieved via HTTP in the test suite rhbz1889886 - CVE-2021-23336: Web cache poisoning via urllib.parse.parseqsl and urllib.parse.parseqs by using a semicolon in query parameters rhbz1928904...
CLSA-2022-1645466518 Fix of CVE: CVE-2021-20284, CVE-2021-20197, CVE-2021-42574, CVE-2021-3487, CVE-2020-35448
CVE-2021-42574: Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks 2009172 - CVE-2021-20284: Heap-based buffer overflow in bfdelfslurpsecondaryrelocsection in elf.c 1961526 - CVE-2020-35448: Heap-based buffer overflow in bfdgetlsigned32 in...
CLSA-2022-1644933991 Fix of CVE: CVE-2021-31440, CVE-2022-0435
tipc: improve size validations for received domain records Jon Maloy CVE-2022-0435 - bpf: Fix propagation of 32 bit unsigned bounds from 64 bit bounds Yauheni Kaliuta CVE-2021-31440 - bpf: Fix propagation of 32-bit signed bounds from 64-bit bounds Yauheni Kaliuta CVE-2021-31440...
CLSA-2022-1644869841 Fix of CVE: CVE-2021-34798, CVE-2021-39275, CVE-2021-36160, CVE-2021-44224
CVE-2021-44224: possible NULL dereference or SSRF in forward proxy configurations - CVE-2021-39275: out-of-bounds write in apescapequotes via malicious input - CVE-2021-36160: modproxyuwsgi: out-of-bounds read via a crafted request uri-path - CVE-2021-34798: NULL pointer dereference via malformed...
CLSA-2022-1643819053 Fixed CVEs in glibc: CVE-2022-23218, CVE-2022-23219
CVE-2022-23218: fix possible buffer overflow in svcunixcreate - CVE-2022-23219: fix possible buffer overflow in clntcreate...
CLSA-2022-1643747494 Fix of CVE: CVE-2020-7071, CVE-2020-7068, CVE-2020-7069, CVE-2020-7070, CVE-2021-21702
CVE-2020-7068: php: Use of freed hash key in the pharparsezipfile function - CVE-2020-7069: php: Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV - CVE-2020-7070: php: URL decoding of cookie names can lead to different interpretation of cookies between browser and server -...
CLSA-2022-1643747448 Fix of CVE: CVE-2021-26690, CVE-2021-30641, CVE-2021-40438
CVE-2021-40438: modproxy: SSRF via a crafted request uri-path - CVE-2021-30641: MergeSlashes regression - CVE-2021-26690: modsession NULL pointer dereference in parser...
CLSA-2021-1639578578 Fixed CVEs in vim: CVE-2021-3974, CVE-2021-4019, CVE-2021-3973, CVE-2021-4069, CVE-2021-3984
CVE-2021-3974: fix using freed memory with regexp using a mark - CVE-2021-3984: fix illegal memory access when C-indenting - CVE-2021-3973: fix crash when using CTRL-W f without finding a file name - CVE-2021-4019: fix buffer overflow with long help argument - CVE-2021-4069: fix using freed...
CLSA-2021-1636568737 Fixed CVEs in vim: CVE-2021-3872, CVE-2021-3903, CVE-2021-3875
CVE-2021-3872: fix illegal memory access if buffer name is very long - CVE-2021-3875: fix mlget error after search with range - CVE-2021-3903: fix invalid memory access when scrolling without a valid screen...
CLSA-2021-1636378490 Fix of CVE: CVE-2017-20005
CVE-2017-20005: fix buffer overflow for years that exceed four digits...
CLSA-2021-1635459163 Fix CVE(s): CVE-2021-22946, CVE-2021-22947
SECURITY UPDATE: Protocol downgrade required TLS bypassed - debian/patches/CVE-2021-22946-pre1.patch: separate FTPS from FTP over HTTPS proxy in lib/ftp.c, lib/urldata.h. - debian/patches/CVE-2021-22946-pre2.patch: support PREAUTH response code in lib/imap.c, lib/imap.h, tests/data/Makefile.inc,...
CLSA-2021-1635459154 Fix CVE(s): CVE-2021-28831
SECURITY UPDATE: operation on invalid pointer - debian/patches/CVE-2021-28831.patch: decompressgunzip.c mishandles the error bit on the huftbuild result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data. - CVE-2021-28831...
CLSA-2021-1635459149 Fix CVE(s): CVE-2021-3487
SECURITY UPDATE: - CVE-2021-3487.patch: excessive debug section size can cause excessive memory consumption in bfd's dwarf2.c readsection. - CVE-2021-3487...
CLSA-2021-1634925634 Fixed 9 CVEs in squid34
CVE-2020-15049: fix incorrect validation of Content-Length field leading to Http smuggling and Poisoning attack - CVE-2020-14058: fix handling of unknown SSL errors which resulted in denial of service - CVE-2020-25097: fix improper input validation allowing HTTP smuggling from trusted client -...
CLSA-2021-1634922666 Fixed CVE-2021-39275 in httpd
CVE-2021-39275: apescapequotes algorithm which led to buffer overflow...
CLSA-2021-1633442934 Fix of CVE: CVE-2020-11868
CVE-2020-11868: incorrect handling of packets from unauthenticated synchronization source with spoofed IP address leads to denial of service...
CLSA-2021-1632261705 Fix of CVE: CVE-2021-25215, CVE-2021-25214, CVE-2021-25216
A broken inbound incremental zone update IXFR can cause named to terminate unexpectedly CVE-2021-25214 - An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself CVE-2021-25215 - A second vulnerability in BIND's GSSAPI security...
CLSA-2026-1791806519 TuxCare security update for fastify (3 CVEs)
TuxCare rebuilt fastify to address 3 CVEs. Fixed in 5.7.4-tuxcare.5...
CLSA-2026-1791629172 TuxCare security update for postcss (2 CVEs)
TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.5.2-tuxcare.2...
CLSA-2026-1791626840 TuxCare security update for fastify (1 CVE)
TuxCare rebuilt fastify to address 1 CVE. Fixed in 4.29.1-tuxcare.5...
CLSA-2026-1791626237 TuxCare security update for vm2 (1 CVE)
TuxCare rebuilt vm2 to address 1 CVE. Fixed in 3.11.7-tuxcare.2...
CLSA-2026-1791362263 TuxCare security update for protobufjs (11 CVEs)
TuxCare rebuilt protobufjs to address 11 CVEs. Fixed in 8.0.1-tuxcare.1...
CLSA-2026-1791359284 TuxCare security update for shell-quote (1 CVE)
TuxCare rebuilt shell-quote to address 1 CVE. Fixed in 1.8.3-tuxcare.1...
CLSA-2026-1791320698 TuxCare security update for 10 packages (1 CVE)
TuxCare rebuilt 10 packages to address 1 CVE. Fixed in 17.3.17-tuxcare.5...
CLSA-2026-1791278791 TuxCare security update for brace-expansion (1 CVE)
TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 5.0.9-tuxcare.2...
CLSA-2026-1791225543 TuxCare security update for decompress (2 CVEs)
TuxCare rebuilt decompress to address 2 CVEs. Fixed in 4.2.1-tuxcare.1...
CLSA-2026-1791045476 TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 18 @angular packages to address 1 CVE. Fixed in 7.2.0-tuxcare.5...
CLSA-2026-1791034160 TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 16 @angular packages to address 1 CVE. Fixed in 18.2.12-tuxcare.8...
CLSA-2026-1791030849 TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 16 @angular packages to address 1 CVE. Fixed in 16.2.11-tuxcare.6...
CLSA-2026-1791028047 TuxCare security update for probe-image-size (1 CVE)
TuxCare rebuilt probe-image-size to address 1 CVE. Fixed in 7.3.0-tuxcare.1...
CLSA-2026-1790965180 TuxCare security update for devalue (3 CVEs)
TuxCare rebuilt devalue to address 3 CVEs. Fixed in 5.9.0-tuxcare.3...