10560 matches found
CLSA-2026-1779271865 vim: Fix of 2 CVEs
CVE-2026-35177: fix path traversal in zip.vim — block .. components via simplify in zipWrite and zipExtract upstream vim 9.2.0280 + CVE-2025-53906 prereq combined...
CLSA-2026-1779271781 vim: Fix of 6 CVEs
CVE-2022-4292: also check winvalidanytab in didsetspelllang after SpellFileMissing autocmd - CVE-2023-4751: resetVIsualandresel at start of exbufferall to prevent UAF on Visual mark - CVE-2023-0054: bail out of dostringsub when vimregsub returns sublen = 0 - CVE-2022-2206: clamp cmdlinerow/msgrow...
CLSA-2026-1779271299 vim: Fix of 2 CVEs
CVE-2026-35177: fix path traversal in zip.vim — block .. components via simplify in zipWrite and zipExtract upstream vim 9.2.0280 + CVE-2025-53906 prereq combined...
CLSA-2026-1779267466 shadow-utils: Fix of CVE-2023-4641
CVE-2023-4641: fix password leak in gpasswd...
CLSA-2026-1779267440 procps-ng: Fix of CVE-2023-4016
CVE-2023-4016: fix possible buffer overflow in ps -C option...
CLSA-2026-1779266445 binutils: Fix of 4 CVEs
CVE-2026-3441: XCOFF linker XTYLD xscnlen out-of-bounds read - CVE-2026-3442: XCOFF linker rsymndx out-of-bounds read in objxcoffsymhashes - CVE-2025-7545: objcopy heap buffer overflow on --interleave with crafted small input - CVE-2025-5245: objdump SEGV / NULL deref in debugtypesamep and...
CLSA-2026-1779265764 giflib: Fix of CVE-2026-26740
CVE-2026-26740: fix heap OOB write when rewriting truncated GCE in EGifGCBToSavedExtension...
CLSA-2026-1779225366 libxml2: Fix of CVE-2022-2309
CVE-2022-2309: reset nsNr in xmlCtxtReset and htmlCtxtReset to prevent NULL pointer dereference / DoS triggered via crafted XML or HTML input reused across parser context resets...
CLSA-2026-1779224622 samba: Fix of CVE-2023-4091
CVE-2023-4091: fix openfile access check that allowed a client with read-only share access to truncate files via SMB2 OVERWRITE; the access check now uses openaccessmask instead of the requested accessmask...
CLSA-2026-1779223801 samba: Fix of CVE-2022-32742
CVE-2022-32742: fix server memory information leak via SMB1; insufficient range-check on SMB1 write request length allowed server memory contents to leak into the written file or printer instead of client-supplied bytes...
CLSA-2026-1779219098 grub2: Fix of CVE-2023-4692
CVE-2023-4692: fix OOB write when parsing NTFS $ATTRIBUTELIST entries...
CLSA-2026-1779218750 gcc: Fix of 2 CVEs
CVE-2021-3826: fix buffer overflow in dlanglname function to prevent denial of service - CVE-2021-46195: fix infinite recursion in rust demangler to prevent denial of service...
CLSA-2026-1779217317 systemd: Fix of CVE-2026-29111
CVE-2026-29111: core: validate input cgroup path more prudently...
CLSA-2026-1779216196 libssh2: Fix of CVE-2026-7598
CVE-2026-7598: fix integer overflow in userauthpassword CVE-2026-7598...
CLSA-2026-1779215980 cups: Fix of CVE-2026-27447
CVE-2026-27447: fix authorization bypass via case-insensitive username comparison in scheduler...
CLSA-2026-1779215759 libxml2: Fix of CVE-2022-49043
CVE-2022-49043: fix use-after-free in xmlXIncludeAddNode by deferring xmlFreeURI until after the error path has consumed the value...
CLSA-2026-1779215547 cups: Fix of CVE-2026-27447
CVE-2026-27447: fix authorization bypass via case-insensitive username comparison in scheduler...
CLSA-2026-1779215310 vim: Fix of 3 CVEs
CVE-2022-3037: fix crash on empty error list handling in qffillbuffer - CVE-2023-48236: fix integer overflow in getnumber for z= command - CVE-2023-48237: fix integer overflow in shiftline for operator pending mode...
CLSA-2026-1779215113 fribidi: Fix of CVE-2022-25308
CVE-2022-25308: fix stack-based buffer overflow...
CLSA-2026-1779214855 bind: Fix of CVE-2026-1519
CVE-2026-1519: fix unbounded NSEC3 iterations when validating referrals to unsigned delegations...
CLSA-2026-1779214181 vim: Fix of 4 CVEs
CVE-2022-3278: fix crash when using NUL in buffer that uses :source; don't get a next line when skipping over NL in evalnextnonblank eval.c, upstream patch 9.0.0552 - CVE-2023-48234: fix overflow when getting count for normal z command; break out of nvzet count loop when n LONGMAX/10 normal.c,...
CLSA-2026-1779213441 python3.11: Fix of 11 CVEs
CVE-2026-4224: avoid unbound C recursion in convcontentmodel in pyexpat - CVE-2026-3644: reject control characters in http.cookies.Morsel.update - CVE-2026-0672: reject control characters in http.cookies.Morsel - CVE-2025-8291: check consistency of zip64 end of central directory record -...
CLSA-2026-1779212665 php: Fix of 14 CVEs
CVE-2018-5711: fix infinite loop in gdImageCreateFromGifCtx - CVE-2018-5712: remove file name from phar stub error output XSS - CVE-2018-10545: do not set PRSETDUMPABLE in php-fpm workers by default - CVE-2018-10546: fail iconvmimedecode on invalid multibyte sequences - CVE-2018-10547: escape...
CLSA-2026-1779212372 vim: Fix of CVE-2026-42307
CVE-2026-42307: fix OS command injection in netrw plugin via crafted sftp:// URLs by hardening the tempfile suffix regex and escaping the tempfile argument before passing it to the sftp command...
CLSA-2026-1779212122 sos: Fix of CVE-2022-2806
CVE-2022-2806: ovirt plugin: filter out all password keys in answer files...
CLSA-2026-1779202006 Fix CVE(s): CVE-2026-43284, CVE-2026-46300, CVE-2026-46333
Ubuntu: 4.15.0-256.267 CVE-2026-46333 - ptrace: require CAPSYSPTRACE when task has no mm CVE-2026-46333 CVE-2026-46300 - net: skbuff: propagate shared-frag marker through copy/coalesce/gro/shift paths CVE-2026-46300 CVE-2026-43284 - xfrm: esp: avoid in-place decrypt on shared skb frags...
CLSA-2026-1779204531 gdk-pixbuf2: Fix of CVE-2026-5201
CVE-2026-5201: fix heap buffer overflow due to unvalidated JPEG color component count in gdkpixbufjpegimageload...
CLSA-2026-1779204267 gdk-pixbuf2: Fix of CVE-2026-5201
CVE-2026-5201: fix heap buffer overflow due to unvalidated JPEG color component count in gdkpixbufjpegimageload...
CLSA-2026-1779204107 php: Fix of 6 CVEs
CVE-2026-6722: fix stale SOAPGLOBAL refmap pointer with Apache Map GHSA-85c2-q967-79q5 - CVE-2026-7262: fix broken Apache map value NULL check in soap encoder GHSA-hmxp-6pc4-f3vv - CVE-2026-7568: fix signed integer overflow of char array offset in metaphone GHSA-96wq-48vp-hh57 - CVE-2026-7261:...
CLSA-2026-1779204030 mod_jk: Fix of CVE-2024-46544
CVE-2024-46544: fix insecure file permissions on shared memory and lock files...
CLSA-2026-1779203719 php: Fix of 6 CVEs
CVE-2026-6722: fix stale SOAPGLOBAL refmap pointer with Apache Map GHSA-85c2-q967-79q5 - CVE-2026-7262: fix broken Apache map value NULL check in soap encoder GHSA-hmxp-6pc4-f3vv - CVE-2026-7568: fix signed integer overflow of char array offset in metaphone GHSA-96wq-48vp-hh57 - CVE-2026-7261:...
CLSA-2026-1779203444 gnutls: Fix of CVE-2026-33845
CVE-2026-33845: fix integer underflow and remote heap overrun in DTLS handshake reassembly by tracking startoffset and fraglength instead of an inclusive startoffset, endoffset range...
CLSA-2026-1779193855 ImageMagick: Fix of CVE-2026-42050
CVE-2026-42050: fix stack buffer overflow in XTileImage when loading malicious MIFF in display tool...
CLSA-2026-1779183103 vim: Fix of 6 CVEs
CVE-2021-3903: do not set VALIDBOTLINE in updatetopline when screen is invalid - CVE-2022-1616: tighten appendcommand loop bound + pre-write length check to avoid buffer overflow with composing chars - CVE-2022-2042: initialize attr in spellmoveto and capture emptyline before mlgetbuf invalidates...
CLSA-2026-1779191237 postfix: Fix of CVE-2026-43964
CVE-2026-43964: fix buffer over-read in dsnsplit when an enhanced status code is not followed by other text...
CLSA-2026-1779190223 opensc: Fix of 5 CVEs
CVE-2023-5992: implement constant-time PKCS1 v1.5 depadding to prevent Bleichenbacher/Marvin-style timing attacks - CVE-2025-49010: fix stack buffer overflow write in iso7816 GET RESPONSE - CVE-2025-66037: fix out-of-bounds heap read in scpkcs15pubkeyfromspkifields - CVE-2025-66038: fix buffer...
CLSA-2026-1779184141 expat: Fix of CVE-2026-45186
CVE-2026-45186: fix quadratic complexity in attribute name collision check...
CLSA-2026-1779183996 expat: Fix of CVE-2026-45186
CVE-2026-45186: fix quadratic complexity in attribute name collision check...
CLSA-2026-1779183792 gnutls: Fix of CVE-2026-42010
CVE-2026-42010: server-side RSA-PSK authentication bypass via NUL-byte truncation of binary PSK identities in gnutlsprocrsapskclientkx...
CLSA-2026-1779183767 expat: Fix of CVE-2026-45186
CVE-2026-45186: fix quadratic complexity in attribute name collision check...
CLSA-2026-1779183482 Fix CVE(s): CVE-2026-45186
SECURITY UPDATE: denial of service via On^2 attribute name collision check with moderately sized crafted XML input - debian/patches/CVE-2026-45186.patch: replace linear scan in defineAttribute with O1 hash table lookup using new ELEMENTTYPE.defaultAttsNames field in expat/lib/xmlparse.c -...
CLSA-2026-1779183235 vim: Fix of 6 CVEs
CVE-2021-4069: copy mlgetcurline in exopen so a flushed line buffer is not used after vimregexec - CVE-2022-2000: truncate IObuff with "..." in appendcommand when remaining space is below threshold - CVE-2022-3099: guard docmdline breakpoint lookup with linesga.galen currentline check -...
CLSA-2026-1779182780 vim: Fix of 6 CVEs
CVE-2021-4069: copy mlgetcurline in exopen so a flushed line buffer is not used after vimregexec - CVE-2022-2000: truncate IObuff with "..." in appendcommand when remaining space is below threshold - CVE-2022-3099: guard docmdline breakpoint lookup with linesga.galen currentline check -...
CLSA-2026-1779182686 postfix: Fix of CVE-2026-43964
CVE-2026-43964: fix buffer over-read on enhanced status code without trailing text...
CLSA-2026-1779182426 buildah: Fix of CVE-2026-32283
rebuild on tuxcare9.6esu with newer golang version 1.25.7-1.el96.tuxcare.els4 - CVE-2026-32283: fix TLS 1.3 deadlock in crypto/tls handleKeyUpdate...
CLSA-2026-1779181947 postfix: Fix of CVE-2026-43964
CVE-2026-43964: fix buffer over-read on enhanced status code without trailing text...
CLSA-2026-1779181743 pyOpenSSL: Fix of CVE-2026-27448
CVE-2026-27448: fix fail-open in settlsextservernamecallback when callback raises exception...
CLSA-2026-1779181085 kernel-uek: Fix of CVE-2026-46333
ptrace: require CAPSYSPTRACE when task has no mm CVE-2026-46333...