10560 matches found
CLSA-2026-1779179759 Update of openssl
Rebuilt els9 for FIPS review...
CLSA-2026-1779179460 kernel: Fix of CVE-2026-46333
ptrace: require CAPSYSPTRACE when task has no mm CVE-2026-46333...
CLSA-2026-1779179106 php: Fix of 2 CVEs
CVE-2026-7261: SOAP UAF on SoapServer::handle header-handler failure - CVE-2026-7262: SOAP tozvalmap NULL pointer dereference...
CLSA-2026-1779178796 php: Fix of 2 CVEs
CVE-2026-7261: SOAP UAF on SoapServer::handle header-handler failure - CVE-2026-7262: SOAP tozvalmap NULL pointer dereference...
CLSA-2026-1779154430 rsync: Fix of CVE-2026-41035
CVE-2026-41035: receiver use-after-free in receivexattr via untrusted xattr count passed to qsort...
CLSA-2026-1779153233 golang: Fix of CVE-2026-32280
CVE-2026-32280: Limit processing of attacker-supplied intermediate certificates during chain building and introduce bound on number of intermediates, preventing uncontrolled work and denial of service...
CLSA-2026-1779153000 golang: Fix of CVE-2026-32283
CVE-2026-32283: fix TLS 1.3 deadlock in crypto/tls handleKeyUpdate when a peer sends multiple key update messages requesting a response in a single record by adding a locked flag to setReadTrafficSecret so it calls sendAlertLocked instead of re-locking the connection mutex...
CLSA-2026-1779152708 grafana: Fix of CVE-2026-32283
CVE-2026-32283: rebuild against golang = 1.25.7-1.el96.tuxcare.els5 to fix crypto/tls DoS where multiple post-handshake KeyUpdate messages in a single TLS 1.3 record deadlock the connection setReadTrafficSecret reacquired the conn mutex via sendAlert...
CLSA-2026-1779109358 grafana-pcp: Fix of CVE-2026-32283
CVE-2026-32283: rebuild against golang = 1.25.7-1.el96.tuxcare.els5...
CLSA-2026-1779107085 gnutls: Fix of CVE-2026-3833
CVE-2026-3833: fix nameConstraints dNSName/rfc822Name case-sensitive memcmp bypass...
CLSA-2026-1779120390 gnutls: Fix of CVE-2026-3833
CVE-2026-3833: fix excludedSubtrees/permittedSubtrees bypass by performing case-insensitive comparison of dNSName and rfc822Name domain labels in X.509 nameConstraints processing...
CLSA-2026-1779120347 gnutls: Fix of CVE-2026-3833
CVE-2026-3833: fix nameConstraints dNSName/rfc822Name case-sensitive memcmp bypass...
CLSA-2026-1779120418 git-lfs: Fix of CVE-2026-32283
rebuild with golang 1.25.7-1.el96.tuxcare.els5 to fix CVE-2026-32283 - CVE-2026-32283: prevent denial of service in crypto/tls caused by multiple TLS 1.3 key update messages in a single record...
CLSA-2026-1779120195 tbb: Fix of CVE-2020-11023
CVE-2020-11023: fix XSS by removing bundled jQuery from Doxygen-generated tbb-doc HTML...
CLSA-2026-1779119949 cyrus-imapd: Fix of CVE-2024-34055
fix CVE-2024-34055: denial of service via memory exhaustion using oversized IMAP literals and command arguments - disable cassandane test runner on x8664 and aarch64 due to multiple unrelated mock-environment issues imaptest binary SIGSEGV, slow file I/O, alarm scheduling races; cunit which...
CLSA-2026-1779101894 opensc: Fix of CVE-2023-40661
CVE-2023-40661: fix multiple smartcard pkcs15init buffer overflows, underflows and out-of-bounds writes scpkcs15initrmdir, setcoscreatekey, cosmnewfile, cosmcreatekey, scpkcs15getlastupdate, iasecc-sdo, entersafe, epass2003 keygen...
CLSA-2026-1779099998 ruby: Fix of CVE-2023-28755
CVE-2023-28755: fix ReDoS in URI parser by converting greedy quantifiers to possessive quantifiers in RFC3986URI and RFC3986relativeref...
CLSA-2026-1779118869 Fix of 8 CVEs
SECURITY UPDATE: fix off-by-one out-of-bounds read in modproxyajp message getter functions - debian/patches/CVE-2026-33857-prereq.patch: prerequisite fix for ajpmsgcheckheader bounds check to keep msg-len within buffer - debian/patches/CVE-2026-33857.patch: fix off-by-one out-of-bounds read in...
CLSA-2026-1779131668 rsync: Fix of CVE-2026-41035
CVE-2026-41035: receiver use-after-free in receivexattr via untrusted xattr count passed to qsort...
CLSA-2026-1779136540 thunderbird: Fix of 2 CVEs
CVE-2024-0747: Document::Open inheriting CSP from a different window - CVE-2025-5268: Memory safety bugs gfxFont mHasSpaceFeatures atomicity, PresShell event-handler UAF, wasm uncheckedReadValType missing types...
CLSA-2026-1779130594 procps-ng: Fix of CVE-2023-4016
CVE-2023-4016: fix possible buffer overflow in ps -C option...
CLSA-2026-1779130441 vim: Fix of 3 CVEs
CVE-2022-0261: fix heap-based buffer overflow in blockinsert in src/ops.c - CVE-2022-0318: fix heap-based buffer overflow in utfheadoff in mbyte.c - CVE-2022-3520: clamp bopend.col = 0 in doput to prevent Visual block put underflow...
CLSA-2026-1779130424 expat: Fix of CVE-2026-45186
CVE-2026-45186: fix quadratic complexity in attribute name collision check...
CLSA-2026-1779130193 vim: Fix of CVE-2022-3520
CVE-2022-3520: clamp bopend.col = 0 in doput to prevent Visual block put underflow...
CLSA-2026-1779129979 vim: Fix of 3 CVEs
CVE-2022-0261: fix heap-based buffer overflow in blockinsert in src/ops.c - CVE-2022-0318: fix heap-based buffer overflow in utfheadoff in mbyte.c - CVE-2022-3520: clamp bopend.col = 0 in doput to prevent Visual block put underflow...
CLSA-2026-1779129849 httpd: Fix of CVE-2026-28780
CVE-2026-28780: modproxyajp: heap-based buffer overflow in ajpmsgcheckheader — message size check did not subtract AJPHEADERLEN, letting a crafted AJP reply write 4 bytes past the end of the heap buffer...
CLSA-2026-1779129626 httpd: Fix of CVE-2026-28780
CVE-2026-28780: modproxyajp: heap-based buffer overflow in ajpmsgcheckheader — message size check did not subtract AJPHEADERLEN, letting a crafted AJP reply write 4 bytes past the end of the heap buffer...
CLSA-2026-1779129500 libpng15: Fix of CVE-2026-34757
CVE-2026-34757: Use snapshot-before-free and defer-free patterns to prevent use-after-free when a caller passes a pointer obtained from pnggetPLTE, pnggettRNS, pnggethIST, pnggettext, pnggetsPLT, or pnggetunknownchunks back into the corresponding setter issues 836 and 837...
CLSA-2026-1779129362 Fix CVE(s): CVE-2026-45186
SECURITY UPDATE: fix quadratic complexity in attribute name collision check - debian/patches/CVE-2026-45186.patch: fix quadratic complexity in attribute name collision check - CVE-2026-45186...
CLSA-2026-1779129222 Fix CVE(s): CVE-2026-45186
SECURITY UPDATE: fix quadratic complexity in attribute name collision check - debian/patches/CVE-2026-45186.patch: fix quadratic complexity in attribute name collision check - CVE-2026-45186...
CLSA-2026-1779129021 Fix CVE(s): CVE-2026-42050
SECURITY UPDATE: fix stack buffer overflow in XTileImage when loading malicious MIFF in display tool - debian/patches/CVE-2026-42050.patch: fix stack buffer overflow in XTileImage when loading malicious MIFF in display tool - CVE-2026-42050...
CLSA-2026-1779128088 ImageMagick: Fix of CVE-2026-42050
CVE-2026-42050: fix stack buffer overflow in XTileImage when loading malicious MIFF in display tool...
CLSA-2026-1779127797 libpng15: Fix of CVE-2026-34757
CVE-2026-34757: Use snapshot-before-free and defer-free patterns to prevent use-after-free when a caller passes a pointer obtained from pnggetPLTE, pnggettRNS, pnggethIST, pnggettext, pnggetsPLT, or pnggetunknownchunks back into the corresponding setter issues 836 and 837...
CLSA-2026-1779127684 ImageMagick: Fix of CVE-2026-42050
CVE-2026-42050: fix stack buffer overflow in XTileImage when loading malicious MIFF in display tool...
CLSA-2026-1779127347 Fix CVE(s): CVE-2026-42050
SECURITY UPDATE: fix stack buffer overflow in XTileImage when loading malicious MIFF in display tool - debian/patches/CVE-2026-42050.patch: fix stack buffer overflow in XTileImage when loading malicious MIFF in display tool - CVE-2026-42050...
CLSA-2026-1779126860 nginx: Fix of CVE-2026-42945
CVE-2026-42945: fix heap buffer overrun in ngxhttprewritemodule when rewrite is followed by set/if/rewrite with unnamed PCRE captures...
CLSA-2026-1779126256 Fix CVE(s): CVE-2026-42945
SECURITY UPDATE: fix heap buffer overrun in ngxhttprewritemodule when rewrite is followed by set/if/rewrite with unnamed PCRE captures - debian/patches/CVE-2026-42945.patch: fix heap buffer overrun in ngxhttprewritemodule when rewrite is followed by set/if/rewrite with unnamed PCRE captures -...
CLSA-2026-1779125894 php: Fix of 7 CVEs
CVE-2026-7258: fix out-of-bounds read in urldecode via signed-char to ctype.h GHSA-m8rr-4c36-8gq4 - CVE-2026-6722: fix stale SOAPGLOBAL refmap pointer with Apache Map GHSA-85c2-q967-79q5 - CVE-2026-7259: fix null pointer dereference in phpmbcheckencoding via mberegsearchinit GHSA-wm6j-2649-pv75 -...
CLSA-2026-1779125079 php: Fix of 6 CVEs
CVE-2026-7258: fix out-of-bounds read in urldecode via signed-char to ctype.h GHSA-m8rr-4c36-8gq4 - CVE-2026-6722: fix stale SOAPGLOBAL refmap pointer with Apache Map GHSA-85c2-q967-79q5 - CVE-2026-7262: fix broken Apache map value NULL check in soap encoder GHSA-hmxp-6pc4-f3vv - CVE-2026-7568:...
CLSA-2026-1779124827 log4j: Fix of CVE-2026-34479
CVE-2026-34479: fix Log4j1XmlLayout invalid XML 1.0 character escape...
CLSA-2026-1779124021 firewalld: Fix of CVE-2026-4948
CVE-2026-4948: use PKACTIONCONFIG instead of PKACTIONCONFIGINFO for setZoneSettings2 and setPolicySettings to require config-write authorization...
CLSA-2026-1779123668 Fix CVE(s): CVE-2026-6735
SECURITY UPDATE: XSS via unsanitized request URI in PHP-FPM status page - debian/patches/CVE-2026-6735.patch: escape requesturi with HTML entities in fpmstatushandlerequest for HTML/XML output formats, and fix querystring escape flags in sapi/fpm/fpm/fpmstatus.c - CVE-2026-6735...
CLSA-2026-1779123410 jq: Fix of 8 CVEs
CVE-2026-40164: randomize hash seed to mitigate hash collision DoS - CVE-2026-40612: limit containment check depth - CVE-2026-41256: fix NUL truncation in program files loaded with -f - CVE-2026-41257: fix signed-int overflow in stackreallocate - CVE-2026-43894: cap numeric literal length to...
CLSA-2026-1779122764 nano: Fix of CVE-2024-5742
CVE-2024-5742: emergencysave applied chmod/chown to a path after the descriptor was closed, allowing a symlink swap to redirect the ownership change to an attacker-controlled file - Backport of upstream commit 5e7a3c2e from nano v8.0, adapted to the 5.6.1 codebase writefile signature predates the...
CLSA-2026-1779122132 expat: Fix of CVE-2026-45186
CVE-2026-45186: fix quadratic runtime behavior in attribute collision detection...
CLSA-2026-1779119053 Fix of 8 CVEs
SECURITY UPDATE: modproxyajp heap buffer over-read in ajpmsggetstring - debian/patches/CVE-2026-34032.patch: add buffer checks in modules/proxy/ajpmsg.c. - CVE-2026-34032 SECURITY UPDATE: AJP getter functions off-by-one out-of-bounds reads - debian/patches/CVE-2026-33857.patch: fix length checks ...
CLSA-2026-1779118679 Fix of 8 CVEs
SECURITY UPDATE: modproxyajp heap buffer over-read in ajpmsggetstring - debian/patches/CVE-2026-34032.patch: add buffer checks in modules/proxy/ajpmsg.c. - CVE-2026-34032 SECURITY UPDATE: AJP getter functions off-by-one out-of-bounds reads - debian/patches/CVE-2026-33857.patch: fix length checks ...
CLSA-2026-1779098432 Fix CVE(s): CVE-2026-5773
SECURITY UPDATE: wrong SMB connection reused due to missing share comparison - debian/patches/CVE-2026-5773.patch: disable connection reuse for SMBS by replacing connkeep with connclose in smbconnect lib/smb.c - CVE-2026-5773...