71 results · Clear filters · Feed
-
Critical max 9.5ALSA-2026:96240 1 CVE
Critical: edk2 security update
EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * edk2: Pre-boot RCE in EDK II PXE driver (CVE-2026-97631) For more details about …
first Nov 9, 2026 -
Critical max 9.4ALSA-2026:86192 26 CVEs
Critical: .NET 10.0 security, bug fix, and enhancement update
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming …
first Oct 20, 2026 -
Critical max 9.6
Critical: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2023-4860) * chromium-browser: angle: Out of bounds memory acc…
first Sep 30, 2026 -
Critical max 9.4ALSA-2026:86195 26 CVEs
Critical: .NET 10.0 security, bug fix, and enhancement update
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming …
first Oct 20, 2026 -
Critical max 9.4ALSA-2026:86193 26 CVEs
Critical: .NET 10.0 security, bug fix, and enhancement update
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming …
first Oct 20, 2026 -
Critical max 9.1ALSA-2026:94501 5 CVEs
Critical: fence-agents security update
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * pyjwt: pyjwt: Authentication …
first Nov 3, 2026 -
Critical max 9.1ALSA-2026:94500 5 CVEs
Critical: fence-agents security update
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * pyjwt: pyjwt: Authentication …
first Nov 3, 2026 -
Critical max 9.4ALSA-2026:86594 25 CVEs
Critical: .NET 8.0 security, bug fix, and enhancement update
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming …
first Oct 21, 2026 -
Critical max 9.8ALSA-2026:93415 1 CVE
Critical: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period (CVE-2026-98432) For more det…
first Nov 1, 2026 -
Critical max 9.8ALSA-2026:93414 1 CVE
Critical: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period (CVE-2026-98432) For more details about the security issue(s), including the impact, a…
first Nov 1, 2026 -
Critical max 9.4ALSA-2026:86172 24 CVEs
Critical: .NET 9.0 security, bug fix, and enhancement update
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming …
first Oct 20, 2026 -
Critical max 9.4ALSA-2026:86168 25 CVEs
Critical: .NET 8.0 security, bug fix, and enhancement update
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming …
first Oct 20, 2026 -
Critical max 9.4ALSA-2026:86171 24 CVEs
Critical: .NET 9.0 security, bug fix, and enhancement update
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming …
first Oct 20, 2026 -
Critical max 9.4ALSA-2026:86169 25 CVEs
Critical: .NET 8.0 security, bug fix, and enhancement update
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming …
first Oct 20, 2026 -
Critical max 9.4ALSA-2026:86170 24 CVEs
Critical: .NET 9.0 security, bug fix, and enhancement update
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming …
first Oct 20, 2026 -
Critical max 9.2ALSA-2026:93077 3 CVEs
Critical: python-pillow security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Oct 30, 2026 -
Critical max 9.1ALSA-2026:92145 1 CVE
Critical: cjose security update
CJose is C library implementing the Javascript Object Signing and Encryption (JOSE). Security Fix(es): * cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption (CVE-2026-53939) For more details about the security issue(s), i…
first Oct 28, 2026 -
Critical max 9.6ALSA-2026:84583 11 CVEs
Critical: webkit2gtk3 security, bug fix, and enhancement update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via out-of-bounds read (CVE-2026-87596) * chromium-browser: angle: ANGLE in Goog…
first Oct 19, 2026 -
Critical max 9.8ALSA-2026:7384 1 CVE
Critical: cockpit: Unauthenticated remote code execution due to SSH command-line argument injection
Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fix(es): * cockpit: ws: be more expl…
first Apr 10, 2026 -
Critical max 9.8ALSA-2026:64784 6 CVEs
Critical: 389-ds-base security, bug fix, and enhancement update
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: heap buf…
first Sep 8, 2026 -
Critical max 9.0ALSA-2026:25049 6 CVEs
Critical: samba security update
Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fix(es): * samba: Mis…
first Jun 10, 2026 -
Critical max 9.4ALSA-2026:2224 1 CVE
Critical: keylime security update
Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution. Security Fix(es): * keylime: Keylime: Authentication bypass allows unauthorized administrative operations due to missing client-side TLS authentication …
first Feb 9, 2026 -
Critical max 8.1ALSA-2026:19372 1 CVE
Critical: nginx:1.26 security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) For more details about the secu…
first May 19, 2026 -
Critical max 8.1ALSA-2026:19371 1 CVE
Critical: nginx:1.24 security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) For more details about the secu…
first May 19, 2026 -
Critical max 7.5ALSA-2026:89744 5 CVEs
Critical: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: Grafana: Information disclosure vulnerability in Unified Alerting (CVE-2026-17183) * net/[http:](http:) golang: golang: …
first Oct 26, 2026 -
Critical max 6.8ALSA-2026:88459 1 CVE
Critical: ca-certificates security update
The ca-certificates package contains a set of Certificate Authority (CA) certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure (PKI). Security Fix(es): * ca-certificates: Distrust eMudhra intermediate CA certificate…
first Oct 22, 2026 -
Critical max 7.5ALSA-2026:88354 3 CVEs
Critical: grafana-pcp security update
The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * crypto/tls: golang: crypto/tls: Deni…
first Oct 22, 2026 -
Critical max 9.1ALSA-2026:71487 3 CVEs
Critical: unbound security update
The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis (CVE-2026-82717) * unbound: Unbound: Heap buffer overflow via malicious DNSS…
first Sep 24, 2026 -
Critical max 8.1ALSA-2026:19374 1 CVE
Critical: nginx security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) For more details about the secu…
first May 19, 2026 -
Critical max 8.1ALSA-2026:18029 1 CVE
Critical: nginx security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) For more details about the secu…
first May 18, 2026 -
Critical max 9.8ALSA-2025:21462 1 CVE
Critical: lasso security update
The lasso packages provide the Lasso library that implements the Liberty Alliance Single Sign-On standards, including the SAML and SAML2 specifications. It allows handling of the whole life-cycle of SAML-based federations and provides bindings for multiple la…
first Nov 17, 2025 -
Critical max 8.8ALSA-2024:1485 10 CVEs
Critical: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.9.1 ESR. Security Fix(es): * nss: timing attack against RSA decryption (CVE-2023-5388) * Mozilla: Crash…
first Mar 25, 2024 -
Critical max 9.3ALSA-2023:6748 3 CVEs
Critical: squid security update
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847) * squid: Request/Response smuggling in HTTP/1.1 and IC…
first Nov 7, 2023 -
Critical max 9.8ALSA-2023:3923 4 CVEs
Critical: go-toolset and golang security update
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. The golang packages provide the Go programming language compiler. Security Fix(es): * golang: cmd/go: go command may generate unexpected code at build ti…
first Jun 29, 2023 -
Critical max 9.4ALSA-2023:4030 1 CVE
Critical: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: account takeover possible when using Azure AD OAuth (CVE-2023-3128) For more details about the security issue(s), includ…
first Jul 12, 2023 -
Critical max 6.8ALSA-2026:88455 1 CVE
Critical: ca-certificates security update
The ca-certificates package contains a set of Certificate Authority (CA) certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure (PKI). Security Fix(es): * ca-certificates: Distrust eMudhra intermediate CA certificate…
first Oct 22, 2026 -
Critical max 9.1ALSA-2026:80605 1 CVE
Critical: cjose security update
CJose is C library implementing the Javascript Object Signing and Encryption (JOSE). Security Fix(es): * cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption (CVE-2026-53939) For more details about the security issue(s), i…
first Oct 12, 2026 -
Critical max 9.3ALSA-2023:6266 3 CVEs
Critical: squid security update
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * SQUID-2023:3 squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847) * SQUID-2023:1 squid: Request/Response sm…
first Nov 2, 2023 -
Critical max 9.8ALSA-2026:72279 8 CVEs
Critical: ipa security, bug fix, and enhancement update
AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` vi…
first Sep 28, 2026 -
Critical max 9.1ALSA-2026:71419 3 CVEs
Critical: unbound security update
The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis (CVE-2026-82717) * unbound: Unbound: Heap buffer overflow via malicious DNSS…
first Sep 24, 2026