2,958 results · Clear filters · Feed
-
High max 7.5ALSA-2026:96088 9 CVEs
Important: nodejs24 security, bug fix, and enhancement update
Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications…
first Nov 9, 2026 -
High max 7.5ALSA-2026:96236 2 CVEs
Important: nodejs-nodemon security update
Simple monitor script for use during development of a node.js app. For use during development of a node.js based application. nodemon will watch the files in the directory in which nodemon was started, and if any files change, nodemon will automatically resta…
first Nov 9, 2026 -
High max 9.8ALSA-2026:93413 17 CVEs
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Kernel: Denial of Service in network socket error handling (CVE-2026-22977) * kernel: x86/CPU/AMD: Prevent improper isolation of shared resources…
first Nov 1, 2026 -
High max 9.8ALSA-2026:92862 6 CVEs
Important: tomcat security, bug fix, and enhancement update
Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: Apache Tomcat: Security constraint bypass due to improper access control (CVE-2026-65182) * tomcat: Apache Tomcat: Access control by…
first Oct 29, 2026 -
High max 7.5ALSA-2026:96094 8 CVEs
Important: nodejs22 security update
Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time appl…
first Nov 9, 2026 -
High max 9.8ALSA-2026:93412 19 CVEs
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: sctp: stream: fully roll back denied add-stream state (CVE-2026-52929) * kernel: ipv6: sit: reload inner IPv6 header after GSO offloads (CVE-2026…
first Nov 1, 2026 -
High max 7.5ALSA-2026:96234 7 CVEs
Important: nodejs:22 security, bug fix, and enhancement update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns …
first Nov 9, 2026 -
High max 8.7ALSA-2026:96075 1 CVE
Important: qt5-qtdeclarative security update
Qt5 - QtDeclarative component. Security Fix(es): * qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of <img> tag size in Text component parser (CVE-2025-12385) For more details about the security issue(s), including the impact, a CVSS score, acknowle…
first Nov 9, 2026 -
High max 8.8ALSA-2026:3887 4 CVEs
Important: postgresql16 security update
PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client progr…
first Mar 5, 2026 -
High max 8.1ALSA-2026:96092 1 CVE
Important: curl security update
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: curl: HTTP/2 upload Use-After-Free (CVE-2026-92392) For more details about …
-
High max 9.8ALSA-2026:93436 7 CVEs
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924) * kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026…
first Nov 2, 2026 -
High max 7.5ALSA-2024:7481 3 CVEs
Important: linux-firmware security update
The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fix(es): * kernel: hw:amd:IOMMU improperly handles certain special address leading to a loss of guest integrity (CVE-2023-20584) * kernel: …
first Oct 2, 2024 -
High max 7.7ALSA-2026:96078 1 CVE
Important: squid:4 security update
Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects. Security Fix(es): * squid: squid: Request Smuggling in HTTP Transfer-Encoding (CVE-2026-61642) For more details about the security issue(s), including the…
-
High max 8.8ALSA-2026:96083 14 CVEs
Important: dpdk security update
The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space. Security Fix(es): * dpdk: dpdk: Missing memory size validation before mmap in vhost memory region setup (CVE-2026-8…
-
High max 9.6ALSA-2026:96080 18 CVEs
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-84359) * chromium-browser: skia: chromium-browser: skia: Use after free in …
-
High max 8.0ALSA-2026:96212 3 CVEs
Important: util-linux security update
The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program. Security Fix(es): * util-linux: util-linux: heap u…
-
High max 9.8ALSA-2026:86033 17 CVEs
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678) * kernel: xfrm: espintcp: do not reuse an in-progress partial send (CVE-2026…
first Oct 20, 2026 -
High max 8.8ALSA-2026:3730 4 CVEs
Important: postgresql security update
PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006) * postgresql: PostgreSQL intarray missing valida…
first Mar 4, 2026 -
High max 10.0ALSA-2026:33412 8 CVEs
Important: galera and mariadb11.8 security, bug fix, and enhancement update
MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the …
first Jun 30, 2026 -
High max 9.5ALSA-2026:22142 6 CVEs
Important: php:8.3 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions (CVE-2026-7258) * PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting v…
first Jun 1, 2026 -
High max 9.8ALSA-2026:19370 5 CVEs
Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323) * firefox: thunderbi…
first May 19, 2026 -
High max 9.8ALSA-2026:19157 5 CVEs
Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323) * firefox: thunderbi…
first May 19, 2026 -
High max 9.8ALSA-2026:19153 5 CVEs
Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323) * firefox: thunderbird: Information disclosure due to incorrect bound…
first May 19, 2026 -
High max 9.8ALSA-2026:85321 19 CVEs
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678) * kernel: xfrm: espintcp: do not reuse an in-progress partial send (CVE-2026…
first Oct 19, 2026 -
High max 10.0ALSA-2026:33482 7 CVEs
Important: mariadb:10.11 security, bug fix, and enhancement update
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Security Fix(es): * mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261) Bug Fix(es) and Enhancement(s): * [AlmaLinux9][tracke…
first Jun 30, 2026 -
High max 10.0ALSA-2026:33481 8 CVEs
Important: mariadb:11.8 security, bug fix, and enhancement update
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Security Fix(es): * mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261) Bug Fix(es) and Enhancement(s): * [AlmaLinux9] [track…
first Jun 30, 2026 -
High max 9.8ALSA-2026:19348 30 CVEs
Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS (CVE-2026-6772) * firefox: thunderbird: Use-after-free in the JavaScript Engine component …
first May 19, 2026 -
High max 8.8ALSA-2026:3896 4 CVEs
Important: postgresql:15 security update
PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006) * postgresql: PostgreSQL intarray missing valida…
first Mar 5, 2026 -
High max 7.5ALSA-2026:24347 3 CVEs
Important: frr security update
FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fix(es): * frr: denial of service via crafted FlowSpec component (CVE-2026-37457) * frr: denial…
first Jun 8, 2026 -
High max 9.5ALSA-2026:23388 7 CVEs
Important: php security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions (CVE-2026-7258) * PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting v…
first Jun 4, 2026 -
High max 9.5ALSA-2026:22649 8 CVEs
Important: php8.4 security update
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a…
first Jun 2, 2026 -
High max 9.8ALSA-2026:22325 22 CVEs
Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component (CVE-2026-8388) * firefox: Other issue in the JavaScript Engine component (CVE-2026-8391) * firef…
first Jun 1, 2026 -
High max 9.8ALSA-2026:21381 22 CVEs
Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component (CVE-2026-8388) * firefox: Other issue in the JavaScript Engine component (CVE-2026-8391) * firef…
first May 27, 2026 -
High max 10.0ALSA-2026:33093 7 CVEs
Important: mariadb10.11 security, bug fix, and enhancement update
MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the …
first Jun 29, 2026 -
High max 9.5ALSA-2026:22143 6 CVEs
Important: php:8.2 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions (CVE-2026-7258) * PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting v…
first Jun 1, 2026 -
High max 7.5ALSA-2026:95518 2 CVEs
Important: delve security update
Delve is a debugger for the Go programming language. The goal of the project is to provide a simple, full featured debugging tool for Go. Delve should be easy to invoke and easy to use. Chances are if you're using a debugger, things aren't going your way. Wit…
first Nov 5, 2026 -
High max 7.5ALSA-2026:95519 5 CVEs
Important: delve security update
Delve is a debugger for the Go programming language. The goal of the project is to provide a simple, full featured debugging tool for Go. Delve should be easy to invoke and easy to use. Chances are if you're using a debugger, things aren't going your way. Wit…
first Nov 5, 2026 -
High max 9.5ALSA-2026:22305 6 CVEs
Important: php:8.2 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions (CVE-2026-7258) * PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting v…
first Jun 1, 2026 -
High max 7.5ALSA-2024:3340 4 CVEs
Important: .NET 7.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK…
first May 23, 2024 -
High max 9.3ALSA-2023:7668 3 CVEs
Important: squid:4 security update
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: DoS against HTTP and HTTPS (CVE-2023-5824) For more details about the security issue(s), including the impact, a CVSS s…
first Dec 6, 2023