2,978 results · Clear filters · Feed
-
High max 7.8ALSA-2023:0300 6 CVEs
Important: kernel-rt security and bug fix update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: watch queue race condition can lead to privilege escalation (CVE-2022-2959) * kernel: me…
first Jan 23, 2023 -
High max 9.8ALSA-2022:9065 6 CVEs
Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.6.0 ESR. Security Fix(es): * Mozilla: Arbitrary file read from a compromised content process (CVE-2022-…
first Dec 15, 2022 -
High max 7.8ALSA-2022:8453 2 CVEs
Important: device-mapper-multipath security update
The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices. Security Fix(es): * device-mapper-multipath: Regression of CVE-2022-41974 fix in AlmaLinux (CVE-2022-3787) For more details abou…
first Nov 15, 2022 -
High max 7.5ALSA-2022:8420 1 CVE
Important: mingw-zlib security update
The zlib packages provide a general-purpose lossless data compression library that is used by many different programs. Security Fix(es): * zlib: A flaw found in zlib when compressing (not decompressing) certain inputs (CVE-2018-25032) For more details about t…
first Nov 15, 2022 -
High max 7.8ALSA-2026:86841 1 CVE
Important: librsvg2 security update
The librsvg2 packages provide a Scalable Vector Graphics (SVG) library based on the libart library. Security Fix(es): * librsvg: Use-after-free when XML includes have duplicated entities (CVE-2026-96889,RUSTSEC-2026-0305) For more details about the security i…
first Oct 21, 2026 -
High max 7.8ALSA-2026:68692 1 CVE
Important: sudo security, bug fix, and enhancement update
The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fix(es): * sud…
first Sep 17, 2026 -
High max 9.8ALSA-2026:68507 19 CVEs
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number (CVE-2024-58007) * kernel: Linux kernel t7xx WWAN driver: Denial of Service via buf…
first Sep 17, 2026 -
High max 4.8ALSA-2026:6817 2 CVEs
Important: capstone security update
Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community. Security Fix(es): * capstone: Capstone: Memory corruption via unchecked vsnprintf return (CVE-2025-68114) *…
first Apr 7, 2026 -
High max 9.8ALSA-2026:67471 25 CVEs
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (CVE-2025-40149) * kernel: Linux kernel: Denial of Service in qla2xxx SCSI dri…
first Sep 15, 2026 -
High max 9.1ALSA-2026:67463 21 CVEs
Important: rsync security, bug fix, and enhancement update
The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used…
first Sep 14, 2026 -
High max 9.8ALSA-2026:67154 9 CVEs
Important: openssl security, bug fix, and enhancement update
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: OpenSSL: Denial of Service via unbounded memory gro…
first Sep 14, 2026 -
High max 8.7ALSA-2026:66349 1 CVE
Important: freerdp security update
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * FreeRDP: FreeRDP: Remote cod…
first Sep 10, 2026 -
High max 6.3ALSA-2026:65816 1 CVE
Important: qt6-qt5compat security update
Qt6 - Qt 5 Compatibility Libraries. Security Fix(es): * qt: Qt: Denial of Service via out-of-bounds read in text codec handling (CVE-2026-9499) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other relate…
first Sep 9, 2026 -
High max 9.8ALSA-2026:65334 29 CVEs
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CVE-2026-43133) * kernel: Bluetooth: SMP: force responder MITM requirements before build…
first Sep 8, 2026 -
High max 5.9ALSA-2026:69129 5 CVEs
Important: openssh security update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH: sftp client allows attacker to co…
first Sep 21, 2026 -
High max 7.6ALSA-2026:68235 3 CVEs
Important: libsoup3 security update
Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is des…
first Sep 16, 2026 -
High max 7.0ALSA-2026:67979 2 CVEs
Important: microcode_ctl security, bug fix, and enhancement update
The microcode_ctl packages provide microcode updates for Intel and AMD processors. Security Fix(es): * kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling (CVE-2025-35973) * kernel: microcode_ctl: Intel Xeon 6 Proc…
first Sep 16, 2026 -
High max 9.2ALSA-2026:67909 8 CVEs
Important: libevent security update
The libevent packages provide an abstract asynchronous event notification library. Security Fix(es): * libevent: Libevent: Denial of Service via malformed RPC data (CVE-2026-63383) * libevent: Libevent: Off-by-one stack buffer overflow leading to denial of se…
first Sep 16, 2026 -
High max 7.5ALSA-2026:67872 1 CVE
Important: corosync security update
The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Security Fix(es): * corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly (CVE-2026-81665) For more d…
first Sep 16, 2026 -
High max 7.0ALSA-2026:67530 2 CVEs
Important: .NET 10.0 security, bug fix, and enhancement update
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming …
first Sep 15, 2026 -
High max 7.0ALSA-2026:67528 2 CVEs
Important: .NET 9.0 security, bug fix, and enhancement update
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming …
first Sep 15, 2026 -
High max 8.8ALSA-2026:67280 19 CVEs
Important: postgresql18 security update
PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client progr…
first Sep 14, 2026 -
High max 8.6ALSA-2026:66336 8 CVEs
Important: vim security update
Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator (CVE-2026-28420) * vim: Vim: Denial of Service via out-of-bou…
first Sep 10, 2026 -
High max 7.8ALSA-2026:65162 1 CVE
Important: gpsd security update
gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. With gpsd, mu…
first Sep 8, 2026 -
High max 7.5ALSA-2026:69308 5 CVEs
Important: yggdrasil security update
yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate child "worker" process, exchanging data with its worker processes through a D-Bus message broker. Security Fix(es): * mime: g…
first Sep 21, 2026 -
High max 9.8ALSA-2026:69125 6 CVEs
Important: curl security update
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse (…
first Sep 21, 2026 -
High max 7.5ALSA-2026:69099 2 CVEs
Important: yggdrasil-worker-package-manager security update
yggdrasil-worker-package-manager is a simple package manager yggd worker. It knows how to install and remove packages, add, remove, enable and disable repositories, and does rudimentary detection of the host it is running on to guess the package manager to us…
first Sep 21, 2026 -
High max 8.2ALSA-2026:6906 4 CVEs
Important: nginx security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files (CVE-2026-32647) * …
first Apr 7, 2026 -
High max 8.1ALSA-2026:67314 1 CVE
Important: nginx security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) For more details ab…
first Sep 14, 2026 -
High max 7.5ALSA-2026:67286 1 CVE
Important: rust security update
Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator. Security Fix(es): * libgit2: libgit2: Denial of Service due to heap out-of-…
first Sep 14, 2026 -
High max 9.6ALSA-2026:66432 6 CVEs
Important: osbuild-composer security update
A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-compos…
first Sep 10, 2026 -
High max 9.8ALSA-2026:65159 21 CVEs
Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component (CVE-2026-74934) * firefox: thunderbird: Privilege escalation in the Networking: Cookies compo…
first Sep 8, 2026 -
High max 7.5ALSA-2026:65116 10 CVEs
Important: opentelemetry-collector security update
Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fix(es): * net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499) * net/mail: golang: Go net/mail: Denial of Service via cra…
first Sep 8, 2026 -
High max 7.5ALSA-2026:64818 6 CVEs
Important: skopeo security update
The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * net/mail: golang: net/mail: Denial of Service via pathological email address parsing (C…
first Sep 8, 2026 -
High max 9.2ALSA-2026:7080 9 CVEs
Important: nodejs22 security update
Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time appl…
first Apr 8, 2026 -
High max 9.1ALSA-2026:70753 1 CVE
Important: perl-DBI security update
The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Securit…
first Sep 23, 2026 -
High max 9.8
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964) * kernel: iommu/vt-d: Clear Present bit before tearing down PASID …
first Sep 23, 2026 -
High max 7.5ALSA-2026:70201 11 CVEs
Important: podman security update
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * podman: Go crypto/x509: Certificate validation …
first Sep 22, 2026 -
High max 8.8ALSA-2026:70186 16 CVEs
Important: postgresql16 security update
PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client progr…
first Sep 22, 2026 -
High max 7.1ALSA-2026:69609 1 CVE
Important: openexr security update
OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the …
first Sep 21, 2026