2,978 results · Clear filters · Feed
-
High max 7.5ALSA-2026:19133 4 CVEs
Important: git-lfs security update
Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in …
first May 19, 2026 -
High max 7.5ALSA-2026:19127 1 CVE
Important: gdk-pixbuf2 security update
The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter. Security Fix(es): * gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overf…
first May 19, 2026 -
High max 7.4ALSA-2026:19054 1 CVE
Important: tomcat security update
Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: Apache Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) For more details about the se…
first May 19, 2026 -
High max 8.4ALSA-2026:18465 1 CVE
Important: edk2 security update
EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * edk2: EDK2: Improper Input Validation allows arbitrary command execution (CVE-20…
first May 19, 2026 -
High max 7.5ALSA-2026:1842 6 CVEs
Important: nodejs24 security update
Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications…
first Feb 3, 2026 -
High max 8.2ALSA-2026:11389 1 CVE
Important: vim security update
Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: arbitrary command execution via modeline sandbox bypass (CVE-2026-34982) For more details about the security issue(s), including the impact, a CVSS score, acknowle…
first Apr 28, 2026 -
High max 8.1ALSA-2026:10713 1 CVE
Important: pcs security update
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * lodash: lodash: Arbitrary code execution via untrusted input in template imports (CVE-2026-4800) For more details about the security iss…
first Apr 27, 2026 -
High max 7.5ALSA-2026:13916 2 CVEs
Important: fence-agents security update
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * pyjwt: PyJWT accepts unknown …
first May 6, 2026 -
High max 9.8ALSA-2026:0453 9 CVEs
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CVE-2025-39806) * kernel: audit: fix out-of-bounds read in audit_compare_dna…
first Jan 12, 2026 -
High max 8.2ALSA-2026:0423 1 CVE
Important: libsoup3 security update
Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is des…
first Jan 12, 2026 -
High max 9.1ALSA-2026:10711 2 CVEs
Important: python3.12 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Apr 27, 2026 -
High max 7.5ALSA-2026:0545 1 CVE
Important: podman security update
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang.org/x/crypto/ssh/agent: golang.org/x/cry…
first Jan 14, 2026 -
High max 9.1ALSA-2025:9190 1 CVE
Important: ipa security update
AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * freeIPA: idm: Privilege escalation from host to domain admin…
first Jun 17, 2025 -
High max 7.5ALSA-2025:8128 4 CVEs
Important: libsoup3 security update
Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is des…
first May 26, 2025 -
High max 7.8ALSA-2025:23279 2 CVEs
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (CVE-2025-38499) * kernel: net: tun: Update napi->skb after XDP …
first Dec 16, 2025 -
High max 7.8ALBA-2022:8256 1 CVE
Important: qatzip bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
first Nov 15, 2022 -
High max 9.8ALSA-2026:68570 31 CVEs
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow (CVE-2026-23172) * kernel: xfrm: hold dev ref until after transport_finish N…
first Sep 17, 2026 -
High max 8.2ALSA-2026:59490 2 CVEs
Important: nginx:1.24 security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) …
first Aug 25, 2026 -
High max 7.8ALSA-2026:55603 6 CVEs
Important: nodejs:24 security update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data (CVE-2026-11822) * sqlit…
first Aug 17, 2026 -
High max 7.5ALSA-2026:54571 1 CVE
Important: dracut security update
The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it ca…
first Aug 13, 2026 -
High max 7.8ALSA-2026:54268 1 CVE
Important: python3.9 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Aug 12, 2026 -
High max 8.6ALSA-2026:19146 1 CVE
Important: openexr security update
OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the …
first May 19, 2026 -
High max 7.5ALSA-2026:1905 1 CVE
Important: fence-agents security update
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * pyasn1: pyasn1: Denial of Ser…
first Feb 4, 2026 -
High max 7.8ALSA-2026:80496 1 CVE
Important: flatpak-builder security update
Flatpak-builder is a tool for building flatpaks from sources. Security Fix(es): * flatpak-builder: Host code execution via `git am` hook execution in patch source extraction (`use-git-am`) (CVE-2026-86320) For more details about the security issue(s), includi…
first Oct 12, 2026 -
High max 9.8ALSA-2026:7679 2 CVEs
Important: perl-XML-Parser security update
This module provides ways to parse XML documents. It is built on top of XML::Parser::Expat, which is a lower level interface to James Clark's expat library. Each call to one of the parsing methods creates a new instance of XML::Parser::Expat which is then use…
first Apr 13, 2026 -
High max 9.8ALSA-2026:76761 43 CVEs
Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-92035) * firefox:…
first Oct 6, 2026 -
High max 7.5ALSA-2026:72286 1 CVE
Important: ruby security, bug fix, and enhancement update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS re…
first Sep 28, 2026 -
High max 7.3ALSA-2026:38511 4 CVEs
Important: vim security update
Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: command injection when decompressing .tgz archives (CVE-2026-46483) * vim: Vim: Arbitrary Code Execution via crafted directory names (CVE-2026-47162) * vim: Vim: A…
first Jul 13, 2026 -
High max 8.8ALSA-2026:38500 1 CVE
Important: maven:3.9 security update
Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information. Security Fix(es): * org.codehaus.plexus:p…
first Jul 13, 2026 -
High max 8.8ALSA-2026:2039 3 CVEs
Important: fontforge security update
FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts. Security Fix(es): * fontforge: FontForge: Rem…
first Feb 5, 2026 -
High max 7.8ALSA-2026:19344 3 CVEs
Important: xorg-x11-server-Xwayland security update
Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) * xorg: xwayland: X.Org X server: Use-after-free vulner…
first May 19, 2026 -
High max 8.6ALSA-2025:21110 2 CVEs
Important: bind security update
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS …
first Nov 12, 2025 -
High max 8.6ALSA-2024:4623 1 CVE
Important: qt5-qtbase security update
Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fix(es): * qtbase: qtbase: Delay any communication until encrypted() can be responded to (CVE-2024-39936) For …
first Jul 18, 2024 -
High max 7.8ALSA-2024:4278 1 CVE
Important: qemu-kvm security update
Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fix(es): * qemu-kvm: QEMU: 'qemu-img info'…
first Jul 2, 2024 -
High max 7.4ALSA-2026:76735 1 CVE
Important: rust-sequoia-sqv security update
A simple OpenPGP signature verification program. Security Fix(es): * sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion (CVE-2026-42784) For more details about the security issue(s), including the impact, a CVSS score,…
first Oct 6, 2026 -
High max 7.0ALSA-2026:73427 1 CVE
Important: gdb security update
The GNU Debugger (GDB) allows debugging of programs written in C, C++, and other languages by executing them in a controlled fashion and printing their data. Security Fix(es): * gdb: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF …
first Sep 29, 2026 -
High max 7.5ALSA-2026:72427 1 CVE
Important: ruby4.0 security update
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible. Security Fix(es): * resolv: r…
first Sep 28, 2026 -
High max 8.5ALSA-2026:71586 6 CVEs
Important: libxml2 security update
The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow (CVE-2026-86138) * libxml2: libxml2: Data integrity issues due to…
first Sep 24, 2026 -
High max 7.5ALSA-2026:0922 1 CVE
Important: golang security update
The golang packages provide the Go programming language compiler. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) For more details about the security issue(s), including…
first Jan 21, 2026 -
High max 7.8ALSA-2025:9178 3 CVEs
Important: kea security update
DHCP implementation from Internet Systems Consortium, Inc. that features fully functional DHCPv4, DHCPv6 and Dynamic DNS servers. Both DHCP servers fully support server discovery, address assignment, renewal, rebinding and release. The DHCPv6 server supports …
first Jun 17, 2025