2,031 results · Clear filters · Feed
-
Medium max 7.1ALSA-2026:36673 2 CVEs
Moderate: gstreamer1-plugins-ugly-free security update
GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose license is not fully compatible with LGPL. Security Fix(es): * gstreamer1-plugins-ugly-free: GStreamer: Out-of-bounds read …
first Jul 8, 2026 -
Medium max 6.3ALSA-2026:95618 4 CVEs
Moderate: glibc security update
The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot…
first Nov 5, 2026 -
Medium max 6.1ALSA-2026:95570 3 CVEs
Moderate: cockpit-files security update
A filesystem browser for Cockpit Security Fix(es): * cockpit-files: cockpit-files: Arbitrary file ownership and permission modification via symlink race condition (CVE-2026-91203) * cockpit-files: cockpit-files: Arbitrary file ownership change via symlink fol…
first Nov 5, 2026 -
Medium max 7.8ALSA-2023:6431 1 CVE
Moderate: libfastjson security update
The libfastjson library provides essential JavaScript Object Notation (JSON) handling functions. The library enables users to construct JSON objects in C, output them as JSON-formatted strings, and convert JSON-formatted strings back to the C representation o…
first Nov 7, 2023 -
Medium max 7.5ALSA-2024:0894 87 CVEs
Moderate: mysql:8.0 security update
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: InnoDB unspecified vulnerability (CPU Apr 2023) (CVE-2023-21911) * mysql: Server: DDL…
first Feb 20, 2024 -
Medium max 7.5ALSA-2023:5259 5 CVEs
Moderate: mariadb:10.3 security, bug fix, and enhancement update
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: mariadb (10.3). (BZ#2223572, BZ#2223574, BZ#2223962, BZ#2223965) Security Fix(es): * maria…
first Sep 19, 2023 -
Medium max 9.8ALSA-2023:2903 6 CVEs
Moderate: php:7.4 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have been upgraded to a later upstream version: php (7.4.33). Security Fix(es): * XKCP: buffer overflow in the SHA-3 reference implementation (CVE-202…
first May 16, 2023 -
Medium max 9.8ALSA-2023:0848 6 CVEs
Moderate: php:8.0 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have been upgraded to a later upstream version: php (8.0). (BZ#2161666) Security Fix(es): * XKCP: buffer overflow in the SHA-3 reference implementatio…
first Feb 21, 2023 -
Medium max 7.2ALSA-2022:7119 125 CVEs
Moderate: mysql:8.0 security, bug fix, and enhancement update
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. The following packages have been upgraded to a later upstream version: mysql (8.0.30). Security Fix(es): * mysql…
first Oct 25, 2022 -
Medium max 9.8ALSA-2024:2995 10 CVEs
Moderate: xorg-x11-server security update
X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRCh…
first May 22, 2024 -
Medium max 6.5ALSA-2023:0099 1 CVE
Moderate: virt:rhel and virt-devel:rhel security and bug fix update
Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide API…
first Jan 12, 2023 -
Medium max 7.5ALSA-2020:4676 6 CVEs
Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update
Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide API…
first Nov 3, 2020 -
MediumALSA-2022:1793 1 CVE
Moderate: container-tools:3.0 security and bug fix update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * crun: Default inheritable capabilities for linux container should be empty (CVE-2022-27650) For more details about the securi…
first May 10, 2022 -
Medium max 7.5ALSA-2022:1565 2 CVEs
Moderate: container-tools:3.0 security and bug fix update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * podman: Default inheritable capabilities for linux container should be empty (CVE-2022-27649) * buildah: Default inheritable …
first Apr 26, 2022 -
MediumALSA-2021:4288 1 CVE
Moderate: libjpeg-turbo security and bug fix update
The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.…
first Nov 9, 2021 -
Medium max 5.3ALSA-2023:7022 1 CVE
Moderate: tang security and bug fix update
Tang is a server for binding data to network presence. It includes a daemon which provides cryptographic operations for binding to a remote service. The tang package provides the server side of the Network Bound Disk Encryption (NBDE) project. Security Fix(es…
first Nov 14, 2023 -
MediumALSA-2022:1842 1 CVE
Moderate: exiv2 security, bug fix, and enhancement update
Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract and delete methods for Exif thumbnails, classes to access Ifd, and support for various image formats. The fol…
first May 10, 2022 -
Medium max 5.9ALSA-2020:5503 5 CVEs
Moderate: mariadb-connector-c security, bug fix, and enhancement update
The MariaDB Native Client library (C driver) is used to connect applications developed in C/C++ to MariaDB and MySQL databases. The following packages have been upgraded to a later upstream version: mariadb-connector-c (3.1.11). (BZ#1898993) Security Fix(es):…
first Dec 15, 2020 -
Medium max 7.5ALSA-2020:3053 2 CVEs
Moderate: container-tools:rhel8 security, bug fix, and enhancement update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * QEMU: slirp: use-after-free in ip_reass() function in ip_input.c (CVE-2020-1983) For more details about the security issue(s)…
first Jul 21, 2020 -
Medium max 6.3ALSA-2020:1766 5 CVEs
Moderate: GNOME security, bug fix, and enhancement update
GNOME is the default desktop environment of AlmaLinux. Security Fix(es): * LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp (CVE-2018-20337) * gdm: lock screen bypass when timed login is enabled (CVE-2019-3825) * gvfs: m…
first Apr 28, 2020 -
Medium max 7.5ALSA-2023:6940 2 CVEs
Moderate: mod_auth_openidc:2.3 security and bug fix update
The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fix(es): * mod_auth_openidc: Open Redirect in oid…
first Nov 14, 2023 -
Medium max 8.2ALSA-2022:7624 2 CVEs
Moderate: php:8.0 security, bug fix, and enhancement update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have been upgraded to a later upstream version: php (8.0.20). (BZ#2100876) Security Fix(es): * php: Use after free due to php_filter_float() failing f…
first Nov 8, 2022 -
Medium max 7.5ALSA-2022:6447 3 CVEs
Moderate: ruby:2.7 security, bug fix, and enhancement update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: ruby (2.7.6). (BZ#2109424) Security F…
first Sep 13, 2022 -
Medium max 6.5ALSA-2020:1577 29 CVEs
Moderate: exiv2 security, bug fix, and enhancement update
The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments. The following packages have been upgraded to a later upstream version: exiv2 (0.27.2). (BZ#1651917) Security Fix(es): * ex…
first Apr 28, 2020 -
MediumALSA-2019:3476 1 CVE
Moderate: squid:4 security and bug fix update
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: XSS via user_name or auth parameter in cachemgr.cgi (CVE-2019-13345) For more details about the security issue(s), incl…
first Nov 5, 2019 -
Medium max 9.0ALSA-2023:0852 3 CVEs
Moderate: httpd:2.4 security and bug fix update
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: mod_dav: out-of-bounds read/write of zero byte (CVE-2006-20001) * httpd: mod_proxy_ajp: Possible request smuggling (CVE-2022-36760)…
first Feb 21, 2023 -
Medium max 3.7ALSA-2019:3708 12 CVEs
Moderate: mariadb:10.3 security and bug fix update
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: mariadb (10.3.17), galera (25.3.26). (BZ#1701687, BZ#1711265, BZ#1741358) Security Fix(es)…
first Nov 5, 2019 -
Medium max 5.5ALSA-2023:2873 1 CVE
Moderate: gcc-toolset-12-binutils security update
The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities. Securit…
first May 16, 2023 -
MediumALSA-2022:7482 1 CVE
Moderate: qt5 security, bug fix, and enhancement update
The Qt5 libraries packages provide Qt 5, version 5 of the Qt cross-platform application framework. The following packages have been upgraded to a later upstream version: qt5 (5.15.3). (BZ#2061377) Security Fix(es): * qt: QProcess could execute a binary from t…
first Nov 8, 2022 -
Medium max 7.5ALSA-2022:6450 4 CVEs
Moderate: ruby:3.0 security, bug fix, and enhancement update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: ruby (3.0.4). (BZ#2109431) Security F…
first Sep 13, 2022 -
Medium max 7.8ALSA-2021:1804 9 CVEs
Moderate: userspace graphics, xorg-x11, and mesa security, bug fix, and enhancement update
X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Mesa provides a 3D graphics API that is compatible with Open Graphics Library (OpenGL).…
first May 18, 2021 -
Medium max 8.0ALSA-2020:4647 25 CVEs
Moderate: freerdp and vinagre security, bug fix, and enhancement update
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. The vinagre packages provide the Vinagre remote …
first Nov 3, 2020 -
Medium max 7.8ALSA-2026:95281 1 CVE
Moderate: xorg-x11-server-Xwayland security update
Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520) For more details about the security issue(s), includin…
-
Medium max 7.5ALSA-2026:94485 2 CVEs
Moderate: cockpit security, bug fix, and enhancement update
Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fix(es): * cockpit: Cockpit: Denial …
first Nov 3, 2026 -
Medium max 6.5ALSA-2026:85917 1 CVE
Moderate: perl:5.32 security update
Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fix(es): * URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode normalization (CVE-2026-19…
first Oct 20, 2026 -
Medium max 7.8ALSA-2026:93930 2 CVEs
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (CVE-2026-63987) * kernel: ethtool: cmis: require exact CDB reply length (C…
first Nov 2, 2026 -
Medium max 7.8ALSA-2026:93911 1 CVE
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ethtool: cmis: require exact CDB reply length (CVE-2026-63996) For more details about the security issue(s), including the impact, a CVSS score, …
-
Medium max 5.5ALSA-2026:93442 1 CVE
Moderate: pipewire security update
PipeWire is a multimedia server for Linux and other Unix like operating systems. Security Fix(es): * pipewire: Pulse Server alloca Stack Overflow (CVE-2026-14330) For more details about the security issue(s), including the impact, a CVSS score, acknowledgment…
-
Medium max 5.5ALSA-2026:93464 1 CVE
Moderate: podman security update
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * podman: Arbitrary file write when importing OCI…
-
Medium max 7.5ALSA-2022:5826 42 CVEs
Moderate: mariadb:10.5 security, bug fix, and enhancement update
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: galera (26.4.11), mariadb (10.5.16). Security Fix(es): * mariadb: MariaDB through 10.5.9 a…
first Aug 2, 2022