Skip to content
OpenAdvisories

Source

AlmaLinux Security Advisories

Source: https://errata.almalinux.org/

46 results · Clear filters · Feed

  • Medium max 7.8
    ALSA-2022:6542 3 CVEs 2 exploited

    Moderate: php:7.4 security update

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * Archive_Tar: allows an unserialization attack because phar: is blocked but PHAR: is not blocked (CVE-2020-28948) * Archive_Tar: improper filename sanitiz…

    first Sep 15, 2022
  • Medium max 8.8
    ALSA-2022:6540 1 CVE 1 exploited

    Moderate: webkit2gtk3 security update

    WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have been upgraded to a later upstream version: webkit2gtk3 (2.36.7). Security Fix(es): * webkitgtk: processing maliciously crafted web content may l…

    first Sep 15, 2022
  • Medium max 8.6
    ALSA-2022:7683 26 CVEs 1 exploited

    Moderate: kernel security, bug fix, and enhancement update

    The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * off-path attacker may inject data or terminate victim's TCP session (CVE-2020-36516) * race condition in VT_RESIZEX ioctl when vc_cons[i].d is already NU…

    first Nov 8, 2022
  • Medium max 8.8
    ALSA-2022:1777 30 CVEs 2 exploited

    Moderate: webkit2gtk3 security, bug fix, and enhancement update

    WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have been upgraded to a later upstream version: webkit2gtk3 (2.34.6). (BZ#1985042) Security Fix(es): * webkitgtk: maliciously crafted web content may…

    first May 10, 2022
  • Medium max 6.9
    ALSA-2021:1846 1 CVE 1 exploited

    Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update

    AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * jquery: Passing HTML containing <option> elements to manipul…

    first May 18, 2021
  • Medium max 5.5
    ALSA-2021:1647 3 CVEs 1 exploited

    Moderate: samba security, bug fix, and enhancement update

    Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. The following packages have be…

    first May 18, 2021