2,038 results · Clear filters · Feed
-
Medium max 7.5ALSA-2024:10949 7 CVEs
Moderate: php:8.2 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: host/secure cookie bypass due to partial CVE-2022-31629 fix (CVE-2024-2756) * php: password_verify can erroneously return true, opening ATO risk (CV…
first Dec 11, 2024 -
Medium max 9.8ALSA-2024:10939 7 CVEs
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615) * kernel: block: initialize integrity buffer to zero before writin…
first Dec 11, 2024 -
Medium max 6.3ALSA-2024:10983 2 CVEs
Moderate: python3.9:3.9.21 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Dec 12, 2024 -
Medium max 9.8ALSA-2023:6659 1 CVE
Moderate: python3.9 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Nov 7, 2023 -
Medium max 5.5ALSA-2023:6621 1 CVE
Moderate: protobuf-c security update
The protobuf-c packages provide C bindings for Google's Protocol Buffers. Security Fix(es): * protobuf-c: unsigned integer overflow in parse_required_member (CVE-2022-48468) For more details about the security issue(s), including the impact, a CVSS score, ack…
first Nov 7, 2023 -
Medium max 7.5ALSA-2023:6596 2 CVEs
Moderate: cups security and bug fix update
The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * cups: heap buffer overflow may lead to DoS (CVE-2023-32324) * cups: use-after-free in cupsdAcceptClient() in schedule…
first Nov 7, 2023 -
Medium max 5.9ALSA-2023:6575 5 CVEs
Moderate: libtiff security update
The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: null pointer dereference in LZWDecode() in libtiff/tif_lzw.c (CVE-2023-2731) * libtiff: tiffcrop: null pointer dereference…
first Nov 7, 2023 -
MediumALSA-2023:6643 2 CVEs
Moderate: libssh security update
libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: NULL pointer dereference during rekeying with algorithm guessing (CVE-2023-1667) * libssh: authorization bypass in p…
first Nov 7, 2023 -
Medium max 4.8ALSA-2023:6615 1 CVE
Moderate: python-cryptography security update
The python-cryptography packages contain a Python Cryptographic Authority's (PyCA's) cryptography library, which provides cryptographic primitives and recipes to Python developers. Security Fix(es): * python-cryptography: memory corruption via immutable objec…
first Nov 7, 2023 -
Medium max 5.5ALSA-2023:6593 1 CVE
Moderate: binutils security update
The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities. Securit…
first Nov 7, 2023 -
MediumALSA-2023:6578 1 CVE
Moderate: libqb security update
The libqb packages provide a library with the primary purpose of providing high performance client/server reusable features, such as high performance logging, tracing, inter-process communication, and polling. Security Fix(es): * libqb: Buffer overflow in log…
first Nov 7, 2023 -
Medium max 7.5ALSA-2023:6570 3 CVEs
Moderate: tomcat security and bug fix update
Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * Apache Commons FileUpload: FileUpload DoS with excessive parts (CVE-2023-24998) * tomcat: not including the secure attribute causes informat…
first Nov 7, 2023 -
Medium max 7.8ALSA-2023:6569 1 CVE
Moderate: sysstat security and bug fix update
The sysstat packages provide the sar and iostat commands. These commands enable system monitoring of disk, network, and other I/O activity. Security Fix(es): * sysstat: check_overflow() function can work incorrectly, which could lead to an overflow (CVE-2023-…
first Nov 7, 2023 -
Medium max 5.9ALSA-2023:6566 1 CVE
Moderate: libmicrohttpd security update
GNU libmicrohttpd is a small C library that makes it easy to run an HTTP server as part of another application. Security Fix(es): * libmicrohttpd: remote DoS (CVE-2023-27371) For more details about the security issue(s), including the impact, a CVSS score, ac…
first Nov 7, 2023 -
Medium max 6.5ALSA-2023:6551 1 CVE
Moderate: yajl security update
Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator. Security Fix(es): * yajl: Memory leak in yajl_tree_parse function (CVE-2023-33460) For more details about the security is…
first Nov 7, 2023 -
MediumALSA-2023:6549 3 CVEs
Moderate: libreswan security update
Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks…
first Nov 7, 2023 -
Medium max 8.1ALSA-2023:6542 1 CVE
Moderate: perl-HTTP-Tiny security update
HTTP::Tiny is a small and simple HTTP/1.1 client written in Perl. Security Fix(es): * http-tiny: insecure TLS cert default (CVE-2023-31486) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related in…
first Nov 7, 2023 -
Medium max 8.1ALSA-2023:6539 1 CVE
Moderate: perl-CPAN security update
The CPAN module is a tool to query, download and build perl modules from CPAN sites. Security Fix(es): * perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS (CVE-2023-31484) For more details about the security issue(s), in…
first Nov 7, 2023 -
Medium max 8.6ALSA-2023:6635 4 CVEs
Moderate: c-ares security, bug fix, and enhancement update
The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API. The following packages have been upgraded to a later upstream version: c-ares (1.19.1). (BZ#2210370) Security Fix(es): * c-ares: buffer overflow in co…
first Nov 7, 2023 -
Medium max 9.8ALSA-2023:6544 2 CVEs
Moderate: ghostscript security and bug fix update
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: buffer overflow in base/sbcp.c …
first Nov 7, 2023 -
Medium max 5.3ALSA-2023:5733 3 CVEs
Moderate: java-1.8.0-openjdk security update
The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: segmentation fault in ciMethodBlocks (CVE-2022-40433) * OpenJDK: IOR deserialization issue in CORBA (8…
first Oct 18, 2023 -
Medium max 7.5
Moderate: nginx security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE…
first Oct 16, 2023 -
Medium max 6.5ALSA-2023:5146 1 CVE
Moderate: .NET 7.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK…
first Sep 13, 2023 -
Medium max 6.5ALSA-2023:5143 1 CVE
Moderate: .NET 6.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK…
first Sep 13, 2023 -
Medium max 5.3ALSA-2023:5753 2 CVEs
Moderate: java-17-openjdk security and bug fix update
The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * OpenJDK: memory corruption issue on x86_64 with AVX-512 (8317121) (CVE-2023-22025) * OpenJDK: certificate path v…
first Oct 18, 2023 -
Medium max 5.3ALSA-2023:5744 1 CVE
Moderate: java-11-openjdk security and bug fix update
The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081) For more deta…
first Oct 18, 2023 -
Medium max 6.3ALSA-2025:7109 1 CVE
Moderate: python3.11 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first May 13, 2025 -
Medium max 5.3ALSA-2025:7076 1 CVE
Moderate: gnutls security update
The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to R…
first May 13, 2025 -
Medium max 6.7ALSA-2025:6990 8 CVEs
Moderate: grub2 security update
The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware de…
first May 13, 2025 -
Medium max 7.8ALSA-2025:10837 1 CVE
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CVE-2025-21991) For more details about the security issue(s), including…
first Jul 14, 2025 -
Medium max 7.7ALSA-2025:10585 2 CVEs
Moderate: jq security update
jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text. Securi…
first Jul 8, 2025 -
Medium max 4.9ALSA-2025:0912 1 CVE
Moderate: mariadb:10.11 security update
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Security Fix(es): * mysql: Client: mysqldump unspecified vulnerability (CPU Apr 2024) (CVE-2024-21096) For more details about the security issue(s), including th…
first Feb 4, 2025 -
Medium max 4.9ALSA-2025:0914 2 CVEs
Moderate: galera and mariadb security update
MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the …
first Feb 4, 2025 -
Medium max 7.5ALSA-2024:9468 1 CVE
Moderate: python3.9 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Nov 12, 2024 -
Medium max 4.4ALSA-2024:9458 1 CVE
Moderate: python3.11-urllib3 security update
The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities. Security Fix(es): * urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891) For more details about t…
first Nov 12, 2024 -
Medium max 5.5ALSA-2024:9452 2 CVEs
Moderate: pcp security update
Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of c…
first Nov 12, 2024 -
Medium max 5.9ALSA-2024:9404 1 CVE
Moderate: libgcrypt security update
The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fix(es): * libgcrypt: vulnerable to Marvin Attack (CVE-2024-2236) For more details about the security issue(s), including the impact, a CVSS score, ac…
first Nov 12, 2024 -
Medium max 5.9ALSA-2024:9541 1 CVE
Moderate: expat security update
Expat is a C library for parsing XML documents. Security Fix(es): * libexpat: expat: DoS via XML_ResumeParser (CVE-2024-50602) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, re…
first Nov 13, 2024 -
Medium max 4.4ALSA-2024:9457 1 CVE
Moderate: python3.12-urllib3 security update
urllib3 is a powerful, user-friendly HTTP client for Python. urllib3 brings many critical features that are missing from the Python standard libraries: • Thread safety. • Connection pooling. • Client-side SSL/TLS verification. • File uploads with multipart en…
first Nov 12, 2024 -
Medium max 7.5ALSA-2024:9450 1 CVE
Moderate: python3.11 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Nov 12, 2024