2,038 results · Clear filters · Feed
-
Medium max 9.8ALSA-2023:7711 1 CVE
Moderate: apr security update
The Apache Portable Runtime (APR) is a portability library used by the Apache HTTP Server and other projects. It provides a free library of C data structures and routines. Security Fix(es): * apr: integer overflow/wraparound in apr_encode (CVE-2022-24963) For…
first Dec 11, 2023 -
Medium max 7.6ALSA-2023:7257 2 CVEs
Moderate: dotnet6.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK…
first Nov 15, 2023 -
Medium max 7.6ALSA-2023:7253 2 CVEs
Moderate: dotnet8.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. Security Fix(es): * dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049) …
first Nov 15, 2023 -
Medium max 7.5ALSA-2023:6712 1 CVE
Moderate: python-wheel security update
Wheel is the reference implementation of the Python wheel packaging standard, as defined in PEP 427. Security Fix(es): * python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli (CVE-2022-40898) For more details ab…
first Nov 7, 2023 -
Medium max 8.8ALSA-2023:6699 2 CVEs
Moderate: krb5 security and bug fix update
Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the he…
first Nov 7, 2023 -
Medium max 7.5ALSA-2023:6667 4 CVEs
Moderate: samba security, bug fix, and enhancement update
Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. The following packages have be…
first Nov 7, 2023 -
MediumALSA-2023:6698 1 CVE
Moderate: ncurses security and bug fix update
The ncurses (new curses) library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses packages contain support utilities including a terminfo compiler tic, a decompiler infocmp, clear, tput, tset, …
first Nov 7, 2023 -
Medium max 9.8ALSA-2023:6679 4 CVEs
Moderate: curl security update
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: GSS delegation too eager connection re-use (CVE-2023-27536) * curl: TELNET …
first Nov 7, 2023 -
Medium max 6.1ALSA-2023:6523 1 CVE
Moderate: python-tornado security update
Tornado is a Python web framework and asynchronous networking library that provides an open source version of scalable, non-blocking web server and tools. Security Fix(es): * python-tornado: open redirect vulnerability in StaticFileHandler under certain confi…
first Nov 7, 2023 -
Medium max 7.8ALSA-2023:6508 4 CVEs
Moderate: libreoffice security update
LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and p…
first Nov 7, 2023 -
Medium max 6.5ALSA-2023:6409 1 CVE
Moderate: libvirt security, bug fix, and enhancement update
The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. The following packages have been upg…
first Nov 7, 2023 -
Medium max 9.1ALSA-2026:67155 1 CVE
Moderate: perl security update
Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fix(es): * perl: Perl: Incorrect regular expression processing via large regular expressions (CVE-2026-13221) For more details ab…
first Sep 14, 2026 -
Medium max 1.8ALSA-2026:66403 1 CVE
Moderate: coreutils security update
The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Security Fix(es): * coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values (CVE…
first Sep 10, 2026 -
Medium max 0.0ALSA-2026:6621 1 CVE
Moderate: crun security update
crun is a OCI runtime Security Fix(es): * crun: crun: Privilege escalation due to incorrect parsing of the `--user` option (CVE-2026-30892) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related in…
first Apr 6, 2026 -
Medium max 7.5ALSA-2023:6496 1 CVE
Moderate: haproxy security and bug fix update
The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fix(es): * haproxy: data leak via fcgi requests (CVE-2023-0836) For more details about the security issue(s), including the impact, a…
first Nov 7, 2023 -
Medium max 5.3ALSA-2023:6492 1 CVE
Moderate: tang security update
Tang is a server for binding data to network presence. It includes a daemon which provides cryptographic operations for binding to a remote service. The tang package provides the server side of the Network Bound Disk Encryption (NBDE) project. Security Fix(es…
first Nov 7, 2023 -
MediumALSA-2023:6482 1 CVE
Moderate: librabbitmq security update
The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows you to communicate with AMQP servers using protocol version 0-9-1. Security Fix(es): * rabbitmq-c/librabbitmq: Insecure credentials submission (CVE-2023-35…
first Nov 7, 2023 -
Medium max 9.8ALSA-2023:6473 11 CVEs
Moderate: buildah security update
The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working conta…
first Nov 7, 2023 -
Medium max 6.5ALSA-2023:6469 6 CVEs
Moderate: wireshark security update
The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fix(es): * wireshark: RTPS dissector crash (CVE-2023-0666) * wireshark: IEEE C37.118 Synchrophasor dissector crash (CVE-2…
first Nov 7, 2023 -
Medium max 6.5ALSA-2023:6434 4 CVEs
Moderate: frr security and bug fix update
FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fix(es): * frr: Reachable assertion in peek_for_as4_capability function (CVE-2022-36440) * frr:…
first Nov 7, 2023 -
Medium max 9.8ALSA-2023:6402 10 CVEs
Moderate: containernetworking-plugins security and bug fix update
The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity …
first Nov 7, 2023 -
Medium max 7.5ALSA-2023:6368 2 CVEs
Moderate: qemu-kvm security, bug fix, and enhancement update
Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. The following packages have been upgraded to a late…
first Nov 7, 2023 -
Medium max 10.0ALSA-2023:6518 2 CVEs
Moderate: flatpak security, bug fix, and enhancement update
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. The following packages have been upgraded to a later upstream version: flatpak (1.12.8). (BZ#2221792) Security Fix(es): * flatpak: TIOCLINUX can send commands…
first Nov 7, 2023 -
Medium max 9.8ALSA-2023:6494 2 CVEs
Moderate: python3.11 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Nov 7, 2023 -
Medium max 9.8ALSA-2023:6474 13 CVEs
Moderate: podman security, bug fix, and enhancement update
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang: html/template: improper handling of Jav…
first Nov 7, 2023 -
Medium max 7.5ALSA-2023:6420 9 CVEs
Moderate: grafana security and enhancement update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: persistent xss in grafana core plugins (CVE-2022-23552) * grafana: plugin signature bypass (CVE-2022-31123) * grafana: d…
first Nov 7, 2023 -
Medium max 7.5ALSA-2023:6403 1 CVE
Moderate: httpd and mod_http2 security, bug fix, and enhancement update
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following packages have been upgraded to a later upstream version: httpd (2.4.57). (BZ#2184403) Security Fix(es): * httpd: mod_proxy_uwsgi HTTP response s…
first Nov 7, 2023 -
Medium max 7.5ALSA-2023:6385 3 CVEs
Moderate: liblouis security update
Liblouis is an open source braille translator and back-translator named in honor of Louis Braille. It features support for computer and literary braille, supports contracted and uncontracted translation for many languages and has support for hyphenation. New …
first Nov 7, 2023 -
Medium max 7.0ALSA-2023:6380 6 CVEs
Moderate: runc security update
The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724) * runc: Rootless runc makes `/sys/fs/…
first Nov 7, 2023 -
Medium max 5.5ALSA-2023:6371 1 CVE
Moderate: cloud-init security, bug fix, and enhancement update
The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts. Security Fix(es): * cloud-init: sensitive d…
first Nov 7, 2023 -
Medium max 7.5ALSA-2023:6524 1 CVE
Moderate: dnsmasq security and bug fix update
The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server. Security Fix(es): * dnsmasq: default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 (CVE-2023-2845…
first Nov 7, 2023 -
MediumALSA-2023:6497 1 CVE
Moderate: libX11 security update
The libX11 packages contain the core X11 protocol client library. Security Fix(es): * libX11: InitExt.c can overwrite unintended portions of the Display structure if the extension request leads to a buffer overflow (CVE-2023-3138) For more details about the s…
first Nov 7, 2023 -
Medium max 7.5ALSA-2023:6365 2 CVEs
Moderate: mod_auth_openidc security and bug fix update
The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fix(es): * mod_auth_openidc: Open Redirect in oid…
first Nov 7, 2023 -
Medium max 7.8ALSA-2023:6341 1 CVE
Moderate: xorg-x11-server-Xwayland security, bug fix, and enhancement update
Xwayland is an X server for running X clients under Wayland. The following packages have been upgraded to a later upstream version: xorg-x11-server-Xwayland (22.1.9). (BZ#2158761) Security Fix(es): * xorg-x11-server: X.Org Server Overlay Window Use-After-Free…
first Nov 7, 2023 -
Medium max 6.5ALSA-2023:6246 1 CVE
Moderate: .NET 7.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK…
first Nov 2, 2023 -
Medium max 7.5
Moderate: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) * golang: net/h…
first Oct 18, 2023 -
Medium max 7.8ALSA-2023:6340 1 CVE
Moderate: xorg-x11-server security and bug fix update
X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local P…
first Nov 7, 2023 -
Medium max 6.5ALSA-2023:6330 2 CVEs
Moderate: edk2 security, bug fix, and enhancement update
EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerif…
first Nov 7, 2023 -
Medium max 6.5ALSA-2023:6242 1 CVE
Moderate: .NET 6.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK…
first Nov 1, 2023 -
MediumALSA-2023:5081 1 CVE
Moderate: librsvg2 security update
The librsvg2 packages provide a Scalable Vector Graphics (SVG) library based on the libart library. Security Fix(es): * librsvg: Arbitrary file read when xinclude href has special characters (CVE-2023-38633) For more details about the security issue(s), inclu…
first Sep 12, 2023