2,038 results · Clear filters · Feed
-
Medium max 7.5ALSA-2024:11216 1 CVE
Moderate: containernetworking-plugins security update
The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity …
first Dec 17, 2024 -
Medium max 6.5ALSA-2026:73954 1 CVE
Moderate: openssh security update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH: Brute-force attacks facilitated d…
first Sep 30, 2026 -
Medium max 5.1ALSA-2026:73429 3 CVEs
Moderate: gawk security update
The gawk packages contain the GNU version of awk, a text processing utility. Awk interprets a special-purpose programming language to do quick and easy text pattern matching and reformatting jobs. Security Fix(es): * gawk: gawk: Memory corruption via integer …
first Sep 29, 2026 -
Medium max 1.7ALSA-2026:64787 1 CVE
Moderate: xz security update
XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time…
first Sep 8, 2026 -
Medium max 5.0ALSA-2026:61586 3 CVEs
Moderate: tar security, bug fix, and enhancement update
The GNU tar program can save multiple files in an archive and restore files from an archive. Security Fix(es): * tar: tar: Hidden file injection via crafted archives (CVE-2026-5704) * tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore …
first Aug 31, 2026 -
Medium max 7.8ALSA-2026:6053 2 CVEs
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain() (CVE-2026-23231) * kernel: Linux kernel (qla2xxx): D…
first Mar 30, 2026 -
Medium max 6.9ALSA-2026:61625 2 CVEs
Moderate: gzip security update
The gzip packages contain the gzip (GNU zip) data compression utility. gzip is used to compress regular files. It replaces them with files containing the .gz extension, while retaining ownership modes, access, and modification times. Security Fix(es): * gzip:…
first Aug 31, 2026 -
Medium max 5.5ALSA-2026:61340 1 CVE
Moderate: dbus-broker security update
dbus-broker is an implementation of a message bus as defined by the D-Bus specification. Its aim is to provide high performance and reliability, while keeping compatibility to the D-Bus reference implementation. It is exclusively written for Linux systems, an…
first Aug 31, 2026 -
Medium max 6.5ALSA-2026:61241 1 CVE
Moderate: pipewire security update
PipeWire is a multimedia server for Linux and other Unix like operating systems. Security Fix(es): * pipewire: RAOP RTSP NULL Deref (CVE-2026-14324) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other r…
first Aug 31, 2026 -
Medium max 5.9ALSA-2026:62142 2 CVEs
Moderate: wget security, bug fix, and enhancement update
The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Security Fix(es): * wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption (CVE-2026-58471) * wget: GNU Wget: Arbitrary cod…
first Sep 1, 2026 -
Medium max 1.8ALSA-2026:60394 1 CVE
Moderate: libxml2 security update
The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow (CVE-2026-11979) For more details about the security i…
first Aug 26, 2026 -
Medium max 7.1ALSA-2026:59380 1 CVE
Moderate: attr security update
The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists, as well as user objects. Security Fix(es): * attr: Symlink Traversal Privilege Escalation via getfattr and setf…
first Aug 25, 2026 -
Medium max 7.8ALSA-2026:57597 1 CVE
Moderate: kbd security update
The kbd packages provide tools for managing console behavior on a Linux system, including the keyboard, screen fonts, virtual terminals, and font files. Security Fix(es): * kbd: Local privilege escalation in openvt via incorrect process owner verification all…
first Aug 20, 2026 -
Medium max 5.5ALSA-2026:59997 1 CVE
Moderate: polkit security update
The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones. Security Fix(es): * polkit: Polkit: Denial of Service via unb…
first Aug 26, 2026 -
Medium max 5.9ALSA-2026:59379 1 CVE
Moderate: pam security update
Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): * linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module (…
first Aug 25, 2026 -
Medium max 8.2ALSA-2026:59372 1 CVE
Moderate: assertj-core security update
A rich and intuitive set of strongly-typed assertions to use for unit testing (either with JUnit or TestNG). Security Fix(es): * assertj: AssertJ: Information disclosure and denial of service via XML External Entity (XXE) (CVE-2026-24400) For more details abo…
first Aug 25, 2026 -
Medium max 7.3ALSA-2026:5913 1 CVE
Moderate: ncurses security update
The ncurses (new curses) library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses packages contain support utilities including a terminfo compiler tic, a decompiler infocmp, clear, tput, tset, …
first Mar 26, 2026 -
Medium max 7.5ALSA-2023:2261 4 CVEs
Moderate: bind security and bug fix update
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS …
first May 9, 2023 -
Medium max 5.3ALSA-2023:2222 1 CVE
Moderate: conmon security and bug fix update
Conmon is an OCI container runtime monitor. Security Fix(es): * golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) For more details about the security issue(s), including the impact, a CVSS score, acknowledgmen…
first May 9, 2023 -
Medium max 7.5ALSA-2023:2167 5 CVEs
Moderate: grafana security and enhancement update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880) * golang: net/http: handl…
first May 9, 2023 -
Medium max 5.7ALSA-2023:2161 1 CVE
Moderate: fence-agents security and bug fix update
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * python-oauthlib: DoS when att…
first May 9, 2023 -
Medium max 9.1ALSA-2023:1696 2 CVEs
Moderate: haproxy security update
The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fix(es): * haproxy: segfault DoS (CVE-2023-0056) * haproxy: request smuggling attack in HTTP/1 header parsing (CVE-2023-25725) For mo…
first Apr 11, 2023 -
Medium max 3.7ALSA-2023:1693 2 CVEs
Moderate: postgresql security update
PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Extension scripts replace objects not belonging to the extension. (CVE-2022-2625) * postgresql: Client memory disclosure when connecting with Kerber…
first Apr 11, 2023 -
Medium max 7.8ALSA-2023:0338 2 CVEs
Moderate: libxml2 security update
The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: integer overflows with XML_PARSE_HUGE (CVE-2022-40303) * libxml2: dict corruption caused by entity reference cycles (CVE-2022-4030…
first Jan 23, 2023 -
MediumALSA-2023:0303 1 CVE
Moderate: usbguard security update
The USBGuard software framework provides system protection against intrusive USB devices by implementing basic whitelisting and blacklisting capabilities based on device attributes. To enforce a user-defined policy, USBGuard uses the Linux kernel USB device a…
first Jan 23, 2023 -
Medium max 7.5ALSA-2023:0077 1 CVE
Moderate: .NET 6.0 security, bug fix, and enhancement update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK…
first Jan 11, 2023 -
Medium max 8.1ALSA-2022:8832 2 CVEs
Moderate: nodejs:18 security, bug fix, and enhancement update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs (18.12.1). (BZ#2142809, BZ#2142830, BZ#2142834…
first Dec 6, 2022 -
Medium max 7.5ALSA-2022:8400 1 CVE
Moderate: libtirpc security update
The libtirpc packages contain SunLib's implementation of transport-independent remote procedure call (TI-RPC) documentation, which includes a library required by programs in the nfs-utils and rpcbind packages. Security Fix(es): * libtirpc: DoS vulnerability w…
first Nov 15, 2022 -
Medium max 6.5ALSA-2022:8393 1 CVE
Moderate: logrotate security update
The logrotate utility simplifies the administration of multiple log files by allowing their automatic rotation, compression, removal, and mailing. Security Fix(es): * logrotate: potential DoS from unprivileged users via the state file (CVE-2022-1348) For more…
first Nov 15, 2022 -
Medium max 6.8ALSA-2022:8385 1 CVE
Moderate: dhcp security and enhancement update
The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay…
first Nov 15, 2022 -
Medium max 7.3ALSA-2026:80664 1 CVE
Moderate: environment-modules security update
The environment-modules packages provide dynamic modification of user environment using module files. Each module file contains the information needed to configure the shell for an application. Once the package is initialized, the environment can be modified …
first Oct 12, 2026 -
Medium max 5.1ALSA-2022:8444 1 CVE
Moderate: keylime security update
Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution. Security Fix(es): * keylime: exception handling and impedance match in tornado_requests (CVE-2022-3500) For more details about the security issue(s), in…
first Nov 15, 2022 -
Medium max 7.8ALSA-2022:8434 1 CVE
Moderate: dotnet7.0 security, bug fix, and enhancement update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK…
first Nov 15, 2022 -
MediumALSA-2022:8384 1 CVE
Moderate: harfbuzz security update
HarfBuzz is an implementation of the OpenType Layout engine. Security Fix(es): * harfbuzz: integer overflow in the component hb-ot-shape-fallback.cc (CVE-2022-33068) For more details about the security issue(s), including the impact, a CVSS score, acknowledgm…
first Nov 15, 2022 -
Medium max 5.7ALSA-2026:68291 1 CVE
Moderate: unbound security update
The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound: DNS cache poisoning via UDP source port predictability (CVE-2026-50252) For more details about the security issue(s), including the…
first Sep 16, 2026 -
Medium max 4.6ALSA-2026:67886 2 CVEs
Moderate: coreutils security update
The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Security Fix(es): * coreutils: GNU coreutils uniq: Denial of Service and information disclosure via out-o…
first Sep 16, 2026 -
Medium max 7.5ALSA-2026:67584 1 CVE
Moderate: rsyslog security update
The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format. Security Fix(es): * rsyslog: A configuration-d…
first Sep 15, 2026 -
Medium max 9.1ALSA-2026:66392 4 CVEs
Moderate: apr-util security update
The mission of the Apache Portable Runtime (APR) is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more. Security …
first Sep 10, 2026 -
Medium max 4.3ALSA-2026:6825 1 CVE
Moderate: rsync security update
The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used…
first Apr 7, 2026 -
Medium max 7.5ALSA-2026:66460 1 CVE
Moderate: gstreamer1-plugins-base security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fix(es): * gstreamer1-plugins-base: gstreamer: NULL/invalid-p…
first Sep 10, 2026