2,038 results · Clear filters · Feed
-
Medium max 8.8ALSA-2026:6632 7 CVEs
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel (net/mlx5): Use-after-free in ECVF vports unload leads to denial of service (CVE-2025-38109) * kernel: Linux kernel: Local denial of…
first Apr 6, 2026 -
Medium max 6.5ALSA-2026:67525 1 CVE
Moderate: .NET 8.0 security, bug fix, and enhancement update
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming …
first Sep 15, 2026 -
Medium max 6.7ALSA-2026:58571 1 CVE
Moderate: qemu-kvm security, bug fix, and enhancement update
Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fix(es): * qemu-kvm: Heap buffer overflow …
first Aug 24, 2026 -
Medium max 7.5ALSA-2026:54512 1 CVE
Moderate: gnome-remote-desktop security update
GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment. Security Fix(es): * gnome-remote-desktop: gnome-remote-desktop system-mode RDP server missing connection throttling allows unauthenticated denial of service…
first Aug 13, 2026 -
MediumALSA-2026:49871 2 CVEs
Moderate: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown (CVE-2025-68214) * kernel: procfs: avoid fetching build ID wh…
first Aug 4, 2026 -
Medium max 6.6ALSA-2026:55434 2 CVEs
Moderate: gstreamer1-plugins-good security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer1-pl…
first Aug 17, 2026 -
Medium max 7.5ALSA-2026:52675 1 CVE
Moderate: libarchive security update
The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, a…
first Aug 10, 2026 -
Medium max 9.8ALSA-2026:51295 1 CVE
Moderate: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CVE-2026-43186) Bug Fix(es) and Enhancement(s): * kernel panics caused by NULL…
first Aug 6, 2026 -
Medium max 7.5ALSA-2026:56965 2 CVEs
Moderate: libcupsfilters security update
Libcupsfilters provides a library, which implements common functions used in cups-browsed daemon and printing filters, and additional files as banner templates and character sets. The filters are used in CUPS daemon and in printer applications. Security Fix(e…
first Aug 19, 2026 -
Medium max 6.5ALSA-2026:54210 1 CVE
Moderate: dhcpcd security update
The dhcpcd package provides a minimalistic network configuration daemon that supports IPv4 and IPv6 configuration including configuration discovery through NDP, DHCPv4 and DHCPv6 protocols. Security Fix(es): * dhcpcd: dhcpcd infinite loop and out-of-bounds re…
first Aug 12, 2026 -
Medium max 7.5ALSA-2026:53451 1 CVE
Moderate: gstreamer1-plugins-good security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gst-plugins-g…
first Aug 11, 2026 -
Medium max 6.2ALSA-2026:49668 1 CVE
Moderate: p11-kit security update
The p11-kit packages provide a mechanism to manage PKCS#11 modules. The p11-kit-trust subpackage includes a PKCS#11 trust module that provides certificate anchors and black lists based on configuration files. Security Fix(es): * p11-kit: Stack exhaustion via …
first Aug 3, 2026 -
Medium max 6.9ALSA-2026:54481 1 CVE
Moderate: python-idna security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Aug 13, 2026 -
Medium max 5.9ALSA-2026:4705 1 CVE
Moderate: nginx security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642) …
first Mar 17, 2026 -
Medium max 7.5ALSA-2026:42694 3 CVEs
Moderate: glibc security update
The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot…
first Jul 21, 2026 -
Medium max 7.8ALSA-2026:4649 1 CVE
Moderate: grub2 security update
The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware de…
first Mar 16, 2026 -
Medium max 7.8ALSA-2026:4012 10 CVEs
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-after-free in device mapper due to race condition in zone reporting (CVE-2025-38141) * kernel: Linux kernel io_uring: Local pri…
first Mar 9, 2026 -
Medium max 7.3ALSA-2026:57015 7 CVEs
Moderate: glib2 security update
GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Securi…
first Aug 19, 2026 -
Medium max 5.4ALSA-2026:54650 1 CVE
Moderate: nghttp2 security update
libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C. Security Fix(es): * nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055) …
first Aug 13, 2026 -
Medium max 6.7ALSA-2026:50144 1 CVE
Moderate: libgcrypt security update
The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fix(es): * Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext (CVE-2026-41989) For more details about the securit…
first Aug 4, 2026 -
Medium max 6.6ALSA-2026:4715 1 CVE
Moderate: vim security update
Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Arbitrary code execution via 'helpfile' option processing (CVE-2026-25749) For more details about the security issue(s), including the impact, a CVSS score, a…
first Mar 17, 2026 -
Medium max 6.0ALSA-2026:4713 4 CVEs
Moderate: python3.12 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Mar 17, 2026 -
Medium max 6.5ALSA-2026:4162 6 CVEs
Moderate: mysql8.4 security update
MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generi…
first Mar 10, 2026 -
Medium max 7.8ALSA-2026:4723 1 CVE
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-after-free in IPv6 address deletion may lead to a denial of service (CVE-2026-23010) For more details about the security issue(…
first Mar 17, 2026 -
Medium max 6.1ALSA-2026:39302 1 CVE
Moderate: cups security update
The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * cups: OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the…
first Jul 14, 2026 -
Medium max 6.2ALSA-2026:36782 1 CVE
Moderate: aardvark-dns security update
Authoritative DNS server for A/AAAA container records Forwards other request to configured resolvers. Read more about configuration in `src/backend/mod.rs`. Security Fix(es): * aardvark-dns: Aardvark-dns: Denial of Service via truncated TCP DNS query and conn…
first Jul 8, 2026 -
Medium max 7.3ALSA-2026:34355 2 CVEs
Moderate: mod_http2 security, bug fix, and enhancement update
The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): * httpd: mod_http2: Apache HTTP Server mod_http2: Use After Free vulnerability allows arbitrary code execution or denial of ser…
first Jul 1, 2026 -
Medium max 7.8ALSA-2026:33731 1 CVE
Moderate: rrdtool security update
The round robin database (RRD) system stores and displays time-series data, such as network bandwidth, machine-room temperature, and server load average. RRDtool is a high performance data logging and graphing utility, which can be easily integrated with shel…
first Jun 30, 2026 -
Medium max 7.4ALSA-2026:39296 1 CVE
Moderate: libinput security update
libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices. Security Fix(es): * libinput: local privilege escalation via crafted uinput devices (CVE-2026-50292) For more details ab…
first Jul 14, 2026 -
Medium max 9.8ALSA-2026:33092 1 CVE
Moderate: glibc security, bug fix, and enhancement update
The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot…
first Jun 29, 2026 -
Medium max 4.1ALSA-2026:0067 1 CVE
Moderate: tar security update
The GNU tar program can save multiple files in an archive and restore files from an archive. Security Fix(es): * tar: Tar path traversal (CVE-2025-45582) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and ot…
first Jan 5, 2026 -
Medium max 7.3ALSA-2026:67267 3 CVEs
Moderate: libkcapi security, bug fix, and enhancement update
libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so that a developer does not need to consider the low-level netlink interface handling. The library does not implement any c…
first Sep 14, 2026 -
Medium max 9.1ALSA-2026:67156 1 CVE
Moderate: perl security update
Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fix(es): * perl: Perl: Incorrect regular expression processing via large regular expressions (CVE-2026-13221) For more details ab…
first Sep 14, 2026 -
Medium max 6.9ALSA-2026:64810 2 CVEs
Moderate: expat security update
Expat is a C library for parsing XML documents. Security Fix(es): * expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking (CVE-2026-50219) * expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow (CVE-2026…
first Sep 8, 2026 -
Medium max 7.1ALSA-2026:64799 1 CVE
Moderate: glib2 security update
GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Securi…
first Sep 8, 2026 -
Medium max 7.5ALSA-2026:39297 2 CVEs
Moderate: edk2 security, bug fix, and enhancement update
EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid R…
first Jul 14, 2026 -
Medium max 7.5ALSA-2026:36211 1 CVE
Moderate: freeipmi security update
The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification. Security Fix(es): * freeipmi: FreeIPMI: Denial of service via buffer overflow in ipmi-oem client (…
first Jul 7, 2026 -
Medium max 4.1ALSA-2026:22711 1 CVE
Moderate: vim security update
Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass (CVE-2026-35177) For more details about the security issue(s), including the impact…
first Jun 3, 2026 -
Medium max 4.0ALSA-2026:22529 1 CVE
Moderate: libexif security update
The libexif packages provide a library for extracting extra information from image files. Security Fix(es): * libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386) For more details about th…
first Jun 2, 2026 -
Medium max 9.1ALSA-2026:22141 4 CVEs
Moderate: go-fdo-client and go-fdo-server security update
This package provides a server-side implementation of the FIDO Device Onboard (FDO) specification, written in Go. FDO is an open standard for the late binding of device credentials, allowing for automated and secure on-boarding of devices when they are first …
first Jun 1, 2026