2,038 results · Clear filters · Feed
-
Medium max 6.9ALSA-2026:80675 1 CVE
Moderate: libxml2 security update
The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation (CVE-2026-86142) For more details about the s…
first Oct 12, 2026 -
Medium max 7.5ALSA-2026:78952 1 CVE
Moderate: tftp security update
The Trivial File Transfer Protocol (TFTP) is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provide…
first Oct 8, 2026 -
Medium max 9.8ALSA-2026:76877 1 CVE
Moderate: ghostscript security update
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: ghostscript: Heap buffer overfl…
first Oct 6, 2026 -
Medium max 6.6ALSA-2026:76777 2 CVEs
Moderate: glibc security update
The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot…
first Oct 6, 2026 -
Medium max 9.8ALSA-2026:74133 5 CVEs
Moderate: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CVE-2026-64102) * kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for…
first Sep 30, 2026 -
Medium max 9.8ALSA-2026:74132 5 CVEs
Moderate: kernel-rt security, bug fix, and enhancement update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CVE-2026-64102) *…
first Sep 30, 2026 -
Medium max 5.1ALSA-2026:73511 2 CVEs
Moderate: gawk security update
The gawk packages contain the GNU version of awk, a text processing utility. Awk interprets a special-purpose programming language to do quick and easy text pattern matching and reformatting jobs. Security Fix(es): * gawk: gawk: Memory corruption via integer …
first Sep 29, 2026 -
Medium max 5.0ALSA-2026:70390 4 CVEs
Moderate: tar security, bug fix, and enhancement update
The GNU tar program can save multiple files in an archive and restore files from an archive. Security Fix(es): * tar: Tar path traversal (CVE-2025-45582) * tar: tar: Hidden file injection via crafted archives (CVE-2026-5704) * tar: tar: TOCTOU in incremental …
first Sep 22, 2026 -
Medium max 4.4ALSA-2026:69964 1 CVE
Moderate: coreutils security update
The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Security Fix(es): * coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification (CVE-20…
first Sep 22, 2026 -
Medium max 7.0ALSA-2026:69655 2 CVEs
Moderate: libxml2 security, bug fix, and enhancement update
The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free (CVE-2026-6653) Bug Fix(es) and Enhancement(…
first Sep 21, 2026 -
Medium max 5.7ALSA-2026:69120 1 CVE
Moderate: unbound security update
The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound: DNS cache poisoning via UDP source port predictability (CVE-2026-50252) For more details about the security issue(s), including the…
first Sep 21, 2026 -
Medium max 9.1ALSA-2026:69113 4 CVEs
Moderate: apr-util security update
The mission of the Apache Portable Runtime (APR) is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more. Security …
first Sep 21, 2026 -
Medium max 6.5ALSA-2026:68316 1 CVE
Moderate: .NET 8.0 security, bug fix, and enhancement update
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming …
first Sep 16, 2026 -
Medium max 7.5ALSA-2026:68266 1 CVE
Moderate: libsoup security update
The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation (CVE-2026-15711) For more details about …
first Sep 16, 2026 -
Medium max 8.1ALSA-2026:67315 1 CVE
Moderate: nginx:1.24 security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) For more details ab…
first Sep 14, 2026 -
Medium max 9.1ALSA-2026:67278 1 CVE
Moderate: perl:5.32 security update
Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fix(es): * perl: Perl: Incorrect regular expression processing via large regular expressions (CVE-2026-13221) For more details ab…
first Sep 14, 2026 -
Medium max 7.3ALSA-2026:67266 3 CVEs
Moderate: libkcapi security update
libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so that a developer does not need to consider the low-level netlink interface handling. The library does not implement any c…
first Sep 14, 2026 -
Medium max 9.1ALSA-2026:67162 1 CVE
Moderate: perl security update
Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fix(es): * perl: Perl: Incorrect regular expression processing via large regular expressions (CVE-2026-13221) For more details ab…
first Sep 14, 2026 -
Medium max 7.5ALSA-2026:67145 1 CVE
Moderate: gstreamer1-plugins-base security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fix(es): * gstreamer1-plugins-base: gstreamer: NULL/invalid-p…
first Sep 14, 2026 -
Medium max 7.1ALSA-2026:66451 1 CVE
Moderate: glib2 security update
GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Securi…
first Sep 10, 2026 -
Medium max 6.9ALSA-2026:65998 2 CVEs
Moderate: gzip security update
The gzip packages contain the gzip (GNU zip) data compression utility. gzip is used to compress regular files. It replaces them with files containing the .gz extension, while retaining ownership modes, access, and modification times. Security Fix(es): * gzip:…
first Sep 9, 2026 -
Medium max 8.8ALSA-2026:6572 4 CVEs
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: nouveau: fix instmem race condition around ptr stores (CVE-2024-26984) * kernel: scsi: t…
first Apr 6, 2026 -
Medium max 8.8ALSA-2026:6571 4 CVEs
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: nouveau: fix instmem race condition around ptr stores (CVE-2024-26984) * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_us…
first Apr 6, 2026 -
Medium max 6.9ALSA-2026:64809 2 CVEs
Moderate: expat security update
Expat is a C library for parsing XML documents. Security Fix(es): * expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking (CVE-2026-50219) * expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow (CVE-2026…
first Sep 8, 2026 -
Medium max 4.3ALSA-2026:6436 1 CVE
Moderate: rsync security update
The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used…
first Apr 2, 2026 -
Medium max 6.5ALSA-2026:6435 7 CVEs
Moderate: mariadb:10.11 security update
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Security Fix(es): * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490) * mariadb: MariaDB Server Crash Due to Empty Backtrace…
first Apr 2, 2026 -
Medium max 6.5ALSA-2026:6391 6 CVEs
Moderate: mysql:8.4 security update
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21941) * mysql: Optimize…
first Apr 1, 2026 -
Medium max 6.5ALSA-2026:62218 7 CVEs
Moderate: libssh security update
libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843) * libssh: libssh: denial of servi…
first Sep 1, 2026 -
Medium max 7.5ALSA-2026:62144 3 CVEs
Moderate: wget security, bug fix, and enhancement update
The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Security Fix(es): * wget: GNU Wget: Memory corruption via crafted Metalink URL (CVE-2026-58469) * wget: GNU Wget: Heap buffer overflow via server-supplied filena…
first Sep 1, 2026 -
Medium max 7.3ALSA-2026:61766 7 CVEs
Moderate: glib2 security update
GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Securi…
first Aug 31, 2026 -
Medium max 5.3ALSA-2026:5585 2 CVEs
Moderate: gnutls security update
The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function (…
first Mar 24, 2026 -
Medium max 7.5ALSA-2026:5578 1 CVE
Moderate: virt:rhel and virt-devel:rhel security update
Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs f…
first Mar 24, 2026 -
Medium max 6.8ALSA-2026:55775 3 CVEs
Moderate: java-1.8.0-openjdk security update
The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * JDK: Improve Resource Resolving (CVE-2026-60589) * JDK: Enhance HTTP Connections (CVE-2026-61308) * JDK: Enhanc…
first Aug 19, 2026 -
Medium max 6.9ALSA-2026:54290 1 CVE
Moderate: python-idna security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Aug 12, 2026 -
Medium max 4.8ALSA-2025:0422 1 CVE
Moderate: java-17-openjdk security update for AlmaLinux 8.6, 8.8, 8.10, 9.4 and 9.5
The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * JDK: Enhance array handling (CVE-2025-21502) Bug Fix(es): * The AlmaLinux OpenJDK packages rely on the copy-jdk-…
first Jan 22, 2025 -
Medium max 3.7ALSA-2024:1818 4 CVEs
Moderate: java-1.8.0-openjdk security update
The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011) * OpenJDK: integer overflow in C1 c…
first Apr 18, 2024 -
Medium max 6.3ALSA-2026:5588 1 CVE
Moderate: python3 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Mar 24, 2026 -
Medium max 6.8ALSA-2026:5587 1 CVE
Moderate: opencryptoki security update
The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM …
first Mar 24, 2026 -
Medium max 5.9ALSA-2026:5581 1 CVE
Moderate: nginx:1.24 security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642) …
first Mar 24, 2026 -
Medium max 5.4ALSA-2026:55804 1 CVE
Moderate: nghttp2 security update
libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C. Security Fix(es): * nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055) …
first Aug 17, 2026