2,038 results · Clear filters · Feed
-
Medium max 6.5ALSA-2026:5580 6 CVEs
Moderate: mysql:8.0 security update
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21941) * mysql: Optimize…
first Mar 24, 2026 -
Medium max 6.8ALSA-2026:55787 3 CVEs
Moderate: java-21-openjdk security update
The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fix(es): * JDK: Improve Resource Resolving (CVE-2026-60589) * JDK: Enhance HTTP Connections (CVE-2026-61308) * JDK: Enhance TLS …
first Aug 19, 2026 -
Medium max 6.8ALSA-2026:55781 3 CVEs
Moderate: java-17-openjdk security update
The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * JDK: Improve Resource Resolving (CVE-2026-60589) * JDK: Enhance HTTP Connections (CVE-2026-61308) * JDK: Enhance…
first Aug 19, 2026 -
Medium max 7.8ALSA-2026:54247 2 CVEs
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991) * kernel: ice: fix dou…
first Aug 12, 2026 -
Medium max 7.8ALSA-2026:54246 2 CVEs
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991) * kernel: ice: fix double-free of tx_buf skb (CVE-2026-53009) For more details …
first Aug 12, 2026 -
Medium max 7.1ALSA-2026:52765 1 CVE
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: iio: event: Fix event FIFO reset race (CVE-2026-64496) For more details about the security issue(s), including the impact, a CVSS score, acknowle…
first Aug 10, 2026 -
Medium max 7.1ALSA-2026:52761 1 CVE
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: iio: event: Fix event FIFO reset race (CVE-2026-64496) For more details about the securi…
first Aug 10, 2026 -
Medium max 8.2ALSA-2026:49927 1 CVE
Moderate: fence-agents security update
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * urllib3: urllib3: Information…
first Aug 4, 2026 -
Medium max 6.0ALSA-2026:4463 4 CVEs
Moderate: python3.12 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Mar 12, 2026 -
Medium max 7.5ALSA-2026:42733 3 CVEs
Moderate: glibc security update
The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot…
first Jul 21, 2026 -
Medium max 6.5ALSA-2026:1592 1 CVE
Moderate: iperf3 security update
Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss. Security Fix(es): * iperf3: iperf Heap Buffer Overflow (CVE-2025-54349) For more details ab…
first Jan 29, 2026 -
Medium max 5.9ALSA-2026:14087 1 CVE
Moderate: libsoup security update
The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment (CVE-2026-5119) For more details about the security …
first May 6, 2026 -
Medium max 4.3ALSA-2026:1380 1 CVE
Moderate: osbuild-composer security update
A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-compos…
first Jan 27, 2026 -
Medium max 6.3ALSA-2026:1374 2 CVEs
Moderate: python3.11 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Jan 27, 2026 -
Medium max 8.2ALSA-2026:13657 2 CVEs
Moderate: corosync security update
The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Security Fix(es): * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091) * corosync: Corosync: Denial of S…
first May 5, 2026 -
Medium max 7.7ALSA-2026:0991 1 CVE
Moderate: glib2 security update
GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Securi…
first Jan 22, 2026 -
Medium max 7.8ALSA-2026:0756 1 CVE
Moderate: transfig security update
The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)). Transfig is used to create TeX documents which are portable (i.e., they can be printed in a w…
first Jan 19, 2026 -
Medium max 6.0ALSA-2026:0596 2 CVEs
Moderate: cups security update
The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * CUPS: Local denial-of-service via cupsd.conf update and related issues (CVE-2025-61915) * cups: Slow client communica…
first Jan 14, 2026 -
Medium max 5.9ALSA-2026:0524 2 CVEs
Moderate: postgresql:15 security update
PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: CREATE STATISTICS does not check for schema CREATE privilege (CVE-2025-12817) * postgresql: libpq undersizes allocations, via integer wraparound (CV…
first Jan 13, 2026 -
Medium max 5.9ALSA-2026:0519 2 CVEs
Moderate: postgresql:16 security update
PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: CREATE STATISTICS does not check for schema CREATE privilege (CVE-2025-12817) * postgresql: libpq undersizes allocations, via integer wraparound (CV…
first Jan 13, 2026 -
Medium max 9.8ALSA-2026:0337 1 CVE
Moderate: openssl security update
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap (…
first Jan 8, 2026 -
Medium max 4.0ALSA-2026:0130 1 CVE
Moderate: poppler security update
Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Security Fix(es): * poppler: Out-of-Bounds Read in Poppler (CVE-2025-32365) For more details about the security issue(s), including the impact, a CVSS score, a…
first Jan 6, 2026 -
Medium max 6.3ALSA-2026:0123 2 CVEs
Moderate: python3.12 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Jan 6, 2026 -
Medium max 6.1ALSA-2025:A001 1 CVE
Moderate: open-vm-tools security update
The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines. Security Fix(es): * open-vm-tools:A mal…
first Jun 20, 2025 -
Medium max 9.1ALSA-2025:9845 1 CVE
Moderate: weldr-client security update
Command line utility to control osbuild-composer Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, …
first Jun 26, 2025 -
Medium max 9.1ALSA-2025:9844 1 CVE
Moderate: osbuild-composer security update
A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-compos…
first Jun 26, 2025 -
Medium max 9.1ALSA-2025:9142 1 CVE
Moderate: container-tools:rhel8 security update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details …
first Jun 17, 2025 -
Medium max 9.1ALSA-2025:9060 1 CVE
Moderate: git-lfs security update
Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptan…
first Jun 16, 2025 -
Medium max 5.6ALSA-2025:8958 1 CVE
Moderate: libxml2 security update
The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414) For more details about the security issue(s), including the impact, a CVSS score, a…
first Jun 11, 2025 -
Medium max 9.1ALSA-2025:8918 1 CVE
Moderate: grafana-pcp security update
The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * net/[http:](http:) Request smuggling…
first Jun 11, 2025 -
Medium max 7.1ALSA-2025:2722 1 CVE
Moderate: krb5 security update
Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the he…
first Mar 13, 2025 -
Medium max 6.5ALSA-2025:2600 3 CVEs
Moderate: rsync security update
The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used…
first Mar 11, 2025 -
Medium max 4.3ALSA-2025:23948 1 CVE
Moderate: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) For more details about the security issue(…
first Dec 22, 2025 -
Medium max 7.8ALSA-2025:18298 3 CVEs
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CVE-2025-39757) * kernel: AL…
first Oct 20, 2025 -
Medium max 7.8ALSA-2025:18297 3 CVEs
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CVE-2025-39757) * kernel: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control…
first Oct 20, 2025 -
Medium max 5.4ALSA-2025:18286 1 CVE
Moderate: libssh security update
libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: out-of-bounds read in sftp_handle() (CVE-2025-5318) For more details about the security issue(s), including the impa…
first Oct 20, 2025 -
Medium max 8.8ALSA-2025:17812 2 CVEs
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CVE-2022-50228) * kern…
first Oct 13, 2025 -
Medium max 8.8ALSA-2025:17797 2 CVEs
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CVE-2022-50228) * kernel: Bluetooth: L2CAP: Fix use-after-free (CVE-2023-53305)…
first Oct 13, 2025 -
Medium max 4.1ALSA-2025:17715 2 CVEs
Moderate: vim security update
Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim path traversal (CVE-2025-53906) * vim: Vim path traversial (CVE-2025-53905) For more details about the security issue(s), including the impact, a CVSS score, a…
first Oct 9, 2025 -
Medium max 6.5ALSA-2025:17415 3 CVEs
Moderate: gnutls security, bug fix, and enhancement update
The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990) *…
first Oct 7, 2025