2,038 results · Clear filters · Feed
-
Medium max 7.5ALSA-2025:4048 1 CVE
Moderate: xmlrpc-c security update
XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. I…
first Apr 22, 2025 -
Medium max 7.1
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (…
first Apr 15, 2025 -
Medium max 3.6ALSA-2025:23481 2 CVEs
Moderate: openssh security update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH: Control characters in usernames c…
first Dec 17, 2025 -
Medium max 7.5ALSA-2025:23383 1 CVE
Moderate: curl security update
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: libcurl: Curl out of bounds read for cookie path (CVE-2025-9086) For more d…
first Dec 16, 2025 -
Medium max 5.3ALSA-2025:23382 1 CVE
Moderate: binutils security update
The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities. Securit…
first Dec 16, 2025 -
Medium max 5.5ALSA-2025:23137 8 CVEs
Moderate: mysql:8.4 security update
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053) * mysql: InnoDB unspeci…
first Dec 11, 2025 -
Medium max 5.5ALSA-2025:23134 8 CVEs
Moderate: mysql:8.0 security update
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053) * mysql: InnoDB unspeci…
first Dec 11, 2025 -
Medium max 4.4ALSA-2025:23086 1 CVE
Moderate: luksmeta security update
LUKSMeta is a simple library for storing metadata in the LUKSv1 header. The luksmeta package is a dependency of the clevis and tang packages, together providing the Network Bound Disk Encryption (NBDE) in AlmaLinux. Security Fix(es): * luksmeta: Data corrupti…
first Dec 11, 2025 -
Medium max 7.8ALSA-2025:22801 3 CVEs
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (CVE-2023-53401) * kernel: RDMA/rxe: Fix incomplete state save in rxe_requ…
first Dec 8, 2025 -
Medium max 7.8ALSA-2025:22800 3 CVEs
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (CVE-2023-53401) …
first Dec 8, 2025 -
Medium max 6.5ALSA-2025:22668 2 CVEs
Moderate: go-toolset:rhel8 security update
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fix(es): * os/exec: Unexpected paths returned from LookPath in os/exec (CVE-2025-47906) * golang: archive/tar: Unbounded allocation when parsing…
first Dec 3, 2025 -
Medium max 6.5ALSA-2025:22063 1 CVE
Moderate: cups security update
The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS (CVE-2025-58364) For more details about th…
first Nov 25, 2025 -
Medium max 5.0ALSA-2025:21977 1 CVE
Moderate: libssh security update
libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: Incorrect Return Code Handling in ssh_kdf() in libssh (CVE-2025-5372) For more details about the security issue(s), …
first Nov 24, 2025 -
Medium max 8.4ALSA-2025:21398 1 CVE
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: vsock/virtio: Validate length in packet header before skb_put() (CVE-2025-39718) For more details about the security issue(s), including the impa…
first Nov 17, 2025 -
Medium max 8.4ALSA-2025:21397 1 CVE
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: vsock/virtio: Validate length in packet header before skb_put() (CVE-2025-39718) For mor…
first Nov 17, 2025 -
Medium max 7.8ALSA-2025:19932 3 CVEs
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: x86/vmscape: Add conditional IBPB mitigation (CVE-2025-40300) * kernel: mm: fix zswap wr…
first Nov 10, 2025 -
Medium max 7.8ALSA-2025:19931 3 CVEs
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x86/vmscape: Add conditional IBPB mitigation (CVE-2025-40300) * kernel: mm: fix zswap writeback race condition (CVE-2023-53178) * kernel: fs: fix…
first Nov 10, 2025 -
Medium max 5.5ALSA-2025:19572 5 CVEs
Moderate: mariadb:10.5 security update
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Security Fix(es): * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490) * mariadb: MariaDB Server Crash Due to Empty Backtrace…
first Nov 4, 2025 -
Medium max 8.8ALSA-2025:19440 3 CVEs
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: wifi: mac80211: check S1G action frame size (CVE-2023-53257) * kernel: wifi: mwifiex: Fi…
first Nov 3, 2025 -
Medium max 7.3ALSA-2025:19434 3 CVEs
Moderate: xorg-x11-server security update
X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg: xmayland: Use-after-free in XPresentNotify structure creation…
first Nov 3, 2025 -
Medium max 7.3ALSA-2025:19432 3 CVEs
Moderate: xorg-x11-server-Xwayland security update
Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229) * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230) * xorg: xmay…
first Nov 3, 2025 -
Medium max 9.8ALSA-2025:19103 6 CVEs
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CVE-2023-53297) * ke…
first Oct 27, 2025 -
Medium max 9.8ALSA-2025:17398 2 CVEs
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: smb: client: fix use-after-free in cifs_oplock_break (CVE-2025-38527) * kernel: NFS: Fix…
first Oct 6, 2025 -
Medium max 9.8ALSA-2025:17397 2 CVEs
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: smb: client: fix use-after-free in cifs_oplock_break (CVE-2025-38527) * kernel: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CVE-20…
first Oct 6, 2025 -
Medium max 7.5ALSA-2025:17163 1 CVE
Moderate: perl-JSON-XS security update
This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C. Security Fix(es): * JSON-XS: integer buffer overflow causing a segfault whe…
first Oct 1, 2025 -
Medium max 7.8ALSA-2025:16920 4 CVEs
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: nfsd: don't ignore the return code of svc_proc_register() (CVE-2025-22026) * kernel: net…
first Sep 29, 2025 -
Medium max 6.5ALSA-2025:16861 51 CVEs
Moderate: mysql:8.0 security update
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722) * mysql: Optimize…
first Sep 29, 2025 -
Medium max 6.8ALSA-2025:16823 1 CVE
Moderate: openssh security update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: Machine-in-the-middle attack if VerifyHost…
first Sep 25, 2025 -
Medium max 7.0ALSA-2025:16373 1 CVE
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: vsock: Fix transport_* TOCTOU (CVE-2025-38461) For more details about the security issue…
first Sep 22, 2025 -
Medium max 7.8ALSA-2025:16372 3 CVEs
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: vsock: Fix transport_* TOCTOU (CVE-2025-38461) * kernel: do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498) * kern…
first Sep 22, 2025 -
Medium max 6.8ALSA-2025:1582 2 CVEs
Moderate: nodejs:18 security update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * undici: Undici Uses Insufficiently Random Values (CVE-2025-22150) * nodejs: GOAWAY HTTP/2 frames cause m…
first Feb 17, 2025 -
Medium max 6.3ALSA-2025:15687 8 CVEs
Moderate: php:8.2 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: Leak partial content of the heap through heap buffer over-read in mysqlnd (CVE-2024-8929) * php: Single byte overread with convert.quoted-printable-…
first Sep 11, 2025 -
Medium max 8.1ALSA-2025:1517 1 CVE
Moderate: libxml2 security update
The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml: use-after-free in xmlXIncludeAddNode (CVE-2022-49043) For more details about the security issue(s), including the impact, a CVSS sc…
first Feb 17, 2025 -
Medium max 9.1ALSA-2025:15123 4 CVEs
Moderate: httpd:2.4 security update
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) * httpd: mod_ssl: access control bypass by trusted clients …
first Sep 3, 2025 -
MediumALSA-2025:14439 1 CVE
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: udp: Fix memory accounting leak. (CVE-2025-22058) For more details about the security is…
first Aug 25, 2025 -
MediumALSA-2025:14438 2 CVEs
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: udp: Fix memory accounting leak. (CVE-2025-22058) * kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (CVE-2025-38200) For …
first Aug 25, 2025 -
Medium max 8.8ALSA-2025:13590 5 CVEs
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727) * kernel: ipv6: mcast: extend RCU pro…
first Aug 11, 2025 -
Medium max 6.9
Moderate: gcc-toolset-14-gcc security update
The gcc-toolset-14-gcc package contains the GNU Compiler Collection version 14. Security Fix(es): * jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023) For more details about the security issue(s), inc…
first Feb 12, 2025 -
Medium max 7.5ALSA-2025:13315 1 CVE
Moderate: gdk-pixbuf2 security update
The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter. Security Fix(es): * gdk?pixbuf: Heap?buffer?overflow in gdk?pixbuf (CVE-2025-7345) For mo…
first Aug 7, 2025 -
Medium max 5.3ALSA-2025:13234 1 CVE
Moderate: python-requests security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Aug 6, 2025