2,038 results · Clear filters · Feed
-
Medium max 7.8ALSA-2022:6457 2 CVEs
Moderate: python3 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Sep 13, 2022 -
Medium max 5.5ALSA-2022:6437 3 CVEs
Moderate: kernel-rt security and bug fix update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * Incomplete cleanup of multi-core shared buffers (aka SBDR) (CVE-2022-21123) * Incomplete cleanup…
first Sep 13, 2022 -
MediumALSA-2021:1881 1 CVE
Moderate: poppler and evince security, bug fix, and enhancement update
Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. The evince packages provide a simple multi-page document viewer for Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS) files, and, …
first May 18, 2021 -
Medium max 9.1ALSA-2022:7647 10 CVEs
Moderate: httpd:2.4 security update
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: mod_sed: Read/write beyond bounds (CVE-2022-23943) * httpd: mod_lua: Use of uninitialized value of in r:parsebody (CVE-2022-22719) …
first Nov 8, 2022 -
Medium max 9.1ALSA-2022:6448 5 CVEs
Moderate: nodejs:14 security and bug fix update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: DNS rebinding in --inspect via invalid IP addresses (CVE-2022-32212) * nodejs: HTTP request smug…
first Sep 13, 2022 -
MediumALSA-2022:1968 1 CVE
Moderate: libsndfile security update
libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fix(es): * libsndfile: heap out-of-bounds read in src/flac.c in flac_buffer_copy (CVE-2021-4156) For more details about the security issue(s),…
first May 10, 2022 -
MediumALSA-2022:6439 1 CVE
Moderate: booth security update
The Booth cluster ticket manager is a component to bridge high availability clusters spanning multiple sites, in particular, to provide decision inputs to local Pacemaker cluster resource managers. It operates as a distributed consensus-based service, presuma…
first Sep 13, 2022 -
MediumALSA-2022:2074 2 CVEs
Moderate: samba security, bug fix, and enhancement update
Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. The following packages have be…
first May 10, 2022 -
MediumALSA-2022:2043 1 CVE
Moderate: c-ares security update
The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API. Security Fix(es): * c-ares: Missing input validation of host names may lead to domain hijacking (CVE-2021-3672) For more details about the security is…
first May 10, 2022 -
MediumALSA-2022:2013 1 CVE
Moderate: openssh security, bug fix, and enhancement update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: privilege escalation when AuthorizedKeysCo…
first May 10, 2022 -
MediumALSA-2022:2008 2 CVEs
Moderate: cockpit security, bug fix, and enhancement update
Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. The following packages have been upgraded to …
first May 10, 2022 -
Medium max 7.8ALSA-2022:1991 1 CVE
Moderate: cpio security update
The cpio packages provide the GNU cpio utility for creating and extracting archives, or copying files from one place to another. Security Fix(es): * cpio: integer overflow in ds_fgetstr() in dstring.c can lead to an out-of-bounds write via a crafted pattern f…
first May 10, 2022 -
Medium max 7.5ALSA-2022:1986 2 CVEs
Moderate: python3 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first May 10, 2022 -
MediumALSA-2022:1964 2 CVEs
Moderate: fetchmail security update
Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet (POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ES…
first May 10, 2022 -
Medium max 5.3ALSA-2022:1861 1 CVE
Moderate: maven:3.5 security update
Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information. Security Fix(es): * apache-httpclient: in…
first May 10, 2022 -
Medium max 5.9ALSA-2022:1823 4 CVEs
Moderate: mod_auth_openidc:2.3 security update
The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fix(es): * mod_auth_openidc: open redirect in oid…
first May 10, 2022 -
Medium max 8.2ALSA-2022:1821 5 CVEs
Moderate: python27:2.7 security update
Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional…
first May 10, 2022 -
MediumALSA-2022:1961 1 CVE
Moderate: cairo and pixman security and bug fix update
Cairo is a 2D graphics library designed to provide high-quality display and print output. Pixman is a pixel manipulation library for the X Window System and Cairo. Security Fix(es): * cairo: libreoffice slideshow aborts with stack smashing in cairo's composit…
first May 10, 2022 -
MediumALSA-2022:1950 1 CVE
Moderate: dovecot security update
Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided …
first May 10, 2022 -
Medium max 3.7ALSA-2022:1939 1 CVE
Moderate: squid:4 security and bug fix update
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: out-of-bounds read in WCCP protocol data may lead to information disclosure (CVE-2021-28116) For more details about the…
first May 10, 2022 -
Medium max 7.8ALSA-2022:1935 2 CVEs
Moderate: php:7.4 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: Local privilege escalation via PHP-FPM (CVE-2021-21703) * php: SSRF bypass in FILTER_VALIDATE_URL (CVE-2021-21705) For more details about the securi…
first May 10, 2022 -
Medium max 8.2ALSA-2022:1932 1 CVE
Moderate: python-lxml security update
lxml is an XML processing library providing access to libxml2 and libxslt libraries using the Python ElementTree API. Security Fix(es): * python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through (CVE-2021-43818) For more details about…
first May 10, 2022 -
Medium max 7.3ALSA-2022:1894 1 CVE
Moderate: rust-toolset:rhel8 security, bug fix, and enhancement update
Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and required libraries. The following packages have been upgraded to a later upstream version: rust (1.58.0). (BZ#2002883) Security Fix(es): * rus…
first May 10, 2022 -
Medium max 5.3ALSA-2022:1860 1 CVE
Moderate: maven:3.6 security and enhancement update
Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information. Security Fix(es): * apache-httpclient: in…
first May 10, 2022 -
MediumALSA-2022:1830 1 CVE
Moderate: postgresql:10 security update
PostgreSQL is an advanced object-relational database management system (DBMS). The following packages have been upgraded to a later upstream version: postgresql (10.19). (BZ#2023231) Security Fix(es): * postgresql: server processes unencrypted bytes from man-…
first May 10, 2022 -
MediumALSA-2022:1810 1 CVE
Moderate: libtiff security update
The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: a buffer overflow via the "invertImage()" may lead to DoS (CVE-2020-19131) For more details about the security issue(s), i…
first May 10, 2022 -
MediumALSA-2022:1808 1 CVE
Moderate: aspell security update
GNU Aspell is a spell checker designed to eventually replace Ispell. It can either be used as a library or as an independent spell checker. Security Fix(es): * aspell: Heap-buffer-overflow in acommon::ObjStack::dup_top (CVE-2019-25051) For more details about …
first May 10, 2022 -
MediumALSA-2022:1801 1 CVE
Moderate: gfbgraph security update
GLib/GObject wrapper for the Facebook Graph API that integrates with GNOME Online Accounts. The following packages have been upgraded to a later upstream version: gfbgraph (0.2.4). (BZ#1997941) Security Fix(es): * gfbgraph: missing TLS certificate verificatio…
first May 10, 2022 -
Medium max 8.2ALSA-2022:1792 1 CVE
Moderate: flatpak security and bug fix update
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fix(es): * flatpak: Permissions granted to applications can be hidden from the user at install time (CVE-2021-43860) For more details about the secur…
first May 10, 2022 -
MediumALSA-2022:1934 1 CVE
Moderate: mod_auth_mellon security update
The mod_auth_mellon module for the Apache HTTP Server is an authentication service that implements the SAML 2.0 federation protocol. The module grants access based on the attributes received in assertions generated by an IdP server. Security Fix(es): * mod_au…
first May 10, 2022 -
MediumALSA-2022:1920 1 CVE
Moderate: qt5-qtsvg security update
Scalable Vector Graphics (SVG) is an XML-based language for describing two-dimensional vector graphics. Qt provides classes for rendering and displaying SVG drawings in widgets and on other paint devices. Security Fix(es): * qt: out-of-bounds write may lead t…
first May 10, 2022 -
MediumALSA-2022:1917 4 CVEs
Moderate: xorg-x11-server and xorg-x11-server-Xwayland security update
X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Xwayland is an X server for running X clients under Wayland. The following packages hav…
first May 10, 2022 -
MediumALSA-2022:1898 1 CVE
Moderate: fapolicyd security, bug fix, and enhancement update
Fapolicyd (File Access Policy Daemon) implements application whitelisting to decide file access rights. Applications that are known via a reputation source are allowed access while unknown applications are not. The daemon makes use of the kernel's fanotify in…
first May 10, 2022 -
MediumALSA-2022:1797 1 CVE
Moderate: compat-exiv2-026 security update
Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract and delete methods for Exif thumbnails, classes to access Ifd, and support for various image formats. Securit…
first May 10, 2022 -
MediumALSA-2022:1796 1 CVE
Moderate: qt5-qtbase security update
Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fix(es): * qt: out-of-bounds write in QOutlineMapper::convertPath called from QRasterPaintEngine::fill and QPa…
first May 10, 2022 -
Medium max 8.8
Moderate: webkit2gtk3 security, bug fix, and enhancement update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have been upgraded to a later upstream version: webkit2gtk3 (2.34.6). (BZ#1985042) Security Fix(es): * webkitgtk: maliciously crafted web content may…
first May 10, 2022 -
MediumALSA-2022:1930 1 CVE
Moderate: keepalived security and bug fix update
The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the well-known and widely used IP Virtual Server (IPVS) kernel module providing layer-4 (transport layer) load balanc…
first May 10, 2022 -
MediumALSA-2022:1915 4 CVEs
Moderate: httpd:2.4 security and bug fix update
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: Request splitting via HTTP/2 method injection and mod_proxy (CVE-2021-33193) * httpd: mod_proxy_uwsgi: out-of-bounds read via a cra…
first May 10, 2022 -
MediumALSA-2022:1851 1 CVE
Moderate: pki-core:10.6 security and bug fix update
The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System. Security Fix(es): * JSS: memory leak in TLS connection leads to OOM (CVE-2021-4213) For more details about the security issue(s), including the im…
first May 10, 2022 -
MediumALSA-2022:1819 8 CVEs
Moderate: go-toolset:rhel8 security and bug fix update
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fix(es): * golang: Command-line arguments may overwrite global data (CVE-2021-38297) * golang: archive/zip: malformed archive may cause panic or…
first May 10, 2022