6,444 results · Feed
-
High max 7.5ALSA-2025:8844 1 CVE
Important: mod_security security update
ModSecurity is an open source intrusion detection and prevention engine for web applications. Security Fix(es): * modsecurity: ModSecurity Has Possible DoS Vulnerability (CVE-2025-47947) For more details about the security issue(s), including the impact, a CV…
first Jun 11, 2025 -
High max 7.5ALSA-2025:8815 1 CVE
Important: .NET 9.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK…
first Jun 11, 2025 -
High max 7.5ALSA-2025:8812 1 CVE
Important: .NET 8.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK…
first Jun 11, 2025 -
High max 9.8ALSA-2025:8756 12 CVEs
Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link (CVE-2025-3909) * thunderbird: Sender Spoofing via Malformed From Header in Thunderbird (CVE-2025…
first Jun 10, 2025 -
Medium max 7.1ALSA-2025:8744 1 CVE
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: um: Fix out-of-bounds read in LDT setup (CVE-2022-49395) For more details about the secu…
first Jun 10, 2025 -
Medium max 7.1ALSA-2025:8743 1 CVE
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: um: Fix out-of-bounds read in LDT setup (CVE-2022-49395) For more details about the security issue(s), including the impact, a CVSS score, acknow…
first Jun 10, 2025 -
High max 5.3ALSA-2025:8696 1 CVE
Important: perl-FCGI:0.78 security update
The perl-FCGI package provides a Perl module for writing FastCGI applications. FastCGI is a more efficient alternative to traditional CGI, as it keeps application processes persistent across multiple requests. This module allows Perl web applications to handl…
first Jun 9, 2025 -
Medium max 7.8ALSA-2025:8686 1 CVE
Moderate: glibc security update
The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot…
first Jun 9, 2025 -
MediumALSA-2025:8676 1 CVE
Moderate: libxslt security update
libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism. Security Fix(es): * libxslt: Processing …
first Jun 9, 2025 -
Medium max 9.1ALSA-2025:8667 1 CVE
Moderate: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details abou…
first Jun 9, 2025 -
High max 7.5ALSA-2025:8506 1 CVE
Important: nodejs:22 security update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js (CVE-2025-23166) For more details about the…
first Jun 4, 2025 -
Medium max 9.1ALSA-2025:8478 1 CVE
Moderate: go-toolset:rhel8 security update
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about th…
first Jun 4, 2025 -
MediumALSA-2025:8432 1 CVE
Moderate: perl-CPAN security update
The CPAN module is a tool to query, download and build perl modules from CPAN sites. Security Fix(es): * perl-CPAN: Bypass of verification of signatures in CHECKSUMS files (CVE-2020-16156) For more details about the security issue(s), including the impact, a …
first Jun 3, 2025 -
Medium max 5.3ALSA-2025:8427 1 CVE
Moderate: pandoc security update
Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library. It can read several dialects of Markdown and (subsets of) HTML, reStructuredText, LaTeX, DocBook, JATS, MediaWiki markup, TWiki marku…
first Jun 3, 2025 -
Medium max 9.8ALSA-2025:8421 1 CVE
Moderate: ghostscript security update
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * Ghostscript: NPDL device: Compression buffer…
first Jun 3, 2025 -
Low max 4.7ALSA-2025:8419 1 CVE
Low: python36:3.6 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Jun 3, 2025 -
Medium max 7.5ALSA-2025:8414 1 CVE
Moderate: git security update
Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision histor…
first Jun 3, 2025 -
Medium max 5.9ALSA-2025:8411 1 CVE
Moderate: krb5 security update
Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the he…
first Jun 3, 2025 -
LowALSA-2025:8395 1 CVE
Low: rsync security update
The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used…
first Jun 2, 2025 -
High max 5.4ALSA-2025:8336 1 CVE
Important: varnish:6 security update
Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up. Security Fix(es): * varnish: request smuggling attacks (C…
first Jun 2, 2025 -
High max 9.0
Important: mingw-freetype security update
MinGW Windows Freetype library. Security Fix(es): * freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files (CVE-2025-27363) * libsoup: Integer overflow in append_param_quoted (CVE-2025-32050) * lib…
first May 29, 2025 -
High max 7.5ALSA-2025:8254 2 CVEs
Important: pcs security update
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * rubygem-rack: Unbounded-Parameter DoS in Rack::QueryParser (CVE-2025-46727) * tornado: Tornado Multipart Form-Data Denial of Service (CV…
first May 28, 2025 -
High max 8.8ALSA-2025:8201 1 CVE
Important: gstreamer1-plugins-bad-free security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * GStreamer: GStreamer H265 Codec Parsing Stack-based B…
first May 27, 2025 -
High max 7.5ALSA-2025:8132 4 CVEs
Important: libsoup security update
The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: Heap buffer over-read in `skip_insignificant_space` when sniffing content (CVE-2025-2784) * libsoup: Denial of Service attack to websocket server (CVE-2025-…
first May 26, 2025 -
High max 9.8ALSA-2025:8060 2 CVEs
Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: Out-of-bounds access when resolving Promise objects (CVE-2025-4918) * firefox: Out-of-bounds access when optimizing li…
first May 21, 2025 -
High max 9.8ALSA-2025:8057 3 CVEs
Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: net/mlx5: Always stop health timer during driver removal (CVE-2024-40906) * kernel: net/…
first May 21, 2025 -
High max 9.8ALSA-2025:8056 3 CVEs
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/mlx5: Always stop health timer during driver removal (CVE-2024-40906) * kernel: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (CVE-202…
first May 21, 2025 -
High max 6.5ALSA-2025:8046 2 CVEs
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2025-31205) * webkitgtk: Processing maliciously crafted web content may lead to an …
first May 20, 2025 -
High max 7.5ALSA-2025:7967 1 CVE
Important: osbuild-composer security update
A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-compos…
first May 19, 2025 -
High max 7.4ALSA-2025:7895 1 CVE
Important: compat-openssl10 security update
The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries and is provided for compatibility with previous releases and software that does not support compilation with OpenSSL-1…
first May 19, 2025 -
High max 7.6ALSA-2025:7894 1 CVE
Important: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: Cross-site Scripting (XSS) in Grafana via Custom Frontend Plugins and Open Redirect (CVE-2025-4123) For more details abo…
first May 19, 2025 -
High max 7.5ALSA-2025:7686 1 CVE
Important: redis:6 security update
Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the da…
first May 15, 2025 -
High max 8.0ALSA-2025:7589 1 CVE
Important: .NET 8.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK…
first May 14, 2025 -
High max 8.0ALSA-2025:7571 1 CVE
Important: .NET 9.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK…
first May 14, 2025 -
High max 7.4ALSA-2025:7569 1 CVE
Important: yelp and yelp-xsl security update
Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook. Security Fix(es): * yelp: Arbitrary f…
first May 14, 2025 -
MediumALSA-2025:7540 1 CVE
Moderate: libjpeg-turbo security update
The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.…
first May 14, 2025 -
Medium max 6.7ALSA-2025:7539 2 CVEs
Moderate: ruby:2.5 security update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * oniguruma: integer overflow in search_in_range function in regexec.c leads to out-of-bou…
first May 14, 2025 -
High max 7.8ALSA-2025:7532 2 CVEs
Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CVE-2022-49011) * kern…
first May 14, 2025 -
High max 7.8ALSA-2025:7531 2 CVEs
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CVE-2022-49011) * kernel: netfilter: ipset: add missing range check in bitmap_i…
first May 14, 2025 -
High max 9.1ALSA-2025:4797 5 CVEs
Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Privilege escalation in Firefox Updater (CVE-2025-2817) * firefox: thunderbird: Unsafe attribute access during XPath parsing (CVE-2025-4087) * firefox: th…
first May 12, 2025