6,444 results · Feed
-
MediumALSA-2020:1636 2 CVEs
Moderate: libsndfile security update
libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fix(es): * libsndfile: stack-based buffer overflow in sndfile-deinterleave utility (CVE-2018-13139) * libsndfile: buffer over-read in the func…
first Apr 28, 2020 -
LowALSA-2020:1616 1 CVE
Low: irssi security update
Irssi is a modular IRC client with Perl scripting. Security Fix(es): * irssi: use after free when sending SASL login to server (CVE-2019-13045) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other relate…
first Apr 28, 2020 -
High max 7.7ALSA-2020:0579 6 CVEs
Important: nodejs:10 security update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs (10.19.0). Security Fix(es): * nodejs: HTTP re…
first Feb 25, 2020 -
MediumALSA-2019:3706 1 CVE
Moderate: lua security and bug fix update
The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fix(es): * lua: use-after-free in lua_upvaluejoin in l…
first Nov 5, 2019 -
LowALSA-2019:3703 2 CVEs
Low: libvorbis security update
The libvorbis package contains runtime libraries for use in programs that support Ogg Vorbis, a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed format for audio and music at fixed and variable bitrates. Security Fix(es): * li…
first Nov 5, 2019 -
LowALSA-2019:3643 1 CVE
Low: gettext security update
The gettext packages provide a documentation for producing multi-lingual messages in programs, set of conventions about how programs should be written, a runtime library, and a directory and file naming organization for the message catalogs. Security Fix(es):…
first Nov 5, 2019 -
LowALSA-2020:1631 1 CVE
Low: GStreamer, libmad, and SDL security, bug fix, and enhancement update
The GStreamer library provides a streaming media framework based on graphs of media data filters. The libmad package is an MPEG audio decoder capable of 24-bit output. Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide f…
first Apr 28, 2020 -
HighALSA-2020:1360 1 CVE
Important: container-tools:1.0 security update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() (CVE-2020-7039) For more details about the security…
first Apr 7, 2020 -
HighALSA-2020:1293 1 CVE
Important: nodejs:12 security update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * ICU: Integer overflow in UnicodeString::doAppend() (CVE-2020-10531) For more details about the security …
first Apr 2, 2020 -
HighALSA-2020:0902 1 CVE
Important: icu security update
The International Components for Unicode (ICU) library provides robust and full-featured Unicode services. Security Fix(es): * ICU: Integer overflow in UnicodeString::doAppend() (CVE-2020-10531) For more details about the security issue(s), including the impa…
first Mar 19, 2020 -
Medium max 6.5ALSA-2020:0279 1 CVE
Moderate: virt:rhel security update
Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide API…
first Jan 29, 2020 -
High max 7.5ALSA-2019:2799 3 CVEs
Important: nginx:1.14 security update
Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 (Post Office Protocol 3) and IMAP protocols, with a focus on high concurrency, performance and low memory usage. Security Fix(es): * HTTP/2: large amount of data request leads to denial of …
first Sep 17, 2019 -
LowALSA-2019:2722 1 CVE
Low: libwmf security update
The libwmf packages provide a library for reading and converting Windows Metafile Format (WMF) vector graphics. The library is used by applications such as GIMP and ImageMagick. Security Fix(es): * gd: double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c…
first Sep 10, 2019 -
Medium max 9.8ALSA-2019:0984 2 CVEs
Moderate: python36:3.6 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first May 7, 2019 -
Critical max 8.7
Critical: php:7.2 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: underflow in env_path_info in fpm_main.c (CVE-2019-11043) For more details about the security issue(s), including the impact, a CVSS score, acknowle…
first Nov 6, 2019 -
MediumALSA-2019:3705 1 CVE
Moderate: libjpeg-turbo security update
The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.…
first Nov 5, 2019 -
HighALSA-2019:2512 1 CVE
Important: subversion:1.10 security update
Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Security Fix(es): * subversion: NULL pointer dere…
first Aug 15, 2019 -
UnscoredALBA-2019:4274 0 CVEs
virt:rhel bug fix update
Bug Fix(es): * RHEL8.1 Snapshot3 - Passthrough PCI card goes into error state if used in domain (kvm) (BZ#1764829) * [HPE 8.1 BUG] Icelake: KVM missing .pconfig (BZ#1775133) * Failed to create a VM via virt-manager or web console in RHEL8.1 snapshot-2.1 (BZ#1…
first Dec 17, 2019 -
UnscoredALBA-2026:47115 0 CVEs
None: coreutils bug fix and enhancement update
The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Bug Fix(es) and Enhancement(s): * Fix execution of the downstream tests in coreutils-df-direct.patch and …
first Jul 28, 2026 -
UnscoredALBA-2026:39332 0 CVEs
None: kernel bug fix and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Bug Fix(es) and Enhancement(s): * XFS data corruption using reflink [almalinux-9.8.z] (JIRA:AlmaLinux-193937)
first Jul 14, 2026 -
UnscoredALEA-2022:1957 0 CVEs
perl:5.32 metadata for the AlmaLinux 8 module matrix
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
first May 10, 2022 -
UnscoredALEA-2022:1956 0 CVEs
perl:5.32 metadata for the AlmaLinux 8 module matrix
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
first May 10, 2022 -
UnscoredALEA-2022:1955 0 CVEs
perl:5.32 metadata for the AlmaLinux 8 module matrix
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
first May 10, 2022 -
UnscoredALEA-2022:1954 0 CVEs
perl:5.32 metadata for the AlmaLinux 8 module matrix
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
first May 10, 2022 -
UnscoredALEA-2022:1733 0 CVEs
java-17-openjdk bug fix and enhancement update
This erratum reinstates changes made to java-17-openjdk in AlmaLinux 8.6 GA. The original builds for AlmaLinux 8.6 GA will have been superseded by newer binaries released as part of the April 2022 security update for AlmaLinux 8.5. For detailed information on…
first May 10, 2022 -
UnscoredALEA-2022:0359 0 CVEs
tcpdump bug fix and enhancement update
The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces. Bug Fix(es) and Enhancement(s): * [RFE] tcpdump support for…
first Feb 1, 2022 -
UnscoredALEA-2022:0322 0 CVEs
.NET Core 3.1 bugfix and enhancement update
.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. Bug Fix(es) and Enhancement(s): * Update .NET Core 3.1 to SDK 3.1.416 and Runtime 3.1.22 [almalinux-8.5.0.…
first Jan 31, 2022 -
UnscoredALEA-2021:5239 0 CVEs
cloud-init bug fix and enhancement update
The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts. Bug Fix(es) and Enhancement(s): * cloud-ini…
first Dec 21, 2021 -
UnscoredALEA-2020:4803 0 CVEs
perl:5.30 metadata for the AlmaLinux 8 module matrix
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
first Nov 3, 2020 -
UnscoredALEA-2020:4802 0 CVEs
perl:5.30 metadata for the AlmaLinux 8 module matrix
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
first Nov 3, 2020 -
UnscoredALEA-2020:4767 0 CVEs
perl:5.30 metadata for the AlmaLinux 8 module matrix
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
first Nov 3, 2020 -
UnscoredALBA-2022:2145 0 CVEs
osbuild-composer bug fix and enhancement update
The osbuild-composer package is a service for building customized OS artifacts, such as virtual machine (VM) images and OSTree commits. Apart from building images for local usage, it can also upload images directly to cloud. The package is compatible with com…
first May 10, 2022 -
UnscoredALBA-2022:2142 0 CVEs
.NET Core 3.1 bugfix update
.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. Bug Fix(es) and Enhancement(s): * Update .NET Core 3.1 to SDK 3.1.418 and Runtime 3.1.24 [almalinux-8.6.0.…
first May 10, 2022 -
UnscoredALBA-2022:1732 0 CVEs
java-11-openjdk bug fix and enhancement update
This erratum reinstates changes made to java-11-openjdk in AlmaLinux 8.6 GA. The original builds for AlmaLinux 8.6 GA will have been superseded by newer binaries released as part of the April 2022 security update for AlmaLinux 8.5. For detailed information on…
first May 10, 2022 -
UnscoredALBA-2022:1731 0 CVEs
java-1.8.0-openjdk bug fix and enhancement update
This erratum reinstates changes made to java-1.8.0-openjdk in AlmaLinux 8.6 GA. The original builds for AlmaLinux 8.6 GA will have been superseded by newer binaries released as part of the April 2022 security update for AlmaLinux 8.5. For detailed information…
first May 10, 2022 -
UnscoredALBA-2022:1388 0 CVEs
.NET 5.0 on AlmaLinux 8 bugfix update
.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. Bug Fix(es) and Enhancement(s): * Update .NET 5.0 to SDK 5.0.213 and Runtime 5.0.16 [almalinux-8.5.0.z] (B…
first Apr 18, 2022 -
UnscoredALBA-2022:1386 0 CVEs
.NET Core 3.1 on AlmaLinux 8 bugfix update
.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. Bug Fix(es) and Enhancement(s): * Update .NET Core 3.1 to SDK 3.1.418 and Runtime 3.1.24 [None8.5.0.z] (BZ…
first Apr 18, 2022 -
UnscoredALBA-2022:1383 0 CVEs
.NET 6.0 on AlmaLinux 8 bugfix update
.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. Bug Fix(es) and Enhancement(s): * Update .NET 6.0 to SDK 6.0.104 and Runtime 6.0.4 [None8.5.0.z] (BZ#20734…
first Apr 18, 2022 -
UnscoredALBA-2022:0883 0 CVEs
cloud-init bug fix and enhancement update
The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts. Bug Fix(es) and Enhancement(s): * [AlmaLinu…
first Mar 15, 2022 -
UnscoredALBA-2022:0371 0 CVEs
sssd bug fix and enhancement update
The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward …
first Feb 1, 2022