6,419 results · Feed
-
High max 7.4ALSA-2026:93592 3 CVEs
Important: freerdp security update
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP: Denial of …
first Nov 2, 2026 -
High max 7.5ALSA-2026:93439 2 CVEs
Important: libXi security update
X.Org X11 libXi runtime library Security Fix(es): * libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply (CVE-2026-109090) * libXi: libXi: Arbitrary code execution via DEVICE_RESOLUTION heap-based buffer overflow (CVE-2026-109089) For more…
first Nov 2, 2026 -
Medium max 7.8ALSA-2026:93911 1 CVE
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ethtool: cmis: require exact CDB reply length (CVE-2026-63996) For more details about the security issue(s), including the impact, a CVSS score, …
-
Medium max 5.5ALSA-2026:93442 1 CVE
Moderate: pipewire security update
PipeWire is a multimedia server for Linux and other Unix like operating systems. Security Fix(es): * pipewire: Pulse Server alloca Stack Overflow (CVE-2026-14330) For more details about the security issue(s), including the impact, a CVSS score, acknowledgment…
-
High max 7.5ALSA-2026:93441 2 CVEs
Important: libXi security update
X.Org X11 libXi runtime library Security Fix(es): * libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply (CVE-2026-109090) * libXi: libXi: Arbitrary code execution via DEVICE_RESOLUTION heap-based buffer overflow (CVE-2026-109089) For more…
-
Critical max 9.4ALSA-2026:86594 25 CVEs
Critical: .NET 8.0 security, bug fix, and enhancement update
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming …
first Oct 21, 2026 -
High max 7.3ALSA-2026:93978 1 CVE
Important: ghostscript security update
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: Reintroduction of .charkeys -dS…
-
High max 8.1ALSA-2026:93610 4 CVEs
Important: bind security update
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS …
-
High max 9.8ALSA-2026:93469 7 CVEs
Important: tomcat security update
Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: Apache Tomcat: Security constraint bypass due to improper access control (CVE-2026-65182) * tomcat: Apache Tomcat: Access control by…
-
High max 7.5ALSA-2026:93438 2 CVEs
Important: libXi security update
X.Org X11 libXi runtime library Security Fix(es): * libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply (CVE-2026-109090) * libXi: libXi: Arbitrary code execution via DEVICE_RESOLUTION heap-based buffer overflow (CVE-2026-109089) For more…
-
HighALSA-2026:93670 0 CVEs
Important: kernel-rt bug fix and enhancement update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Bug Fix(es) and Enhancement(s): * gfs2: gfs2_glock_hold() assertion failure [AlmaLinux-8] (JIRA:RHEL-291229)
-
High max 8.1ALSA-2026:93627 1 CVE
Important: wireshark security update
The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fix(es): * wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector (CVE-2026-95387) For …
-
High max 9.8ALSA-2026:93437 6 CVEs
Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924) * kernel: ipv6…
-
High max 9.8ALSA-2026:54343 6 CVEs
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: accel/ivpu: Fix signed integer truncation in IPC receive (CVE-2026-53202) * kernel: net/sched: act_api: use RCU with deferred freeing for action …
first Aug 12, 2026 -
Medium max 5.5ALSA-2026:93464 1 CVE
Moderate: podman security update
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * podman: Arbitrary file write when importing OCI…
-
High max 8.0ALSA-2026:93461 9 CVEs
Important: util-linux security update
The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program. Security Fix(es): * util-linux: TOCTOU in the moun…
-
High max 9.6ALSA-2026:93443 62 CVEs
Important: thunderbird security, bug fix, and enhancement update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * libexpat: denial of service via crafted XML input (CVE-2026-45186) * firefox: Mitigation bypass in the Enterprise Policies component (CVE-2026-109764) * firefox: Spoofing issue…
-
High max 8.8ALSA-2025:3974 8 CVEs
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44192) * webkitgtk: A malicious website may exfi…
first Apr 17, 2025 -
High max 8.1
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: data isolation bypass vulnerability (CVE-2024-44309) For more details about the security issue(s), including the impact, a CVSS score, acknow…
first Nov 27, 2024 -
Medium max 7.5ALSA-2022:5826 42 CVEs
Moderate: mariadb:10.5 security, bug fix, and enhancement update
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: galera (26.4.11), mariadb (10.5.16). Security Fix(es): * mariadb: MariaDB through 10.5.9 a…
first Aug 2, 2022 -
Medium max 7.8ALSA-2025:8247 2 CVEs
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CVE-2024-43842) For m…
first May 28, 2025 -
Medium max 8.8ALSA-2025:21920 3 CVEs
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: NFS: Fix a race when updating an existing write (CVE-2025-39697) * kernel: i40e: fix idx…
first Nov 24, 2025 -
High max 9.8
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium-browser: Use after free in ANGLE (CVE-2024-4558) * webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected …
first Nov 14, 2024 -
Medium max 5.9ALSA-2022:1556 14 CVEs
Moderate: mariadb:10.3 security and bug fix update
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: mariadb (10.3.32), galera (25.3.34). (BZ#2050543) Security Fix(es): * mysql: Server: DML u…
first Apr 26, 2022 -
Medium max 5.9ALSA-2022:1557 14 CVEs
Moderate: mariadb:10.5 security, bug fix, and enhancement update
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: mariadb (10.5.13), galera (26.4.9). (BZ#2050546) Security Fix(es): * mysql: Server: DML un…
first Apr 26, 2022 -
Medium max 6.7ALSA-2023:2757 7 CVEs
Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update
Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide API…
first May 16, 2023 -
Medium max 9.8ALSA-2023:7050 2 CVEs
Moderate: python38:3.8 and python38-devel:3.8 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Nov 14, 2023 -
Medium max 6.1ALSA-2023:7042 1 CVE
Moderate: python27:2.7 security and bug fix update
Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional…
first Nov 14, 2023 -
Medium max 9.8ALSA-2023:7034 2 CVEs
Moderate: python39:3.9 and python39-devel:3.9 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Nov 14, 2023 -
High max 7.8ALSA-2023:5264 2 CVEs
Important: virt:rhel and virt-devel:rhel security and bug fix update
Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide API…
first Sep 19, 2023 -
MediumALSA-2021:3061 5 CVEs
Moderate: virt:rhel and virt-devel:rhel security and bug fix update
Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide API…
first Aug 10, 2021 -
Medium max 7.5ALSA-2021:2587 8 CVEs
Moderate: ruby:2.5 security, bug fix, and enhancement update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: ruby (2.5.9). (BZ#1952626) Security F…
first Jun 29, 2021 -
Critical max 9.8ALSA-2026:93415 1 CVE
Critical: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period (CVE-2026-98432) For more det…
first Nov 1, 2026 -
Critical max 9.8ALSA-2026:93414 1 CVE
Critical: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period (CVE-2026-98432) For more details about the security issue(s), including the impact, a…
first Nov 1, 2026 -
Medium max 8.8ALSA-2023:7025 4 CVEs
Moderate: ruby:2.5 security update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621) * ruby: Buffer overrun in …
first Nov 14, 2023 -
Medium max 8.2ALSA-2022:1763 1 CVE
Moderate: python39:3.9 and python39-devel:3.9 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first May 10, 2022 -
Medium max 7.5ALSA-2021:2584 2 CVEs
Moderate: ruby:2.7 security, bug fix, and enhancement update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: ruby (2.7.3). (BZ#1951999) Security F…
first Jun 29, 2021 -
MediumALSA-2021:1762 10 CVEs
Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update
Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide API…
first May 18, 2021 -
High max 7.2ALSA-2020:5500 17 CVEs
Important: mariadb:10.3 security, bug fix, and enhancement update
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: mariadb (10.3.27), galera (25.3.31). (BZ#1899082, BZ#1899086) Security Fix(es): * mariadb:…
first Dec 15, 2020 -
High max 7.5ALSA-2026:93440 1 CVE
Important: python-jwt security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…