6,419 results · Feed
-
Medium max 8.8
Moderate: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have been upgraded to a later upstream version: webkit2gtk3 (2.36.7). Security Fix(es): * webkitgtk: processing maliciously crafted web content may l…
first Sep 20, 2022 -
MediumALSA-2022:6608 2 CVEs
Moderate: dbus-broker security update
dbus-broker is an implementation of a message bus as defined by the D-Bus specification. Its aim is to provide high performance and reliability, while keeping compatibility to the D-Bus reference implementation. It is exclusively written for Linux systems, an…
first Sep 20, 2022 -
Medium max 9.1ALSA-2022:6595 10 CVEs
Moderate: nodejs and nodejs-nodemon security and bug fix update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs (16.16.0), nodejs-nodemon (2.0.19). (BZ#212423…
first Sep 20, 2022 -
MediumALSA-2022:6585 2 CVEs
Moderate: ruby security, bug fix, and enhancement update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: ruby (3.0.4). (BZ#2109428) Security F…
first Sep 20, 2022 -
MediumALSA-2022:6580 1 CVE
Moderate: booth security update
The Booth cluster ticket manager is a component to bridge high availability clusters spanning multiple sites, in particular, to provide decision inputs to local Pacemaker cluster resource managers. It operates as a distributed consensus-based service, presuma…
first Sep 20, 2022 -
HighALSA-2022:6358 1 CVE
Important: open-vm-tools security update
The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines. Security Fix(es): * open-vm-tools: loca…
first Sep 6, 2022 -
High max 7.5ALSA-2022:6763 3 CVEs
Important: bind security update
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS …
first Oct 3, 2022 -
Medium max 9.8ALSA-2022:6224 5 CVEs
Moderate: openssl security and bug fix update
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: c_rehash script allows command injection (CVE-2022-…
first Aug 30, 2022 -
High max 8.8ALSA-2022:6174 5 CVEs
Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 91.13.0 ESR. Security Fix(es): * Mozilla: Address bar spoofing via XSLT error handling (CVE-2022-38472) * M…
first Aug 24, 2022 -
Medium max 9.8ALSA-2022:6157 3 CVEs
Moderate: curl security update
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: HTTP compression denial of service (CVE-2022-32206) * curl: Unpreserved fil…
first Aug 24, 2022 -
Medium max 5.9ALSA-2022:6043 1 CVE
Moderate: .NET 6.0 security, bug fix, and enhancement update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK…
first Aug 10, 2022 -
Medium max 8.6ALSA-2022:6002 2 CVEs
Moderate: kernel-rt security and bug fix update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * information leak in scsi_ioctl() (CVE-2022-0494) * use-after-free in tc_new_tfilter() in net/sch…
first Aug 9, 2022 -
Medium max 7.5ALSA-2022:5948 36 CVEs
Moderate: galera, mariadb, and mysql-selinux security, bug fix, and enhancement update
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: galera (26.4.11), mariadb (10.5.16), mysql-selinux (1.0.5). Security Fix(es): * mariadb: M…
first Aug 9, 2022 -
High max 7.5ALSA-2022:5904 1 CVE
Important: php security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: password of excessive length triggers buffer overflow leading to RCE (CVE-2022-31626) For more details about the security issue(s), including the im…
first Aug 4, 2022 -
High max 7.5ALSA-2022:5736 4 CVEs
Important: java-17-openjdk security, bug fix, and enhancement update
The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. The following packages have been upgraded to a later upstream version: java-17-openjdk (17.0.4.0.8). (BZ#2084779) Security Fix(es): …
first Jul 27, 2022 -
High max 7.1ALSA-2022:5716 1 CVE
Important: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * grafana: OAuth account takeover (CVE-2022-31107) For more details about the security issue(s), including the impact, a CVSS score…
first Jul 26, 2022 -
High max 7.5ALSA-2022:5709 3 CVEs
Important: java-1.8.0-openjdk security, bug fix, and enhancement update
The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. The following packages have been upgraded to a later upstream version: java-1.8.0-openjdk (1.8.0.342.b07). (BZ#2084776) Security Fi…
first Jul 25, 2022 -
High max 8.8ALSA-2026:88477 18 CVEs
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: calipso: Don't call calipso functions for AF_INET sk. (CVE-2025-38147) * kernel: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (CVE-2026-6411…
first Oct 22, 2026 -
Medium max 7.8ALSA-2022:5942 3 CVEs
Moderate: vim security update
Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Out-of-bounds Write (CVE-2022-1785) * vim: out-of-bounds write in vim_regsub_both() in regexp.c (CVE-2022-1897) * vim: buffer over-read in utf_ptr2char() in mbyte.…
first Aug 9, 2022 -
High max 7.5ALSA-2022:5799 9 CVEs
Important: go-toolset and golang security and bug fix update
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. The golang packages provide the Go programming language compiler. Security Fix(es): * golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30…
first Aug 1, 2022 -
High max 8.8ALSA-2022:5767 3 CVEs
Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 91.12.0 ESR. Security Fix(es): * Mozilla: Memory safety bugs fixed in Firefox 103 and 102.1 (CVE-2022-2505)…
first Aug 1, 2022 -
High max 7.5ALSA-2022:5695 3 CVEs
Important: java-11-openjdk security, bug fix, and enhancement update
The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. The following packages have been upgraded to a later upstream version: java-11-openjdk (11.0.16.0.8). (BZ#2084777) Security Fix(es):…
first Jul 25, 2022 -
HighALSA-2022:5527 1 CVE
Important: squid security update
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: DoS when processing gopher server responses (CVE-2021-46784) For more details about the security issue(s), including th…
first Jul 7, 2022 -
High max 9.8ALSA-2022:5482 9 CVEs
Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.11. Security Fix(es): * Mozilla: CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI (CVE-2022-34468) * Mozilla…
first Jul 1, 2022 -
HighALSA-2022:5249 4 CVEs
Important: kernel security and bug fix update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak (CVE-2022-1012) * kernel: race condition in per…
first Jul 1, 2022 -
High max 8.8ALSA-2026:A006 1 CVE
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS…
first May 8, 2026 -
High max 7.8
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) For more details about the security issue(s), including the impact, a CVSS…
first May 1, 2026 -
High max 9.8ALSA-2026:9264 2 CVEs
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) * kernel: scsi: qla2xxx: Fix improper freeing of purex it…
first Apr 21, 2026 -
High max 9.8ALSA-2026:91565 16 CVEs
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: tcp: restrict SO_ATTACH_FILTER to priv users (CVE-2026-53236) * kernel: fuse: re-lock request before replacing page cache folio (CVE-2026-53388) …
first Oct 28, 2026 -
High max 9.2
Important: brotli security update
Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available g…
first Oct 26, 2026 -
High max 7.5ALSA-2026:89923 3 CVEs
Important: libreswan security update
Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks…
first Oct 26, 2026 -
High max 7.5ALSA-2026:89752 3 CVEs
Important: oci-seccomp-bpf-hook security update
OCI Hook to generate seccomp json files based on EBF syscalls used by container oci-seccomp-bpf-hook provides a library for applications looking to use the Container Pod concept popularized by Kubernetes. Security Fix(es): * net/[http:](http:) golang: Go net/…
first Oct 26, 2026 -
Critical max 6.8ALSA-2026:88455 1 CVE
Critical: ca-certificates security update
The ca-certificates package contains a set of Certificate Authority (CA) certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure (PKI). Security Fix(es): * ca-certificates: Distrust eMudhra intermediate CA certificate…
first Oct 22, 2026 -
High max 7.5ALSA-2026:8840 1 CVE
Important: go-rpm-macros security update
This package provides build-stage rpm automation to simplify the creation of Go language (golang) packages. It does not need to be included in the default build root: go-srpm-macros will pull it in for Go packages only. Security Fix(es): * net/url: Incorrect …
first Apr 20, 2026 -
HighALSA-2022:5267 4 CVEs
Important: kernel-rt security and bug fix update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: Small table perturb size in the TCP source port generation algorithm can lead to informa…
first Jun 28, 2022 -
MediumALSA-2022:5257 1 CVE
Moderate: libinput security update
libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices. Security Fix(es): * libinput: format string vulnerability may lead to privilege escalation (CVE-2022-1215) For more deta…
first Jun 30, 2022 -
MediumALSA-2022:5252 1 CVE
Moderate: libarchive security update
The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, a…
first Jul 1, 2022 -
Medium max 8.4ALSA-2022:5242 6 CVEs
Moderate: vim security update
Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Use of Out-of-range Pointer Offset in vim (CVE-2022-0554) * vim: Heap-based Buffer Overflow occurs in vim (CVE-2022-0943) * vim: Out-of-range Pointer Offset (CVE-2…
first Jul 1, 2022 -
High max 7.1ALSA-2026:91612 1 CVE
Important: libXtst security update
X.Org X11 libXtst runtime library Security Fix(es): * libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser (CVE-2026-94286) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and oth…
first Oct 28, 2026 -
High max 7.5ALSA-2026:91366 1 CVE
Important: libX11 security update
The libX11 packages contain the core X11 protocol client library. Security Fix(es): * libX11: libX11: Heap-based buffer overflow via malicious X server (CVE-2026-88806) For more details about the security issue(s), including the impact, a CVSS score, acknowle…
first Oct 27, 2026