6,444 results · Feed
-
Medium max 6.5ALSA-2024:10289 3 CVEs
Moderate: container-tools:rhel8 security update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents (CVE-2021-…
first Nov 26, 2024 -
Low max 7.8ALSA-2024:10282 2 CVEs
Low: kernel-rt:4.18.0 security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: media: edia: dvbdev: fix a use-after-free (CVE-2024-27043) * kernel: bpf: Add BPF_PROG_T…
first Nov 26, 2024 -
Medium max 8.1ALSA-2024:10281 4 CVEs
Moderate: kernel:4.18.0 security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: media: edia: dvbdev: fix a use-after-free (CVE-2024-27043) * kernel: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CVE-2024-27399) …
first Nov 26, 2024 -
High max 8.0ALSA-2024:0974 1 CVE
Important: postgresql:12 security update
PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985) For more details about the security issue(s), including th…
first Feb 26, 2024 -
High max 8.0ALSA-2024:0973 1 CVE
Important: postgresql:15 security update
PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985) For more details about the security issue(s), including th…
first Feb 26, 2024 -
Medium max 5.6ALSA-2024:0967 1 CVE
Moderate: opensc security update
The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic operations and enables their use for authentication, mail encryption, or digital signatures. Security Fix(es): * OpenSC…
first Feb 26, 2024 -
High max 7.5ALSA-2024:0965 2 CVEs
Important: unbound security update
The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387) * bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU reso…
first Feb 26, 2024 -
High max 8.1ALSA-2024:0964 8 CVEs
Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.8.0. Security Fix(es): * Mozilla: Out-of-bounds memory read in networking channels (CVE-2024-1546) * Mozilla: Alert dialog could have been spoofed o…
first Feb 26, 2024 -
High max 8.0ALSA-2024:0956 1 CVE
Important: postgresql:10 security update
PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985) For more details about the security issue(s), including th…
first Feb 26, 2024 -
High max 8.1ALSA-2024:0955 8 CVEs
Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.8.0 ESR. Security Fix(es): * Mozilla: Out-of-bounds memory read in networking channels (CVE-2024-1546) …
first Feb 26, 2024 -
High max 7.8ALSA-2024:0897 19 CVEs
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: sch_hfsc UAF (CVE-2023-4623) * kernel: use-after-free in sch_qfq network scheduler (CVE-2023-4921) * kernel: inactive elements in nft_…
first Feb 20, 2024 -
High max 8.1ALSA-2024:0893 1 CVE
Important: python-pillow security update
The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities. Security Fix(es): * pillow: Arbitrary Code Execution via the en…
first Feb 20, 2024 -
MediumALSA-2024:0889 5 CVEs
Moderate: oniguruma security update
Oniguruma is a regular expressions library that supports a variety of character encodings. Security Fix(es): * oniguruma: Use-after-free in onig_new_deluxe() in regext.c (CVE-2019-13224) * oniguruma: Stack exhaustion in regcomp.c because of recursion in regpa…
first Feb 20, 2024 -
Low max 5.3ALSA-2024:0888 1 CVE
Low: edk2 security update
EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446) Fo…
first Feb 20, 2024 -
High max 7.8ALSA-2024:0861 2 CVEs
Important: gimp:2.8 security update
The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-lev…
first Feb 19, 2024 -
High max 7.5ALSA-2024:0827 2 CVEs
Important: .NET 8.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK…
first Feb 15, 2024 -
High max 7.5ALSA-2024:0808 2 CVEs
Important: dotnet6.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK…
first Feb 13, 2024 -
High max 7.5ALSA-2024:0806 2 CVEs
Important: dotnet7.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK…
first Feb 13, 2024 -
MediumALSA-2024:0768 1 CVE
Moderate: libmaxminddb security update
The libmaxminddb package contains the MaxMind DB library. Security Fix(es): * libmaxminddb: improper initialization in dump_entry_data_list() in maxminddb.c (CVE-2020-28241) For more details about the security issue(s), including the impact, a CVSS score, ack…
first Feb 12, 2024 -
High max 8.6ALSA-2024:0752 1 CVE
Important: container-tools:rhel8 security update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * runc: file descriptor leak (CVE-2024-21626) For more details about the security issue(s), including the impact, a CVSS score,…
first Feb 8, 2024 -
Medium max 5.9ALSA-2024:0628 1 CVE
Moderate: libssh security update
libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795) For more details about the security issue(s),…
first Jan 31, 2024 -
Medium max 7.5ALSA-2024:0627 2 CVEs
Moderate: gnutls security update
The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: incomplete fix for CVE-2023-5981 (CVE-2024-0553) For more details ab…
first Jan 31, 2024 -
High max 8.8ALSA-2024:0609 9 CVEs
Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.7.0. Security Fix(es): * Mozilla: Out of bounds write in ANGLE (CVE-2024-0741) * Mozilla: Failure to update user input timestamp (CVE-2024-0742) * M…
first Jan 30, 2024 -
High max 9.8ALSA-2024:0607 4 CVEs
Important: tigervnc security update
Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is …
first Jan 30, 2024 -
Medium max 6.5ALSA-2024:0606 2 CVEs
Moderate: openssh security update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * ssh: Prefix truncation attack on Binary Packet Prot…
first Jan 30, 2024 -
Medium max 5.3ALSA-2024:0256 1 CVE
Moderate: python3 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Jan 15, 2024 -
High max 9.1ALSA-2024:0158 3 CVEs
Important: .NET 6.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK…
first Jan 10, 2024 -
Medium max 5.9ALSA-2024:0155 1 CVE
Moderate: gnutls security update
The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: timing side-channel in the RSA-PSK authentication (CVE-2023-5981) Fo…
first Jan 10, 2024 -
Medium max 8.8ALSA-2024:0131 1 CVE
Moderate: pixman security update
Pixman is a pixel manipulation library for the X Window System and Cairo. Security Fix(es): * pixman: Integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (CVE-2022-44638) For more details about the security issue(s), including the im…
first Jan 10, 2024 -
Medium max 7.5ALSA-2024:0130 4 CVEs
Moderate: frr security update
FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fix(es): * ffr: Flowspec overflow in bgpd/bgp_flowspec.c (CVE-2023-38406) * ffr: Out of bounds …
first Jan 10, 2024 -
Medium max 6.1ALSA-2024:0125 4 CVEs
Moderate: tomcat security update
Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: Open Redirect vulnerability in FORM authentication (CVE-2023-41080) * tomcat: FileUpload: DoS due to accumulation of temporary files…
first Jan 10, 2024 -
Medium max 7.5ALSA-2024:0121 9 CVEs
Moderate: container-tools:4.0 security update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879) * golang: net/http/httputil: ReversePr…
first Jan 10, 2024 -
Medium max 5.5ALSA-2023:7190 1 CVE
Moderate: avahi security update
Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network …
first Nov 14, 2023 -
Low max 2.5ALSA-2023:7187 1 CVE
Low: procps-ng security update
The procps-ng packages contain a set of system utilities that provide system information, including ps, free, skill, pkill, pgrep, snice, tload, top, uptime, vmstat, w, watch, and pwdx. Security Fix(es): * procps: ps buffer overflow (CVE-2023-4016) For more d…
first Nov 14, 2023 -
High max 7.8
Important: glibc security update
The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot…
first Oct 5, 2023 -
Medium max 7.1ALSA-2026:56133 1 CVE
Moderate: attr security update
The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists, as well as user objects. Security Fix(es): * attr: Symlink Traversal Privilege Escalation via getfattr and setf…
first Aug 18, 2026 -
Medium max 5.9ALSA-2026:56131 1 CVE
Moderate: pam security update
Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): * linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module (…
first Aug 18, 2026 -
High max 7.5ALSA-2026:55859 1 CVE
Important: haproxy security update
The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fix(es): * haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions (CVE-2026-55204) For more details about the securit…
first Aug 17, 2026 -
Medium max 7.2ALSA-2026:5513 1 CVE
Moderate: 389-ds:1.4 security update
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: Remote C…
first Mar 24, 2026 -
High max 7.6ALSA-2026:36774 1 CVE
Important: gstreamer1-plugins-good security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer1-pl…
first Jul 8, 2026