6,444 results · Feed
-
High max 7.5ALSA-2026:4458 2 CVEs
Important: .NET 10.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK…
first Mar 12, 2026 -
Medium max 6.6ALSA-2026:4442 1 CVE
Moderate: vim security update
Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Arbitrary code execution via 'helpfile' option processing (CVE-2026-25749) For more details about the security issue(s), including the impact, a CVSS score, a…
first Mar 12, 2026 -
High max 7.1ALSA-2026:43420 2 CVEs
Important: acl security update
Access Control Lists (ACLs) are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfacl and setfacl utilities needed for manipulating access control lists. Security Fix(es): * acl: Symlink traver…
first Jul 22, 2026 -
High max 8.3ALSA-2026:4306 3 CVEs
Important: mingw-libpng security update
MinGW Windows Libpng library. Security Fix(es): * libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API (CVE-2026-22801) * libpng: libpng: Denial of service and information disclosure via heap buffer over-…
first Mar 11, 2026 -
High max 9.8ALSA-2026:42828 10 CVEs
Important: httpd:2.4 security, bug fix, and enhancement update
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) * httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169)…
first Jul 21, 2026 -
High max 8.8ALSA-2026:42552 2 CVEs
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117) * kernel: Bluetooth: l2cap: Add missing chan lock in l2c…
first Jul 21, 2026 -
High max 8.8ALSA-2026:42550 2 CVEs
Important: kernel-rt security, bug fix, and enhancement update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117)…
first Jul 21, 2026 -
High max 7.5ALSA-2026:42090 1 CVE
Important: glib2 security update
GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Securi…
first Jul 20, 2026 -
High max 8.8ALSA-2026:41901 17 CVEs
Important: .NET 8.0 security, bug fix, and enhancement update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK…
first Jul 20, 2026 -
High max 8.8ALSA-2026:41900 17 CVEs
Important: .NET 10.0 security, bug fix, and enhancement update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK…
first Jul 20, 2026 -
High max 8.8ALSA-2026:41899 17 CVEs
Important: .NET 9.0 security, bug fix, and enhancement update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK…
first Jul 20, 2026 -
High max 7.5ALSA-2026:4146 1 CVE
Important: python-pyasn1 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Mar 10, 2026 -
High max 9.8ALSA-2026:40894 2 CVEs
Important: hplip security update
The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals. Security Fix(es): * HPLIP: Incomplete Fix for CVE-2026-8631 (CVE-2026-14544) For mor…
first Jul 16, 2026 -
High max 8.8ALSA-2026:40841 1 CVE
Important: maven:3.8 security update
Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information. Security Fix(es): * org.codehaus.plexus:p…
first Jul 16, 2026 -
High max 8.8ALSA-2026:4064 3 CVEs
Important: postgresql:12 security update
PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006) * postgresql: PostgreSQL intarray missing valida…
first Mar 9, 2026 -
High max 8.8ALSA-2026:4024 3 CVEs
Important: postgresql:13 security update
PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006) * postgresql: PostgreSQL intarray missing valida…
first Mar 9, 2026 -
High max 8.7ALSA-2026:39893 1 CVE
Important: python3.12 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Jul 15, 2026 -
High max 7.5ALSA-2026:39878 1 CVE
Important: perl-XML-LibXML security update
This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module allows Perl programmers to make use of the highly capable validating XML parser and the high performance DOM imp…
first Jul 15, 2026 -
High max 9.1ALSA-2026:3985 2 CVEs
Important: git-lfs security update
Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * golang: net/url: Memory exhaustion in query paramete…
first Mar 9, 2026 -
High max 8.8ALSA-2026:3967 1 CVE
Important: libvpx security update
The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fix(es): * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447) For more details a…
first Mar 9, 2026 -
Medium max 7.8ALSA-2026:3964 2 CVEs
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CVE-2025-71085) *…
first Mar 9, 2026 -
Medium max 7.8ALSA-2026:3963 2 CVEs
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CVE-2025-71085) * kernel: macvlan: fix possible UAF in macvlan_forward_sou…
first Mar 9, 2026 -
High max 7.8ALSA-2026:39575 1 CVE
Important: cifs-utils security, bug fix, and enhancement update
The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. The cifs-utils packages contain tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support…
first Jul 15, 2026 -
Medium max 6.5ALSA-2026:3938 1 CVE
Moderate: nfs-utils security update
The nfs-utils packages provide a daemon for the kernel Network File System (NFS) server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and s…
first Mar 5, 2026 -
High max 8.6ALSA-2026:39322 1 CVE
Important: pacemaker security update
The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Security Fix(es): * pacemaker: Pacemaker: Denial of Service via integer overflow in remot…
first Jul 14, 2026 -
High max 8.7ALSA-2026:39320 1 CVE
Important: python3 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Jul 14, 2026 -
High max 7.5ALSA-2026:39266 1 CVE
Important: git-lfs security update
Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * net: golang: Go net package: Denial of Service via l…
first Jul 14, 2026 -
High max 7.5ALSA-2026:39127 4 CVEs
Important: python-pillow security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Jul 14, 2026 -
High max 8.8first Jul 14, 2026
-
High max 8.8first Jul 14, 2026
-
High max 9.1ALSA-2026:3898 2 CVEs
Important: osbuild-composer security update
A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-compos…
first Mar 5, 2026 -
High max 8.1ALSA-2026:38847 1 CVE
Important: nginx:1.24 security, bug fix, and enhancement update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with craft…
first Jul 13, 2026 -
High max 7.3ALSA-2026:38510 4 CVEs
Important: vim security update
Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: command injection when decompressing .tgz archives (CVE-2026-46483) * vim: Vim: Arbitrary Code Execution via crafted directory names (CVE-2026-47162) * vim: Vim: A…
first Jul 13, 2026 -
High max 7.5ALSA-2026:38504 3 CVEs
Important: container-tools:rhel8 security update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811) * golang.org/x/crypto/…
first Jul 13, 2026 -
Medium max 7.5ALSA-2026:38503 1 CVE
Moderate: openssl security update
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: OpenSSL: Denial of Service due to NULL pointer dere…
first Jul 13, 2026 -
High max 7.7ALSA-2026:38501 1 CVE
Important: freerdp security update
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: FreeRDP: Out-of-bou…
first Jul 13, 2026 -
High max 8.5ALSA-2026:38488 1 CVE
Important: xorg-x11-server-Xwayland security update
Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999) For more details about the security issue(s), including the impact, a CVSS score, acknowledgmen…
first Jul 13, 2026 -
High max 8.5ALSA-2026:38487 1 CVE
Important: xorg-x11-server security update
X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (…
first Jul 13, 2026 -
High max 7.8ALSA-2026:38485 1 CVE
Important: gegl security update
GEGL (Generic Graphics Library) is a graph-based image processing framework. Security Fix(es): * gimp: GIMP: Arbitrary code execution via heap-based buffer overflow in HDR file parsing (CVE-2026-2050) For more details about the security issue(s), including th…
first Jul 13, 2026 -
High max 6.9ALSA-2026:37282 4 CVEs
Important: unbound security update
The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbound: Denial of Service via excessive EDNS options (CVE-2026-41292) * unbound: Unbound: Cache manipulation via 'ghost domain names' attac…
first Jul 9, 2026