AlmaLinux

Latest advisories

• Critical max 9.5
  ALSA-2026:96240 1 CVE

  Critical: edk2 security update

  EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * edk2: Pre-boot RCE in EDK II PXE driver (CVE-2026-97631) For more details about …

  Nov 10, 2026

  first Nov 9, 2026
• High max 7.5
  ALSA-2026:96088 9 CVEs

  Important: nodejs24 security, bug fix, and enhancement update

  Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications…

  Nov 10, 2026

  first Nov 9, 2026
• High max 7.5
  ALSA-2026:96236 2 CVEs

  Important: nodejs-nodemon security update

  Simple monitor script for use during development of a node.js app. For use during development of a node.js based application. nodemon will watch the files in the directory in which nodemon was started, and if any files change, nodemon will automatically resta…

  Nov 10, 2026

  first Nov 9, 2026
• Medium max 10.0
  ALSA-2026:96235 4 CVEs 1 exploited

  Moderate: ruby security, bug fix, and enhancement update

  Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * ruby: double free issue in regular expression parser (CVE-2026-89078) * ruby: integer ov…

  Nov 10, 2026

  first Nov 9, 2026
• High max 9.8
  ALSA-2026:93413 17 CVEs

  Important: kernel security, bug fix, and enhancement update

  The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Kernel: Denial of Service in network socket error handling (CVE-2026-22977) * kernel: x86/CPU/AMD: Prevent improper isolation of shared resources…

  Nov 10, 2026

  first Nov 1, 2026