2,962 results · Clear filters · Feed
-
High max 8.1RLSA-2026:97879 5 CVEs
Important: wireshark security update
The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fix(es): * wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76886) * wireshark: Wire…
-
High max 8.8RLSA-2026:98635 1 CVE
Important: xdg-dbus-proxy security update
xdg-dbus-proxy is a filtering proxy for D-Bus connections. It was originally part of the flatpak project, but it has been broken out as a standalone module to facilitate using it in other contexts. Security Fix(es): * xdg-dbus-proxy: xdg-dbus-proxy: message f…
-
High max 7.5RLSA-2026:98555 5 CVEs
Important: buildah security update
The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working conta…
-
High max 8.1RLSA-2026:97514 2 CVEs
Important: subscription-manager-cockpit security update
Subscription Manager Cockpit UI Security Fix(es): * lodash: lodash: Arbitrary code execution via untrusted input in template imports (CVE-2026-4800) * lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass (…
-
High max 8.1RLSA-2026:98089 8 CVEs
Important: wireshark security update
The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fix(es): * wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76886) * wireshark: Wire…
-
High max 7.5RLSA-2026:97868 1 CVE
Important: rust-sequoia-sq security update
Command-line frontends for Sequoia. Security Fix(es): * hickory-resolver: hickory-resolver: DNSSEC validation bypass allows forged DNS records (CVE-2026-93657) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, …
-
High max 7.8RLSA-2026:98584 1 CVE
Important: glycin-loaders security update
Sandboxed and extendable image decoding. Security Fix(es): * librsvg: Use-after-free when XML includes have duplicated entities (CVE-2026-96889,RUSTSEC-2026-0305) For more details about the security issue(s), including the impact, a CVSS score, acknowledgment…
-
High max 8.1RLSA-2026:97537 2 CVEs
Important: cockpit-podman security update
The Cockpit user interface for Podman containers. Security Fix(es): * lodash: lodash: Arbitrary code execution via untrusted input in template imports (CVE-2026-4800) * lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via a…
-
High max 9.6RLSA-2026:97386 4 CVEs
Important: go-fdo-client security update
go-fdo-client is the device-side implementation of FIDO Device Onboard specification in Go. It provides an FDO client that interacts with FDO manufacturer and owner servers to perform device on-boarding. Security Fix(es): * crypto/x509: Incorrect enforcement …
-
High max 7.5RLSA-2026:97533 1 CVE
Important: podman security, bug fix, and enhancement update
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang.org/x/crypto/ssh: golang.org/x/crypto/ss…
-
High max 7.5RLSA-2026:97861 1 CVE
Important: mod_auth_openidc security update
The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fix(es): * mod_auth_openidc: mod_auth_openidc: De…
-
High max 7.0RLSA-2026:97522 2 CVEs
Important: util-linux security, bug fix, and enhancement update
The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program. Security Fix(es): * util-linux: util-linux: heap u…
-
High max 7.5RLSA-2026:97213 2 CVEs
Important: grafana-pcp security, bug fix, and enhancement update
The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * crypto/x509: golang: Go crypto/x509:…
-
High max 8.1RLSA-2026:97238 2 CVEs
Important: cockpit-machines security, bug fix, and enhancement update
Cockpit component for managing libvirt virtual machines. Security Fix(es): * lodash: lodash: Arbitrary code execution via untrusted input in template imports (CVE-2026-4800) * lodash: Lodash: Prototype pollution allows deletion of built-in prototype propertie…
-
High max 7.8RLSA-2026:97867 1 CVE
Important: sos security, bug fix, and enhancement update
The sos package contains a set of utilities that gather information from system hardware, logs, and configuration files. The information can then be used for diagnostic purposes and debugging. Security Fix(es): * sos: sos: path traversal in sos clean tar extr…
-
High max 7.8RLSA-2026:97561 1 CVE
Important: crun security, bug fix, and enhancement update
crun is a OCI runtime Security Fix(es): * crun: crun: rootful krun with passt executes container payload as host root (CVE-2026-84042) Bug Fix(es) and Enhancement(s): * crun should require container-selinux (JIRA:Rocky Linux-169227) * update to the latest ups…
-
High max 4.5RLSA-2026:97521 1 CVE
Important: microcode_ctl security, bug fix, and enhancement update
The microcode_ctl packages provide microcode updates for Intel and AMD processors. Security Fix(es): * kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling (CVE-2025-35973) Bug Fix(es) and Enhancement(s): * [Rocky L…
-
High max 7.8RLSA-2026:98591 1 CVE
Important: librsvg2 security update
The librsvg2 packages provide a Scalable Vector Graphics (SVG) library based on the libart library. Security Fix(es): * librsvg: Use-after-free when XML includes have duplicated entities (CVE-2026-96889,RUSTSEC-2026-0305) For more details about the security i…
-
High max 7.5RLSA-2026:97387 4 CVEs
Important: go-fdo-server security update
This package provides a server-side implementation of the FIDO Device Onboard (FDO) specification, written in Go. FDO is an open standard for the late binding of device credentials, allowing for automated and secure on-boarding of devices when they are first …
-
High max 7.2RLSA-2026:97229 1 CVE
Important: skopeo security, bug fix, and enhancement update
The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and …
-
High max 7.5RLSA-2026:97877 3 CVEs
Important: delve security, bug fix, and enhancement update
Delve is a debugger for the Go programming language. The goal of the project is to provide a simple, full featured debugging tool for Go. Delve should be easy to invoke and easy to use. Chances are if you're using a debugger, things aren't going your way. Wit…
-
High max 7.5RLSA-2026:97284 2 CVEs
Important: git-lfs security update
Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * crypto/x509: golang: Go crypto/x509: Denial of Servi…
-
High max 7.5RLSA-2026:97288 1 CVE
Important: yggdrasil security, bug fix, and enhancement update
yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate child "worker" process, exchanging data with its worker processes through a D-Bus message broker. Security Fix(es): * crypto/…
-
High max 7.5RLSA-2026:97328 1 CVE
Important: oci-seccomp-bpf-hook security, bug fix, and enhancement update
OCI Hook to generate seccomp json files based on EBF syscalls used by container oci-seccomp-bpf-hook provides a library for applications looking to use the Container Pod concept popularized by Kubernetes. Security Fix(es): * net: golang: Go net package: Denia…
-
High max 7.5RLSA-2026:97215 3 CVEs
Important: grafana security, bug fix, and enhancement update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): * crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810) *…
-
High max 7.5RLSA-2026:97191 2 CVEs
Important: delve security, bug fix, and enhancement update
Delve is a debugger for the Go programming language. The goal of the project is to provide a simple, full featured debugging tool for Go. Delve should be easy to invoke and easy to use. Chances are if you're using a debugger, things aren't going your way. Wit…
-
High max 8.1RLSA-2026:97090 2 CVEs
Important: subscription-manager-cockpit security update
Subscription Manager Cockpit UI Security Fix(es): * lodash: lodash: Arbitrary code execution via untrusted input in template imports (CVE-2026-4800) * lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass (…
-
High max 7.5RLSA-2026:97562 2 CVEs
Important: skopeo security, bug fix, and enhancement update
The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (…
-
High max 8.1RLSA-2026:97539 2 CVEs
Important: cockpit-machines security update
Cockpit component for managing libvirt virtual machines. Security Fix(es): * lodash: lodash: Arbitrary code execution via untrusted input in template imports (CVE-2026-4800) * lodash: Lodash: Prototype pollution allows deletion of built-in prototype propertie…
-
High max 8.1RLSA-2026:97193 2 CVEs
Important: cockpit-podman security update
The Cockpit user interface for Podman containers. Security Fix(es): * lodash: lodash: Arbitrary code execution via untrusted input in template imports (CVE-2026-4800) * lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via a…
-
High max 10.0RLSA-2026:97873 39 CVEs
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CVE-2025-22063) * kernel: can: bcm: add locking for bcm_op runtime update…
-
High max 8.8RLSA-2026:99741 66 CVEs
Important: mysql:8.4 security update
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: mysql: system takeover via mysqldump component (CVE-2026-101797) * mysql: mysql: unau…
-
High max 9.8RLSA-2026:98100 10 CVEs
Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: Revert "net/smc: Introduce TCP ULP support" (CVE-2026-46330) * kernel: Linux kernel: PPP…
-
High max 8.7RLSA-2026:98103 1 CVE
Important: qt5-qtbase security update
Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fix(es): * qt: qt: Denial of Service via crafted XML parsing in QXmlStreamReader (CVE-2026-16762) For more det…
-
High max 7.3RLSA-2026:98105 1 CVE
Important: libimobiledevice security update
libimobiledevice is a library for connecting to mobile devices including phones and music players Security Fix(es): * libimobiledevice: libimobiledevice: Denial of Service via double free in service_receive (CVE-2026-116260) For more details about the securit…
-
High max 9.8RLSA-2026:98099 10 CVEs
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Revert "net/smc: Introduce TCP ULP support" (CVE-2026-46330) * kernel: Linux kernel: PPP over L2TP Use-After-Free vulnerability (CVE-2026-68398) …
-
High max 7.8RLSA-2026:98119 1 CVE
Important: vim security, bug fix, and enhancement update
Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vimscript injection via unescaped filename in netrw s:NetrwMarkFile() filter() expression allows arbitrary code execution (CVE-2026-43961) Bug Fix(es) and Enhancem…
-
High max 8.8RLSA-2026:98521 1 CVE
Important: bubblewrap security update
Bubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces. Security Fix(es): * bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbo…
-
High max 7.5RLSA-2026:98492 1 CVE
Important: jackson-databind security update
The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration. Security Fix(es): * com.fasterxml.jackson.core/jackson-databind: to…
-
High max 7.1RLSA-2026:98467 1 CVE
Important: librabbitmq security update
The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows you to communicate with AMQP servers using protocol version 0-9-1. Security Fix(es): * rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of se…