1,808 results · Clear filters · Feed
-
Medium max 6.8RLSA-2025:10676 1 CVE
Moderate: golang security update
The golang packages provide the Go programming language compiler. Security Fix(es): * net/http: Sensitive headers not cleared on cross-origin redirect in net/http (CVE-2025-4673) For more details about the security issue(s), including the impact, a CVSS score…
first Oct 4, 2025 -
Medium max 7.4RLSA-2025:10631 1 CVE
Moderate: gnome-remote-desktop security update
GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment. Security Fix(es): * gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs (CVE-2025-5024) For more details about the security is…
first Oct 4, 2025 -
Medium max 9.8RLSA-2025:10353 1 CVE
Moderate: socat security update
The socat utility establishes bi-directional byte streams and transfers data between them. The utility can establish streams between a large set of channels, such as files, pipes, devices, and sockets. Security Fix(es): * socat: arbitrary file overwrite via p…
first Oct 4, 2025 -
Medium max 8.4RLSA-2025:9462 1 CVE
Moderate: qt5-qtbase security update
Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fix(es): * qt5: qt6: QtCore Assertion Failure Denial of Service (CVE-2025-5455) For more details about the sec…
first Oct 4, 2025 -
Medium max 4.0RLSA-2025:9431 1 CVE
Moderate: libarchive security update
The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, a…
first Oct 4, 2025 -
Medium max 5.9RLSA-2025:9430 1 CVE
Moderate: krb5 security update
Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the he…
first Oct 4, 2025 -
Medium max 5.4RLSA-2025:9434 1 CVE
Moderate: mod_proxy_cluster security update
The mod_proxy_cluster module is a plugin for the Apache HTTP Server that provides load-balancer functionality. Security Fix(es): * mod_proxy_cluster: mod_proxy_cluster unauthorized MCMP requests (CVE-2024-10306) For more details about the security issue(s), i…
first Oct 4, 2025 -
Medium max 6.5RLSA-2025:9432 1 CVE
Moderate: iputils security update
The iputils packages contain basic utilities for monitoring a network, including ping. Security Fix(es): * iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (CVE-2025-47268) For more details about the security issue(s), including th…
first Oct 4, 2025 -
Medium max 7.8RLSA-2025:9302 5 CVEs
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ice: Fix deinitializing VF in error path (CVE-2025-21883) * kernel: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CVE-2025…
first Oct 4, 2025 -
Medium max 9.1RLSA-2025:9144 1 CVE
Moderate: podman security update
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * net/http: Request smuggling due to acceptance o…
first Oct 4, 2025 -
Medium max 9.1RLSA-2025:9150 1 CVE
Moderate: gvisor-tap-vsock security update
A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding. Security Fix(es): * net/http: Request smuggling due to …
first Oct 4, 2025 -
Medium max 9.1RLSA-2025:8476 1 CVE
Moderate: golang security update
The golang packages provide the Go programming language compiler. Security Fix(es): * net/http: Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS…
first Oct 4, 2025 -
Medium max 5.3RLSA-2025:8197 1 CVE
Moderate: unbound security update
The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fix(es): * unbound: Unbounded name compression could lead to Denial of Service (CVE-2024-8508) For more details about the security issue(s), including the impac…
first Oct 4, 2025 -
Medium max 7.4RLSA-2025:7672 1 CVE
Moderate: xdg-utils security update
The xdg-utils package is a set of simple scripts that provide basic desktop integration functions for any Free Desktop. Security Fix(es): * xdg-utils: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments (CVE-2022-4055…
first Oct 4, 2025 -
Medium max 9.8RLSA-2025:7586 1 CVE
Moderate: ghostscript security update
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * Ghostscript: NPDL device: Compression buffer…
first Oct 4, 2025 -
Medium max 6.3RLSA-2025:7432 8 CVEs
Moderate: php:8.2 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: Leak partial content of the heap through heap buffer over-read in mysqlnd (CVE-2024-8929) * php: Single byte overread with convert.quoted-printable-…
first Jul 29, 2025 -
Medium max 6.3RLSA-2025:7431 5 CVEs
Moderate: php security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217) * php: Stream HTTP wrapper header check might omit basic auth he…
first Oct 4, 2025 -
Medium max 7.5RLSA-2025:7409 1 CVE
Moderate: git security update
Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision histor…
first Oct 4, 2025 -
Medium max 6.6RLSA-2025:7397 1 CVE
Moderate: skopeo security update
The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * go-jose: Go JOSE's Parsing Vulnerable to Denial of Service (CVE-2025-27144) For more de…
first Oct 4, 2025 -
Medium max 4.9RLSA-2025:7395 1 CVE
Moderate: 389-ds-base security update
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: null pointer derefere…
first Oct 4, 2025 -
Medium max 6.5RLSA-2025:7050 3 CVEs
Moderate: rsync security update
The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used…
first Oct 4, 2025 -
Medium max 6.3RLSA-2025:7317 1 CVE
Moderate: python3.12-cryptography security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Oct 4, 2025 -
Medium max 9.8RLSA-2025:7256 6 CVEs
Moderate: git-lfs security update
Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fix(es): * golang: crypto/tls: panic when processing post-hands…
first Oct 4, 2025 -
Medium max 5.6RLSA-2025:7309 2 CVEs
Moderate: openjpeg2 security update
OpenJPEG is an open source library for reading and writing image files in JPEG2000 format. Security Fix(es): * openjpeg: heap buffer overflow in bin/common/color.c (CVE-2024-56826) * openjpeg: heap buffer overflow in lib/openjp2/j2k.c (CVE-2024-56827) For mor…
first Oct 4, 2025 -
Medium max 9.0RLSA-2025:7201 1 CVE
Moderate: corosync security update
The corosync packages provide the Corosync Cluster Engine and C APIs for Rocky Linux cluster software. Security Fix(es): * corosync: Stack buffer overflow from 'orf_token_endian_convert' (CVE-2025-30472) For more details about the security issue(s), including…
first Oct 4, 2025 -
Medium max 6.9RLSA-2025:7243 4 CVEs
Moderate: gstreamer1-plugins-base security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fix(es): * gstreamer1-plugins-base: ID3v2 parser out-of-bound…
first Oct 4, 2025 -
Medium max 6.9RLSA-2025:7242 17 CVEs
Moderate: gstreamer1-plugins-good security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer1-pl…
first Oct 4, 2025 -
Medium max 7.8RLSA-2025:7178 2 CVEs
Moderate: gstreamer1, gstreamer1-plugins-bad-free, gstreamer1-plugins-ugly-free, and gstreamer1-rtsp-server security update
The gstreamer1 packages contain a streaming media framework, based on graphs of filters which operate on media data. Security Fix(es): * gstreamer: EXIF Metadata Parsing Integer Overflow (CVE-2024-4453) * gstreamer: AV1 Video Parsing Stack-based Buffer Overfl…
first Oct 4, 2025 -
Medium max 6.3RLSA-2025:7107 1 CVE
Moderate: python3.12 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Oct 4, 2025 -
Medium max 7.8RLSA-2025:7165 9 CVEs
Moderate: xorg-x11-server-Xwayland security update
Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632) * X.Org: Xwayland: Use-after-free of the root cursor (CVE-2025-26594) * x…
first Oct 4, 2025 -
Medium max 7.1RLSA-2025:7067 1 CVE
Moderate: krb5 security update
Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the he…
first Oct 4, 2025 -
Medium max 5.3RLSA-2025:7076 1 CVE
Moderate: gnutls security update
The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to R…
first Oct 4, 2025 -
Medium max 7.5RLSA-2025:7138 1 CVE
Moderate: protobuf security update
The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data. Se…
first Oct 4, 2025 -
Medium max 6.3RLSA-2025:7109 1 CVE
Moderate: python3.11 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Oct 4, 2025 -
Medium max 5.3RLSA-2025:7077 1 CVE
Moderate: libtasn1 security update
A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions. Security Fix(es): * libtasn1:…
first Oct 4, 2025 -
Medium max 6.5RLSA-2025:4493 3 CVEs
Moderate: ruby:3.3 security update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * net-imap: Net::IMAP vulnerable to possible DoS by memory exhaustion (CVE-2025-25186) * C…
first Jul 29, 2025 -
Medium max 5.8RLSA-2025:4487 2 CVEs
Moderate: ruby security update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * CGI: ReDoS in CGI::Util#escapeElement (CVE-2025-27220) * CGI: Denial of Service in CGI::…
first Jul 29, 2025 -
Medium max 6.3RLSA-2025:4263 8 CVEs
Moderate: php:8.1 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: Leak partial content of the heap through heap buffer over-read in mysqlnd (CVE-2024-8929) * php: Single byte overread with convert.quoted-printable-…
first Jul 29, 2025 -
Medium max 10.0
Moderate: tomcat security update
Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) * tomcat: Potential RCE and/or information disclosure and/or information…
first Jul 29, 2025 -
Medium max 4.7RLSA-2025:3262 1 CVE
Moderate: nginx:1.24 security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): * nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) For more details about …
first Jul 29, 2025