Rocky Linux Security Advisories

1,808 results · Clear filters · Feed

• Medium max 7.5
  RLSA-2024:2980 1 CVE

  Moderate: harfbuzz security update

  HarfBuzz is an implementation of the OpenType Layout engine. Security Fix(es): * harfbuzz: allows attackers to trigger O(n^2) growth via consecutive marks (CVE-2023-25193) For more details about the security issue(s), including the impact, a CVSS score, ackno…

  May 7, 2025
• Medium max 7.5
  RLSA-2024:0894 87 CVEs

  Moderate: mysql:8.0 security update

  MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: InnoDB unspecified vulnerability (CPU Apr 2023) (CVE-2023-21911) * mysql: Server: DDL…

  May 7, 2025
• Medium max 6.0
  RLSA-2024:0135 1 CVE

  Moderate: virt:rhel and virt-devel:rhel security update

  Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide API…

  May 7, 2025
• Medium max 7.5
  RLSA-2024:0121 9 CVEs

  Moderate: container-tools:4.0 security update

  The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879) * golang: net/http/httputil: ReversePr…

  May 7, 2025
• Medium max 7.8
  RLSA-2024:3166 1 CVE

  Moderate: openssh security update

  OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: scp allows command injection when using ba…

  May 7, 2025
• Medium
  RLSA-2024:2979 1 CVE

  Moderate: poppler security update

  Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Security Fix(es): * poppler: NULL pointer dereference in `FoFiType1C::convertToType1` (CVE-2020-36024) For more details about the security issue(s), including …

  May 7, 2025
• Medium max 7.1
  RLSA-2025:2722 1 CVE

  Moderate: krb5 security update

  Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the he…

  May 7, 2025
• Medium max 5.5
  RLSA-2024:11161 1 CVE

  Moderate: tuned security update

  The tuned packages provide a service that tunes system settings according to a selected profile. Security Fix(es): * tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method (CVE-2024-52337) For more details about the securi…

  May 7, 2025