Skip to content
OpenAdvisories

Source

Rocky Linux Security Advisories

Source: https://errata.rockylinux.org/

All Critical High Medium Low With exploited CVEs

4,991 results · Feed

  • Medium max 6.5
    RLSA-2025:17558 1 CVE

    Moderate: iputils security update

    The iputils packages contain basic utilities for monitoring a network, including ping. Security Fix(es): * iputils: iputils integer overflow (CVE-2025-48964) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, an…

  • High max 8.7
    RLSA-2025:12280 1 CVE

    Important: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update

    Core part of Jackson that defines Streaming API as well as basic shared abstractions. Security Fix(es): * com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999) For more details about the security issue(s), includi…

  • Medium max 8.8
    RLSA-2025:17776 3 CVEs

    Moderate: kernel security update

    The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: HID: core: Harden s32ton() against conversion to 0 bits (CVE-2025-38556) * kernel: wifi: ath12k: Decrement TID on RX peer frag setup error handli…

  • High max 7.8
    RLSA-2025:17428 1 CVE 1 exploited

    Important: open-vm-tools security update

    The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines. Security Fix(es): * open-vm-tools: Loca…

  • High max 9.8
    RLSA-2025:18155 7 CVEs

    Important: firefox security update

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * thunderbird: firefox: Memory safety bugs (CVE-2025-11714) * thunderbird: firefox: Out of bounds read/write in a privileged proc…

  • High max 9.8
    RLSA-2025:18154 7 CVEs

    Important: firefox security update

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * thunderbird: firefox: Memory safety bugs (CVE-2025-11714) * thunderbird: firefox: Out of bounds read/write in a privileged proc…

  • High max 7.5
    RLSA-2025:18183 1 CVE

    Important: libsoup3 security update

    Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is des…

  • Medium max 7.8
    RLSA-2025:17760 4 CVEs

    Moderate: kernel security update

    The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: HID: core: Harden s32ton() against conversion to 0 bits (CVE-2025-38556) * kernel: eventpoll: Fix semi-unbounded recursion (CVE-2025-38614) * ker…

  • Medium max 8.8
    RLSA-2025:17812 2 CVEs

    Moderate: kernel-rt security update

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CVE-2022-50228) * kern…

  • Medium max 8.8
    RLSA-2025:17797 2 CVEs

    Moderate: kernel security update

    The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CVE-2022-50228) * kernel: Bluetooth: L2CAP: Fix use-after-free (CVE-2023-53305)…

  • High max 9.9
    RLSA-2025:18150 3 CVEs

    Important: .NET 9.0 security update

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK…

  • High max 9.9
    RLSA-2025:18148 3 CVEs

    Important: .NET 8.0 security update

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK…

  • High max 9.8
    RLSA-2025:18070 1 CVE

    Important: webkit2gtk3 security update

    WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43343) For more details about the security issue…

  • High max 9.8
    RLSA-2025:17802 4 CVEs

    Important: webkit2gtk3 security update

    WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43272) * webkitgtk: Processing maliciously crafte…

    first Oct 14, 2025
  • Medium max 4.1
    RLSA-2025:17715 2 CVEs

    Moderate: vim security update

    Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim path traversal (CVE-2025-53906) * vim: Vim path traversial (CVE-2025-53905) For more details about the security issue(s), including the impact, a CVSS score, a…

  • High max 8.8
    RLSA-2025:17675 1 CVE

    Important: compat-libtiff3 security update

    The libtiff3 package provides libtiff 3, an older version of libtiff library for manipulating TIFF (Tagged Image File Format) image format files. This version should be used only if you are unable to use the current version of libtiff. Security Fix(es): * lib…

  • High max 8.1
    RLSA-2025:15900 1 CVE

    Important: podman security update

    The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * podman: Podman kube play command may overwrite …

  • High max 9.8
    RLSA-2025:14416 5 CVEs

    Important: firefox security update

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component (CVE-2025-9182) * thunderbird…

  • Medium max 7.5
    RLSA-2025:15019 1 CVE

    Moderate: python3.9 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…

  • High max 8.8
    RLSA-2025:14878 2 CVEs

    Important: postgresql security update

    PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715) * postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714)…

  • Medium max 7.5
    RLSA-2025:15010 1 CVE

    Moderate: python3.11 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…

  • Medium max 7.5
    RLSA-2025:15007 1 CVE

    Moderate: python3.12 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…

  • High max 9.1
    RLSA-2025:17084 1 CVE

    Important: ipa security update

    Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * FreeIPA: idm: Privilege escalatio…

  • High max 8.5
    RLSA-2025:15018 1 CVE

    Important: udisks2 security update

    The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies. Security Fix(es): * udisks: Out-of-bounds read in UDisks Daemon (CVE-2025-8067) For more details about the security issue(s), includi…

  • High max 8.0
    RLSA-2025:15700 2 CVEs

    Important: cups security update

    The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fix(es): * cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS (CVE-2025-58364) * cups: Authentication By…

  • High max 7.8
    RLSA-2025:15099 2 CVEs

    Important: pam security update

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): * linux-pam: Linux-pam directory Traversal (CVE-2025-6020) * linux-pam: Incomplete fix…

  • Medium max 6.8
    RLSA-2025:15887 1 CVE

    Moderate: opentelemetry-collector security update

    Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry Security Fix(es): * net/http: Sensitive headers not cleared on cross-origin redirect in net/http (CVE-2025-4673) For more details about the security issu…

  • Medium max 7.5
    RLSA-2025:14983 1 CVE

    Moderate: mod_http2 security update

    The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): * httpd: mod_proxy_http2: untrusted input from a client causes an assertion to fail in the Apache mod_proxy_http2 module (CVE-2…

  • Medium max 7.5
    RLSA-2025:17162 1 CVE

    Moderate: perl-JSON-XS security update

    This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C. Security Fix(es): * JSON-XS: integer buffer overflow causing a segfault whe…

  • Medium max 9.8
    RLSA-2025:16880 5 CVEs 1 exploited

    Moderate: kernel security update

    The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CVE-2025-38472) * kernel: smb: client: fix use-after-free in cifs_oploc…

  • High max 9.8
    RLSA-2025:15011 7 CVEs

    Important: kernel security update

    The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CVE-2025-37823) * kernel: i40e: fix MMIO write access to an invalid page in i40e_clea…

  • Medium max 6.5
    RLSA-2025:16116 4 CVEs

    Moderate: gnutls security, bug fix, and enhancement update

    The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990) *…

  • High max 7.8
    RLSA-2025:15661 4 CVEs 1 exploited

    Important: kernel security update

    The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/vkms: Fix use after free and double free on init error (CVE-2025-22097) * kernel: scsi: lpfc: Use memcpy() for BIOS version (CVE-2025-38332) …

  • High max 8.8
    RLSA-2025:16156 7 CVEs

    Important: thunderbird security update

    Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component (CVE-2025-10527) * firefox: thunderbird: Incorrect boundary conditions in the Jav…

  • Medium max 6.5
    RLSA-2025:16086 51 CVEs

    Moderate: mysql security update

    MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722) * mysql: Optimize…

  • High max 8.8
    RLSA-2025:16108 7 CVEs

    Important: firefox security update

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component (CVE-2025-10527) * firefox: thun…

  • Medium max 9.1
    RLSA-2025:15023 3 CVEs

    Moderate: httpd security update

    The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) * httpd: mod_ssl: access control bypass by trusted clients …

  • High max 7.5
    RLSA-2025:15608 1 CVE

    Important: python3.12-cryptography security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…

  • Medium max 5.9
    RLSA-2025:15874 1 CVE

    Moderate: python-cryptography security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…

  • High max 7.5
    RLSA-2025:9396 1 CVE

    Important: mod_auth_openidc security update

    The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fix(es): * mod_auth_openidc: DoS via Empty POST i…

    first Oct 4, 2025