Lucene search
+L

6744 matches found

AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.51 views

Moderate: Image builder components bug fix, enhancement and security update

Image Builder is a service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Security Fixes: osbuild-composer: race condition may disable GPG verification for package repositories CVE-2024-2307 For more details about the security issues,...

6.1CVSS6.7AI score0.00188EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.48 views

Moderate: xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fixes: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty CVE-2023-5367...

9.8CVSS9.1AI score0.02106EPSS
SaveExploits0References22
AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.35 views

Moderate: skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. CVE-2023-45287 For more details about the security...

7.5CVSS7.5AI score0.0125EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.43 views

Moderate: python3.11-cryptography security update

The python-cryptography packages contain a Python Cryptographic Authority's PyCA's cryptography library, which provides cryptographic primitives and recipes to Python developers. Security Fixes: python-cryptography: NULL-dereference when loading PKCS7 certificates CVE-2023-49083 For more details...

7.5CVSS6.5AI score0.00985EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.53 views

Moderate: skopeo security and bug fix update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms...

7.5CVSS8.8AI score0.01956EPSS
SaveExploits0References6
AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.44 views

Moderate: libjpeg-turbo security update

The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance. Security Fixes: libjpeg-turbo:...

7.1CVSS6.6AI score0.00822EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.36 views

Moderate: freeglut security update

freeglut is a completely open source alternative to the OpenGL Utility Toolkit GLUT library with an OSI approved free software license. Security Fixes: freeglut: memory leak via glutAddSubMenu function CVE-2024-24258 freeglut: memory leak via glutAddMenuEntry function CVE-2024-24259 For more...

7.5CVSS6.6AI score0.01147EPSS
SaveExploits2References6
AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.43 views

Moderate: libsndfile security update

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fixes: libsndfile: integer overflow in src/mat4.c and src/au.c leads to DoS CVE-2022-33065 For more details about the security issues, including the impact, a CVSS score,...

7.8CVSS7AI score0.00364EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.69 views

Moderate: perl security update

Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Write past buffer end via illegal user-defined Unicode property CVE-2023-47038 For more details about the security issues, including the impact, a CVSS...

7.8CVSS6.8AI score0.00814EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.103 views

Low: openssl and openssl-fips-provider security update

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entri...

6.5CVSS6.7AI score0.06531EPSS
SaveExploits0References16
AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.40 views

Moderate: ipa security update

AlmaLinux Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fixes: freeipa: specially crafted HTTP requests potentially lead to denial of service CVE-2024-1481 For more...

5.3CVSS6.8AI score0.0111EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.57 views

Moderate: httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: modmacro: out-of-bounds read vulnerability CVE-2023-31122 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

7.5CVSS6.6AI score0.03003EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.50 views

Low: libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fixes: libssh: ProxyCommand/ProxyJump features allow injection of malicious code through hostname CVE-2023-6004 libssh: Missing checks for return values for digests...

5.3CVSS5.6AI score0.01409EPSS
SaveExploits0References6
AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.44 views

Moderate: libXpm security update

X.Org X11 libXpm runtime library. Security Fixes: libXpm: out of bounds read in XpmCreateXpmImageFromBuffer CVE-2023-43788 libXpm: out of bounds read on XPM with corrupted colormap CVE-2023-43789 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

5.5CVSS5.6AI score0.00365EPSS
SaveExploits0References6
AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.36 views

Moderate: wpa_supplicant security update

The wpasupplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 IEEE 802.11i / RSN, and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association o...

6.5CVSS7.3AI score0.01177EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.64 views

Moderate: mingw-pixman security update

Pixman is a pixel manipulation library for the X Window System and Cairo. Security Fixes: pixman: Integer overflow in pixmansamplefloory leading to heap out-of-bounds write CVE-2022-44638 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...

8.8CVSS7.2AI score0.01524EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.54 views

Moderate: squashfs-tools security update

SquashFS is a highly compressed read-only file system for Linux. These packages contain the utilities for manipulating squashfs file systems. Security Fixes: squashfs-tools: unvalidated filepaths allow writing outside of destination CVE-2021-40153 squashfs-tools: possible Directory Traversal via...

8.1CVSS7AI score0.025EPSS
SaveExploits2References6
OSV
OSV
added 2024/04/30 12:00 a.m.39 views

ALSA-2024:2213 Moderate: pcp security update

Performance Co-Pilot PCP is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems. Security Fixes: pcp:...

6.7CVSS6.4AI score0.002EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2024/04/29 12:00 a.m.26 views

AlmaLinux 8 : libreswan (ALSA-2024:1998)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:1998 advisory. - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use...

6.5CVSS6AI score0.00944EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/04/29 12:00 a.m.24 views

AlmaLinux 9 : libreswan (ALSA-2024:2033)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:2033 advisory. - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use...

6.5CVSS6AI score0.00944EPSS
SaveExploits0References2
Rows per page
Query Builder