Lucene search
+L
AlmalinuxMost viewed

5597 matches found

AlmaLinux
AlmaLinux
•added 2026/03/31 12:00 a.m.•14 views

Moderate: libxslt security update

libxslt is a library for transforming XML files into other textual formats including HTML, plain text, and other XML representations of the underlying data using the standard XSLT stylesheet transformation mechanism. Security Fixes: libxslt: Processing web content may disclose sensitive informati...

6.5CVSS6.8AI score0.01092EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2026/03/30 12:00 a.m.•14 views

Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write ...

8.8CVSS6.5AI score0.00591EPSS
SaveExploits2References6
AlmaLinux
AlmaLinux
•added 2026/03/30 12:00 a.m.•14 views

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Use-after-free in the JavaScript Engine component CVE-2026-4701 firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and...

10CVSS7.2AI score0.00773EPSS
SaveExploits0References80
AlmaLinux
AlmaLinux
•added 2026/03/24 12:00 a.m.•14 views

Moderate: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Arbitrary code execution via 'helpfile' option processing CVE-2026-25749 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information,...

6.6CVSS6.3AI score0.00213EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
•added 2026/03/18 12:00 a.m.•14 views

Important: capstone security update

Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community. Security Fixes: capstone: Capstone: Memory corruption via unchecked vsnprintf return CVE-2025-68114 capstone: Capstone: Heap buffer overflow via...

9.8CVSS6.2AI score0.0023EPSS
SaveExploits1References6
AlmaLinux
AlmaLinux
•added 2026/03/16 12:00 a.m.•14 views

Moderate: grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fixes: grub2: Missing...

7.8CVSS5.8AI score0.00204EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2026/03/10 12:00 a.m.•14 views

Moderate: gnutls security update

The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fixes: gnutls: Stack-based Buffer Overflow in gnutlspkcs11tokeninit Function CVE-2025-9820 gnutls: GnuTLS: Denial of Service vi...

5.3CVSS5.8AI score0.00638EPSS
SaveExploits1References6
AlmaLinux
AlmaLinux
•added 2026/03/09 12:00 a.m.•14 views

Important: postgresql:15 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code CVE-2026-2006 postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator...

8.8CVSS6.2AI score0.01208EPSS
SaveExploits4References8
AlmaLinux
AlmaLinux
•added 2026/03/05 12:00 a.m.•14 views

Important: postgresql:15 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code CVE-2026-2006 postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator...

8.8CVSS6.2AI score0.01208EPSS
SaveExploits4References8
AlmaLinux
AlmaLinux
•added 2026/03/05 12:00 a.m.•14 views

Important: image-builder security update

A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security Fixes: crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 golang: net/url: Memory exhaustion in query...

10CVSS5.8AI score0.01945EPSS
SaveExploits3References8
AlmaLinux
AlmaLinux
•added 2026/03/04 12:00 a.m.•14 views

Important: osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes: crypto/x50...

10CVSS5.8AI score0.01945EPSS
SaveExploits4References10
AlmaLinux
AlmaLinux
•added 2026/03/02 12:00 a.m.•14 views

Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: Linux kernel: Denial of Service due to a deadlock in hugetlb folio migration CVE-2026-23097 For more details about the security...

5.5CVSS6AI score0.00114EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2026/03/02 12:00 a.m.•14 views

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: libvpx: Heap buffer overflow in libvpx CVE-2026-2447 firefox: Invalid pointer in the JavaScript Engine component CVE-2026-2785 firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR...

10CVSS6.1AI score0.00604EPSS
SaveExploits3References78
AlmaLinux
AlmaLinux
•added 2026/03/02 12:00 a.m.•14 views

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Denial of Service due to a deadlock in hugetlb folio migration CVE-2026-23097 For more details about the security issues, including the impact, a CVSS score, acknowledgments...

5.5CVSS6AI score0.00114EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2026/02/26 12:00 a.m.•14 views

Important: libpng security update

The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics PNG image format files. Security Fixes: libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API CVE-2026-22801 libpng: libpng: Denial of...

8.3CVSS6.2AI score0.00955EPSS
SaveExploits2References8
AlmaLinux
AlmaLinux
•added 2026/02/26 12:00 a.m.•14 views

Important: mingw-fontconfig security update

MinGW Windows Fontconfig library. Security Fixes: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing CVE-2025-59375 For more details about the security issues, including the impact, a CVSS score, acknowledgments...

7.5CVSS6AI score0.01315EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
•added 2026/02/25 12:00 a.m.•14 views

Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: freerdp: FreeRDP heap-buffer-overflow CVE-2026-22855 freerdp: FreeRDP...

9.1CVSS5.6AI score0.0077EPSS
SaveExploits3References8
AlmaLinux
AlmaLinux
•added 2026/02/25 12:00 a.m.•14 views

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: libvpx: Heap buffer overflow in libvpx CVE-2026-2447 firefox: Invalid pointer in the JavaScript Engine component CVE-2026-2785 firefox: Memory safety bugs fixed in Firef...

10CVSS6.1AI score0.00604EPSS
SaveExploits3References78
AlmaLinux
AlmaLinux
•added 2026/02/23 12:00 a.m.•14 views

Important: grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: crypto/x509: golang: Denial of Service due to excessive resource consumption v...

10CVSS5.8AI score0.01945EPSS
SaveExploits3References8
AlmaLinux
AlmaLinux
•added 2026/02/23 12:00 a.m.•14 views

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: pagepool: Fix use-after-free in pagepoolrecycleinring CVE-2025-38129 kernel: Linux kernel:A use-after-free in bridge multicast in...

7.8CVSS5.6AI score0.00253EPSS
SaveExploits1References12
AlmaLinux
AlmaLinux
•added 2026/02/23 12:00 a.m.•14 views

Important: munge security update

MUNGE MUNGE Uid 'N' Gid Emporium is an authentication service for creating and validating credentials. It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having...

7.8CVSS6AI score0.00302EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2026/02/18 12:00 a.m.•14 views

Important: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 grafana/grafana/pkg/services/dashboards: Grafana...

10CVSS5.6AI score0.01945EPSS
SaveExploits5References12
AlmaLinux
AlmaLinux
•added 2026/02/17 12:00 a.m.•14 views

Moderate: php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: heap-based buffer overflow in arraymerge CVE-2025-14178 php: PHP: Information disclosure via getimagesize function when reading multi-chunk images CVE-2025-14177 For more details about the...

8.2CVSS5.8AI score0.00482EPSS
SaveExploits3References6
AlmaLinux
AlmaLinux
•added 2026/02/17 12:00 a.m.•14 views

Moderate: glibc security update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...

8.4CVSS5.7AI score0.00574EPSS
SaveExploits1References8
AlmaLinux
AlmaLinux
•added 2026/02/17 12:00 a.m.•14 views

Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: smc: Use skdstget and dstdevrcu in smcclcprfxmatch CVE-2025-40168 kernel: Linux kernel Bluetooth: Denial of Service due to...

8.8CVSS5.5AI score0.00334EPSS
SaveExploits0References8
AlmaLinux
AlmaLinux
•added 2026/02/10 12:00 a.m.•14 views

Important: pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: lodash: prototype pollution in .unset and .omit functions CVE-2025-13465 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and othe...

8.2CVSS5.6AI score0.01591EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2026/02/09 12:00 a.m.•14 views

Important: git-lfs security update

Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted...

7.5CVSS5.7AI score0.00464EPSS
SaveExploits2References4
AlmaLinux
AlmaLinux
•added 2026/01/29 12:00 a.m.•14 views

Moderate: iperf3 security update

Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss. Security Fixes: iperf3: iperf Heap Buffer Overflow CVE-2025-54349 For more details about the security issues, including the impac...

10CVSS5.8AI score0.00381EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2026/01/28 12:00 a.m.•14 views

Important: grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: crypto/x509: golang: Denial of Service due to excessive resource consumption v...

7.5CVSS5.9AI score0.00464EPSS
SaveExploits2References4
AlmaLinux
AlmaLinux
•added 2026/01/28 12:00 a.m.•14 views

Moderate: python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

6.3CVSS5.9AI score0.00781EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2026/01/27 12:00 a.m.•14 views

Moderate: gcc-toolset-15-binutils security update

Binutils is a collection of binary utilities, including ar for creating, modifying and extracting from archives, as a family of GNU assemblers, gprof for displaying call graph profile data, ld the GNU linker, nm for listing symbols from object files, objcopy for copying and translating object...

7.8CVSS5.5AI score0.00235EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
•added 2026/01/27 12:00 a.m.•14 views

Important: php:8.2 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: pgsql extension does not check for errors during escaping CVE-2025-1735 php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 php: PHP Hostname Nul...

8.2CVSS5.7AI score0.01EPSS
SaveExploits6References14
AlmaLinux
AlmaLinux
•added 2026/01/27 12:00 a.m.•14 views

Moderate: python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

7.5CVSS5.9AI score0.01594EPSS
SaveExploits0References6
AlmaLinux
AlmaLinux
•added 2026/01/27 12:00 a.m.•14 views

Moderate: python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

7.5CVSS5.9AI score0.01594EPSS
SaveExploits0References6
AlmaLinux
AlmaLinux
•added 2026/01/26 12:00 a.m.•14 views

Important: python3.12-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

8.9CVSS5.9AI score0.02714EPSS
SaveExploits0References8
AlmaLinux
AlmaLinux
•added 2026/01/22 12:00 a.m.•14 views

Important: java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fixes: JDK: Improve JMX connections CVE-2026-21925 JDK: Improve HttpServer Request handling CVE-2026-21933 JDK: Enhance Certificate Checking CVE-2026-21945 libpng:...

7.5CVSS5.8AI score0.00879EPSS
SaveExploits6References7
AlmaLinux
AlmaLinux
•added 2026/01/19 12:00 a.m.•14 views

Important: net-snmp security update

The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol SNMP, including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command...

9.8CVSS6.2AI score0.42842EPSS
SaveExploits2References4
AlmaLinux
AlmaLinux
•added 2026/01/19 12:00 a.m.•14 views

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: smb: client: Fix use-after-free in cifsfilldirent CVE-2025-38051 kernel: smb: client: let recvdone verify dataoffset, datalength and remainingdatalength CVE-2025-39933 kernel: drm/i915:...

9.8CVSS6.7AI score0.00456EPSS
SaveExploits0References12
AlmaLinux
AlmaLinux
•added 2026/01/15 12:00 a.m.•14 views

Important: gnupg2 security update

The GNU Privacy Guard GnuPG or GPG is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards. Security Fixes: GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write CVE-2025-68973 For more details about...

7.8CVSS7.8AI score0.00135EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
•added 2026/01/12 12:00 a.m.•14 views

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: media: rc: fix races with imondisconnect CVE-2025-39993 kernel: sctp: avoid NULL dereference when chunk data buffer is missing...

9.8CVSS7.3AI score0.00587EPSS
SaveExploits0References8
AlmaLinux
AlmaLinux
•added 2025/12/18 12:00 a.m.•14 views

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: webkitgtk: Use-after-free due to improper memory management CVE-2025-43529 webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash CVE-2025-43501...

8.8CVSS6.9AI score0.33493EPSS
SaveExploits8References14
AlmaLinux
AlmaLinux
•added 2025/12/17 12:00 a.m.•14 views

Important: python39:3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

9.4CVSS7AI score0.01525EPSS
SaveExploits15References26
AlmaLinux
AlmaLinux
•added 2025/12/04 12:00 a.m.•14 views

Important: abrt security update

The Automatic Bug Reporting Tool ABRT recognizes defects in applications and creates bug reports that help maintainers fix the defects. ABRT uses a plug-in system to extend its functionality. Security Fixes: abrt: Command-injection in ABRT leading to local privilege escalation CVE-2025-12744 For...

8.8CVSS6.8AI score0.00625EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
•added 2025/12/01 12:00 a.m.•14 views

Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: nfsd: handle getclientlocked failure in nfsd4setclientidconfirm CVE-2025-38724 kernel: smb: client: fix race with concurrent opens...

9.8CVSS6.9AI score0.00378EPSS
SaveExploits0References14
AlmaLinux
AlmaLinux
•added 2025/11/26 12:00 a.m.•14 views

Important: expat security update

Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing CVE-2025-59375 For more details about the security issues, including the impact, a CVSS score,...

7.5CVSS7AI score0.01315EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
•added 2025/11/25 12:00 a.m.•14 views

Moderate: go-rpm-macros security update

This package provides build-stage rpm automation to simplify the creation of Go language golang packages. It does not need to be included in the default build root: go-srpm-macros will pull it in for Go packages only. Security Fixes: os/exec: Unexpected paths returned from LookPath in os/exec...

6.5CVSS6.8AI score0.00524EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
•added 2025/11/18 12:00 a.m.•14 views

Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: runc: container escape and denial of service due to arbitrary write gadgets and procfs...

7.5CVSS6.4AI score0.00516EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
•added 2025/11/11 12:00 a.m.•14 views

Important: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: LibTIFF Use-After-Free Vulnerability CVE-2025-8176 libtiff: Libtiff Write-What-Where CVE-2025-9900 For more details about the security issues, including the impact, a...

8.8CVSS6.9AI score0.00739EPSS
SaveExploits1References6
AlmaLinux
AlmaLinux
•added 2025/11/10 12:00 a.m.•14 views

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: x86/vmscape: Add conditional IBPB mitigation CVE-2025-40300 kernel: mm: fix zswap writeback race condition CVE-2023-53178 kernel: fs: fix UAF/GPF bug in nilfsmdtdestroy CVE-2022-50367 For...

7.8CVSS6.6AI score0.00344EPSS
SaveExploits0References8
AlmaLinux
AlmaLinux
•added 2025/10/15 12:00 a.m.•14 views

Important: .NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.121 and .NET Runtime...

9.9CVSS6.4AI score0.65838EPSS
SaveExploits5References8
Total number of security vulnerabilities5000