Lucene search
+L
AlmalinuxRecent

5445 matches found

AlmaLinux
AlmaLinux
•added 2025/05/13 12:0 a.m.•11 views

Low: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: use-after-free in function inscomplgetexp in vim/vim CVE-2023-4752 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the...

7.8CVSS6.8AI score0.00559EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
•added 2025/05/13 12:0 a.m.•20 views

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: User Interface UI Misrepresentation of attachment URL CVE-2025-3523 thunderbird: Information Disclosure of /tmp directory listing CVE-2025-2830 thunderbird: Leak of hashed Window credentials via crafted...

6.4CVSS6.7AI score0.00337EPSS
SaveExploits0References8
AlmaLinux
AlmaLinux
•added 2025/05/13 12:0 a.m.•6 views

Moderate: perl-Module-ScanDeps security update

This module scans potential modules used by perl programs and returns a hash reference. Its keys are the module names as they appear in %INC e.g. Test/More.pm. The values are hash references. Security Fixes: module-scandeps: local privilege escalation via unsanitized input CVE-2024-10224 For more...

7.8CVSS7AI score0.08598EPSS
SaveExploits3References4
AlmaLinux
AlmaLinux
•added 2025/05/13 12:0 a.m.•5 views

Moderate: microcode_ctl security update

The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: microcodectl: Improper input validation in UEFI firmware CVE-2024-28047 microcodectl: Insufficient granularity of access control in UEFI firmware CVE-2024-39279 microcodectl: mproper initialization i...

6.8CVSS7AI score0.00247EPSS
SaveExploits0References8
AlmaLinux
AlmaLinux
•added 2025/05/13 12:0 a.m.•21 views

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: iouring/sqpoll: zero sqd-thread on tctx errors CVE-2025-21633 kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number CVE-2024-58007 kernel: tpm: Change to kvalloc in...

7.8CVSS7.2AI score0.0024EPSS
SaveExploits0References14
AlmaLinux
AlmaLinux
•added 2025/05/13 12:0 a.m.•8 views

Moderate: git-lfs security update

Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: golang: crypto/tls: panic when processing post-handshake message on QUIC connections...

9.8CVSS7.3AI score0.01952EPSS
SaveExploits0References14
AlmaLinux
AlmaLinux
•added 2025/05/13 12:0 a.m.•6 views

Moderate: gstreamer1, gstreamer1-plugins-bad-free, gstreamer1-plugins-ugly-free, and gstreamer1-rtsp-server security update

The gstreamer1 packages contain a streaming media framework, based on graphs of filters which operate on media data. Security Fixes: gstreamer: EXIF Metadata Parsing Integer Overflow CVE-2024-4453 gstreamer: AV1 Video Parsing Stack-based Buffer Overflow CVE-2024-0444 For more details about the...

8.8CVSS6.9AI score0.01565EPSS
SaveExploits0References6
AlmaLinux
AlmaLinux
•added 2025/05/12 12:0 a.m.•20 views

Moderate: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the capability to read e-mail and news. Security Fixes: emacs: arbitrary code execution via Lisp macro expansion CVE-2024-53920 For more details about th...

7.8CVSS7.1AI score0.00526EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2025/05/12 12:0 a.m.•15 views

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Privilege escalation in Firefox Updater CVE-2025-2817 firefox: thunderbird: Unsafe attribute access during XPath parsing CVE-2025-4087 firefox: thunderbird: Process isolation bypass using...

9.1CVSS8.2AI score0.00567EPSS
SaveExploits0References12
AlmaLinux
AlmaLinux
•added 2025/05/12 12:0 a.m.•28 views

Moderate: python39:3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

7.5CVSS6.7AI score0.0069EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
•added 2025/05/07 12:0 a.m.•17 views

Important: osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes:...

7.5CVSS7.1AI score0.00693EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2025/05/07 12:0 a.m.•15 views

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: User Interface UI Misrepresentation of attachment URL CVE-2025-3523 thunderbird: Information Disclosure of /tmp directory listing CVE-2025-2830 thunderbird: Leak of hashed Window credentials via crafted...

6.4CVSS6.7AI score0.00337EPSS
SaveExploits0References8
AlmaLinux
AlmaLinux
•added 2025/05/07 12:0 a.m.•24 views

Moderate: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: Heap-based buffer overflow in tools/pal2rgb.c can lead to denial of service CVE-2017-17095 For more details about the security issues, including the impact, a CVSS...

8.8CVSS8.9AI score0.10639EPSS
SaveExploits2References4
AlmaLinux
AlmaLinux
•added 2025/05/06 12:0 a.m.•17 views

Moderate: ruby:3.1 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: rexml: DoS vulnerability in REXML CVE-2024-39908 rexml: rubygem-rexml: DoS when parsing an XML having many specific characters suc...

7.5CVSS6.5AI score0.01493EPSS
SaveExploits0References16
AlmaLinux
AlmaLinux
•added 2025/05/06 12:0 a.m.•12 views

Moderate: 389-ds-base security update

389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: null pointer dereference leads to denial of service CVE-2025-2487 F...

4.9CVSS6.8AI score0.00553EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2025/05/06 12:0 a.m.•22 views

Moderate: mod_auth_openidc:2.3 security update

The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fixes: modauthopenidc: DoS via Empty POST in modauthopenidc with OIDCPreservePost Enabled...

7.5CVSS5.5AI score0.01325EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2025/05/06 12:0 a.m.•39 views

Important: libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: Integer overflow in appendparamquoted CVE-2025-32050 libsoup: Heap buffer overflow in sniffunknown CVE-2025-32052 libsoup: Heap buffer overflows in snifffeedorhtml and skipinsignificantspace...

9CVSS9.6AI score0.00916EPSS
SaveExploits0References18
AlmaLinux
AlmaLinux
•added 2025/05/05 12:0 a.m.•21 views

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Privilege escalation in Firefox Updater CVE-2025-2817 firefox: thunderbird: Unsafe attribute access during XPath parsing CVE-2025-4087 firefox:...

9.1CVSS10AI score0.00567EPSS
SaveExploits0References12
AlmaLinux
AlmaLinux
•added 2025/05/05 12:0 a.m.•20 views

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Privilege escalation in Firefox Updater CVE-2025-2817 firefox: thunderbird: Unsafe attribute access during XPath parsing CVE-2025-4087 firefox: thunderbird: Process isolation bypass using...

9.1CVSS10AI score0.00567EPSS
SaveExploits0References12
AlmaLinux
AlmaLinux
•added 2025/05/05 12:0 a.m.•18 views

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Privilege escalation in Firefox Updater CVE-2025-2817 firefox: thunderbird: Unsafe attribute access during XPath parsing CVE-2025-4087 firefox:...

9.1CVSS10AI score0.00567EPSS
SaveExploits0References12
AlmaLinux
AlmaLinux
•added 2025/05/05 12:0 a.m.•12 views

Moderate: nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: c-ares: c-ares has a use-after-free in readanswers CVE-2025-31498 For more details about the security issues, including the impact, a CVSS score,...

8.3CVSS6.5AI score0.00577EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2025/05/05 12:0 a.m.•44 views

Important: nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: c-ares: c-ares has a use-after-free in readanswers CVE-2025-31498 SQLite: integer overflow in SQLite CVE-2025-3277 For more details about the...

9.8CVSS6.7AI score0.00771EPSS
SaveExploits0References6
AlmaLinux
AlmaLinux
•added 2025/04/30 12:0 a.m.•30 views

Moderate: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fixes: ghostscript: heap buffer over write vulnerability in GhostScript's lp8000printpage in...

8.4CVSS7.9AI score0.0153EPSS
SaveExploits0References16
AlmaLinux
AlmaLinux
•added 2025/04/28 12:0 a.m.•30 views

Moderate: glibc security update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...

6.2CVSS7.3AI score0.00349EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2025/04/28 12:0 a.m.•31 views

Moderate: php:8.1 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: Leak partial content of the heap through heap buffer over-read in mysqlnd CVE-2024-8929 php: Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 php: Configuring ...

9.8CVSS7.4AI score0.02286EPSS
SaveExploits5References18
AlmaLinux
AlmaLinux
•added 2025/04/28 12:0 a.m.•14 views

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: User Interface UI Misrepresentation of attachment URL CVE-2025-3523 thunderbird: Information Disclosure of /tmp directory listing CVE-2025-2830 thunderbird: Leak of hashed Window credentials via crafted...

6.4CVSS6.4AI score0.00337EPSS
SaveExploits0References8
AlmaLinux
AlmaLinux
•added 2025/04/24 12:0 a.m.•10 views

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: URL Bar Spoofing via non-BMP Unicode characters CVE-2025-3029 firefox: thunderbird: Use-after-free triggered by XSLTProcessor CVE-2025-3028 firefox: thunderbird: Memory safety bugs fixed in Firefo...

8.1CVSS7.8AI score0.00824EPSS
SaveExploits1References8
AlmaLinux
AlmaLinux
•added 2025/04/24 12:0 a.m.•15 views

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: URL Bar Spoofing via non-BMP Unicode characters CVE-2025-3029 firefox: thunderbird: Use-after-free triggered by XSLTProcessor CVE-2025-3028 firefox: thunderbird: Memory safety bugs fixed in Firefo...

8.1CVSS7.8AI score0.00824EPSS
SaveExploits1References8
AlmaLinux
AlmaLinux
•added 2025/04/22 12:0 a.m.•7 views

Moderate: libtasn1 security update

A library that provides Abstract Syntax Notation One ASN.1, as specified by the X.680 ITU-T recommendation parsing and structures management, and Distinguished Encoding Rules DER, as per X.690 encoding and decoding functions. Security Fixes: libtasn1: Inefficient DER Decoding in libtasn1 Leading ...

5.3CVSS6.8AI score0.0107EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2025/04/22 12:0 a.m.•30 views

Moderate: gnutls security update

The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fixes: gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS CVE-2024-12243 For more details...

5.3CVSS6.7AI score0.01245EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2025/04/22 12:0 a.m.•8 views

Moderate: xmlrpc-c security update

XML-RPC is a remote procedure call RPC protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC remote procedure call over the Internet. It converts an RPC into an XML document,...

7.5CVSS6.9AI score0.01569EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2025/04/22 12:0 a.m.•23 views

Moderate: bluez security update

The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts AlmaLinux, and pcmcia configuration files. Security Fixes: BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution...

8CVSS7.1AI score0.01427EPSS
SaveExploits0References6
AlmaLinux
AlmaLinux
•added 2025/04/22 12:0 a.m.•8 views

Moderate: ruby:3.1 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: rexml: DoS vulnerability in REXML CVE-2024-39908 rexml: rubygem-rexml: DoS when parsing an XML having many specific characters suc...

7.5CVSS6.6AI score0.01493EPSS
SaveExploits0References16
AlmaLinux
AlmaLinux
•added 2025/04/21 12:0 a.m.•21 views

Important: libxslt security update

libxslt is a library for transforming XML files into other textual formats including HTML, plain text, and other XML representations of the underlying data using the standard XSLT stylesheet transformation mechanism. Security Fixes: libxslt: Use-After-Free in libxslt xsltGetInheritedNsList...

7.8CVSS6.8AI score0.00332EPSS
SaveExploits3References4
AlmaLinux
AlmaLinux
•added 2025/04/17 12:0 a.m.•19 views

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash CVE-2024-44192 webkitgtk: A malicious website may exfiltrate data cross-origin CVE-2024-54467...

7.5CVSS6.6AI score0.00827EPSS
SaveExploits0References16
AlmaLinux
AlmaLinux
•added 2025/04/17 12:0 a.m.•16 views

Important: mod_auth_openidc:2.3 security update

The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fixes: modauthopenidc: modauthopenidc allows OIDCProviderAuthRequestMethod POSTs to leak...

8.2CVSS7.3AI score0.00563EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2025/04/16 12:0 a.m.•35 views

Moderate: java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fixes: JDK: Better TLS connection support CVE-2025-21587 JDK: Improve compiler transformations CVE-2025-30691 JDK: Enhance Buffered Image handling CVE-2025-30698 For...

7.4CVSS7.3AI score0.00784EPSS
SaveExploits0References5
AlmaLinux
AlmaLinux
•added 2025/04/16 12:0 a.m.•37 views

Moderate: java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fixes: JDK: Better TLS connection support CVE-2025-21587 JDK: Improve compiler transformations CVE-2025-30691 JDK: Enhance Buffered Image handling CVE-2025-3069...

7.4CVSS7.1AI score0.00784EPSS
SaveExploits0References5
AlmaLinux
AlmaLinux
•added 2025/04/16 12:0 a.m.•24 views

Moderate: java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fixes: JDK: Better TLS connection support CVE-2025-21587 JDK: Improve compiler transformations CVE-2025-30691 JDK: Enhance Buffered Image handling CVE-2025-30698...

7.4CVSS7.3AI score0.00784EPSS
SaveExploits0References5
AlmaLinux
AlmaLinux
•added 2025/04/16 12:0 a.m.•15 views

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ALSA: usb-audio: Fix out of bounds reads when finding clock sources CVE-2024-53150 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and oth...

7.1CVSS7.2AI score0.01351EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2025/04/15 12:0 a.m.•20 views

Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: xen: Xen hypercall page unsafe against speculative attacks Xen Security Advisory 466 CVE-2024-53241 kernel: ALSA: usb-audio: Fix o...

7.1CVSS7.3AI score0.01351EPSS
SaveExploits0References6
AlmaLinux
AlmaLinux
•added 2025/04/15 12:0 a.m.•34 views

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xen: Xen hypercall page unsafe against speculative attacks Xen Security Advisory 466 CVE-2024-53241 kernel: ALSA: usb-audio: Fix out of bounds reads when finding clock sources...

7.1CVSS7.1AI score0.01351EPSS
SaveExploits0References6
AlmaLinux
AlmaLinux
•added 2025/04/15 12:0 a.m.•17 views

Moderate: expat security update

Expat is a C library for parsing XML documents. Security Fixes: libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat CVE-2024-8176 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to th...

7.5CVSS6.9AI score0.01569EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2025/04/14 12:0 a.m.•27 views

Moderate: glibc security update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...

6.2CVSS7.3AI score0.00349EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2025/04/14 12:0 a.m.•17 views

Important: gvisor-tap-vsock security update

A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for podman-machine virtual machines. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding. Security Fixes:...

7.5CVSS7.2AI score0.00905EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2025/04/10 12:0 a.m.•17 views

Important: delve and golang security update

The Go Programming Language. Security Fixes: encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion CVE-2024-34156 For more details about the security issues, including the impact, a CVSS score, acknowledgments,...

7.5CVSS7.1AI score0.01127EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2025/04/10 12:0 a.m.•17 views

Moderate: go-toolset:rhel8 security update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints CVE-2024-45341 golang: net/http: net/http: sensitive headers incorrectly sent after...

6.1CVSS7.1AI score0.00647EPSS
SaveExploits0References6
AlmaLinux
AlmaLinux
•added 2025/04/08 12:0 a.m.•23 views

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash CVE-2024-44192 webkitgtk: A malicious website may exfiltrate data cross-origin CVE-2024-54467...

7.5CVSS6.6AI score0.00827EPSS
SaveExploits0References16
AlmaLinux
AlmaLinux
•added 2025/04/08 12:0 a.m.•16 views

Moderate: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: RCE due to TOCTOU issue in JSP compilation CVE-2024-50379 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT CVE-2025-24813 For...

10CVSS7AI score0.99945EPSS
SaveExploits59References6
AlmaLinux
AlmaLinux
•added 2025/04/07 12:0 a.m.•13 views

Low: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

7.5CVSS7.2AI score0.02303EPSS
SaveExploits1References3
Total number of security vulnerabilities5445