Update vuln-rocky 2026-11-11T20:55:49Z
This commit is contained in:
Vulnerability Bot
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3702","synopsis":"Moderate: openssh security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for openssh.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.\n\nThe following packages have been upgraded to a later upstream version: openssh (8.0p1). (BZ#1691045)\n\nSecurity Fix(es):\n\n* openssh: scp client improper directory name validation (CVE-2018-20685)\n\n* openssh: Improper validation of object names allows malicious server to overwrite files via scp client (CVE-2019-6111)\n\n* openssh: Missing character encoding in progress display allows for spoofing of scp client output (CVE-2019-6109)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1665785","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1665785","description":""},{"ticket":"1666119","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666119","description":""},{"ticket":"1666127","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1666127","description":""}],"cves":[{"name":"CVE-2018-20685","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20685","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3BaseScore":"5.3","cwe":"CWE-20"},{"name":"CVE-2019-6109","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6109","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3BaseScore":"3.1","cwe":"CWE-451"},{"name":"CVE-2019-6111","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6111","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3BaseScore":"5.3","cwe":"CWE-20"}],"references":[],"publishedAt":"2026-07-30T06:00:52.146294Z","rpms":{"Rocky Linux 8":{"nvras":["openssh-0:8.0p1-30.el8_10.aarch64.rpm","openssh-0:8.0p1-30.el8_10.src.rpm","openssh-0:8.0p1-30.el8_10.x86_64.rpm","openssh-askpass-0:8.0p1-30.el8_10.aarch64.rpm","openssh-askpass-0:8.0p1-30.el8_10.x86_64.rpm","openssh-askpass-debuginfo-0:8.0p1-30.el8_10.aarch64.rpm","openssh-askpass-debuginfo-0:8.0p1-30.el8_10.x86_64.rpm","openssh-cavs-0:8.0p1-30.el8_10.aarch64.rpm","openssh-cavs-0:8.0p1-30.el8_10.x86_64.rpm","openssh-cavs-debuginfo-0:8.0p1-30.el8_10.aarch64.rpm","openssh-cavs-debuginfo-0:8.0p1-30.el8_10.x86_64.rpm","openssh-clients-0:8.0p1-30.el8_10.aarch64.rpm","openssh-clients-0:8.0p1-30.el8_10.x86_64.rpm","openssh-clients-debuginfo-0:8.0p1-30.el8_10.aarch64.rpm","openssh-clients-debuginfo-0:8.0p1-30.el8_10.x86_64.rpm","openssh-debuginfo-0:8.0p1-30.el8_10.aarch64.rpm","openssh-debuginfo-0:8.0p1-30.el8_10.x86_64.rpm","openssh-debugsource-0:8.0p1-30.el8_10.aarch64.rpm","openssh-debugsource-0:8.0p1-30.el8_10.x86_64.rpm","openssh-keycat-0:8.0p1-30.el8_10.aarch64.rpm","openssh-keycat-0:8.0p1-30.el8_10.x86_64.rpm","openssh-keycat-debuginfo-0:8.0p1-30.el8_10.aarch64.rpm","openssh-keycat-debuginfo-0:8.0p1-30.el8_10.x86_64.rpm","openssh-ldap-0:8.0p1-30.el8_10.aarch64.rpm","openssh-ldap-0:8.0p1-30.el8_10.x86_64.rpm","openssh-ldap-debuginfo-0:8.0p1-30.el8_10.aarch64.rpm","openssh-ldap-debuginfo-0:8.0p1-30.el8_10.x86_64.rpm","openssh-server-0:8.0p1-30.el8_10.aarch64.rpm","openssh-server-0:8.0p1-30.el8_10.x86_64.rpm","openssh-server-debuginfo-0:8.0p1-30.el8_10.aarch64.rpm","openssh-server-debuginfo-0:8.0p1-30.el8_10.x86_64.rpm","pam_ssh_agent_auth-0:0.10.3-7.30.el8_10.aarch64.rpm","pam_ssh_agent_auth-0:0.10.3-7.30.el8_10.x86_64.rpm","pam_ssh_agent_auth-debuginfo-0:0.10.3-7.30.el8_10.aarch64.rpm","pam_ssh_agent_auth-debuginfo-0:0.10.3-7.30.el8_10.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3702","url":"https://access.redhat.com/errata/RHSA-2019:3702","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2021:1968","synopsis":"Moderate: mingw packages security and bug fix update","severity":"SEVERITY_MODERATE","topic":"An update is available for mingw-binutils, mingw-bzip2, mingw-sqlite.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"MinGW is a free and open source software development environment to create Microsoft Windows applications.\n\nThe following packages have been upgraded to a later upstream version: mingw-sqlite (3.26.0.0). (BZ#1845475)\n\nSecurity Fix(es):\n\n* sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c (CVE-2019-16168)\n\n* sqlite: Integer overflow in sqlite3_str_vappendf function in printf.c (CVE-2020-13434)\n\n* sqlite: Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c (CVE-2020-13630)\n\n* sqlite: Virtual table can be renamed into the name of one of its shadow tables (CVE-2020-13631)\n\n* sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query (CVE-2020-13632)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1768986","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1768986","description":""},{"ticket":"1841223","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1841223","description":""},{"ticket":"1841562","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1841562","description":""},{"ticket":"1841568","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1841568","description":""},{"ticket":"1841574","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1841574","description":""}],"cves":[{"name":"CVE-2019-16168","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16168","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-369"},{"name":"CVE-2020-13434","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13434","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.5","cwe":"CWE-121"},{"name":"CVE-2020-13630","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13630","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.0","cwe":"CWE-416"},{"name":"CVE-2020-13631","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13631","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss3BaseScore":"5.5","cwe":"CWE-20"},{"name":"CVE-2020-13632","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13632","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.5","cwe":"CWE-476"}],"references":[],"publishedAt":"2026-01-07T09:02:16.167403Z","rpms":{"Rocky Linux 8":{"nvras":["mingw32-binutils-0:2.30-3.el8.x86_64.rpm","mingw32-binutils-debuginfo-0:2.30-3.el8.x86_64.rpm","mingw32-bzip2-0:1.0.6-14.el8.noarch.rpm","mingw32-bzip2-debuginfo-0:1.0.6-14.el8.noarch.rpm","mingw32-bzip2-static-0:1.0.6-14.el8.noarch.rpm","mingw64-binutils-0:2.30-3.el8.x86_64.rpm","mingw64-binutils-debuginfo-0:2.30-3.el8.x86_64.rpm","mingw64-bzip2-0:1.0.6-14.el8.noarch.rpm","mingw64-bzip2-debuginfo-0:1.0.6-14.el8.noarch.rpm","mingw64-bzip2-static-0:1.0.6-14.el8.noarch.rpm","mingw-binutils-0:2.30-3.el8.src.rpm","mingw-binutils-debuginfo-0:2.30-3.el8.x86_64.rpm","mingw-binutils-debugsource-0:2.30-3.el8.x86_64.rpm","mingw-binutils-generic-0:2.30-3.el8.x86_64.rpm","mingw-binutils-generic-debuginfo-0:2.30-3.el8.x86_64.rpm","mingw-bzip2-0:1.0.6-14.el8.src.rpm","mingw-sqlite-0:3.26.0.0-1.el8.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2021:1968","url":"https://access.redhat.com/errata/RHSA-2021:1968","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2022:2129","synopsis":"Moderate: lynx security update","severity":"SEVERITY_MODERATE","topic":"An update is available for lynx.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Lynx is a text-based Web browser. Lynx does not display any images, but it does support frames, tables, and most other HTML tags.\n\nSecurity Fix(es):\n\n* lynx: Disclosure of HTTP authentication credentials via SNI data (CVE-2021-38165)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1994998","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1994998","description":""}],"cves":[{"name":"CVE-2021-38165","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38165","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3BaseScore":"5.3","cwe":"CWE-522"}],"references":[],"publishedAt":"2026-06-28T00:01:40.098233Z","rpms":{"Rocky Linux 8":{"nvras":["lynx-debuginfo-0:2.8.9-4.el8.aarch64.rpm","lynx-0:2.8.9-4.el8.aarch64.rpm","lynx-0:2.8.9-4.el8.src.rpm","lynx-0:2.8.9-4.el8.x86_64.rpm","lynx-debuginfo-0:2.8.9-4.el8.x86_64.rpm","lynx-debugsource-0:2.8.9-4.el8.aarch64.rpm","lynx-debugsource-0:2.8.9-4.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2022:2129","url":"https://access.redhat.com/errata/RHSA-2022:2129","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2022:5597","synopsis":"Important: pandoc security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for pandoc.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Pandoc is a markdown/markup conversion tool. The version of pandoc in Rocky Linux 8 CRB uses cmark-gfm (GitHub's extended version of the C reference implementation of CommonMark) for parts of its conversion. The update, fixes CVE-2022-24724: an integer overflow in cmark-gfm's table row parsing which may lead to heap memory corruption when parsing tables with more than UINT16_MAX columns.\n\nSecurity Fix(es):\n\n* cmark-gfm: possible RCE due to integer overflow (CVE-2022-24724)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2060662","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2060662","description":""}],"cves":[{"name":"CVE-2022-24724","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24724","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-190"}],"references":[],"publishedAt":"2026-06-28T00:01:40.098233Z","rpms":{"Rocky Linux 8":{"nvras":["pandoc-0:2.0.6-6.el8_6.src.rpm","pandoc-0:2.0.6-6.el8_6.aarch64.rpm","pandoc-0:2.0.6-6.el8_6.x86_64.rpm","pandoc-common-0:2.0.6-6.el8_6.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2022:5597","url":"https://access.redhat.com/errata/RHSA-2022:5597","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2022:7813","synopsis":"Important: mingw-zlib security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for mingw-zlib.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The zlib packages provide a general-purpose lossless data compression library that is used by many different programs.\n\nSecurity Fix(es):\n\n* zlib: A flaw found in zlib when compressing (not decompressing) certain inputs (CVE-2018-25032)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2067945","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2067945","description":""}],"cves":[{"name":"CVE-2018-25032","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss3BaseScore":"8.2","cwe":"CWE-119"}],"references":[],"publishedAt":"2025-12-27T09:04:33.590775Z","rpms":{"Rocky Linux 8":{"nvras":["mingw32-zlib-0:1.2.8-10.el8.noarch.rpm","mingw32-zlib-debuginfo-0:1.2.8-10.el8.noarch.rpm","mingw32-zlib-static-0:1.2.8-10.el8.noarch.rpm","mingw64-zlib-0:1.2.8-10.el8.noarch.rpm","mingw64-zlib-debuginfo-0:1.2.8-10.el8.noarch.rpm","mingw64-zlib-static-0:1.2.8-10.el8.noarch.rpm","mingw-zlib-0:1.2.8-10.el8.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2022:7813","url":"https://access.redhat.com/errata/RHSA-2022:7813","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:2177","synopsis":"Moderate: grafana-pcp security and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for grafana-pcp.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.\n\nSecurity Fix(es):\n\n* golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"2124669","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2124669","description":""}],"cves":[{"name":"CVE-2022-27664","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27664","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-400"}],"references":[],"publishedAt":"2026-05-21T16:27:07.119420Z","rpms":{"Rocky Linux 9":{"nvras":["grafana-pcp-0:5.1.1-15.el9_8.aarch64.rpm","grafana-pcp-0:5.1.1-15.el9_8.ppc64le.rpm","grafana-pcp-0:5.1.1-15.el9_8.s390x.rpm","grafana-pcp-0:5.1.1-15.el9_8.src.rpm","grafana-pcp-0:5.1.1-15.el9_8.x86_64.rpm","grafana-pcp-debuginfo-0:5.1.1-15.el9_8.aarch64.rpm","grafana-pcp-debuginfo-0:5.1.1-15.el9_8.ppc64le.rpm","grafana-pcp-debuginfo-0:5.1.1-15.el9_8.s390x.rpm","grafana-pcp-debuginfo-0:5.1.1-15.el9_8.x86_64.rpm","grafana-pcp-debugsource-0:5.1.1-15.el9_8.aarch64.rpm","grafana-pcp-debugsource-0:5.1.1-15.el9_8.ppc64le.rpm","grafana-pcp-debugsource-0:5.1.1-15.el9_8.s390x.rpm","grafana-pcp-debugsource-0:5.1.1-15.el9_8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:2177","url":"https://access.redhat.com/errata/RHSA-2023:2177","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:2258","synopsis":"Moderate: python-mako security update","severity":"SEVERITY_MODERATE","topic":"An update is available for python-mako.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Mako is a template library written in Python. It provides a familiar, non-XML syntax which compiles into Python modules for maximum performance.\n\nSecurity Fix(es):\n\n* python-mako: REDoS in Lexer class (CVE-2022-40023)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"2128977","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2128977","description":""}],"cves":[{"name":"CVE-2022-40023","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40023","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-1333"}],"references":[],"publishedAt":"2025-12-03T09:05:37.576021Z","rpms":{"Rocky Linux 9":{"nvras":["python3-mako-0:1.1.4-6.el9.noarch.rpm","python-mako-0:1.1.4-6.el9.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:2258","url":"https://access.redhat.com/errata/RHSA-2023:2258","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:2589","synopsis":"Moderate: autotrace security update","severity":"SEVERITY_MODERATE","topic":"An update is available for autotrace.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"AutoTrace is a program for converting bitmaps to vector graphics.\n\nSecurity Fix(es):\n\n* autotrace: heap-buffer overflow via the ReadImage() at input-bmp.c (CVE-2022-32323)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"2107471","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2107471","description":""}],"cves":[{"name":"CVE-2022-32323","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32323","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","cvss3BaseScore":"7.3","cwe":"CWE-119"}],"references":[],"publishedAt":"2026-06-28T00:03:40.626303Z","rpms":{"Rocky Linux 9":{"nvras":["autotrace-0:0.31.1-65.el9.aarch64.rpm","autotrace-0:0.31.1-65.el9.i686.rpm","autotrace-0:0.31.1-65.el9.ppc64le.rpm","autotrace-0:0.31.1-65.el9.s390x.rpm","autotrace-0:0.31.1-65.el9.src.rpm","autotrace-0:0.31.1-65.el9.x86_64.rpm","autotrace-debuginfo-0:0.31.1-65.el9.aarch64.rpm","autotrace-debuginfo-0:0.31.1-65.el9.i686.rpm","autotrace-debuginfo-0:0.31.1-65.el9.ppc64le.rpm","autotrace-debuginfo-0:0.31.1-65.el9.s390x.rpm","autotrace-debuginfo-0:0.31.1-65.el9.x86_64.rpm","autotrace-debugsource-0:0.31.1-65.el9.aarch64.rpm","autotrace-debugsource-0:0.31.1-65.el9.i686.rpm","autotrace-debugsource-0:0.31.1-65.el9.ppc64le.rpm","autotrace-debugsource-0:0.31.1-65.el9.s390x.rpm","autotrace-debugsource-0:0.31.1-65.el9.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:2589","url":"https://access.redhat.com/errata/RHSA-2023:2589","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:2771","synopsis":"Moderate: unbound security and bug fix update","severity":"SEVERITY_MODERATE","topic":"An update is available for unbound.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. \n\nSecurity Fix(es):\n\n* unbound: NRDelegation attack leads to uncontrolled resource consumption (Non-Responsive Delegation Attack) (CVE-2022-3204)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2128947","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2128947","description":""}],"cves":[{"name":"CVE-2022-3204","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3204","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":null}],"references":[],"publishedAt":"2026-08-04T06:03:32.020117Z","rpms":{"Rocky Linux 8":{"nvras":["python3-unbound-debuginfo-0:1.16.2-5.12.el8_10.x86_64.rpm","unbound-debuginfo-0:1.16.2-5.14.el8_10.i686.rpm","unbound-debugsource-0:1.16.2-5.14.el8_10.i686.rpm","unbound-devel-0:1.16.2-5.14.el8_10.i686.rpm","unbound-libs-0:1.16.2-5.14.el8_10.i686.rpm","unbound-libs-debuginfo-0:1.16.2-5.14.el8_10.x86_64.rpm","python3-unbound-0:1.16.2-5.14.el8_10.x86_64.rpm","unbound-0:1.16.2-5.14.el8_10.src.rpm","unbound-0:1.16.2-5.10.el8_10.x86_64.rpm","unbound-debuginfo-0:1.16.2-5.14.el8_10.x86_64.rpm","unbound-debugsource-0:1.16.2-5.12.el8_10.x86_64.rpm","unbound-devel-0:1.16.2-5.10.el8_10.x86_64.rpm","unbound-libs-0:1.16.2-5.10.el8_10.x86_64.rpm","unbound-libs-debuginfo-0:1.16.2-5.14.el8_10.i686.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:2771","url":"https://access.redhat.com/errata/RHSA-2023:2771","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:2786","synopsis":"Moderate: wayland security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for wayland.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Wayland is a protocol for a compositor to talk to its clients, as well as a C library implementation of that protocol. The compositor can be a standalone display server running on Linux kernel modesetting and evdev input devices, an X application, or a wayland client itself. The clients can be traditional applications, X servers (rootless or fullscreen) or other display servers.\n\nThe following packages have been upgraded to a later upstream version: wayland (1.21.0). (BZ#2137625)\n\nSecurity Fix(es):\n\n* wayland: libwayland-server wl_shm reference-count overflow (CVE-2021-3782)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2002627","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2002627","description":""}],"cves":[{"name":"CVE-2021-3782","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3782","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","cvss3BaseScore":"6.6","cwe":"CWE-911"}],"references":[],"publishedAt":"2026-06-27T00:01:04.193077Z","rpms":{"Rocky Linux 8":{"nvras":["libwayland-client-0:1.21.0-1.el8.aarch64.rpm","libwayland-client-0:1.21.0-1.el8.i686.rpm","libwayland-client-0:1.21.0-1.el8.x86_64.rpm","libwayland-client-debuginfo-0:1.21.0-1.el8.aarch64.rpm","libwayland-client-debuginfo-0:1.21.0-1.el8.i686.rpm","libwayland-client-debuginfo-0:1.21.0-1.el8.x86_64.rpm","libwayland-cursor-0:1.21.0-1.el8.aarch64.rpm","libwayland-cursor-0:1.21.0-1.el8.i686.rpm","libwayland-cursor-0:1.21.0-1.el8.x86_64.rpm","libwayland-cursor-debuginfo-0:1.21.0-1.el8.aarch64.rpm","libwayland-cursor-debuginfo-0:1.21.0-1.el8.i686.rpm","libwayland-cursor-debuginfo-0:1.21.0-1.el8.x86_64.rpm","libwayland-egl-0:1.21.0-1.el8.aarch64.rpm","libwayland-egl-0:1.21.0-1.el8.i686.rpm","libwayland-egl-0:1.21.0-1.el8.x86_64.rpm","libwayland-egl-debuginfo-0:1.21.0-1.el8.aarch64.rpm","libwayland-egl-debuginfo-0:1.21.0-1.el8.i686.rpm","libwayland-egl-debuginfo-0:1.21.0-1.el8.x86_64.rpm","libwayland-server-0:1.21.0-1.el8.aarch64.rpm","libwayland-server-0:1.21.0-1.el8.i686.rpm","libwayland-server-0:1.21.0-1.el8.x86_64.rpm","libwayland-server-debuginfo-0:1.21.0-1.el8.aarch64.rpm","libwayland-server-debuginfo-0:1.21.0-1.el8.i686.rpm","libwayland-server-debuginfo-0:1.21.0-1.el8.x86_64.rpm","wayland-0:1.21.0-1.el8.src.rpm","wayland-debuginfo-0:1.21.0-1.el8.aarch64.rpm","wayland-debuginfo-0:1.21.0-1.el8.i686.rpm","wayland-debuginfo-0:1.21.0-1.el8.x86_64.rpm","wayland-debugsource-0:1.21.0-1.el8.aarch64.rpm","wayland-debugsource-0:1.21.0-1.el8.i686.rpm","wayland-debugsource-0:1.21.0-1.el8.x86_64.rpm","wayland-devel-0:1.21.0-1.el8.aarch64.rpm","wayland-devel-0:1.21.0-1.el8.i686.rpm","wayland-devel-0:1.21.0-1.el8.x86_64.rpm","wayland-devel-debuginfo-0:1.21.0-1.el8.aarch64.rpm","wayland-devel-debuginfo-0:1.21.0-1.el8.i686.rpm","wayland-devel-debuginfo-0:1.21.0-1.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:2786","url":"https://access.redhat.com/errata/RHSA-2023:2786","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:2863","synopsis":"Moderate: ctags security update","severity":"SEVERITY_MODERATE","topic":"An update is available for ctags.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Ctags is a C programming language indexing and cross-reference tool.\n\nSecurity Fix(es):\n\n* ctags: arbitrary command execution via a tag file with a crafted filename (CVE-2022-4515)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2153519","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2153519","description":""}],"cves":[{"name":"CVE-2022-4515","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4515","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.8","cwe":"CWE-78"}],"references":[],"publishedAt":"2026-06-25T12:01:05.792943Z","rpms":{"Rocky Linux 8":{"nvras":["ctags-0:5.8-23.el8.aarch64.rpm","ctags-0:5.8-23.el8.src.rpm","ctags-0:5.8-23.el8.x86_64.rpm","ctags-debuginfo-0:5.8-23.el8.aarch64.rpm","ctags-debuginfo-0:5.8-23.el8.x86_64.rpm","ctags-debugsource-0:5.8-23.el8.aarch64.rpm","ctags-debugsource-0:5.8-23.el8.x86_64.rpm","ctags-etags-0:5.8-23.el8.aarch64.rpm","ctags-etags-0:5.8-23.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:2863","url":"https://access.redhat.com/errata/RHSA-2023:2863","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:2873","synopsis":"Moderate: gcc-toolset-12-binutils security update","severity":"SEVERITY_MODERATE","topic":"An update is available for gcc-toolset-12-binutils.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities.\n\nSecurity Fix(es):\n\n* binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault (CVE-2022-4285)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2150768","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2150768","description":""}],"cves":[{"name":"CVE-2022-4285","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4285","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.5","cwe":"CWE-476"}],"references":[],"publishedAt":"2026-06-28T00:01:03.878968Z","rpms":{"Rocky Linux 8":{"nvras":["gcc-toolset-12-binutils-0:2.38-17.el8.aarch64.rpm","gcc-toolset-12-binutils-0:2.38-17.el8.src.rpm","gcc-toolset-12-binutils-0:2.38-17.el8.x86_64.rpm","gcc-toolset-12-binutils-debuginfo-0:2.38-17.el8.aarch64.rpm","gcc-toolset-12-binutils-debuginfo-0:2.38-17.el8.x86_64.rpm","gcc-toolset-12-binutils-devel-0:2.38-17.el8.aarch64.rpm","gcc-toolset-12-binutils-devel-0:2.38-17.el8.i686.rpm","gcc-toolset-12-binutils-devel-0:2.38-17.el8.x86_64.rpm","gcc-toolset-12-binutils-gold-0:2.38-17.el8.aarch64.rpm","gcc-toolset-12-binutils-gold-0:2.38-17.el8.x86_64.rpm","gcc-toolset-12-binutils-gold-debuginfo-0:2.38-17.el8.aarch64.rpm","gcc-toolset-12-binutils-gold-debuginfo-0:2.38-17.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:2873","url":"https://access.redhat.com/errata/RHSA-2023:2873","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:2893","synopsis":"Moderate: python-mako security update","severity":"SEVERITY_MODERATE","topic":"An update is available for python-mako.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Mako is a template library written in Python. It provides a familiar, non-XML syntax which compiles into Python modules for maximum performance.\n\nSecurity Fix(es):\n\n* mako: REDoS in Lexer class (CVE-2022-40023)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2128977","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2128977","description":""}],"cves":[{"name":"CVE-2022-40023","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40023","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-1333"}],"references":[],"publishedAt":"2025-12-03T09:02:28.353442Z","rpms":{"Rocky Linux 8":{"nvras":["python3-mako-0:1.0.6-14.el8.noarch.rpm","python-mako-0:1.0.6-14.el8.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:2893","url":"https://access.redhat.com/errata/RHSA-2023:2893","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:2898","synopsis":"Moderate: libtar security update","severity":"SEVERITY_MODERATE","topic":"An update is available for libtar.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libtar packages contain a C library for manipulating tar archives. The library supports both the strict POSIX tar format and many of the commonly used GNU extensions.\n\nSecurity Fix(es):\n\n* libtar: out-of-bounds read in gnu_longlink (CVE-2021-33643)\n\n* libtar: out-of-bounds read in gnu_longname (CVE-2021-33644)\n\n* libtar: memory leak found in th_read() function (CVE-2021-33645)\n\n* libtar: memory leak found in th_read() function (CVE-2021-33646)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2121289","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2121289","description":""},{"ticket":"2121292","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2121292","description":""},{"ticket":"2121295","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2121295","description":""},{"ticket":"2121297","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2121297","description":""}],"cves":[{"name":"CVE-2021-33643","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33643","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss3BaseScore":"7.4","cwe":"CWE-125"},{"name":"CVE-2021-33644","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33644","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H","cvss3BaseScore":"6.8","cwe":"CWE-125"},{"name":"CVE-2021-33645","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33645","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-401"},{"name":"CVE-2021-33646","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33646","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-401"}],"references":[],"publishedAt":"2025-12-27T09:04:03.511459Z","rpms":{"Rocky Linux 8":{"nvras":["libtar-0:1.2.20-17.el8.aarch64.rpm","libtar-0:1.2.20-17.el8.i686.rpm","libtar-0:1.2.20-17.el8.src.rpm","libtar-0:1.2.20-17.el8.x86_64.rpm","libtar-debuginfo-0:1.2.20-17.el8.aarch64.rpm","libtar-debuginfo-0:1.2.20-17.el8.i686.rpm","libtar-debuginfo-0:1.2.20-17.el8.x86_64.rpm","libtar-debugsource-0:1.2.20-17.el8.aarch64.rpm","libtar-debugsource-0:1.2.20-17.el8.i686.rpm","libtar-debugsource-0:1.2.20-17.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:2898","url":"https://access.redhat.com/errata/RHSA-2023:2898","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:3018","synopsis":"Low: libarchive security update","severity":"SEVERITY_LOW","topic":"An update is available for libarchive.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.\n\nSecurity Fix(es):\n\n* libarchive: NULL pointer dereference in archive_write.c (CVE-2022-36227)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2144972","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2144972","description":""}],"cves":[{"name":"CVE-2022-36227","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36227","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.9","cwe":"CWE-476"}],"references":[],"publishedAt":"2026-03-20T00:02:50.766829Z","rpms":{"Rocky Linux 8":{"nvras":["bsdtar-0:3.3.3-5.el8.x86_64.rpm","bsdtar-debuginfo-0:3.3.3-5.el8.x86_64.rpm","libarchive-0:3.3.3-5.el8.i686.rpm","libarchive-0:3.3.3-5.el8.x86_64.rpm","libarchive-debuginfo-0:3.3.3-5.el8.i686.rpm","libarchive-debuginfo-0:3.3.3-5.el8.x86_64.rpm","libarchive-debugsource-0:3.3.3-5.el8.i686.rpm","libarchive-debugsource-0:3.3.3-5.el8.x86_64.rpm","libarchive-devel-0:3.3.3-5.el8.i686.rpm","libarchive-devel-0:3.3.3-5.el8.x86_64.rpm","libarchive-0:3.3.3-5.el8.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:3018","url":"https://access.redhat.com/errata/RHSA-2023:3018","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:3067","synopsis":"Moderate: autotrace security update","severity":"SEVERITY_MODERATE","topic":"An update is available for autotrace.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"AutoTrace is a program for converting bitmaps to vector graphics.\n\nSecurity Fix(es):\n\n* autotrace: heap-buffer overflow via the ReadImage() at input-bmp.c (CVE-2022-32323)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2107471","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2107471","description":""}],"cves":[{"name":"CVE-2022-32323","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32323","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","cvss3BaseScore":"7.3","cwe":"CWE-119"}],"references":[],"publishedAt":"2026-06-28T00:01:40.098233Z","rpms":{"Rocky Linux 8":{"nvras":["autotrace-0:0.31.1-55.el8.aarch64.rpm","autotrace-0:0.31.1-55.el8.i686.rpm","autotrace-0:0.31.1-55.el8.src.rpm","autotrace-0:0.31.1-55.el8.x86_64.rpm","autotrace-debuginfo-0:0.31.1-55.el8.aarch64.rpm","autotrace-debuginfo-0:0.31.1-55.el8.i686.rpm","autotrace-debuginfo-0:0.31.1-55.el8.x86_64.rpm","autotrace-debugsource-0:0.31.1-55.el8.aarch64.rpm","autotrace-debugsource-0:0.31.1-55.el8.i686.rpm","autotrace-debugsource-0:0.31.1-55.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:3067","url":"https://access.redhat.com/errata/RHSA-2023:3067","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:3068","synopsis":"Important: mingw-expat security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for mingw-expat.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Expat is a C library for parsing XML documents. The mingw-expat packages provide a port of the Expat library for MinGW. \n\nSecurity Fix(es):\n\n* expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2130769","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2130769","description":""}],"cves":[{"name":"CVE-2022-40674","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40674","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-416"}],"references":[],"publishedAt":"2025-12-27T09:04:33.590775Z","rpms":{"Rocky Linux 8":{"nvras":["mingw-expat-0:2.4.8-2.el8.src.rpm","mingw64-expat-0:2.4.8-2.el8.noarch.rpm","mingw64-expat-debuginfo-0:2.4.8-2.el8.noarch.rpm","mingw32-expat-0:2.4.8-2.el8.noarch.rpm","mingw32-expat-debuginfo-0:2.4.8-2.el8.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:3068","url":"https://access.redhat.com/errata/RHSA-2023:3068","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:5048","synopsis":"Important: flac security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for flac.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files.\n\nSecurity Fix(es):\n\n* flac: Remote Code Execution (RCE) via the bitwriter_grow_ function, by supplying crafted input to the encoder (CVE-2020-22219)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"2235489","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2235489","description":""}],"cves":[{"name":"CVE-2020-22219","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22219","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.8","cwe":"CWE-120"}],"references":[],"publishedAt":"2026-06-25T12:03:37.665962Z","rpms":{"Rocky Linux 9":{"nvras":["flac-0:1.3.3-10.el9_2.1.aarch64.rpm","flac-0:1.3.3-10.el9_2.1.ppc64le.rpm","flac-0:1.3.3-10.el9_2.1.s390x.rpm","flac-0:1.3.3-10.el9_2.1.src.rpm","flac-0:1.3.3-10.el9_2.1.x86_64.rpm","flac-debuginfo-0:1.3.3-10.el9_2.1.aarch64.rpm","flac-debuginfo-0:1.3.3-10.el9_2.1.i686.rpm","flac-debuginfo-0:1.3.3-10.el9_2.1.ppc64le.rpm","flac-debuginfo-0:1.3.3-10.el9_2.1.s390x.rpm","flac-debuginfo-0:1.3.3-10.el9_2.1.x86_64.rpm","flac-debugsource-0:1.3.3-10.el9_2.1.aarch64.rpm","flac-debugsource-0:1.3.3-10.el9_2.1.i686.rpm","flac-debugsource-0:1.3.3-10.el9_2.1.ppc64le.rpm","flac-debugsource-0:1.3.3-10.el9_2.1.s390x.rpm","flac-debugsource-0:1.3.3-10.el9_2.1.x86_64.rpm","flac-devel-0:1.3.3-10.el9_2.1.aarch64.rpm","flac-devel-0:1.3.3-10.el9_2.1.i686.rpm","flac-devel-0:1.3.3-10.el9_2.1.ppc64le.rpm","flac-devel-0:1.3.3-10.el9_2.1.s390x.rpm","flac-devel-0:1.3.3-10.el9_2.1.x86_64.rpm","flac-libs-0:1.3.3-10.el9_2.1.aarch64.rpm","flac-libs-0:1.3.3-10.el9_2.1.i686.rpm","flac-libs-0:1.3.3-10.el9_2.1.ppc64le.rpm","flac-libs-0:1.3.3-10.el9_2.1.s390x.rpm","flac-libs-0:1.3.3-10.el9_2.1.x86_64.rpm","flac-libs-debuginfo-0:1.3.3-10.el9_2.1.aarch64.rpm","flac-libs-debuginfo-0:1.3.3-10.el9_2.1.i686.rpm","flac-libs-debuginfo-0:1.3.3-10.el9_2.1.ppc64le.rpm","flac-libs-debuginfo-0:1.3.3-10.el9_2.1.s390x.rpm","flac-libs-debuginfo-0:1.3.3-10.el9_2.1.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:5048","url":"https://access.redhat.com/errata/RHSA-2023:5048","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:5360","synopsis":"Important: nodejs:16 security, bug fix, and enhancement update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for nodejs-packaging, module.nodejs-nodemon, module.nodejs-packaging, nodejs-nodemon.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nThe following packages have been upgraded to a later upstream version: nodejs (16). (BZ#2233891)\n\nSecurity Fix(es):\n\n* nodejs: Permissions policies can be bypassed via Module._load (CVE-2023-32002)\n\n* nodejs-semver: Regular expression denial of service (CVE-2022-25883)\n\n* nodejs: Permissions policies can impersonate other modules in using module.constructor.createRequire() (CVE-2023-32006)\n\n* nodejs: Permissions policies can be bypassed via process.binding (CVE-2023-32559)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* nodejs:16/nodejs: nodejs.prov doesn't generate the bundled dependency for modules starting @ like @colors/colors (BZ#2237394)","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2216475","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2216475","description":""},{"ticket":"2230948","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2230948","description":""},{"ticket":"2230955","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2230955","description":""},{"ticket":"2230956","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2230956","description":""}],"cves":[{"name":"CVE-2022-25883","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25883","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-1333"},{"name":"CVE-2023-32002","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32002","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-1268"},{"name":"CVE-2023-32006","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32006","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-213"},{"name":"CVE-2023-32559","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32559","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.5","cwe":"CWE-94"}],"references":[],"publishedAt":"2025-12-20T09:03:38.668462Z","rpms":{"Rocky Linux 8":{"nvras":["nodejs-nodemon-0:3.0.1-1.module+el8.9.0+1760+903d54b9.noarch.rpm","nodejs-nodemon-0:3.0.1-1.module+el8.10.0+1824+532140ee.noarch.rpm","nodejs-nodemon-0:3.0.1-1.module+el8.10.0+1988+437f3d23.noarch.rpm","nodejs-nodemon-0:3.0.1-1.module+el8.10.0+1989+e60144d9.noarch.rpm","nodejs-nodemon-0:3.0.1-1.module+el8.10.0+1988+437f3d23.src.rpm","nodejs-nodemon-0:3.0.1-1.module+el8.10.0+1824+532140ee.src.rpm","nodejs-nodemon-0:3.0.1-1.module+el8.9.0+1760+903d54b9.src.rpm","nodejs-nodemon-0:3.0.1-1.module+el8.10.0+1989+e60144d9.src.rpm","nodejs-packaging-0:26-1.module+el8.9.0+1760+903d54b9.noarch.rpm","nodejs-packaging-0:26-1.module+el8.9.0+1760+903d54b9.src.rpm","nodejs-nodemon-0:3.0.1-1.module+el8.10.0+1666+930e28e8.noarch.rpm","nodejs-nodemon-0:3.0.1-1.module+el8.10.0+1935+d3cbe60f.noarch.rpm","nodejs-nodemon-0:3.0.1-1.module+el8.10.0+1823+b5789597.noarch.rpm","nodejs-nodemon-0:3.0.1-1.module+el8.10.0+1667+4a788d89.noarch.rpm","nodejs-nodemon-0:3.0.1-1.module+el8.10.0+1924+614dc87f.noarch.rpm","nodejs-nodemon-0:3.0.1-1.module+el8.10.0+1935+d3cbe60f.src.rpm","nodejs-nodemon-0:3.0.1-1.module+el8.10.0+1924+614dc87f.src.rpm","nodejs-nodemon-0:3.0.1-1.module+el8.10.0+1666+930e28e8.src.rpm","nodejs-nodemon-0:3.0.1-1.module+el8.10.0+1667+4a788d89.src.rpm","nodejs-nodemon-0:3.0.1-1.module+el8.10.0+1823+b5789597.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:5360","url":"https://access.redhat.com/errata/RHSA-2023:5360","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:5537","synopsis":"Important: libvpx security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for libvpx.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.\n\nSecurity Fix(es):\n\n* libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)\n\n* libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2241191","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2241191","description":""},{"ticket":"2241806","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2241806","description":""}],"cves":[{"name":"CVE-2023-44488","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44488","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-755"},{"name":"CVE-2023-5217","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5217","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-119"}],"references":[],"publishedAt":"2026-03-18T06:01:13.733535Z","rpms":{"Rocky Linux 8":{"nvras":["libvpx-0:1.7.0-10.el8_8.src.rpm","libvpx-debuginfo-0:1.7.0-10.el8_8.aarch64.rpm","libvpx-debugsource-0:1.7.0-10.el8_8.aarch64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:5537","url":"https://access.redhat.com/errata/RHSA-2023:5537","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:5837","synopsis":"Important: nghttp2 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for nghttp2.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"nghttp2 contains the Hypertext Transfer Protocol version 2 (HTTP/2) client, server, and proxy programs as well as a library implementing the HTTP/2 protocol in C.\n\nSecurity Fix(es):\n\n* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2242803","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2242803","description":""}],"cves":[{"name":"CVE-2023-44487","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"}],"references":[],"publishedAt":"2025-12-05T09:02:52.915494Z","rpms":{"Rocky Linux 8":{"nvras":["nghttp2-0:1.33.0-5.el8_8.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:5837","url":"https://access.redhat.com/errata/RHSA-2023:5837","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:5849","synopsis":"Important: nodejs:18 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for nodejs-packaging, module.nodejs-nodemon, module.nodejs-packaging, nodejs-nodemon.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)\n\n* nodejs: integrity checks according to policies can be circumvented (CVE-2023-38552)\n\n* nodejs: code injection via WebAssembly export names (CVE-2023-39333)\n\n* node-undici: cookie leakage (CVE-2023-45143)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"2242803","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2242803","description":""},{"ticket":"2244104","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2244104","description":""},{"ticket":"2244415","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2244415","description":""},{"ticket":"2244418","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2244418","description":""}],"cves":[{"name":"CVE-2023-38552","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38552","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3BaseScore":"7.5","cwe":"CWE-354"},{"name":"CVE-2023-39333","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39333","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3BaseScore":"5.3","cwe":"CWE-94"},{"name":"CVE-2023-44487","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"},{"name":"CVE-2023-45143","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45143","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L","cvss3BaseScore":"3.9","cwe":"CWE-200"}],"references":[],"publishedAt":"2025-12-04T09:05:01.515036Z","rpms":{"Rocky Linux 9":{"nvras":["nodejs-nodemon-0:3.0.1-1.module+el9.7.0+40018+a011993d.noarch.rpm","nodejs-nodemon-0:3.0.1-1.module+el9.7.0+40017+f0db1785.noarch.rpm","nodejs-nodemon-0:3.0.1-1.module+el9.7.0+40022+9ecc286c.noarch.rpm","nodejs-nodemon-0:3.0.1-1.module+el9.7.0+40017+f0db1785.src.rpm","nodejs-nodemon-0:3.0.1-1.module+el9.7.0+40018+a011993d.src.rpm","nodejs-nodemon-0:3.0.1-1.module+el9.7.0+40022+9ecc286c.src.rpm","nodejs-packaging-0:2021.06-4.module+el9.7.0+40025+0e0cf6b2.noarch.rpm","nodejs-packaging-0:2021.06-4.module+el9.7.0+40017+f0db1785.noarch.rpm","nodejs-packaging-0:2021.06-4.module+el9.7.0+40022+9ecc286c.noarch.rpm","nodejs-packaging-0:2021.06-4.module+el9.7.0+40018+a011993d.noarch.rpm","nodejs-packaging-0:2021.06-4.module+el9.7.0+40022+9ecc286c.src.rpm","nodejs-packaging-0:2021.06-4.module+el9.7.0+40025+0e0cf6b2.src.rpm","nodejs-packaging-0:2021.06-4.module+el9.7.0+40018+a011993d.src.rpm","nodejs-packaging-0:2021.06-4.module+el9.7.0+40017+f0db1785.src.rpm","nodejs-packaging-bundler-0:2021.06-4.module+el9.7.0+40017+f0db1785.noarch.rpm","nodejs-packaging-bundler-0:2021.06-4.module+el9.7.0+40018+a011993d.noarch.rpm","nodejs-packaging-bundler-0:2021.06-4.module+el9.7.0+40022+9ecc286c.noarch.rpm","nodejs-packaging-bundler-0:2021.06-4.module+el9.7.0+40025+0e0cf6b2.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:5849","url":"https://access.redhat.com/errata/RHSA-2023:5849","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:6385","synopsis":"Moderate: liblouis security update","severity":"SEVERITY_MODERATE","topic":"An update is available for liblouis.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Liblouis is an open source braille translator and back-translator named in honor of Louis Braille. It features support for computer and literary braille, supports contracted and uncontracted translation for many languages and has support for hyphenation. New languages can easily be added through tables that support a rule or dictionary based approach. Liblouis also supports math braille (Nemeth and Marburg).\n\nSecurity Fix(es):\n\n* liblouis: buffer overflow in lou_logFile function at logginc.c (CVE-2023-26767)\n\n* liblouis: buffer overflow in lou_setDataPath (CVE-2023-26768)\n\n* liblouis: buffer overflow in Lou_Trace (CVE-2023-26769)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"2181135","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2181135","description":""},{"ticket":"2181139","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2181139","description":""},{"ticket":"2181143","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2181143","description":""}],"cves":[{"name":"CVE-2023-26767","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26767","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"},{"name":"CVE-2023-26768","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26768","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"},{"name":"CVE-2023-26769","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26769","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"}],"references":[],"publishedAt":"2026-07-05T06:03:18.269222Z","rpms":{"Rocky Linux 9":{"nvras":["liblouis-0:3.16.1-5.el9.aarch64.rpm","liblouis-0:3.16.1-5.el9.i686.rpm","liblouis-0:3.16.1-5.el9.ppc64le.rpm","liblouis-0:3.16.1-5.el9.s390x.rpm","liblouis-0:3.16.1-5.el9.src.rpm","liblouis-0:3.16.1-5.el9.x86_64.rpm","liblouis-debuginfo-0:3.16.1-5.el9.aarch64.rpm","liblouis-debuginfo-0:3.16.1-5.el9.i686.rpm","liblouis-debuginfo-0:3.16.1-5.el9.ppc64le.rpm","liblouis-debuginfo-0:3.16.1-5.el9.s390x.rpm","liblouis-debuginfo-0:3.16.1-5.el9.x86_64.rpm","liblouis-debugsource-0:3.16.1-5.el9.aarch64.rpm","liblouis-debugsource-0:3.16.1-5.el9.i686.rpm","liblouis-debugsource-0:3.16.1-5.el9.ppc64le.rpm","liblouis-debugsource-0:3.16.1-5.el9.s390x.rpm","liblouis-debugsource-0:3.16.1-5.el9.x86_64.rpm","python3-louis-0:3.16.1-5.el9.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:6385","url":"https://access.redhat.com/errata/RHSA-2023:6385","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:6431","synopsis":"Moderate: libfastjson security update","severity":"SEVERITY_MODERATE","topic":"An update is available for libfastjson.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libfastjson library provides essential JavaScript Object Notation (JSON) handling functions. The library enables users to construct JSON objects in C, output them as JSON-formatted strings, and convert JSON-formatted strings back to the C representation of JSON objects.\n\nSecurity Fix(es):\n\n* json-c, libfastjson: integer overflow and out-of-bounds write via a large JSON file (CVE-2020-12762)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"1835253","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1835253","description":""}],"cves":[{"name":"CVE-2020-12762","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12762","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.8","cwe":"CWE-787"}],"references":[],"publishedAt":"2026-06-25T12:03:37.665962Z","rpms":{"Rocky Linux 9":{"nvras":["libfastjson-0:0.99.9-5.el9.aarch64.rpm","libfastjson-0:0.99.9-5.el9.i686.rpm","libfastjson-0:0.99.9-5.el9.ppc64le.rpm","libfastjson-0:0.99.9-5.el9.s390x.rpm","libfastjson-0:0.99.9-5.el9.src.rpm","libfastjson-0:0.99.9-5.el9.x86_64.rpm","libfastjson-debuginfo-0:0.99.9-5.el9.aarch64.rpm","libfastjson-debuginfo-0:0.99.9-5.el9.i686.rpm","libfastjson-debuginfo-0:0.99.9-5.el9.ppc64le.rpm","libfastjson-debuginfo-0:0.99.9-5.el9.s390x.rpm","libfastjson-debuginfo-0:0.99.9-5.el9.x86_64.rpm","libfastjson-debugsource-0:0.99.9-5.el9.aarch64.rpm","libfastjson-debugsource-0:0.99.9-5.el9.i686.rpm","libfastjson-debugsource-0:0.99.9-5.el9.ppc64le.rpm","libfastjson-debugsource-0:0.99.9-5.el9.s390x.rpm","libfastjson-debugsource-0:0.99.9-5.el9.x86_64.rpm","libfastjson-devel-0:0.99.9-5.el9.aarch64.rpm","libfastjson-devel-0:0.99.9-5.el9.ppc64le.rpm","libfastjson-devel-0:0.99.9-5.el9.s390x.rpm","libfastjson-devel-0:0.99.9-5.el9.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:6431","url":"https://access.redhat.com/errata/RHSA-2023:6431","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:6482","synopsis":"Moderate: librabbitmq security update","severity":"SEVERITY_MODERATE","topic":"An update is available for librabbitmq.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows you to communicate with AMQP servers using protocol version 0-9-1.\n\nSecurity Fix(es):\n\n* rabbitmq-c/librabbitmq: Insecure credentials submission (CVE-2023-35789)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"2215762","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2215762","description":""}],"cves":[{"name":"CVE-2023-35789","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35789","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3BaseScore":"5.1","cwe":null}],"references":[],"publishedAt":"2026-06-25T12:03:37.665962Z","rpms":{"Rocky Linux 9":{"nvras":["librabbitmq-0:0.11.0-7.el9.aarch64.rpm","librabbitmq-0:0.11.0-7.el9.i686.rpm","librabbitmq-0:0.11.0-7.el9.ppc64le.rpm","librabbitmq-0:0.11.0-7.el9.s390x.rpm","librabbitmq-0:0.11.0-7.el9.src.rpm","librabbitmq-0:0.11.0-7.el9.x86_64.rpm","librabbitmq-debuginfo-0:0.11.0-7.el9.aarch64.rpm","librabbitmq-debuginfo-0:0.11.0-7.el9.i686.rpm","librabbitmq-debuginfo-0:0.11.0-7.el9.ppc64le.rpm","librabbitmq-debuginfo-0:0.11.0-7.el9.s390x.rpm","librabbitmq-debuginfo-0:0.11.0-7.el9.x86_64.rpm","librabbitmq-debugsource-0:0.11.0-7.el9.aarch64.rpm","librabbitmq-debugsource-0:0.11.0-7.el9.i686.rpm","librabbitmq-debugsource-0:0.11.0-7.el9.ppc64le.rpm","librabbitmq-debugsource-0:0.11.0-7.el9.s390x.rpm","librabbitmq-debugsource-0:0.11.0-7.el9.x86_64.rpm","librabbitmq-devel-0:0.11.0-7.el9.aarch64.rpm","librabbitmq-devel-0:0.11.0-7.el9.i686.rpm","librabbitmq-devel-0:0.11.0-7.el9.ppc64le.rpm","librabbitmq-devel-0:0.11.0-7.el9.s390x.rpm","librabbitmq-devel-0:0.11.0-7.el9.x86_64.rpm","librabbitmq-tools-0:0.11.0-7.el9.aarch64.rpm","librabbitmq-tools-0:0.11.0-7.el9.ppc64le.rpm","librabbitmq-tools-0:0.11.0-7.el9.s390x.rpm","librabbitmq-tools-0:0.11.0-7.el9.x86_64.rpm","librabbitmq-tools-debuginfo-0:0.11.0-7.el9.aarch64.rpm","librabbitmq-tools-debuginfo-0:0.11.0-7.el9.ppc64le.rpm","librabbitmq-tools-debuginfo-0:0.11.0-7.el9.s390x.rpm","librabbitmq-tools-debuginfo-0:0.11.0-7.el9.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:6482","url":"https://access.redhat.com/errata/RHSA-2023:6482","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:6566","synopsis":"Moderate: libmicrohttpd security update","severity":"SEVERITY_MODERATE","topic":"An update is available for libmicrohttpd.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"GNU libmicrohttpd is a small C library that makes it easy to run an HTTP server as part of another application.\n\nSecurity Fix(es):\n\n* libmicrohttpd: remote DoS (CVE-2023-27371)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"2174313","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2174313","description":""}],"cves":[{"name":"CVE-2023-27371","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27371","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.9","cwe":"CWE-125"}],"references":[],"publishedAt":"2026-06-25T12:03:37.665962Z","rpms":{"Rocky Linux 9":{"nvras":["libmicrohttpd-1:0.9.72-5.el9.aarch64.rpm","libmicrohttpd-1:0.9.72-5.el9.i686.rpm","libmicrohttpd-1:0.9.72-5.el9.ppc64le.rpm","libmicrohttpd-1:0.9.72-5.el9.s390x.rpm","libmicrohttpd-1:0.9.72-5.el9.src.rpm","libmicrohttpd-1:0.9.72-5.el9.x86_64.rpm","libmicrohttpd-debuginfo-1:0.9.72-5.el9.aarch64.rpm","libmicrohttpd-debuginfo-1:0.9.72-5.el9.i686.rpm","libmicrohttpd-debuginfo-1:0.9.72-5.el9.ppc64le.rpm","libmicrohttpd-debuginfo-1:0.9.72-5.el9.s390x.rpm","libmicrohttpd-debuginfo-1:0.9.72-5.el9.x86_64.rpm","libmicrohttpd-debugsource-1:0.9.72-5.el9.aarch64.rpm","libmicrohttpd-debugsource-1:0.9.72-5.el9.i686.rpm","libmicrohttpd-debugsource-1:0.9.72-5.el9.ppc64le.rpm","libmicrohttpd-debugsource-1:0.9.72-5.el9.s390x.rpm","libmicrohttpd-debugsource-1:0.9.72-5.el9.x86_64.rpm","libmicrohttpd-devel-1:0.9.72-5.el9.aarch64.rpm","libmicrohttpd-devel-1:0.9.72-5.el9.i686.rpm","libmicrohttpd-devel-1:0.9.72-5.el9.ppc64le.rpm","libmicrohttpd-devel-1:0.9.72-5.el9.s390x.rpm","libmicrohttpd-devel-1:0.9.72-5.el9.x86_64.rpm","libmicrohttpd-doc-1:0.9.72-5.el9.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:6566","url":"https://access.redhat.com/errata/RHSA-2023:6566","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:6621","synopsis":"Moderate: protobuf-c security update","severity":"SEVERITY_MODERATE","topic":"An update is available for protobuf-c.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The protobuf-c packages provide C bindings for Google's Protocol Buffers.\n\nSecurity Fix(es):\n\n* protobuf-c: unsigned integer overflow in parse_required_member (CVE-2022-48468)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"2186673","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2186673","description":""}],"cves":[{"name":"CVE-2022-48468","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48468","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.2","cwe":"CWE-190"}],"references":[],"publishedAt":"2026-06-25T12:03:43.452279Z","rpms":{"Rocky Linux 9":{"nvras":["protobuf-c-0:1.3.3-13.el9.aarch64.rpm","protobuf-c-0:1.3.3-13.el9.i686.rpm","protobuf-c-0:1.3.3-13.el9.ppc64le.rpm","protobuf-c-0:1.3.3-13.el9.s390x.rpm","protobuf-c-0:1.3.3-13.el9.src.rpm","protobuf-c-0:1.3.3-13.el9.x86_64.rpm","protobuf-c-compiler-0:1.3.3-13.el9.aarch64.rpm","protobuf-c-compiler-0:1.3.3-13.el9.i686.rpm","protobuf-c-compiler-0:1.3.3-13.el9.ppc64le.rpm","protobuf-c-compiler-0:1.3.3-13.el9.s390x.rpm","protobuf-c-compiler-0:1.3.3-13.el9.x86_64.rpm","protobuf-c-compiler-debuginfo-0:1.3.3-13.el9.aarch64.rpm","protobuf-c-compiler-debuginfo-0:1.3.3-13.el9.i686.rpm","protobuf-c-compiler-debuginfo-0:1.3.3-13.el9.ppc64le.rpm","protobuf-c-compiler-debuginfo-0:1.3.3-13.el9.s390x.rpm","protobuf-c-compiler-debuginfo-0:1.3.3-13.el9.x86_64.rpm","protobuf-c-debuginfo-0:1.3.3-13.el9.aarch64.rpm","protobuf-c-debuginfo-0:1.3.3-13.el9.i686.rpm","protobuf-c-debuginfo-0:1.3.3-13.el9.ppc64le.rpm","protobuf-c-debuginfo-0:1.3.3-13.el9.s390x.rpm","protobuf-c-debuginfo-0:1.3.3-13.el9.x86_64.rpm","protobuf-c-debugsource-0:1.3.3-13.el9.aarch64.rpm","protobuf-c-debugsource-0:1.3.3-13.el9.i686.rpm","protobuf-c-debugsource-0:1.3.3-13.el9.ppc64le.rpm","protobuf-c-debugsource-0:1.3.3-13.el9.s390x.rpm","protobuf-c-debugsource-0:1.3.3-13.el9.x86_64.rpm","protobuf-c-devel-0:1.3.3-13.el9.aarch64.rpm","protobuf-c-devel-0:1.3.3-13.el9.i686.rpm","protobuf-c-devel-0:1.3.3-13.el9.ppc64le.rpm","protobuf-c-devel-0:1.3.3-13.el9.s390x.rpm","protobuf-c-devel-0:1.3.3-13.el9.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:6621","url":"https://access.redhat.com/errata/RHSA-2023:6621","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:6661","synopsis":"Low: gmp security and enhancement update","severity":"SEVERITY_LOW","topic":"An update is available for gmp.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The gmp packages contain GNU MP, a library for arbitrary precision arithmetics, signed integers operations, rational numbers, and floating point numbers. \n\nSecurity Fix(es):\n\n* gmp: Integer overflow and resultant buffer overflow via crafted input (CVE-2021-43618)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"2024904","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2024904","description":""}],"cves":[{"name":"CVE-2021-43618","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43618","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.2","cwe":"CWE-190"}],"references":[],"publishedAt":"2026-06-25T12:03:37.665962Z","rpms":{"Rocky Linux 9":{"nvras":["gmp-1:6.2.0-13.el9.aarch64.rpm","gmp-1:6.2.0-13.el9.i686.rpm","gmp-1:6.2.0-13.el9.ppc64le.rpm","gmp-1:6.2.0-13.el9.s390x.rpm","gmp-1:6.2.0-13.el9.src.rpm","gmp-1:6.2.0-13.el9.x86_64.rpm","gmp-c++-1:6.2.0-13.el9.aarch64.rpm","gmp-c++-1:6.2.0-13.el9.i686.rpm","gmp-c++-1:6.2.0-13.el9.ppc64le.rpm","gmp-c++-1:6.2.0-13.el9.s390x.rpm","gmp-c++-1:6.2.0-13.el9.x86_64.rpm","gmp-c++-debuginfo-1:6.2.0-13.el9.aarch64.rpm","gmp-c++-debuginfo-1:6.2.0-13.el9.i686.rpm","gmp-c++-debuginfo-1:6.2.0-13.el9.ppc64le.rpm","gmp-c++-debuginfo-1:6.2.0-13.el9.s390x.rpm","gmp-c++-debuginfo-1:6.2.0-13.el9.x86_64.rpm","gmp-debuginfo-1:6.2.0-13.el9.aarch64.rpm","gmp-debuginfo-1:6.2.0-13.el9.i686.rpm","gmp-debuginfo-1:6.2.0-13.el9.ppc64le.rpm","gmp-debuginfo-1:6.2.0-13.el9.s390x.rpm","gmp-debuginfo-1:6.2.0-13.el9.x86_64.rpm","gmp-debugsource-1:6.2.0-13.el9.aarch64.rpm","gmp-debugsource-1:6.2.0-13.el9.i686.rpm","gmp-debugsource-1:6.2.0-13.el9.ppc64le.rpm","gmp-debugsource-1:6.2.0-13.el9.s390x.rpm","gmp-debugsource-1:6.2.0-13.el9.x86_64.rpm","gmp-devel-1:6.2.0-13.el9.aarch64.rpm","gmp-devel-1:6.2.0-13.el9.i686.rpm","gmp-devel-1:6.2.0-13.el9.ppc64le.rpm","gmp-devel-1:6.2.0-13.el9.s390x.rpm","gmp-devel-1:6.2.0-13.el9.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:6661","url":"https://access.redhat.com/errata/RHSA-2023:6661","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:6712","synopsis":"Moderate: python-wheel security update","severity":"SEVERITY_MODERATE","topic":"An update is available for python-wheel.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Wheel is the reference implementation of the Python wheel packaging standard, as defined in PEP 427.\n\nSecurity Fix(es):\n\n* python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli (CVE-2022-40898)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"2165864","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2165864","description":""}],"cves":[{"name":"CVE-2022-40898","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40898","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"}],"references":[],"publishedAt":"2026-06-26T18:03:19.195576Z","rpms":{"Rocky Linux 9":{"nvras":["python3-wheel-1:0.36.2-8.el9.noarch.rpm","python3-wheel-wheel-1:0.36.2-8.el9.noarch.rpm","python-wheel-1:0.36.2-8.el9.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:6712","url":"https://access.redhat.com/errata/RHSA-2023:6712","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:6976","synopsis":"Moderate: libfastjson security update","severity":"SEVERITY_MODERATE","topic":"An update is available for libfastjson.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libfastjson library provides essential JavaScript Object Notation (JSON) handling functions. The library enables users to construct JSON objects in C, output them as JSON-formatted strings, and convert JSON-formatted strings back to the C representation of JSON objects.\n\nSecurity Fix(es):\n\n* json-c, libfastjson: integer overflow and out-of-bounds write via a large JSON file (CVE-2020-12762)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.9 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1835253","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1835253","description":""}],"cves":[{"name":"CVE-2020-12762","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12762","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.8","cwe":"CWE-787"}],"references":[],"publishedAt":"2026-06-27T00:01:04.193077Z","rpms":{"Rocky Linux 8":{"nvras":["libfastjson-0:0.99.9-2.el8.aarch64.rpm","libfastjson-0:0.99.9-2.el8.i686.rpm","libfastjson-0:0.99.9-2.el8.src.rpm","libfastjson-0:0.99.9-2.el8.x86_64.rpm","libfastjson-debuginfo-0:0.99.9-2.el8.aarch64.rpm","libfastjson-debuginfo-0:0.99.9-2.el8.i686.rpm","libfastjson-debuginfo-0:0.99.9-2.el8.x86_64.rpm","libfastjson-debugsource-0:0.99.9-2.el8.aarch64.rpm","libfastjson-debugsource-0:0.99.9-2.el8.i686.rpm","libfastjson-debugsource-0:0.99.9-2.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:6976","url":"https://access.redhat.com/errata/RHSA-2023:6976","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:7015","synopsis":"Moderate: wireshark security update","severity":"SEVERITY_MODERATE","topic":"An update is available for wireshark.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.\n\nSecurity Fix(es):\n\n* wireshark: RTPS dissector crash (CVE-2023-0666)\n\n* wireshark: VMS TCPIPtrace file parser crash (CVE-2023-2856)\n\n* wireshark: NetScaler file parser crash (CVE-2023-2858)\n\n* wireshark: XRA dissector infinite loop (CVE-2023-2952)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.9 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2210824","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2210824","description":""},{"ticket":"2210829","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2210829","description":""},{"ticket":"2210832","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2210832","description":""},{"ticket":"2211406","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2211406","description":""}],"cves":[{"name":"CVE-2023-0666","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0666","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-122"},{"name":"CVE-2023-2856","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2856","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-121"},{"name":"CVE-2023-2858","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2858","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-122"},{"name":"CVE-2023-2952","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2952","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-835"}],"references":[],"publishedAt":"2026-06-25T12:01:05.792943Z","rpms":{"Rocky Linux 8":{"nvras":["wireshark-1:2.6.2-17.el8.aarch64.rpm","wireshark-1:2.6.2-17.el8.src.rpm","wireshark-1:2.6.2-17.el8.x86_64.rpm","wireshark-cli-1:2.6.2-17.el8.aarch64.rpm","wireshark-cli-1:2.6.2-17.el8.i686.rpm","wireshark-cli-1:2.6.2-17.el8.x86_64.rpm","wireshark-cli-debuginfo-1:2.6.2-17.el8.aarch64.rpm","wireshark-cli-debuginfo-1:2.6.2-17.el8.i686.rpm","wireshark-cli-debuginfo-1:2.6.2-17.el8.x86_64.rpm","wireshark-debuginfo-1:2.6.2-17.el8.aarch64.rpm","wireshark-debuginfo-1:2.6.2-17.el8.i686.rpm","wireshark-debuginfo-1:2.6.2-17.el8.x86_64.rpm","wireshark-debugsource-1:2.6.2-17.el8.aarch64.rpm","wireshark-debugsource-1:2.6.2-17.el8.i686.rpm","wireshark-debugsource-1:2.6.2-17.el8.x86_64.rpm","wireshark-devel-1:2.6.2-17.el8.aarch64.rpm","wireshark-devel-1:2.6.2-17.el8.i686.rpm","wireshark-devel-1:2.6.2-17.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:7015","url":"https://access.redhat.com/errata/RHSA-2023:7015","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:7016","synopsis":"Low: libpq security update","severity":"SEVERITY_LOW","topic":"An update is available for libpq.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. \n\nSecurity Fix(es):\n\n* postgresql: Client memory disclosure when connecting with Kerberos to modified server (CVE-2022-41862)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.9 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2165722","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2165722","description":""}],"cves":[{"name":"CVE-2022-41862","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41862","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3BaseScore":"3.7","cwe":"CWE-200"}],"references":[],"publishedAt":"2026-06-28T00:01:03.878968Z","rpms":{"Rocky Linux 8":{"nvras":["libpq-0:13.11-1.el8.aarch64.rpm","libpq-0:13.11-1.el8.i686.rpm","libpq-0:13.11-1.el8.x86_64.rpm","libpq-devel-0:13.11-1.el8.aarch64.rpm","libpq-devel-0:13.11-1.el8.i686.rpm","libpq-devel-0:13.11-1.el8.x86_64.rpm","libpq-0:13.11-1.el8.src.rpm","libpq-debuginfo-0:13.11-1.el8.aarch64.rpm","libpq-debugsource-0:13.11-1.el8.aarch64.rpm","libpq-devel-debuginfo-0:13.11-1.el8.aarch64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:7016","url":"https://access.redhat.com/errata/RHSA-2023:7016","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:7052","synopsis":"Moderate: libreswan security update","severity":"SEVERITY_MODERATE","topic":"An update is available for libreswan.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN).\n\nSecurity Fix(es):\n\n* libreswan: Invalid IKEv2 REKEY proposal causes restart (CVE-2023-38710)\n\n* libreswan: Invalid IKEv1 Quick Mode ID causes restart (CVE-2023-38711)\n\n* libreswan: Invalid IKEv1 repeat IKE SA delete causes crash and restart (CVE-2023-38712)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.9 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2215952","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2215952","description":""},{"ticket":"2225368","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2225368","description":""},{"ticket":"2225369","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2225369","description":""}],"cves":[{"name":"CVE-2023-38710","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38710","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-617"},{"name":"CVE-2023-38711","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38711","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-476"},{"name":"CVE-2023-38712","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38712","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-476"}],"references":[],"publishedAt":"2026-05-21T16:24:56.966088Z","rpms":{"Rocky Linux 8":{"nvras":["libreswan-0:4.12-2.el8_10.3.src.rpm","libreswan-debuginfo-0:4.12-2.el8_10.4.x86_64.rpm","libreswan-debugsource-0:4.12-2.el8_10.4.x86_64.rpm","libreswan-0:4.12-2.el8_10.3.aarch64.rpm","libreswan-0:4.12-2.el8_10.3.x86_64.rpm","libreswan-debuginfo-0:4.12-2.el8_10.3.aarch64.rpm","libreswan-debugsource-0:4.12-2.el8_10.3.aarch64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:7052","url":"https://access.redhat.com/errata/RHSA-2023:7052","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:7083","synopsis":"Moderate: emacs security update","severity":"SEVERITY_MODERATE","topic":"An update is available for emacs.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.\n\nSecurity Fix(es):\n\n* emacs: command execution via shell metacharacters (CVE-2022-48337)\n\n* emacs: command injection vulnerability in htmlfontify.el (CVE-2022-48339)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.9 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2171987","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2171987","description":""},{"ticket":"2171989","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2171989","description":""}],"cves":[{"name":"CVE-2022-48337","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48337","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.3","cwe":"CWE-77"},{"name":"CVE-2022-48339","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48339","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.8","cwe":"CWE-77"}],"references":[],"publishedAt":"2026-06-25T12:00:44.845974Z","rpms":{"Rocky Linux 8":{"nvras":["emacs-1:26.1-11.el8.aarch64.rpm","emacs-1:26.1-11.el8.x86_64.rpm","emacs-common-1:26.1-11.el8.aarch64.rpm","emacs-common-1:26.1-11.el8.x86_64.rpm","emacs-filesystem-1:26.1-11.el8.noarch.rpm","emacs-lucid-1:26.1-11.el8.aarch64.rpm","emacs-lucid-1:26.1-11.el8.x86_64.rpm","emacs-nox-1:26.1-11.el8.aarch64.rpm","emacs-nox-1:26.1-11.el8.x86_64.rpm","emacs-terminal-1:26.1-11.el8.noarch.rpm","emacs-1:26.1-11.el8.src.rpm","emacs-common-debuginfo-1:26.1-11.el8.aarch64.rpm","emacs-debuginfo-1:26.1-11.el8.aarch64.rpm","emacs-debugsource-1:26.1-11.el8.aarch64.rpm","emacs-lucid-debuginfo-1:26.1-11.el8.aarch64.rpm","emacs-nox-debuginfo-1:26.1-11.el8.aarch64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:7083","url":"https://access.redhat.com/errata/RHSA-2023:7083","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:7090","synopsis":"Moderate: libmicrohttpd security update","severity":"SEVERITY_MODERATE","topic":"An update is available for libmicrohttpd.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"GNU libmicrohttpd is a small C library that makes it easy to run an HTTP server as part of another application.\n\nSecurity Fix(es):\n\n* libmicrohttpd: remote DoS (CVE-2023-27371)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.9 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2174313","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2174313","description":""}],"cves":[{"name":"CVE-2023-27371","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27371","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.9","cwe":"CWE-125"}],"references":[],"publishedAt":"2026-06-25T12:00:44.845974Z","rpms":{"Rocky Linux 8":{"nvras":["libmicrohttpd-1:0.9.59-3.el8.aarch64.rpm","libmicrohttpd-1:0.9.59-3.el8.i686.rpm","libmicrohttpd-1:0.9.59-3.el8.src.rpm","libmicrohttpd-1:0.9.59-3.el8.x86_64.rpm","libmicrohttpd-debuginfo-1:0.9.59-3.el8.aarch64.rpm","libmicrohttpd-debuginfo-1:0.9.59-3.el8.i686.rpm","libmicrohttpd-debuginfo-1:0.9.59-3.el8.x86_64.rpm","libmicrohttpd-debugsource-1:0.9.59-3.el8.aarch64.rpm","libmicrohttpd-debugsource-1:0.9.59-3.el8.i686.rpm","libmicrohttpd-debugsource-1:0.9.59-3.el8.x86_64.rpm","libmicrohttpd-devel-1:0.9.59-3.el8.aarch64.rpm","libmicrohttpd-devel-1:0.9.59-3.el8.i686.rpm","libmicrohttpd-devel-1:0.9.59-3.el8.x86_64.rpm","libmicrohttpd-doc-1:0.9.59-3.el8.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:7090","url":"https://access.redhat.com/errata/RHSA-2023:7090","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:7139","synopsis":"Moderate: samba security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for openchange, evolution-mapi.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.\n\nThe following packages have been upgraded to a later upstream version: samba (4.18.6). (BZ#2190417)\n\nSecurity Fix(es):\n\n* samba: out-of-bounds read in winbind AUTH_CRAP (CVE-2022-2127)\n\n* samba: infinite loop in mdssvc RPC service for spotlight (CVE-2023-34966)\n\n* samba: type confusion in mdssvc RPC service for spotlight (CVE-2023-34967)\n\n* samba: spotlight server-side share path disclosure (CVE-2023-34968)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.9 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2222791","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2222791","description":""},{"ticket":"2222793","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2222793","description":""},{"ticket":"2222794","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2222794","description":""},{"ticket":"2222795","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2222795","description":""}],"cves":[{"name":"CVE-2022-2127","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2127","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.9","cwe":"CWE-125"},{"name":"CVE-2023-34966","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34966","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-835"},{"name":"CVE-2023-34967","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34967","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"5.3","cwe":"CWE-843"},{"name":"CVE-2023-34968","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34968","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3BaseScore":"5.3","cwe":"CWE-201"}],"references":[],"publishedAt":"2026-06-25T12:01:05.792943Z","rpms":{"Rocky Linux 8":{"nvras":["evolution-mapi-0:3.28.3-8.el8.aarch64.rpm","evolution-mapi-0:3.28.3-8.el8.src.rpm","evolution-mapi-0:3.28.3-8.el8.x86_64.rpm","evolution-mapi-debuginfo-0:3.28.3-8.el8.aarch64.rpm","evolution-mapi-debuginfo-0:3.28.3-8.el8.x86_64.rpm","evolution-mapi-debugsource-0:3.28.3-8.el8.aarch64.rpm","evolution-mapi-debugsource-0:3.28.3-8.el8.x86_64.rpm","evolution-mapi-langpacks-0:3.28.3-8.el8.noarch.rpm","openchange-0:2.3-32.el8.aarch64.rpm","openchange-0:2.3-32.el8.i686.rpm","openchange-0:2.3-32.el8.src.rpm","openchange-0:2.3-32.el8.x86_64.rpm","openchange-debuginfo-0:2.3-32.el8.aarch64.rpm","openchange-debuginfo-0:2.3-32.el8.i686.rpm","openchange-debuginfo-0:2.3-32.el8.x86_64.rpm","openchange-debugsource-0:2.3-32.el8.aarch64.rpm","openchange-debugsource-0:2.3-32.el8.i686.rpm","openchange-debugsource-0:2.3-32.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:7139","url":"https://access.redhat.com/errata/RHSA-2023:7139","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:7754","synopsis":"Moderate: pixman security update","severity":"SEVERITY_MODERATE","topic":"An update is available for pixman.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Pixman is a pixel manipulation library for the X Window System and Cairo.\n\nSecurity Fix(es):\n\n* pixman: Integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (CVE-2022-44638)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"2139988","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2139988","description":""}],"cves":[{"name":"CVE-2022-44638","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44638","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.0","cwe":"CWE-787"}],"references":[],"publishedAt":"2026-03-18T06:04:00.732333Z","rpms":{"Rocky Linux 9":{"nvras":["pixman-0:0.40.0-6.el9_3.aarch64.rpm","pixman-0:0.40.0-6.el9_3.i686.rpm","pixman-0:0.40.0-6.el9_3.ppc64le.rpm","pixman-0:0.40.0-6.el9_3.s390x.rpm","pixman-0:0.40.0-6.el9_3.src.rpm","pixman-0:0.40.0-6.el9_3.x86_64.rpm","pixman-debuginfo-0:0.40.0-6.el9_3.aarch64.rpm","pixman-debuginfo-0:0.40.0-6.el9_3.i686.rpm","pixman-debuginfo-0:0.40.0-6.el9_3.ppc64le.rpm","pixman-debuginfo-0:0.40.0-6.el9_3.s390x.rpm","pixman-debuginfo-0:0.40.0-6.el9_3.x86_64.rpm","pixman-debugsource-0:0.40.0-6.el9_3.aarch64.rpm","pixman-debugsource-0:0.40.0-6.el9_3.i686.rpm","pixman-debugsource-0:0.40.0-6.el9_3.ppc64le.rpm","pixman-debugsource-0:0.40.0-6.el9_3.s390x.rpm","pixman-debugsource-0:0.40.0-6.el9_3.x86_64.rpm","pixman-devel-0:0.40.0-6.el9_3.aarch64.rpm","pixman-devel-0:0.40.0-6.el9_3.i686.rpm","pixman-devel-0:0.40.0-6.el9_3.ppc64le.rpm","pixman-devel-0:0.40.0-6.el9_3.s390x.rpm","pixman-devel-0:0.40.0-6.el9_3.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:7754","url":"https://access.redhat.com/errata/RHSA-2023:7754","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:7877","synopsis":"Low: openssl security update","severity":"SEVERITY_LOW","topic":"An update is available for openssl.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446)\n\n* OpenSSL: Excessive time spent checking DH q parameter value (CVE-2023-3817)\n\n* openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow (CVE-2023-5678)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2224962","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2224962","description":""},{"ticket":"2227852","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2227852","description":""},{"ticket":"2248616","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2248616","description":""},{"ticket":"2270358","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2270358","description":""}],"cves":[{"name":"CVE-2023-3446","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"5.3","cwe":"CWE-400"},{"name":"CVE-2023-3817","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"5.3","cwe":null},{"name":"CVE-2023-5678","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"5.3","cwe":"CWE-325"},{"name":"CVE-2024-2408","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3BaseScore":"5.9","cwe":"CWE-385"}],"references":[],"publishedAt":"2025-12-03T09:02:10.105990Z","rpms":{"Rocky Linux 8":{"nvras":["openssl-1:1.1.1k-12.el8_9.src.rpm","openssl-1:1.1.1k-12.el8_9.x86_64.rpm","openssl-debuginfo-1:1.1.1k-12.el8_9.i686.rpm","openssl-debuginfo-1:1.1.1k-12.el8_9.x86_64.rpm","openssl-debugsource-1:1.1.1k-12.el8_9.i686.rpm","openssl-debugsource-1:1.1.1k-12.el8_9.x86_64.rpm","openssl-devel-1:1.1.1k-12.el8_9.i686.rpm","openssl-devel-1:1.1.1k-12.el8_9.x86_64.rpm","openssl-libs-1:1.1.1k-12.el8_9.i686.rpm","openssl-libs-1:1.1.1k-12.el8_9.x86_64.rpm","openssl-libs-debuginfo-1:1.1.1k-12.el8_9.i686.rpm","openssl-libs-debuginfo-1:1.1.1k-12.el8_9.x86_64.rpm","openssl-perl-1:1.1.1k-12.el8_9.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2023:7877","url":"https://access.redhat.com/errata/RHSA-2023:7877","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2024:8834","synopsis":"Important: python-gevent security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for python-gevent.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"gevent is a coroutine-based Python networking library that uses greenlet to provide a high-level synchronous API on top of libevent event loop. Features include: * convenient API around greenlets * familiar synchronization primitives (gevent.event, gevent.queue) * socket module that cooperates * WSGI server on top of libevent-http * DNS requests done through libevent-dns * monkey patching utility to get pure Python modules to cooperate\n\nSecurity Fix(es):\n\n* python-gevent: privilege escalation via a crafted script to the WSGIServer component (CVE-2023-41419)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2240651","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2240651","description":""}],"cves":[{"name":"CVE-2023-41419","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41419","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3BaseScore":"9.1","cwe":"CWE-269"}],"references":[],"publishedAt":"2026-05-29T18:01:02.798398Z","rpms":{"Rocky Linux 8":{"nvras":["python3-gevent-0:1.2.2-5.el8.aarch64.rpm","python3-gevent-0:1.2.2-5.el8.x86_64.rpm","python3-gevent-debuginfo-0:1.2.2-5.el8.aarch64.rpm","python3-gevent-debuginfo-0:1.2.2-5.el8.x86_64.rpm","python-gevent-0:1.2.2-5.el8.src.rpm","python-gevent-debugsource-0:1.2.2-5.el8.aarch64.rpm","python-gevent-debugsource-0:1.2.2-5.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2024:8834","url":"https://access.redhat.com/errata/RHSA-2024:8834","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2025:10072","synopsis":"Important: firefox security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for firefox.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* firefox: Content-Disposition header ignored when a file is included in an embed or object tag (CVE-2025-6430)\n\n* firefox: Use-after-free in FontFaceSet (CVE-2025-6424)\n\n* firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429)\n\n* firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"2374555","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374555","description":""},{"ticket":"2374559","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374559","description":""},{"ticket":"2374561","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374561","description":""},{"ticket":"2374562","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374562","description":""}],"cves":[{"name":"CVE-2025-6424","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6424","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.5","cwe":"CWE-416"},{"name":"CVE-2025-6425","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6425","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-200"},{"name":"CVE-2025-6429","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6429","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-706"},{"name":"CVE-2025-6430","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6430","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-79"}],"references":[],"publishedAt":"2025-10-04T00:11:30.916420Z","rpms":{"Rocky Linux 9":{"nvras":["firefox-0:128.12.0-1.el9_6.aarch64.rpm","firefox-0:128.12.0-1.el9_6.ppc64le.rpm","firefox-0:128.12.0-1.el9_6.s390x.rpm","firefox-0:128.12.0-1.el9_6.src.rpm","firefox-0:128.12.0-1.el9_6.x86_64.rpm","firefox-debuginfo-0:128.12.0-1.el9_6.aarch64.rpm","firefox-debuginfo-0:128.12.0-1.el9_6.ppc64le.rpm","firefox-debuginfo-0:128.12.0-1.el9_6.s390x.rpm","firefox-debuginfo-0:128.12.0-1.el9_6.x86_64.rpm","firefox-debugsource-0:128.12.0-1.el9_6.aarch64.rpm","firefox-debugsource-0:128.12.0-1.el9_6.ppc64le.rpm","firefox-debugsource-0:128.12.0-1.el9_6.s390x.rpm","firefox-debugsource-0:128.12.0-1.el9_6.x86_64.rpm","firefox-x11-0:128.12.0-1.el9_6.aarch64.rpm","firefox-x11-0:128.12.0-1.el9_6.ppc64le.rpm","firefox-x11-0:128.12.0-1.el9_6.s390x.rpm","firefox-x11-0:128.12.0-1.el9_6.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2025:10072","url":"https://access.redhat.com/errata/RHSA-2025:10072","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2025:10073","synopsis":"Important: firefox security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for firefox.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* firefox: Content-Disposition header ignored when a file is included in an embed or object tag (CVE-2025-6430)\n\n* firefox: Use-after-free in FontFaceSet (CVE-2025-6424)\n\n* firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429)\n\n* firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 10"],"fixes":[{"ticket":"2374555","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374555","description":""},{"ticket":"2374559","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374559","description":""},{"ticket":"2374561","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374561","description":""},{"ticket":"2374562","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374562","description":""}],"cves":[{"name":"CVE-2025-6424","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6424","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.5","cwe":"CWE-416"},{"name":"CVE-2025-6425","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6425","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-200"},{"name":"CVE-2025-6429","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6429","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-706"},{"name":"CVE-2025-6430","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6430","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-79"}],"references":[],"publishedAt":"2025-10-03T19:56:45.270310Z","rpms":{"Rocky Linux 10":{"nvras":["firefox-0:128.12.0-1.el10_0.aarch64.rpm","firefox-0:128.12.0-1.el10_0.ppc64le.rpm","firefox-0:128.12.0-1.el10_0.s390x.rpm","firefox-0:128.12.0-1.el10_0.src.rpm","firefox-0:128.12.0-1.el10_0.x86_64.rpm","firefox-debuginfo-0:128.12.0-1.el10_0.aarch64.rpm","firefox-debuginfo-0:128.12.0-1.el10_0.ppc64le.rpm","firefox-debuginfo-0:128.12.0-1.el10_0.s390x.rpm","firefox-debuginfo-0:128.12.0-1.el10_0.x86_64.rpm","firefox-debugsource-0:128.12.0-1.el10_0.aarch64.rpm","firefox-debugsource-0:128.12.0-1.el10_0.ppc64le.rpm","firefox-debugsource-0:128.12.0-1.el10_0.s390x.rpm","firefox-debugsource-0:128.12.0-1.el10_0.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2025:10073","url":"https://access.redhat.com/errata/RHSA-2025:10073","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2025:10074","synopsis":"Important: firefox security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for firefox.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* firefox: Content-Disposition header ignored when a file is included in an embed or object tag (CVE-2025-6430)\n\n* firefox: Use-after-free in FontFaceSet (CVE-2025-6424)\n\n* firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429)\n\n* firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2374555","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374555","description":""},{"ticket":"2374559","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374559","description":""},{"ticket":"2374561","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374561","description":""},{"ticket":"2374562","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374562","description":""}],"cves":[{"name":"CVE-2025-6424","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6424","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.5","cwe":"CWE-416"},{"name":"CVE-2025-6425","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6425","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-200"},{"name":"CVE-2025-6429","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6429","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-706"},{"name":"CVE-2025-6430","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6430","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-79"}],"references":[],"publishedAt":"2025-07-29T13:38:41.630147Z","rpms":{"Rocky Linux 8":{"nvras":["firefox-0:128.12.0-1.el8_10.aarch64.rpm","firefox-0:128.12.0-1.el8_10.src.rpm","firefox-0:128.12.0-1.el8_10.x86_64.rpm","firefox-debuginfo-0:128.12.0-1.el8_10.aarch64.rpm","firefox-debuginfo-0:128.12.0-1.el8_10.x86_64.rpm","firefox-debugsource-0:128.12.0-1.el8_10.aarch64.rpm","firefox-debugsource-0:128.12.0-1.el8_10.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2025:10074","url":"https://access.redhat.com/errata/RHSA-2025:10074","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2025:10128","synopsis":"Important: python3 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for python3.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)\n\n* cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718)\n\n* cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)\n\n* python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)\n\n* cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2370010","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2370010","description":""},{"ticket":"2370013","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2370013","description":""},{"ticket":"2370014","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2370014","description":""},{"ticket":"2370016","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2370016","description":""},{"ticket":"2372426","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2372426","description":""}],"cves":[{"name":"CVE-2024-12718","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12718","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","cvss3BaseScore":"7.6","cwe":"CWE-22"},{"name":"CVE-2025-4138","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4138","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3BaseScore":"7.5","cwe":"CWE-22"},{"name":"CVE-2025-4330","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4330","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3BaseScore":"7.3","cwe":"CWE-22"},{"name":"CVE-2025-4435","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4435","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3BaseScore":"7.5","cwe":"CWE-706"},{"name":"CVE-2025-4517","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4517","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","cvss3BaseScore":"7.6","cwe":"CWE-22"}],"references":[],"publishedAt":"2026-05-21T16:24:39.636092Z","rpms":{"Rocky Linux 8":{"nvras":["python3-0:3.6.8-70.el8_10.rocky.0.src.rpm","platform-python-0:3.6.8-70.el8_10.rocky.0.aarch64.rpm","platform-python-0:3.6.8-70.el8_10.rocky.0.i686.rpm","platform-python-0:3.6.8-70.el8_10.rocky.0.x86_64.rpm","platform-python-debug-0:3.6.8-70.el8_10.rocky.0.aarch64.rpm","platform-python-debug-0:3.6.8-70.el8_10.rocky.0.i686.rpm","platform-python-debug-0:3.6.8-70.el8_10.rocky.0.x86_64.rpm","platform-python-devel-0:3.6.8-70.el8_10.rocky.0.aarch64.rpm","platform-python-devel-0:3.6.8-70.el8_10.rocky.0.i686.rpm","platform-python-devel-0:3.6.8-70.el8_10.rocky.0.x86_64.rpm","python3-idle-0:3.6.8-70.el8_10.rocky.0.aarch64.rpm","python3-idle-0:3.6.8-70.el8_10.rocky.0.i686.rpm","python3-idle-0:3.6.8-70.el8_10.rocky.0.x86_64.rpm","python3-libs-0:3.6.8-70.el8_10.rocky.0.aarch64.rpm","python3-libs-0:3.6.8-70.el8_10.rocky.0.i686.rpm","python3-libs-0:3.6.8-70.el8_10.rocky.0.x86_64.rpm","python3-test-0:3.6.8-70.el8_10.rocky.0.aarch64.rpm","python3-test-0:3.6.8-70.el8_10.rocky.0.i686.rpm","python3-test-0:3.6.8-70.el8_10.rocky.0.x86_64.rpm","python3-tkinter-0:3.6.8-70.el8_10.rocky.0.aarch64.rpm","python3-tkinter-0:3.6.8-70.el8_10.rocky.0.i686.rpm","python3-tkinter-0:3.6.8-70.el8_10.rocky.0.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2025:10128","url":"https://access.redhat.com/errata/RHSA-2025:10128","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2025:10195","synopsis":"Important: thunderbird security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for thunderbird.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-5986)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 10"],"fixes":[{"ticket":"2372281","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2372281","description":""},{"ticket":"2374555","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374555","description":""},{"ticket":"2374559","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374559","description":""},{"ticket":"2374561","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374561","description":""},{"ticket":"2374562","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374562","description":""}],"cves":[{"name":"CVE-2025-5986","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5986","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-400"},{"name":"CVE-2025-6424","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6424","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.5","cwe":"CWE-416"},{"name":"CVE-2025-6425","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6425","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-200"},{"name":"CVE-2025-6429","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6429","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-706"},{"name":"CVE-2025-6430","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6430","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-79"}],"references":[],"publishedAt":"2025-10-03T19:56:45.270310Z","rpms":{"Rocky Linux 10":{"nvras":["thunderbird-0:128.12.0-1.el10_0.aarch64.rpm","thunderbird-0:128.12.0-1.el10_0.ppc64le.rpm","thunderbird-0:128.12.0-1.el10_0.s390x.rpm","thunderbird-0:128.12.0-1.el10_0.src.rpm","thunderbird-0:128.12.0-1.el10_0.x86_64.rpm","thunderbird-debuginfo-0:128.12.0-1.el10_0.aarch64.rpm","thunderbird-debuginfo-0:128.12.0-1.el10_0.ppc64le.rpm","thunderbird-debuginfo-0:128.12.0-1.el10_0.s390x.rpm","thunderbird-debuginfo-0:128.12.0-1.el10_0.x86_64.rpm","thunderbird-debugsource-0:128.12.0-1.el10_0.aarch64.rpm","thunderbird-debugsource-0:128.12.0-1.el10_0.ppc64le.rpm","thunderbird-debugsource-0:128.12.0-1.el10_0.s390x.rpm","thunderbird-debugsource-0:128.12.0-1.el10_0.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2025:10195","url":"https://access.redhat.com/errata/RHSA-2025:10195","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2025:10196","synopsis":"Important: thunderbird security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for thunderbird.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-5986)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"2372281","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2372281","description":""},{"ticket":"2374555","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374555","description":""},{"ticket":"2374559","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374559","description":""},{"ticket":"2374561","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374561","description":""},{"ticket":"2374562","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374562","description":""}],"cves":[{"name":"CVE-2025-5986","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5986","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-400"},{"name":"CVE-2025-6424","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6424","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.5","cwe":"CWE-416"},{"name":"CVE-2025-6425","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6425","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-200"},{"name":"CVE-2025-6429","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6429","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-706"},{"name":"CVE-2025-6430","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6430","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-79"}],"references":[],"publishedAt":"2025-10-04T00:11:30.916420Z","rpms":{"Rocky Linux 9":{"nvras":["thunderbird-0:128.12.0-1.el9_6.aarch64.rpm","thunderbird-0:128.12.0-1.el9_6.ppc64le.rpm","thunderbird-0:128.12.0-1.el9_6.s390x.rpm","thunderbird-0:128.12.0-1.el9_6.src.rpm","thunderbird-0:128.12.0-1.el9_6.x86_64.rpm","thunderbird-debuginfo-0:128.12.0-1.el9_6.aarch64.rpm","thunderbird-debuginfo-0:128.12.0-1.el9_6.ppc64le.rpm","thunderbird-debuginfo-0:128.12.0-1.el9_6.s390x.rpm","thunderbird-debuginfo-0:128.12.0-1.el9_6.x86_64.rpm","thunderbird-debugsource-0:128.12.0-1.el9_6.aarch64.rpm","thunderbird-debugsource-0:128.12.0-1.el9_6.ppc64le.rpm","thunderbird-debugsource-0:128.12.0-1.el9_6.s390x.rpm","thunderbird-debugsource-0:128.12.0-1.el9_6.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2025:10196","url":"https://access.redhat.com/errata/RHSA-2025:10196","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2025:10246","synopsis":"Important: thunderbird security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for thunderbird.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-5986)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2372281","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2372281","description":""},{"ticket":"2374555","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374555","description":""},{"ticket":"2374559","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374559","description":""},{"ticket":"2374561","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374561","description":""},{"ticket":"2374562","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2374562","description":""}],"cves":[{"name":"CVE-2025-5986","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5986","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-400"},{"name":"CVE-2025-6424","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6424","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.5","cwe":"CWE-416"},{"name":"CVE-2025-6425","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6425","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-200"},{"name":"CVE-2025-6429","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6429","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-706"},{"name":"CVE-2025-6430","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6430","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-79"}],"references":[],"publishedAt":"2025-07-29T13:38:41.630147Z","rpms":{"Rocky Linux 8":{"nvras":["thunderbird-debugsource-0:128.12.0-1.el8_10.x86_64.rpm","thunderbird-0:128.12.0-1.el8_10.aarch64.rpm","thunderbird-0:128.12.0-1.el8_10.src.rpm","thunderbird-0:128.12.0-1.el8_10.x86_64.rpm","thunderbird-debuginfo-0:128.12.0-1.el8_10.aarch64.rpm","thunderbird-debuginfo-0:128.12.0-1.el8_10.x86_64.rpm","thunderbird-debugsource-0:128.12.0-1.el8_10.aarch64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2025:10246","url":"https://access.redhat.com/errata/RHSA-2025:10246","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2025:10353","synopsis":"Moderate: socat security update","severity":"SEVERITY_MODERATE","topic":"An update is available for socat.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The socat utility establishes bi-directional byte streams and transfers data between them. The utility can establish streams between a large set of channels, such as files, pipes, devices, and sockets.\n\nSecurity Fix(es):\n\n* socat: arbitrary file overwrite via predictable /tmp directory (CVE-2024-54661)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"2330297","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2330297","description":""}],"cves":[{"name":"CVE-2024-54661","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54661","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"5.3","cwe":"CWE-377"}],"references":[],"publishedAt":"2025-10-04T00:11:30.916420Z","rpms":{"Rocky Linux 9":{"nvras":["socat-0:1.7.4.1-6.el9_6.1.aarch64.rpm","socat-0:1.7.4.1-6.el9_6.1.ppc64le.rpm","socat-0:1.7.4.1-6.el9_6.1.s390x.rpm","socat-0:1.7.4.1-6.el9_6.1.src.rpm","socat-0:1.7.4.1-6.el9_6.1.x86_64.rpm","socat-debuginfo-0:1.7.4.1-6.el9_6.1.aarch64.rpm","socat-debuginfo-0:1.7.4.1-6.el9_6.1.ppc64le.rpm","socat-debuginfo-0:1.7.4.1-6.el9_6.1.s390x.rpm","socat-debuginfo-0:1.7.4.1-6.el9_6.1.x86_64.rpm","socat-debugsource-0:1.7.4.1-6.el9_6.1.aarch64.rpm","socat-debugsource-0:1.7.4.1-6.el9_6.1.ppc64le.rpm","socat-debugsource-0:1.7.4.1-6.el9_6.1.s390x.rpm","socat-debugsource-0:1.7.4.1-6.el9_6.1.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2025:10353","url":"https://access.redhat.com/errata/RHSA-2025:10353","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2025:10407","synopsis":"Moderate: python-setuptools security update","severity":"SEVERITY_MODERATE","topic":"An update is available for python-setuptools.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"2366982","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2366982","description":""}],"cves":[{"name":"CVE-2025-47273","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47273","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L","cvss3BaseScore":"7.1","cwe":"CWE-22"}],"references":[],"publishedAt":"2025-10-04T00:11:48.040698Z","rpms":{"Rocky Linux 9":{"nvras":["python3-setuptools-0:53.0.0-13.el9_6.1.noarch.rpm","python3-setuptools-wheel-0:53.0.0-13.el9_6.1.noarch.rpm","python-setuptools-0:53.0.0-13.el9_6.1.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2025:10407","url":"https://access.redhat.com/errata/RHSA-2025:10407","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2025:10549","synopsis":"Important: podman security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for podman.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.\n\nSecurity Fix(es):\n\n* podman: podman missing TLS verification (CVE-2025-6032)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 10"],"fixes":[{"ticket":"2372501","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2372501","description":""}],"cves":[{"name":"CVE-2025-6032","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6032","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3BaseScore":"8.3","cwe":"CWE-295"}],"references":[],"publishedAt":"2025-10-03T19:56:45.270310Z","rpms":{"Rocky Linux 10":{"nvras":["podman-6:5.4.0-12.el10_0.aarch64.rpm","podman-6:5.4.0-12.el10_0.ppc64le.rpm","podman-6:5.4.0-12.el10_0.s390x.rpm","podman-6:5.4.0-12.el10_0.src.rpm","podman-6:5.4.0-12.el10_0.x86_64.rpm","podman-debuginfo-6:5.4.0-12.el10_0.aarch64.rpm","podman-debuginfo-6:5.4.0-12.el10_0.ppc64le.rpm","podman-debuginfo-6:5.4.0-12.el10_0.s390x.rpm","podman-debuginfo-6:5.4.0-12.el10_0.x86_64.rpm","podman-debugsource-6:5.4.0-12.el10_0.aarch64.rpm","podman-debugsource-6:5.4.0-12.el10_0.ppc64le.rpm","podman-debugsource-6:5.4.0-12.el10_0.s390x.rpm","podman-debugsource-6:5.4.0-12.el10_0.x86_64.rpm","podman-docker-6:5.4.0-12.el10_0.noarch.rpm","podman-remote-6:5.4.0-12.el10_0.aarch64.rpm","podman-remote-6:5.4.0-12.el10_0.ppc64le.rpm","podman-remote-6:5.4.0-12.el10_0.s390x.rpm","podman-remote-6:5.4.0-12.el10_0.x86_64.rpm","podman-remote-debuginfo-6:5.4.0-12.el10_0.aarch64.rpm","podman-remote-debuginfo-6:5.4.0-12.el10_0.ppc64le.rpm","podman-remote-debuginfo-6:5.4.0-12.el10_0.s390x.rpm","podman-remote-debuginfo-6:5.4.0-12.el10_0.x86_64.rpm","podman-tests-6:5.4.0-12.el10_0.aarch64.rpm","podman-tests-6:5.4.0-12.el10_0.ppc64le.rpm","podman-tests-6:5.4.0-12.el10_0.s390x.rpm","podman-tests-6:5.4.0-12.el10_0.x86_64.rpm","podman-tests-debuginfo-6:5.4.0-12.el10_0.aarch64.rpm","podman-tests-debuginfo-6:5.4.0-12.el10_0.ppc64le.rpm","podman-tests-debuginfo-6:5.4.0-12.el10_0.s390x.rpm","podman-tests-debuginfo-6:5.4.0-12.el10_0.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2025:10549","url":"https://access.redhat.com/errata/RHSA-2025:10549","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2025:10550","synopsis":"Important: podman security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for podman.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.\n\nSecurity Fix(es):\n\n* podman: podman missing TLS verification (CVE-2025-6032)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"2372501","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2372501","description":""}],"cves":[{"name":"CVE-2025-6032","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6032","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3BaseScore":"8.3","cwe":"CWE-295"}],"references":[],"publishedAt":"2025-10-04T00:11:30.916420Z","rpms":{"Rocky Linux 9":{"nvras":["podman-5:5.4.0-12.el9_6.aarch64.rpm","podman-5:5.4.0-12.el9_6.ppc64le.rpm","podman-5:5.4.0-12.el9_6.s390x.rpm","podman-5:5.4.0-12.el9_6.src.rpm","podman-5:5.4.0-12.el9_6.x86_64.rpm","podman-debuginfo-5:5.4.0-12.el9_6.aarch64.rpm","podman-debuginfo-5:5.4.0-12.el9_6.ppc64le.rpm","podman-debuginfo-5:5.4.0-12.el9_6.s390x.rpm","podman-debuginfo-5:5.4.0-12.el9_6.x86_64.rpm","podman-debugsource-5:5.4.0-12.el9_6.aarch64.rpm","podman-debugsource-5:5.4.0-12.el9_6.ppc64le.rpm","podman-debugsource-5:5.4.0-12.el9_6.s390x.rpm","podman-debugsource-5:5.4.0-12.el9_6.x86_64.rpm","podman-docker-5:5.4.0-12.el9_6.noarch.rpm","podman-plugins-5:5.4.0-12.el9_6.aarch64.rpm","podman-plugins-5:5.4.0-12.el9_6.ppc64le.rpm","podman-plugins-5:5.4.0-12.el9_6.s390x.rpm","podman-plugins-5:5.4.0-12.el9_6.x86_64.rpm","podman-plugins-debuginfo-5:5.4.0-12.el9_6.aarch64.rpm","podman-plugins-debuginfo-5:5.4.0-12.el9_6.ppc64le.rpm","podman-plugins-debuginfo-5:5.4.0-12.el9_6.s390x.rpm","podman-plugins-debuginfo-5:5.4.0-12.el9_6.x86_64.rpm","podman-remote-5:5.4.0-12.el9_6.aarch64.rpm","podman-remote-5:5.4.0-12.el9_6.ppc64le.rpm","podman-remote-5:5.4.0-12.el9_6.s390x.rpm","podman-remote-5:5.4.0-12.el9_6.x86_64.rpm","podman-remote-debuginfo-5:5.4.0-12.el9_6.aarch64.rpm","podman-remote-debuginfo-5:5.4.0-12.el9_6.ppc64le.rpm","podman-remote-debuginfo-5:5.4.0-12.el9_6.s390x.rpm","podman-remote-debuginfo-5:5.4.0-12.el9_6.x86_64.rpm","podman-tests-5:5.4.0-12.el9_6.aarch64.rpm","podman-tests-5:5.4.0-12.el9_6.ppc64le.rpm","podman-tests-5:5.4.0-12.el9_6.s390x.rpm","podman-tests-5:5.4.0-12.el9_6.x86_64.rpm","podman-tests-debuginfo-5:5.4.0-12.el9_6.aarch64.rpm","podman-tests-debuginfo-5:5.4.0-12.el9_6.ppc64le.rpm","podman-tests-debuginfo-5:5.4.0-12.el9_6.s390x.rpm","podman-tests-debuginfo-5:5.4.0-12.el9_6.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2025:10550","url":"https://access.redhat.com/errata/RHSA-2025:10550","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2025:10585","synopsis":"Moderate: jq security update","severity":"SEVERITY_MODERATE","topic":"An update is available for jq.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text.\n\nSecurity Fix(es):\n\n* jq: jq has signed integer overflow in jv.c:jvp_array_write (CVE-2024-23337)\n\n* jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) (CVE-2025-48060)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"2367807","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2367807","description":""},{"ticket":"2367842","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2367842","description":""}],"cves":[{"name":"CVE-2024-23337","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23337","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"4.3","cwe":"CWE-125"},{"name":"CVE-2025-48060","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48060","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.5","cwe":"CWE-126"}],"references":[],"publishedAt":"2025-10-04T00:11:48.040698Z","rpms":{"Rocky Linux 9":{"nvras":["jq-0:1.6-17.el9_6.2.aarch64.rpm","jq-0:1.6-17.el9_6.2.i686.rpm","jq-0:1.6-17.el9_6.2.ppc64le.rpm","jq-0:1.6-17.el9_6.2.s390x.rpm","jq-0:1.6-17.el9_6.2.src.rpm","jq-0:1.6-17.el9_6.2.x86_64.rpm","jq-debuginfo-0:1.6-17.el9_6.2.aarch64.rpm","jq-debuginfo-0:1.6-17.el9_6.2.ppc64le.rpm","jq-debuginfo-0:1.6-17.el9_6.2.s390x.rpm","jq-debuginfo-0:1.6-17.el9_6.2.x86_64.rpm","jq-debugsource-0:1.6-17.el9_6.2.aarch64.rpm","jq-debugsource-0:1.6-17.el9_6.2.ppc64le.rpm","jq-debugsource-0:1.6-17.el9_6.2.s390x.rpm","jq-debugsource-0:1.6-17.el9_6.2.x86_64.rpm","jq-devel-0:1.6-17.el9_6.2.aarch64.rpm","jq-devel-0:1.6-17.el9_6.2.i686.rpm","jq-devel-0:1.6-17.el9_6.2.ppc64le.rpm","jq-devel-0:1.6-17.el9_6.2.s390x.rpm","jq-devel-0:1.6-17.el9_6.2.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2025:10585","url":"https://access.redhat.com/errata/RHSA-2025:10585","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2025:10618","synopsis":"Moderate: jq security update","severity":"SEVERITY_MODERATE","topic":"An update is available for jq.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text.\n\nSecurity Fix(es):\n\n* jq: jq has signed integer overflow in jv.c:jvp_array_write (CVE-2024-23337)\n\n* jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) (CVE-2025-48060)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2367807","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2367807","description":""},{"ticket":"2367842","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2367842","description":""}],"cves":[{"name":"CVE-2024-23337","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23337","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"4.3","cwe":"CWE-125"},{"name":"CVE-2025-48060","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48060","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.5","cwe":"CWE-126"}],"references":[],"publishedAt":"2025-07-29T13:38:41.630147Z","rpms":{"Rocky Linux 8":{"nvras":["jq-devel-0:1.6-11.el8_10.i686.rpm","jq-devel-0:1.6-11.el8_10.x86_64.rpm","jq-debugsource-0:1.6-11.el8_10.i686.rpm","jq-debugsource-0:1.6-11.el8_10.x86_64.rpm","jq-devel-0:1.6-11.el8_10.aarch64.rpm","jq-0:1.6-11.el8_10.aarch64.rpm","jq-0:1.6-11.el8_10.i686.rpm","jq-0:1.6-11.el8_10.src.rpm","jq-0:1.6-11.el8_10.x86_64.rpm","jq-debuginfo-0:1.6-11.el8_10.aarch64.rpm","jq-debuginfo-0:1.6-11.el8_10.i686.rpm","jq-debuginfo-0:1.6-11.el8_10.x86_64.rpm","jq-debugsource-0:1.6-11.el8_10.aarch64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2025:10618","url":"https://access.redhat.com/errata/RHSA-2025:10618","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2025:10630","synopsis":"Important: libxml2 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for libxml2.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libxml2 library is a development toolbox providing the implementation of various XML standards.\n\nSecurity Fix(es):\n\n* libxml: Heap use after free (UAF) leads to Denial of service (DoS) (CVE-2025-49794)\n\n* libxml: Null pointer dereference leads to Denial of service (DoS) (CVE-2025-49795)\n\n* libxml: Type confusion leads to Denial of service (DoS) (CVE-2025-49796)\n\n* libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2 (CVE-2025-6021)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 10"],"fixes":[{"ticket":"2372373","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2372373","description":""},{"ticket":"2372379","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2372379","description":""},{"ticket":"2372385","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2372385","description":""},{"ticket":"2372406","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2372406","description":""}],"cves":[{"name":"CVE-2025-49794","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49794","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3BaseScore":"9.1","cwe":"CWE-825"},{"name":"CVE-2025-49795","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49795","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-825"},{"name":"CVE-2025-49796","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49796","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3BaseScore":"9.1","cwe":"CWE-125"},{"name":"CVE-2025-6021","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6021","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-121"}],"references":[],"publishedAt":"2025-10-03T19:56:45.270310Z","rpms":{"Rocky Linux 10":{"nvras":["libxml2-0:2.12.5-7.el10_0.aarch64.rpm","libxml2-0:2.12.5-7.el10_0.ppc64le.rpm","libxml2-0:2.12.5-7.el10_0.s390x.rpm","libxml2-0:2.12.5-7.el10_0.src.rpm","libxml2-0:2.12.5-7.el10_0.x86_64.rpm","libxml2-debuginfo-0:2.12.5-7.el10_0.aarch64.rpm","libxml2-debuginfo-0:2.12.5-7.el10_0.ppc64le.rpm","libxml2-debuginfo-0:2.12.5-7.el10_0.s390x.rpm","libxml2-debuginfo-0:2.12.5-7.el10_0.x86_64.rpm","libxml2-debugsource-0:2.12.5-7.el10_0.aarch64.rpm","libxml2-debugsource-0:2.12.5-7.el10_0.ppc64le.rpm","libxml2-debugsource-0:2.12.5-7.el10_0.s390x.rpm","libxml2-debugsource-0:2.12.5-7.el10_0.x86_64.rpm","libxml2-devel-0:2.12.5-7.el10_0.aarch64.rpm","libxml2-devel-0:2.12.5-7.el10_0.ppc64le.rpm","libxml2-devel-0:2.12.5-7.el10_0.s390x.rpm","libxml2-devel-0:2.12.5-7.el10_0.x86_64.rpm","libxml2-static-0:2.12.5-7.el10_0.aarch64.rpm","libxml2-static-0:2.12.5-7.el10_0.ppc64le.rpm","libxml2-static-0:2.12.5-7.el10_0.s390x.rpm","libxml2-static-0:2.12.5-7.el10_0.x86_64.rpm","python3-libxml2-0:2.12.5-7.el10_0.aarch64.rpm","python3-libxml2-0:2.12.5-7.el10_0.ppc64le.rpm","python3-libxml2-0:2.12.5-7.el10_0.s390x.rpm","python3-libxml2-0:2.12.5-7.el10_0.x86_64.rpm","python3-libxml2-debuginfo-0:2.12.5-7.el10_0.aarch64.rpm","python3-libxml2-debuginfo-0:2.12.5-7.el10_0.ppc64le.rpm","python3-libxml2-debuginfo-0:2.12.5-7.el10_0.s390x.rpm","python3-libxml2-debuginfo-0:2.12.5-7.el10_0.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2025:10630","url":"https://access.redhat.com/errata/RHSA-2025:10630","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2025:10631","synopsis":"Moderate: gnome-remote-desktop security update","severity":"SEVERITY_MODERATE","topic":"An update is available for gnome-remote-desktop.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment.\n\nSecurity Fix(es):\n\n* gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs (CVE-2025-5024)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"2367717","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2367717","description":""}],"cves":[{"name":"CVE-2025-5024","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5024","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H","cvss3BaseScore":"7.4","cwe":"CWE-400"}],"references":[],"publishedAt":"2025-10-04T00:11:30.916420Z","rpms":{"Rocky Linux 9":{"nvras":["gnome-remote-desktop-0:40.0-11.el9_6.aarch64.rpm","gnome-remote-desktop-0:40.0-11.el9_6.ppc64le.rpm","gnome-remote-desktop-0:40.0-11.el9_6.s390x.rpm","gnome-remote-desktop-0:40.0-11.el9_6.src.rpm","gnome-remote-desktop-0:40.0-11.el9_6.x86_64.rpm","gnome-remote-desktop-debuginfo-0:40.0-11.el9_6.aarch64.rpm","gnome-remote-desktop-debuginfo-0:40.0-11.el9_6.ppc64le.rpm","gnome-remote-desktop-debuginfo-0:40.0-11.el9_6.s390x.rpm","gnome-remote-desktop-debuginfo-0:40.0-11.el9_6.x86_64.rpm","gnome-remote-desktop-debugsource-0:40.0-11.el9_6.aarch64.rpm","gnome-remote-desktop-debugsource-0:40.0-11.el9_6.ppc64le.rpm","gnome-remote-desktop-debugsource-0:40.0-11.el9_6.s390x.rpm","gnome-remote-desktop-debugsource-0:40.0-11.el9_6.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2025:10631","url":"https://access.redhat.com/errata/RHSA-2025:10631","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2025:10635","synopsis":"Moderate: gnome-remote-desktop security update","severity":"SEVERITY_MODERATE","topic":"An update is available for gnome-remote-desktop.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment.\n\nSecurity Fix(es):\n\n* gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs (CVE-2025-5024)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 10"],"fixes":[{"ticket":"2367717","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2367717","description":""}],"cves":[{"name":"CVE-2025-5024","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5024","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H","cvss3BaseScore":"7.4","cwe":"CWE-400"}],"references":[],"publishedAt":"2025-10-03T19:56:45.270310Z","rpms":{"Rocky Linux 10":{"nvras":["gnome-remote-desktop-0:47.3-2.el10_0.aarch64.rpm","gnome-remote-desktop-0:47.3-2.el10_0.ppc64le.rpm","gnome-remote-desktop-0:47.3-2.el10_0.s390x.rpm","gnome-remote-desktop-0:47.3-2.el10_0.src.rpm","gnome-remote-desktop-0:47.3-2.el10_0.x86_64.rpm","gnome-remote-desktop-debuginfo-0:47.3-2.el10_0.aarch64.rpm","gnome-remote-desktop-debuginfo-0:47.3-2.el10_0.ppc64le.rpm","gnome-remote-desktop-debuginfo-0:47.3-2.el10_0.s390x.rpm","gnome-remote-desktop-debuginfo-0:47.3-2.el10_0.x86_64.rpm","gnome-remote-desktop-debugsource-0:47.3-2.el10_0.aarch64.rpm","gnome-remote-desktop-debugsource-0:47.3-2.el10_0.ppc64le.rpm","gnome-remote-desktop-debugsource-0:47.3-2.el10_0.s390x.rpm","gnome-remote-desktop-debugsource-0:47.3-2.el10_0.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2025:10635","url":"https://access.redhat.com/errata/RHSA-2025:10635","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2025:10672","synopsis":"Moderate: go-toolset:rhel8 security update","severity":"SEVERITY_MODERATE","topic":"An update is available for module.go-toolset, golang, module.delve, go-toolset, module.golang, delve.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. \n\nSecurity Fix(es):\n\n* net/http: Sensitive headers not cleared on cross-origin redirect in net/http (CVE-2025-4673)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2373305","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2373305","description":""}],"cves":[{"name":"CVE-2025-4673","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4673","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3BaseScore":"6.8","cwe":null}],"references":[],"publishedAt":"2025-07-29T13:38:41.630147Z","rpms":{"Rocky Linux 8":{"nvras":["delve-0:1.24.1-1.module+el8.10.0+1951+c74bd827.aarch64.rpm","delve-0:1.24.1-1.module+el8.10.0+1987+42f155bb.aarch64.rpm","delve-0:1.24.1-1.module+el8.10.0+1951+c74bd827.src.rpm","delve-0:1.24.1-1.module+el8.10.0+1987+42f155bb.src.rpm","delve-0:1.24.1-1.module+el8.10.0+1951+c74bd827.x86_64.rpm","delve-0:1.24.1-1.module+el8.10.0+1987+42f155bb.x86_64.rpm","delve-debuginfo-0:1.24.1-1.module+el8.10.0+1951+c74bd827.aarch64.rpm","delve-debuginfo-0:1.24.1-1.module+el8.10.0+1987+42f155bb.aarch64.rpm","delve-debuginfo-0:1.24.1-1.module+el8.10.0+1951+c74bd827.x86_64.rpm","delve-debuginfo-0:1.24.1-1.module+el8.10.0+1987+42f155bb.x86_64.rpm","delve-debugsource-0:1.24.1-1.module+el8.10.0+1987+42f155bb.aarch64.rpm","delve-debugsource-0:1.24.1-1.module+el8.10.0+1951+c74bd827.aarch64.rpm","delve-debugsource-0:1.24.1-1.module+el8.10.0+1951+c74bd827.x86_64.rpm","delve-debugsource-0:1.24.1-1.module+el8.10.0+1987+42f155bb.x86_64.rpm","golang-0:1.24.4-1.module+el8.10.0+2008+0bb8dc3e.aarch64.rpm","golang-0:1.24.4-1.module+el8.10.0+2008+0bb8dc3e.src.rpm","golang-0:1.24.4-1.module+el8.10.0+2008+0bb8dc3e.x86_64.rpm","golang-bin-0:1.24.4-1.module+el8.10.0+2008+0bb8dc3e.aarch64.rpm","golang-bin-0:1.24.4-1.module+el8.10.0+2008+0bb8dc3e.x86_64.rpm","golang-docs-0:1.24.4-1.module+el8.10.0+2008+0bb8dc3e.noarch.rpm","golang-misc-0:1.24.4-1.module+el8.10.0+2008+0bb8dc3e.noarch.rpm","golang-src-0:1.24.4-1.module+el8.10.0+2008+0bb8dc3e.noarch.rpm","golang-tests-0:1.24.4-1.module+el8.10.0+2008+0bb8dc3e.noarch.rpm","go-toolset-0:1.24.4-1.module+el8.10.0+2008+0bb8dc3e.aarch64.rpm","go-toolset-0:1.24.4-1.module+el8.10.0+2008+0bb8dc3e.src.rpm","go-toolset-0:1.24.4-1.module+el8.10.0+2008+0bb8dc3e.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2025:10672","url":"https://access.redhat.com/errata/RHSA-2025:10672","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2025:10676","synopsis":"Moderate: golang security update","severity":"SEVERITY_MODERATE","topic":"An update is available for golang.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The golang packages provide the Go programming language compiler.\n\nSecurity Fix(es):\n\n* net/http: Sensitive headers not cleared on cross-origin redirect in net/http (CVE-2025-4673)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"2373305","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2373305","description":""}],"cves":[{"name":"CVE-2025-4673","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4673","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3BaseScore":"6.8","cwe":null}],"references":[],"publishedAt":"2025-10-04T00:11:30.916420Z","rpms":{"Rocky Linux 9":{"nvras":["golang-0:1.24.4-1.el9_6.aarch64.rpm","golang-0:1.24.4-1.el9_6.ppc64le.rpm","golang-0:1.24.4-1.el9_6.s390x.rpm","golang-0:1.24.4-1.el9_6.src.rpm","golang-0:1.24.4-1.el9_6.x86_64.rpm","golang-bin-0:1.24.4-1.el9_6.aarch64.rpm","golang-bin-0:1.24.4-1.el9_6.ppc64le.rpm","golang-bin-0:1.24.4-1.el9_6.s390x.rpm","golang-bin-0:1.24.4-1.el9_6.x86_64.rpm","golang-docs-0:1.24.4-1.el9_6.noarch.rpm","golang-misc-0:1.24.4-1.el9_6.noarch.rpm","golang-race-0:1.24.4-1.el9_6.aarch64.rpm","golang-race-0:1.24.4-1.el9_6.ppc64le.rpm","golang-race-0:1.24.4-1.el9_6.s390x.rpm","golang-race-0:1.24.4-1.el9_6.x86_64.rpm","golang-src-0:1.24.4-1.el9_6.noarch.rpm","golang-tests-0:1.24.4-1.el9_6.noarch.rpm","go-toolset-0:1.24.4-1.el9_6.aarch64.rpm","go-toolset-0:1.24.4-1.el9_6.ppc64le.rpm","go-toolset-0:1.24.4-1.el9_6.s390x.rpm","go-toolset-0:1.24.4-1.el9_6.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2025:10676","url":"https://access.redhat.com/errata/RHSA-2025:10676","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2025:10677","synopsis":"Moderate: golang security update","severity":"SEVERITY_MODERATE","topic":"An update is available for golang.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The golang packages provide the Go programming language compiler.\n\nSecurity Fix(es):\n\n* net/http: Sensitive headers not cleared on cross-origin redirect in net/http (CVE-2025-4673)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 10"],"fixes":[{"ticket":"2373305","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2373305","description":""}],"cves":[{"name":"CVE-2025-4673","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4673","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3BaseScore":"6.8","cwe":null}],"references":[],"publishedAt":"2025-10-03T19:56:45.270310Z","rpms":{"Rocky Linux 10":{"nvras":["golang-0:1.24.4-1.el10_0.aarch64.rpm","golang-0:1.24.4-1.el10_0.ppc64le.rpm","golang-0:1.24.4-1.el10_0.s390x.rpm","golang-0:1.24.4-1.el10_0.src.rpm","golang-0:1.24.4-1.el10_0.x86_64.rpm","golang-bin-0:1.24.4-1.el10_0.aarch64.rpm","golang-bin-0:1.24.4-1.el10_0.ppc64le.rpm","golang-bin-0:1.24.4-1.el10_0.s390x.rpm","golang-bin-0:1.24.4-1.el10_0.x86_64.rpm","golang-docs-0:1.24.4-1.el10_0.noarch.rpm","golang-misc-0:1.24.4-1.el10_0.noarch.rpm","golang-race-0:1.24.4-1.el10_0.aarch64.rpm","golang-race-0:1.24.4-1.el10_0.ppc64le.rpm","golang-race-0:1.24.4-1.el10_0.s390x.rpm","golang-race-0:1.24.4-1.el10_0.x86_64.rpm","golang-src-0:1.24.4-1.el10_0.noarch.rpm","golang-tests-0:1.24.4-1.el10_0.noarch.rpm","go-toolset-0:1.24.4-1.el10_0.aarch64.rpm","go-toolset-0:1.24.4-1.el10_0.ppc64le.rpm","go-toolset-0:1.24.4-1.el10_0.s390x.rpm","go-toolset-0:1.24.4-1.el10_0.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2025:10677","url":"https://access.redhat.com/errata/RHSA-2025:10677","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2025:10699","synopsis":"Important: libxml2 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for libxml2.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libxml2 library is a development toolbox providing the implementation of various XML standards.\n\nSecurity Fix(es):\n\n* libxml: Heap use after free (UAF) leads to Denial of service (DoS) (CVE-2025-49794)\n\n* libxml: Type confusion leads to Denial of service (DoS) (CVE-2025-49796)\n\n* libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2 (CVE-2025-6021)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 9"],"fixes":[{"ticket":"2372373","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2372373","description":""},{"ticket":"2372385","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2372385","description":""},{"ticket":"2372406","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2372406","description":""}],"cves":[{"name":"CVE-2025-49794","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49794","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3BaseScore":"9.1","cwe":"CWE-825"},{"name":"CVE-2025-49796","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49796","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cvss3BaseScore":"9.1","cwe":"CWE-125"},{"name":"CVE-2025-6021","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6021","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-121"}],"references":[],"publishedAt":"2025-10-04T00:11:30.916420Z","rpms":{"Rocky Linux 9":{"nvras":["libxml2-0:2.9.13-10.el9_6.aarch64.rpm","libxml2-0:2.9.13-10.el9_6.i686.rpm","libxml2-0:2.9.13-10.el9_6.ppc64le.rpm","libxml2-0:2.9.13-10.el9_6.s390x.rpm","libxml2-0:2.9.13-10.el9_6.src.rpm","libxml2-0:2.9.13-10.el9_6.x86_64.rpm","libxml2-debuginfo-0:2.9.13-10.el9_6.aarch64.rpm","libxml2-debuginfo-0:2.9.13-10.el9_6.ppc64le.rpm","libxml2-debuginfo-0:2.9.13-10.el9_6.s390x.rpm","libxml2-debuginfo-0:2.9.13-10.el9_6.x86_64.rpm","libxml2-debugsource-0:2.9.13-10.el9_6.aarch64.rpm","libxml2-debugsource-0:2.9.13-10.el9_6.ppc64le.rpm","libxml2-debugsource-0:2.9.13-10.el9_6.s390x.rpm","libxml2-debugsource-0:2.9.13-10.el9_6.x86_64.rpm","libxml2-devel-0:2.9.13-10.el9_6.aarch64.rpm","libxml2-devel-0:2.9.13-10.el9_6.i686.rpm","libxml2-devel-0:2.9.13-10.el9_6.ppc64le.rpm","libxml2-devel-0:2.9.13-10.el9_6.s390x.rpm","libxml2-devel-0:2.9.13-10.el9_6.x86_64.rpm","python3-libxml2-0:2.9.13-10.el9_6.aarch64.rpm","python3-libxml2-0:2.9.13-10.el9_6.ppc64le.rpm","python3-libxml2-0:2.9.13-10.el9_6.s390x.rpm","python3-libxml2-0:2.9.13-10.el9_6.x86_64.rpm","python3-libxml2-debuginfo-0:2.9.13-10.el9_6.aarch64.rpm","python3-libxml2-debuginfo-0:2.9.13-10.el9_6.ppc64le.rpm","python3-libxml2-debuginfo-0:2.9.13-10.el9_6.s390x.rpm","python3-libxml2-debuginfo-0:2.9.13-10.el9_6.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2025:10699","url":"https://access.redhat.com/errata/RHSA-2025:10699","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2025:10742","synopsis":"Moderate: gnome-remote-desktop security update","severity":"SEVERITY_MODERATE","topic":"An update is available for gnome-remote-desktop.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment.\n\nSecurity Fix(es):\n\n* gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs (CVE-2025-5024)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2367717","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2367717","description":""}],"cves":[{"name":"CVE-2025-5024","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5024","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H","cvss3BaseScore":"7.4","cwe":"CWE-400"}],"references":[],"publishedAt":"2025-07-29T13:38:41.630147Z","rpms":{"Rocky Linux 8":{"nvras":["gnome-remote-desktop-0:0.1.8-4.el8_10.aarch64.rpm","gnome-remote-desktop-0:0.1.8-4.el8_10.src.rpm","gnome-remote-desktop-0:0.1.8-4.el8_10.x86_64.rpm","gnome-remote-desktop-debuginfo-0:0.1.8-4.el8_10.aarch64.rpm","gnome-remote-desktop-debuginfo-0:0.1.8-4.el8_10.x86_64.rpm","gnome-remote-desktop-debugsource-0:0.1.8-4.el8_10.aarch64.rpm","gnome-remote-desktop-debugsource-0:0.1.8-4.el8_10.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2025:10742","url":"https://access.redhat.com/errata/RHSA-2025:10742","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user