Open Source Vulnerabilities

containerd

containerd-2.4.2-1.1 on GA media

buildah

buildah-1.46.0-1.1 on GA media

amazon-cloudwatch-agent

amazon-cloudwatch-agent-1.300073.2-3.1 on GA media

MozillaThunderbird

MozillaThunderbird-153.6.0-1.1 on GA media

aspnetcore-runtime-11.0, aspnetcore-runtime-dbg-11.0, aspnetcore-targeting-pack-11.0, dotnet, dotnet-apphost-pack-11.0, dotnet-host, dotnet-hostfxr-11.0, dotnet-runtime-11.0, dotnet-runtime-dbg-11.0, dotnet-sdk-11.0, dotnet-sdk-11.0-source-built-artifacts, dotnet-sdk-aot-11.0, dotnet-sdk-dbg-11.0, dotnet-targeting-pack-11.0, dotnet-templates-11.0

Important: .NET 11.0 security, bug fix, and enhancement update

aspnetcore-runtime-10.0, aspnetcore-runtime-dbg-10.0, aspnetcore-targeting-pack-10.0, dotnet-apphost-pack-10.0, dotnet-host, dotnet-hostfxr-10.0, dotnet-runtime-10.0, dotnet-runtime-dbg-10.0, dotnet-sdk-10.0, dotnet-sdk-10.0-source-built-artifacts, dotnet-sdk-aot-10.0, dotnet-sdk-dbg-10.0, dotnet-targeting-pack-10.0, dotnet-templates-10.0

Important: .NET 10.0 security, bug fix, and enhancement update

aspnetcore-runtime-10.0, aspnetcore-runtime-dbg-10.0, aspnetcore-targeting-pack-10.0, dotnet-apphost-pack-10.0, dotnet-hostfxr-10.0, dotnet-runtime-10.0, dotnet-runtime-dbg-10.0, dotnet-sdk-10.0, dotnet-sdk-10.0-source-built-artifacts, dotnet-sdk-aot-10.0, dotnet-sdk-dbg-10.0, dotnet-targeting-pack-10.0, dotnet-templates-10.0

Important: .NET 10.0 security, bug fix, and enhancement update

aspnetcore-runtime-9.0, aspnetcore-runtime-dbg-9.0, aspnetcore-targeting-pack-9.0, dotnet-apphost-pack-9.0, dotnet-hostfxr-9.0, dotnet-runtime-9.0, dotnet-runtime-dbg-9.0, dotnet-sdk-9.0, dotnet-sdk-9.0-source-built-artifacts, dotnet-sdk-aot-9.0, dotnet-sdk-dbg-9.0, dotnet-targeting-pack-9.0, dotnet-templates-9.0, netstandard-targeting-pack-2.1

Important: .NET 9.0 security, bug fix, and enhancement update

aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0, dotnet-apphost-pack-8.0, dotnet-hostfxr-8.0, dotnet-runtime-8.0, dotnet-runtime-dbg-8.0, dotnet-sdk-8.0, dotnet-sdk-8.0-source-built-artifacts, dotnet-sdk-dbg-8.0, dotnet-targeting-pack-8.0, dotnet-templates-8.0

Important: .NET 8.0 security, bug fix, and enhancement update

aspnetcore-runtime-9.0, aspnetcore-runtime-dbg-9.0, aspnetcore-targeting-pack-9.0, dotnet-apphost-pack-9.0, dotnet-hostfxr-9.0, dotnet-runtime-9.0, dotnet-runtime-dbg-9.0, dotnet-sdk-9.0, dotnet-sdk-9.0-source-built-artifacts, dotnet-sdk-aot-9.0, dotnet-sdk-dbg-9.0, dotnet-targeting-pack-9.0, dotnet-templates-9.0, netstandard-targeting-pack-2.1

Important: .NET 9.0 security, bug fix, and enhancement update

aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0, dotnet-apphost-pack-8.0, dotnet-hostfxr-8.0, dotnet-runtime-8.0, dotnet-runtime-dbg-8.0, dotnet-sdk-8.0, dotnet-sdk-8.0-source-built-artifacts, dotnet-sdk-dbg-8.0, dotnet-targeting-pack-8.0, dotnet-templates-8.0

Important: .NET 8.0 security, bug fix, and enhancement update

java-21-openjdk, java-21-openjdk-demo, java-21-openjdk-demo-fastdebug, java-21-openjdk-demo-slowdebug, java-21-openjdk-devel, java-21-openjdk-devel-fastdebug, java-21-openjdk-devel-slowdebug, java-21-openjdk-fastdebug, java-21-openjdk-headless, java-21-openjdk-headless-fastdebug, java-21-openjdk-headless-slowdebug, java-21-openjdk-javadoc, java-21-openjdk-javadoc-zip, java-21-openjdk-jmods, java-21-openjdk-jmods-fastdebug, java-21-openjdk-jmods-slowdebug, java-21-openjdk-slowdebug, java-21-openjdk-src, java-21-openjdk-src-fastdebug, java-21-openjdk-src-slowdebug, java-21-openjdk-static-libs, java-21-openjdk-static-libs-fastdebug, java-21-openjdk-static-libs-slowdebug

Important: java-21-openjdk security update for AlmaLinux 10

tomcat, tomcat-admin-webapps, tomcat-docs-webapp, tomcat-el-3.0-api, tomcat-jsp-2.3-api, tomcat-lib, tomcat-servlet-4.0-api, tomcat-webapps

Important: tomcat security update

aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0, dotnet-apphost-pack-8.0, dotnet-hostfxr-8.0, dotnet-runtime-8.0, dotnet-runtime-dbg-8.0, dotnet-sdk-8.0, dotnet-sdk-8.0-source-built-artifacts, dotnet-sdk-dbg-8.0, dotnet-targeting-pack-8.0, dotnet-templates-8.0

Important: .NET 8.0 security, bug fix, and enhancement update

aspnetcore-runtime-10.0, aspnetcore-runtime-dbg-10.0, aspnetcore-targeting-pack-10.0, dotnet-apphost-pack-10.0, dotnet-host, dotnet-hostfxr-10.0, dotnet-runtime-10.0, dotnet-runtime-dbg-10.0, dotnet-sdk-10.0, dotnet-sdk-10.0-source-built-artifacts, dotnet-sdk-aot-10.0, dotnet-sdk-dbg-10.0, dotnet-targeting-pack-10.0, dotnet-templates-10.0

Important: .NET 10.0 security, bug fix, and enhancement update

aspnetcore-runtime-9.0, aspnetcore-runtime-dbg-9.0, aspnetcore-targeting-pack-9.0, dotnet-apphost-pack-9.0, dotnet-hostfxr-9.0, dotnet-runtime-9.0, dotnet-runtime-dbg-9.0, dotnet-sdk-9.0, dotnet-sdk-9.0-source-built-artifacts, dotnet-sdk-aot-9.0, dotnet-sdk-dbg-9.0, dotnet-targeting-pack-9.0, dotnet-templates-9.0, netstandard-targeting-pack-2.1

Important: .NET 9.0 security, bug fix, and enhancement update

curl, curl-minimal, libcurl, libcurl-devel, libcurl-minimal

Moderate: curl security update

python3-pillow, python3-pillow-devel, python3-pillow-doc, python3-pillow-tk

Important: python-pillow security update

httpd, httpd-devel, httpd-filesystem, httpd-manual, httpd-tools, mod_http2, mod_http2, mod_ldap, mod_md, mod_proxy_html, mod_session, mod_ssl

Important: httpd:2.4 security, bug fix, and enhancement update

aspell, aspell-devel

Important: aspell security update

aspell, aspell-devel

Important: aspell security update

bind, bind-chroot, bind-devel, bind-dnssec-utils, bind-doc, bind-libs, bind-license, bind-utils

Important: bind security update

idm-pki-acme, idm-pki-base, idm-pki-ca, idm-pki-java, idm-pki-kra, idm-pki-server, idm-pki-tools, python3-idm-pki

Important: dogtag-pki security update

java-21-openjdk, java-21-openjdk, java-21-openjdk-demo, java-21-openjdk-demo-fastdebug, java-21-openjdk-demo-slowdebug, java-21-openjdk-devel, java-21-openjdk-devel-fastdebug, java-21-openjdk-devel-slowdebug, java-21-openjdk-fastdebug, java-21-openjdk-headless, java-21-openjdk-headless-fastdebug, java-21-openjdk-headless-slowdebug, java-21-openjdk-javadoc, java-21-openjdk-javadoc-zip, java-21-openjdk-jmods, java-21-openjdk-jmods-fastdebug, java-21-openjdk-jmods-slowdebug, java-21-openjdk-slowdebug, java-21-openjdk-src, java-21-openjdk-src-fastdebug, java-21-openjdk-src-slowdebug, java-21-openjdk-static-libs, java-21-openjdk-static-libs-fastdebug, java-21-openjdk-static-libs-slowdebug

Important: java-21-openjdk security update for AlmaLinux 8 and 9

python3.12-urllib3

Important: python3.12-urllib3 security update

nodejs, nodejs-devel, nodejs-docs, nodejs-full-i18n, nodejs-libs, nodejs-nodemon, nodejs-packaging, nodejs-packaging-bundler, npm, v8-13.6-devel

Important: nodejs:24 security, bug fix, and enhancement update

nodejs, nodejs-devel, nodejs-docs, nodejs-full-i18n, nodejs-libs, nodejs-nodemon, nodejs-packaging, nodejs-packaging-bundler, npm, v8-13.6-devel

Important: nodejs:24 security, bug fix, and enhancement update

curl, libcurl, libcurl-devel, libcurl-minimal

Important: curl security, bug fix, and enhancement update

expat, expat-devel

Important: expat security update

bpftool, kernel, kernel-abi-stablelists, kernel-core, kernel-cross-headers, kernel-debug, kernel-debug-core, kernel-debug-devel, kernel-debug-modules, kernel-debug-modules-extra, kernel-devel, kernel-doc, kernel-headers, kernel-modules, kernel-modules-extra, kernel-tools, kernel-tools-libs, kernel-tools-libs-devel, kernel-zfcpdump, kernel-zfcpdump-core, kernel-zfcpdump-devel, kernel-zfcpdump-modules, kernel-zfcpdump-modules-extra, perf, python3-perf

Important: kernel security, bug fix, and enhancement update

kernel-rt, kernel-rt-core, kernel-rt-debug, kernel-rt-debug-core, kernel-rt-debug-devel, kernel-rt-debug-modules, kernel-rt-debug-modules-extra, kernel-rt-devel, kernel-rt-modules, kernel-rt-modules-extra

Important: kernel-rt security, bug fix, and enhancement update

cjose, cjose-devel, mod_auth_openidc

Critical: mod_auth_openidc:2.3 security update

tomcat, tomcat-admin-webapps, tomcat-docs-webapp, tomcat-el-5.0-api, tomcat-jsp-3.1-api, tomcat-lib, tomcat-servlet-6.0-api, tomcat-webapps

Important: tomcat security, bug fix, and enhancement update

spicedb-fips

commercial-gitlab-workhorse-ee-fips-19.1

commercial-gitlab-workhorse-ee-fips-19.1

azcopy, azcopy

kserve-manager, kserve-manager

argo-workflow-controller-fips-3.7

argo-workflow-controller-fips-3.7

rancher-2.12

gitlab-workhorse-ce-19.0

gitlab-workhorse-ce-19.0

knative-eventing-1.22-filter, knative-eventing-1.22-filter

kserve-localmodelnode-agent-fips

knative-eventing-fips-1.23-ingress

argo-workflow-controller-3.7

argo-workflow-controller-3.7

knative-eventing-1.23-webhook

gitlab-workhorse-ce-fips-18.10