All advisories which are disclosed publicly by EGI Software Vulnerability Group (SVG) are placed on this site.
All advisories which are disclosed publicly by SVG are subject to the Creative commons licence CC-BY 4.0. including crediting the EGI SVG.
A guide to the risk categories is available at Notes On Risk.
| Date | Title | Contents/Link | CVE(s) (if applicable) |
|---|---|---|---|
| 2026-07-23 Updated 2026-09-02 | [EGI-SVG-2026-34] CRITICAL risk XFS file system vulnerability | Advisory-EGI-SVG-2026-34 | CVE-2026-64600 |
| 2026-07-23 Updated 2026-09-02 | [EGI-SVG-2026-33] HIGH risk Linux kernel DRM vulnerability | Advisory-EGI-SVG-2026-33 | CVE-2026-46215 |
| 2026-07-22 Updated 2026-09-02 | [EGI-SVG-2026-32] HTCondor Software Suite (HTCSS) vulnerability | Advisory-EGI-SVG-2026-32 | |
| 2026-07-08 Updated 2026-08-18 | [EGI-SVG-2026-31] CRITICAL risk Linux kernel vulnerability “GhostLock” | Advisory-EGI-SVG-2026-31 | CVE-2026-43499 |
| 2026-07-07 Updated 2026-08-18 | [EGI-SVG-2026-30] CRITICAL risk Linux kernel “Januscape” vulnerability | Advisory-EGI-SVG-2026-30 | CVE-2026-53359 |
| 2026-07-07 Updated 2026-08-18 | [EGI-SVG-2026-29] HIGH risk Linux kernel vulnerability “Bad Epoll” | Advisory-EGI-SVG-2026-29 | CVE-2026-46242 |
| 2026-06-10 Updated 2026-07-30 | [EGI-SVG-2026-27] CRITICAL risk Linux kernel DirtyClone vulnerability | Advisory-EGI-SVG-2026-27 | CVE-2026-43503 |
| 2026-06-23 Updated 2026-06-26, 2026-07-30 | [EGI-SVG-2026-25] CRITICAL risk Kernel traffic control vulnerability | Advisory-EGI-SVG-2026-25 | CVE-2026-46331 |
| 2026-06-10 Updated 2026-07-21 | [EGI-SVG-2026-23] CRITICAL risk Linux vulnerability via nf_tables | Advisory-EGI-SVG-2026-23 | CVE-2026-23111 |
| 2026-05-28 Updated (multiple) | [EGI-SVG-2026-21] CRITICAL risk - local privilege escalation via cifs | Advisory-EGI-SVG-2026-21 | CVE-2026-46253 |
| 2026-05-26 Updated 2026-07-01 | [EGI-SVG-2026-22] HIGH risk OpenStack Keystone authorization bypass vulnerabilities | Advisory-EGI-SVG-2026-22 | CVE-2026-43001 + others |
| 2026-05-21 Updated 2026-06-30 | [EGI-SVG-2026-20] CRITICAL Risk Openreach Malware | Advisory-EGI-SVG-2026-20 | |
| 2026-05-20 Updated 2026-06-30 | [EGI-SVG-2026-19] HIGH Risk Nvidia driver vulnerabilities | Advisory-EGI-SVG-2026-19 | CVE-2026-24187 |
| 2026-05-15 Updated 2026-05-18, 2026-05-21 2026-05-29, 2026-06-30 | [EGI-SVG-2026-17] CRITICAL Risk Linux vulnerability | Advisory-EGI-SVG-2026-17 | CVE-2026-46333 |
| 2026-05-14 Updated 2026-05-21, 2026-06-30 | [EGI-SVG-2026-16] HIGH Risk nginx vulnerability | Advisory-EGI-SVG-2026-16 | CVE-2026-42945 |
| 2026-05-13 Updated 2026-05-18, 2026-05-21, 2026-06-30 | [EGI-SVG-2026-15] CRITICAL risk Linux vulnerabilities | Advisory-EGI-SVG-2026-15 | CVE-2026-46300 |
| 2026-05-08 Updated 2026-05-11, 2026-05-13, 2026-06-17 | [EGI-SVG-2026-14] CRITICAL risk Linux vulnerabilities | Advisory-EGI-SVG-2026-14 | CVE-2026-43284 |
| 2026-05-07 Updated 2026-06-11 | [EGI-SVG-2026-13] CRITICAL risk Rucio Vulnerabilities | Advisory-EGI-SVG-2026-13 | CVE-2026-29080, CVE-2026-29090 |
| 2026-05-05 Updated 2026-06-11 | [EGI-SVG-2026-12] CRITICAL risk Linux kernel vulnerability | Advisory-EGI-SVG-2026-12 | CVE-2026-31431 |
| 2026-05-05 Updated 2026-06-11 | [EGI-SVG-2026-11] CRITICAL risk PackageKit vulnerability | Advisory-EGI-SVG-2026-11 | CVE-2026-41651 |
| 2026-04-15 Updated 2026-05-28 | HIGH risk GPUBreach vulnerability [EGI-SVG-2026-10] | Advisory-EGI-SVG-2026-10 | |
| 2026-03-31 Updated 2026-05-12 | CRITICAL risk Trivy supply chain vulnerability [EGI-SVG-2026-09] | Advisory-EGI-SVG-2026-09 | CVE-2026-33634 |
| 2026-03-11 Updated 2026-05-12 | HIGH risk ingress-nginx vulnerability [EGI-SVG-2026-08] | Advisory-EGI-SVG-2026-08 | CVE-2026-3288 |
| 2026-02-12 Updated 2026-03-24, 2026-05-12 | CRITICAL risk MUNGE buffer overflow vulnerability [EGI-SVG-2026-04] | Advisory-EGI-SVG-2026-04 | CVE-2026-25506 |
| 2026-02-25 Updated 2026-04-01 | HIGH risk OpenStack Nova vulnerability [EGI-SVG-2026-07] | Advisory-EGI-SVG-2026-07 | CVE-2026-24708 |
| 2026-02-17 Updated 2026-03-25 | CRITICAL risk RUCIO vulnerability [EGI-SVG-2026-05] | Advisory-EGI-SVG-2026-05 | CVE-2025-55182 |
| 2026-02-05 Updated 2026-03-12 | HIGH Risk Linux kernel Vulnerabilities [EGI-SVG-2026-03] | Advisory-EGI-SVG-2026-03 | CVE-2025-40248 |
| 2026-01-21 Updated 2026-02-25 | HIGH Risk Ceph client Vulnerability in Linux kernel [EGI-SVG-2026-02] | Advisory-EGI-SVG-2026-02 | CVE-2025-68285 |
| 2026-01-07 Updated 2026-02-11 | HIGH Risk Linux Kernel vulnerability on RHEL-9/10 etc [EGI-SVG-2026-01] | Advisory-EGI-SVG-2026-01 | CVE-2025-38499 |
EGI SVG produces advisories according to the SEC02 EGI Software Vulnerability Issue Handling.
Note that SVG is currently working on how to better cope with reducing homogeneity of the infrastructure and handle vulnerabilities related to the EOSC services.
In the past (up to the end of 2015) CSIRT also issued general alerts at EGI CSIRT Alerts and EGI SVG advisories primarily concerned gLite Middleware.