AlmaLinux 9

AlmaLinux 9 — weldr-client — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 9

AlmaLinux 9 — weldr-client — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2025:9635 Related CVEs: CVE-2025-22871 CVE-2022-27664 CVE-2022-2879 CVE-2022-2880 CVE-2022-41715 CVE-2022-41717 CVE-2022-32189 Upstream summary: Command line utility to control osbuild-composer Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in […]

Read more
AlmaLinux 9 — mod_proxy_cluster — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 9

AlmaLinux 9 — mod_proxy_cluster — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2025:9434 Related CVEs: CVE-2024-10306 CVE-2023-41081 CVE-2023-6710 Upstream summary: The mod_proxy_cluster module is a plugin for the Apache HTTP Server that provides load-balancer functionality. Security Fix(es): * mod_proxy_cluster: mod_proxy_cluster unauthorized MCMP requests (CVE-2024-10306) […]

Read more
AlmaLinux 9 — xdg-utils — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 9

AlmaLinux 9 — xdg-utils — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2025:7672 Related CVEs: CVE-2022-4055 Upstream summary: The xdg-utils package is a set of simple scripts that provide basic desktop integration functions for any Free Desktop. Security Fix(es): * xdg-utils: improper parse of […]

Read more
AlmaLinux 9 — aardvark-dns — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 9

AlmaLinux 9 — aardvark-dns — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2025:7094 Related CVEs: CVE-2024-8418 Upstream summary: Authoritative DNS server for A/AAAA container records Forwards other request to configured resolvers. Read more about configuration in `src/backend/mod.rs`. Security Fix(es): * containers/aardvark-dns: TCP Query Handling […]

Read more
AlmaLinux 9 — avahi — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 9

AlmaLinux 9 — avahi — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2025:7437 Related CVEs: CVE-2024-52616 CVE-2023-38469 CVE-2023-38470 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473 CVE-2021-3468 CVE-2021-3502  +1 more Upstream summary: Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. […]

Read more
AlmaLinux 9 — bootc — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 9

AlmaLinux 9 — bootc — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2025:7160 Related CVEs: CVE-2025-24898 Upstream summary: Bootable container system Security Fix(es): * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898) For more details about the security issue(s), including the impact, a CVSS […]

Read more
AlmaLinux 9 — gstreamer1 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 9

AlmaLinux 9 — gstreamer1 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2025:7178 Related CVEs: CVE-2024-0444 CVE-2024-4453 Upstream summary: The gstreamer1 packages contain a streaming media framework, based on graphs of filters which operate on media data. Security Fix(es): * gstreamer: EXIF Metadata Parsing […]

Read more
AlmaLinux 9 — gstreamer1-rtsp-server — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 9

AlmaLinux 9 — gstreamer1-rtsp-server — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2025:7178 Related CVEs: CVE-2024-0444 CVE-2024-4453 Upstream summary: The gstreamer1 packages contain a streaming media framework, based on graphs of filters which operate on media data. Security Fix(es): * gstreamer: EXIF Metadata Parsing […]

Read more
AlmaLinux 9 — iptraf-ng — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 9

AlmaLinux 9 — iptraf-ng — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2025:7064 Related CVEs: CVE-2024-52949 Upstream summary: IPTraf-ng is a console-based network monitoring utility which includes an IP traffic monitor, a TCP and UDP service monitor, and a LAN statistics module. It supports […]

Read more
AlmaLinux 9 — keylime-agent-rust — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 9

AlmaLinux 9 — keylime-agent-rust — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2025:7313 Related CVEs: CVE-2025-24898 Upstream summary: Rust agent for Keylime Security Fix(es): * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898) For more details about the security issue(s), including the impact, a […]

Read more
CHAT