AlmaLinux

AlmaLinux 10 — grafana-pcp — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 10

AlmaLinux 10 — grafana-pcp — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 10 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2026:6388 Related CVEs: CVE-2026-25679 CVE-2025-61726 CVE-2025-61729 CVE-2025-68121 Upstream summary: The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from […]

Read more
AlmaLinux 10 — perl-XML-Parser — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 10

AlmaLinux 10 — perl-XML-Parser — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 10 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2026:7680 Related CVEs: CVE-2006-10002 CVE-2006-10003 Upstream summary: This module provides ways to parse XML documents. It is built on top of XML::Parser::Expat, which is a lower level interface to James Clark's expat […]

Read more
AlmaLinux 9 — mod_md — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 9

AlmaLinux 9 — mod_md — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2025:23739 Related CVEs: CVE-2025-55753 Upstream summary: This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate provisioning. Certificates will […]

Read more
AlmaLinux 8 — glassfish-servlet-api — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — glassfish-servlet-api — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2025:9318 Related CVEs: CVE-2019-10086 CVE-2025-48734 Upstream summary: The javapackages-tools packages provide macros and scripts to support Java packaging. Security Fix(es): * apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default […]

Read more
AlmaLinux 8 — libpng — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — libpng — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2026:4728 Related CVEs: CVE-2026-22695 CVE-2026-22801 CVE-2026-25646 CVE-2025-64720 CVE-2025-65018 CVE-2025-66293 Upstream summary: The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): […]

Read more
AlmaLinux 8 — libarchive — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — libarchive — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2026:8534 Related CVEs: CVE-2026-4424 CVE-2026-5121 CVE-2025-5914 CVE-2021-23177 CVE-2021-31566 CVE-2019-19221 CVE-2022-36227 CVE-2017-14502 Upstream summary: The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO […]

Read more
AlmaLinux 8 — sonatype-plugins-parent — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — sonatype-plugins-parent — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2025:9318 Related CVEs: CVE-2019-10086 CVE-2025-48734 Upstream summary: The javapackages-tools packages provide macros and scripts to support Java packaging. Security Fix(es): * apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default […]

Read more
AlmaLinux 10 — libpng — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 10

AlmaLinux 10 — libpng — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 10 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2026:3551 Related CVEs: CVE-2026-22695 CVE-2026-22801 CVE-2026-25646 CVE-2025-64720 CVE-2025-65018 CVE-2025-66293 CVE-2026-33416 CVE-2026-33636 Upstream summary: The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. […]

Read more
AlmaLinux 8 — webkit2gtk3 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — webkit2gtk3 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2026:10702 Related CVEs: CVE-2025-43213 CVE-2025-43214 CVE-2025-43457 CVE-2025-43511 CVE-2025-46299 CVE-2026-20608 CVE-2026-20635 CVE-2026-20636  +12 more Upstream summary: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): […]

Read more
AlmaLinux 9 — rubygem-pg — multiple vulnerabilities (19 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 9

AlmaLinux 9 — rubygem-pg — multiple vulnerabilities (19 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2026:18030 Related CVEs: CVE-2026-41316 CVE-2024-49761 CVE-2025-24294 CVE-2025-58767 CVE-2025-61594 CVE-2024-39908 CVE-2024-41123 CVE-2024-41946  +11 more Upstream summary: Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to […]

Read more
CHAT