AlmaLinux

AlmaLinux 9 — openssh — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 9

AlmaLinux 9 — openssh — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2026:13381 Related CVEs: CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388 CVE-2026-35414 CVE-2026-3497 CVE-2024-6387 CVE-2023-38408  +7 more Upstream summary: OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. […]

Read more
AlmaLinux 8 — java_cup — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — java_cup — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2025:9318 Related CVEs: CVE-2019-10086 CVE-2025-48734 Upstream summary: The javapackages-tools packages provide macros and scripts to support Java packaging. Security Fix(es): * apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default […]

Read more
AlmaLinux 8 — grafana — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — grafana — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2026:7011 Related CVEs: CVE-2026-25679 CVE-2025-61726 CVE-2025-61728 CVE-2025-68121 CVE-2025-61729 CVE-2025-4123 CVE-2025-21613 CVE-2025-21614  +12 more Upstream summary: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. […]

Read more
AlmaLinux 8 — dovecot — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — dovecot — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2026:13830 Related CVEs: CVE-2025-59032 CVE-2026-27857 CVE-2026-27858 CVE-2024-23184 CVE-2024-23185 CVE-2022-30550 CVE-2021-33515 CVE-2020-24386  +3 more Upstream summary: Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. […]

Read more
AlmaLinux 10 — fence-agents — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 10

AlmaLinux 10 — fence-agents — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 10 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2026:13916 Related CVEs: CVE-2026-30922 CVE-2026-32597 CVE-2026-23490 Upstream summary: The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be […]

Read more
AlmaLinux 9 — libpng15 — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 9

AlmaLinux 9 — libpng15 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2026:3031 Related CVEs: CVE-2026-25646 Upstream summary: The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG (Portable Network Graphics) image format files. This version should be […]

Read more
AlmaLinux 10 — sudo — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 10

AlmaLinux 10 — sudo — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 10 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2026:10758 Related CVEs: CVE-2026-35535 Upstream summary: The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for […]

Read more
AlmaLinux 9 — crun — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 9

AlmaLinux 9 — crun — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2026:6621 Related CVEs: CVE-2026-30892 Upstream summary: crun is a OCI runtime Security Fix(es): * crun: crun: Privilege escalation due to incorrect parsing of the `–user` option (CVE-2026-30892) For more details about the […]

Read more
AlmaLinux 9 — php — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 9

AlmaLinux 9 — php — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2026:1409 Related CVEs: CVE-2025-1220 CVE-2025-14177 CVE-2025-14178 CVE-2025-14180 CVE-2025-1735 CVE-2025-6491 CVE-2024-11235 CVE-2025-1217  +12 more Upstream summary: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: […]

Read more
AlmaLinux 9 — munge — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 9

AlmaLinux 9 — munge — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2026:3034 Related CVEs: CVE-2026-25506 Upstream summary: MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials. It is designed to be highly scalable for use in an […]

Read more
CHAT