CentOS Stream 10

🟠 High   ⏱ 15–60 min  Last verified: 24 March 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:7992 Related CVEs: CVE-2026-25679 CVE-2025-61726 CVE-2025-68121 CVE-2025-61729 Upstream summary: HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables driverless support for USB devices capable of using IPP-over-USB protocol. Security […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 March 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:13651 Related CVEs: CVE-2026-29111 Upstream summary: The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, […]

🟠 High   ⏱ 15–60 min  Last verified: 20 March 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:7666 Related CVEs: CVE-2026-27135 Upstream summary: libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C. Security Fix(es): * nghttp2: nghttp2: Denial of Service via malformed […]

🟠 High   ⏱ 15–60 min  Last verified: 20 March 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:13642 Related CVEs: CVE-2026-25679 CVE-2025-61726 CVE-2025-61729 CVE-2025-68121 CVE-2025-58183 Upstream summary: A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 March 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:3208 Related CVEs: CVE-2025-14905 Upstream summary: 389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities […]

🟠 High   ⏱ 15–60 min  Last verified: 16 March 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:12423 Related CVEs: CVE-2026-4878 Upstream summary: Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities. Security Fix(es): * libcap: libcap: Privilege escalation via TOCTOU race […]

🟠 High   ⏱ 15–60 min  Last verified: 13 March 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:3551 Related CVEs: CVE-2026-22695 CVE-2026-22801 CVE-2026-25646 CVE-2025-64720 CVE-2025-65018 CVE-2025-66293 CVE-2026-33416 CVE-2026-33636 Upstream summary: The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format […]

🟠 High   ⏱ 15–60 min  Last verified: 5 March 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:8840 Related CVEs: CVE-2026-25679 CVE-2025-61726 Upstream summary: This package provides build-stage rpm automation to simplify the creation of Go language (golang) packages. It does not need to be included in the […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 March 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:0002 Related CVEs: CVE-2025-45582 Upstream summary: The GNU tar program can save multiple files in an archive and restore files from an archive. Security Fix(es): * tar: Tar path traversal (CVE-2025-45582) […]

🟠 High   ⏱ 15–60 min  Last verified: 26 February 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:3443 Related CVEs: CVE-2025-67733 CVE-2026-21863 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 CVE-2025-49844 Upstream summary: Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain […]