CentOS Stream 9

🟠 High   ⏱ 15–60 min  Last verified: 21 February 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:13671 Related CVEs: CVE-2026-25679 CVE-2025-61726 CVE-2025-61729 CVE-2025-68121 CVE-2025-58183 Upstream summary: A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security […]

🟠 High   ⏱ 15–60 min  Last verified: 19 February 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:1738 Related CVEs: CVE-2025-1094 CVE-2025-12818 CVE-2022-41862 Upstream summary: The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fix(es): * postgresql: PostgreSQL quoting […]

🟠 High   ⏱ 15–60 min  Last verified: 16 February 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:9693 Related CVEs: CVE-2026-22007 CVE-2026-22008 CVE-2026-22013 CVE-2026-22016 CVE-2026-22018 CVE-2026-22021 CVE-2026-23865 CVE-2026-26740  +9 more Upstream summary: The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java […]

🔴 Critical   ⏱ 15–90 min  Last verified: 11 February 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2023:6748 Related CVEs: CVE-2023-46846 CVE-2023-46847 CVE-2023-46848 CVE-2026-32748 CVE-2026-33526 CVE-2025-62168 CVE-2024-45802 CVE-2023-50269  +11 more Upstream summary: Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data […]

🟠 High   ⏱ 15–60 min  Last verified: 10 February 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:9044 Related CVEs: CVE-2026-25679 CVE-2025-61726 CVE-2025-61728 CVE-2025-61729 CVE-2025-68121 CVE-2024-1394 CVE-2024-34158 CVE-2024-9355  +10 more Upstream summary: A service for building customized OS artifacts, such as VM images and OSTree commits, that uses […]

🟠 High   ⏱ 15–60 min  Last verified: 6 February 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:20928 Related CVEs: CVE-2025-7493 CVE-2025-4404 CVE-2024-2698 CVE-2024-3183 CVE-2024-11029 CVE-2024-1481 CVE-2023-5455 Upstream summary: AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 February 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:12100 Related CVEs: CVE-2025-49133 CVE-2023-1017 CVE-2023-1018 Upstream summary: The libtpms is a library providing Trusted Platform Module (TPM) functionality for virtual machines. Security Fix(es): * libtpms: Libtpms Out-of-Bounds Read Vulnerability (CVE-2025-49133) […]

🟠 High   ⏱ 15–60 min  Last verified: 3 February 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:3359 Related CVEs: CVE-2026-23490 Upstream summary: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces […]

🟠 High   ⏱ 15–60 min  Last verified: 1 February 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:3095 Related CVEs: CVE-2026-0994 CVE-2022-1941 CVE-2021-22570 Upstream summary: The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and […]