CentOS Stream 9

🟠 High   ⏱ 15–60 min  Last verified: 14 August 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:11462 Related CVEs: CVE-2024-50349 CVE-2024-52006 CVE-2025-27613 CVE-2025-27614 CVE-2025-46835 CVE-2025-48384 CVE-2025-48385 CVE-2024-32002  +12 more Upstream summary: Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 August 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:20963 Related CVEs: CVE-2025-11277 Upstream summary: Qt 3D provides functionality for near-realtime simulation systems with support for 2D and 3D rendering in both Qt C++ and Qt Quick applications). Security Fix(es): […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 August 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:0126 Related CVEs: CVE-2025-32365 CVE-2024-6239 CVE-2022-38784 CVE-2022-27337 Upstream summary: Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Security Fix(es): * poppler: Out-of-Bounds Read in […]

🟠 High   ⏱ 15–60 min  Last verified: 21 July 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:8337 Related CVEs: CVE-2025-47905 CVE-2024-30156 CVE-2023-44487 CVE-2022-45060 Upstream summary: Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same […]

🟠 High   ⏱ 15–60 min  Last verified: 19 July 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:12280 Related CVEs: CVE-2025-52999 Upstream summary: Core part of Jackson that defines Streaming API as well as basic shared abstractions. Security Fix(es): * com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999) For more details […]

🟠 High   ⏱ 15–60 min  Last verified: 16 July 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:8837 Related CVEs: CVE-2025-47947 Upstream summary: ModSecurity is an open source intrusion detection and prevention engine for web applications. Security Fix(es): * modsecurity: ModSecurity Has Possible DoS Vulnerability (CVE-2025-47947) For more […]

🟠 High   ⏱ 15–60 min  Last verified: 15 July 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:3833 Related CVEs: CVE-2025-22869 CVE-2024-1394 CVE-2025-22871 CVE-2024-24783 CVE-2023-45290 Upstream summary: A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is […]

🟠 High   ⏱ 15–60 min  Last verified: 11 July 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:0324 Related CVEs: CVE-2024-12085 CVE-2025-10158 CVE-2024-12087 CVE-2024-12088 CVE-2024-12747 CVE-2022-37434 Upstream summary: The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is […]

🟠 High   ⏱ 15–60 min  Last verified: 9 July 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:1429 Related CVEs: CVE-2025-14177 CVE-2025-14178 CVE-2025-14180 CVE-2024-11235 CVE-2025-1217 CVE-2025-1219 CVE-2025-1734 CVE-2025-1736  +4 more Upstream summary: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * […]