CentOS Stream 9

🟡 Medium   ⏱ 10–30 min  Last verified: 8 July 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:1147 Related CVEs: CVE-2024-23301 Upstream summary: Relax-and-Recover is a recovery and system migration utility. The utility produces a bootable image and restores from backup using this image. It allows to restore […]

🟠 High   ⏱ 15–60 min  Last verified: 2 July 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:8635 Related CVEs: CVE-2025-40907 Upstream summary: FastCGI Perl bindings. Security Fix(es): * perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library […]

🟠 High   ⏱ 15–60 min  Last verified: 28 June 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:1409 Related CVEs: CVE-2025-1220 CVE-2025-14177 CVE-2025-14178 CVE-2025-14180 CVE-2025-1735 CVE-2025-6491 CVE-2024-11235 CVE-2025-1217  +12 more Upstream summary: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 June 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:10631 Related CVEs: CVE-2025-5024 Upstream summary: GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment. Security Fix(es): * gnome-remote-desktop: Uncontrolled Resource Consumption due to […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 June 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:9187 Related CVEs: CVE-2024-2314 Upstream summary: BPF Compiler Collection (BCC) is a toolkit for easier creation of efficient kernel tracing and manipulation programs. BCC uses the extended Berkeley Packet Filter (eBPF) […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 June 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:7437 Related CVEs: CVE-2024-52616 CVE-2023-38469 CVE-2023-38470 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473 CVE-2021-3468 CVE-2021-3502  +1 more Upstream summary: Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration […]

🟡 Medium   ⏱ 10–30 min  Last verified: 7 June 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:9181 Related CVEs: CVE-2023-50967 CVE-2024-28176 Upstream summary: Jose is a C-language implementation of the Javascript Object Signing and Encryption standards. The jose package is a dependency of the clevis and tang […]

🟠 High   ⏱ 15–60 min  Last verified: 4 June 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:4935 Related CVEs: CVE-2024-3596 CVE-2022-41859 CVE-2022-41860 CVE-2022-41861 Upstream summary: FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and […]

🟠 High   ⏱ 15–60 min  Last verified: 4 June 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:3340 Related CVEs: CVE-2025-61726 CVE-2025-61729 CVE-2025-68121 CVE-2024-34156 CVE-2024-1394 CVE-2025-58183 CVE-2025-22871 CVE-2025-27144  +12 more Upstream summary: The skopeo command lets you inspect images from container image registries, get images and image layers, […]