CentOS Stream 9

🟡 Medium   ⏱ 10–30 min  Last verified: 2 June 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:6184 Related CVEs: CVE-2024-40897 Upstream summary: Orc is a library and set of tools for compiling and executing very simple programs that operate on arrays of data. The "language" is a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:7147 Related CVEs: CVE-2025-24898 CVE-2024-2905 Upstream summary: The rpm-ostree tool binds together the RPM packaging model with the OSTree model of bootable file system trees. It provides commands that can be […]

🟠 High   ⏱ 15–60 min  Last verified: 21 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:1409 Related CVEs: CVE-2025-1220 CVE-2025-14177 CVE-2025-14178 CVE-2025-14180 CVE-2025-1735 CVE-2025-6491 CVE-2024-11235 CVE-2025-1217  +12 more Upstream summary: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:3846 Related CVEs: CVE-2024-3651 Upstream summary: The hsakmt packages include a thunk library for AMD's Heterogeneous System Architecture (HSA) Linux kernel driver (amdkfd). Security Fix(es): * python-idna: potential DoS via resource […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:9188 Related CVEs: CVE-2024-2313 Upstream summary: BPFtrace is a high-level tracing language for Linux enhanced Berkeley Packet Filter (eBPF) available in recent Linux kernels (4.x). BPFtrace uses LLVM as a backend […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:4756 Related CVEs: CVE-2024-24806 Upstream summary: libuv is a multi-platform support library with a focus on asynchronous I/O. Security Fix(es): * libuv: Improper Domain Lookup that potentially leads to SSRF attacks […]

🟠 High   ⏱ 15–60 min  Last verified: 17 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:13673 Related CVEs: CVE-2025-23266 CVE-2023-45290 CVE-2024-24785 CVE-2024-24788 CVE-2024-24791 CVE-2023-39318 CVE-2023-39319 CVE-2023-39326  +12 more Upstream summary: Toolbox is a tool for Linux operating systems, which allows the use of containerized command line […]

🟠 High   ⏱ 15–60 min  Last verified: 15 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:0771 Related CVEs: CVE-2025-67268 CVE-2025-67269 Upstream summary: gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:12083 Related CVEs: CVE-2025-5222 Upstream summary: The International Components for Unicode (ICU) library provides robust and full-featured Unicode services. Security Fix(es): * icu: Stack buffer overflow in the SRBRoot::addTag function (CVE-2025-5222) […]

🟡 Medium   ⏱ 10–30 min  Last verified: 13 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:15971 Related CVEs: CVE-2025-14087 CVE-2025-14512 CVE-2025-13601 CVE-2024-52533 CVE-2025-4373 CVE-2024-34397 CVE-2023-29499 CVE-2023-32611  +1 more Upstream summary: GLib provides the core application building blocks for libraries and applications written in C. It provides […]