CentOS Stream 9

CentOS Stream 9 — pam — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — pam — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 January 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:15099 Related CVEs: CVE-2025-6020 CVE-2025-8941 CVE-2024-10963 CVE-2024-10041 CVE-2024-22365 Upstream summary: Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. […]

Read more
CentOS Stream 9 — bind-dyndb-ldap — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — bind-dyndb-ldap — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 January 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:5231 Related CVEs: CVE-2024-1737 CVE-2024-1975 CVE-2024-4076 CVE-2023-4408 CVE-2023-50387 CVE-2023-50868 CVE-2023-5517 CVE-2023-5679  +1 more Upstream summary: The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. […]

Read more
CentOS Stream 9 — 389-ds-base — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — 389-ds-base — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 January 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:3837 Related CVEs: CVE-2024-2199 CVE-2024-3657 CVE-2025-14905 CVE-2025-2487 CVE-2024-5953 CVE-2024-6237 CVE-2022-0918 CVE-2022-0996  +1 more Upstream summary: 389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the […]

Read more
CentOS Stream 9 — python3.12-cryptography — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — python3.12-cryptography — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 22 January 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:15608 Related CVEs: CVE-2024-26130 CVE-2025-24898 Upstream summary: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports […]

Read more
CentOS Stream 9 — qemu-kvm — multiple vulnerabilities (19 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — qemu-kvm — multiple vulnerabilities (19 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 January 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:4278 Related CVEs: CVE-2024-4467 CVE-2023-3354 CVE-2024-26327 CVE-2024-3446 CVE-2024-7409 CVE-2023-3019 CVE-2023-3255 CVE-2023-42467  +11 more Upstream summary: Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. […]

Read more
CentOS Stream 9 — gnupg2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — gnupg2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 15 January 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:0719 Related CVEs: CVE-2025-68973 CVE-2022-34903 Upstream summary: The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards. Security […]

Read more
CentOS Stream 9 — gtk3 — vulnerability — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — gtk3 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 5 January 2025 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:9184 Related CVEs: CVE-2024-6655 Upstream summary: The GTK+ library provides a multi-platform toolkit for creating graphical user interfaces. The gtk3 packages contain GTK+ version 3. Security Fix(es): * gtk3: gtk2: Library […]

Read more
CentOS Stream 9 — pcp — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — pcp — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 December 2024 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:6848 Related CVEs: CVE-2024-45769 CVE-2024-45770 CVE-2024-3019 CVE-2023-6917 Upstream summary: Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight […]

Read more
CentOS Stream 9 — python3.12-PyMySQL — vulnerability — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — python3.12-PyMySQL — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 12 December 2024 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:9193 Related CVEs: CVE-2024-36039 Upstream summary: This package contains a pure-Python MySQL client library. The goal of PyMySQL is to be a drop-in replacement for MySQLdb and work on CPython, PyPy, […]

Read more
CentOS Stream 9 — python3.11-PyMySQL — vulnerability — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — python3.11-PyMySQL — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 November 2024 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:9194 Related CVEs: CVE-2024-36039 Upstream summary: This package contains a pure-Python MySQL client library. The goal of PyMySQL is to be a drop-in replacement for MySQLdb and work on CPython, PyPy, […]

Read more
CHAT