CentOS Stream 9

🟡 Medium   ⏱ 10–30 min  Last verified: 5 December 2022 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2023:2193 Related CVEs: CVE-2022-27664 CVE-2022-32189 Upstream summary: Butane translates human-readable Butane Configs into machine-readable Ignition configs for provisioning operating systems that use Ignition. The following packages have been upgraded to a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 27 November 2022 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:7672 Related CVEs: CVE-2022-4055 Upstream summary: The xdg-utils package is a set of simple scripts that provide basic desktop integration functions for any Free Desktop. Security Fix(es): * xdg-utils: improper parse […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 November 2022 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2022:8139 Related CVEs: CVE-2021-44269 Upstream summary: WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Security Fix(es): * wavpack: Heap out-of-bounds read […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 October 2022 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2023:6694 Related CVEs: CVE-2007-4559 Upstream summary: pip is a package management system used to install and manage software packages written in Python. Many packages can be found in the Python Package […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 September 2022 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2022:8400 Related CVEs: CVE-2021-46828 Upstream summary: The libtirpc packages contain SunLib's implementation of transport-independent remote procedure call (TI-RPC) documentation, which includes a library required by programs in the nfs-utils and rpcbind […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 September 2022 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2022:8226 Related CVEs: CVE-2022-2309 Upstream summary: lxml is an XML processing library providing access to libxml2 and libxslt libraries using the Python ElementTree API. Security Fix(es): * lxml: NULL Pointer Dereference […]

🟠 High   ⏱ 15–60 min  Last verified: 6 September 2022 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2023:5048 Related CVEs: CVE-2020-22219 CVE-2021-0561 Upstream summary: FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference […]

🟠 High   ⏱ 15–60 min  Last verified: 16 August 2022 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:7679 Related CVEs: CVE-2006-10002 CVE-2006-10003 Upstream summary: This module provides ways to parse XML documents. It is built on top of XML::Parser::Expat, which is a lower level interface to James Clark's […]

🟡 Medium   ⏱ 10–30 min  Last verified: 12 August 2022 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2023:2502 Related CVEs: CVE-2022-2928 CVE-2022-2929 CVE-2021-25220 Upstream summary: The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows individual devices on an IP network to get their own network configuration […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 July 2022 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2022:8415 Related CVEs: CVE-2021-46195 Upstream summary: The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fix(es): * […]