CentOS Stream 9

🟠 High   ⏱ 15–60 min  Last verified: 30 April 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:10949 Related CVEs: CVE-2026-4786 CVE-2026-6100 CVE-2026-4519 CVE-2024-12718 CVE-2025-4138 CVE-2025-4330 CVE-2025-4435 CVE-2025-4517  +12 more Upstream summary: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level […]

🟠 High   ⏱ 15–60 min  Last verified: 24 April 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:4110 Related CVEs: CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2025-8714 CVE-2025-8715 CVE-2025-1094 CVE-2024-10976  +12 more Upstream summary: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL missing validation […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 April 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:17558 Related CVEs: CVE-2025-48964 CVE-2025-47268 Upstream summary: The iputils packages contain basic utilities for monitoring a network, including ping. Security Fix(es): * iputils: iputils integer overflow (CVE-2025-48964) For more details about […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 April 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:9635 Related CVEs: CVE-2025-22871 CVE-2022-27664 CVE-2022-2879 CVE-2022-2880 CVE-2022-41715 CVE-2022-41717 CVE-2022-32189 Upstream summary: Command line utility to control osbuild-composer Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 April 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:6621 Related CVEs: CVE-2026-30892 Upstream summary: crun is a OCI runtime Security Fix(es): * crun: crun: Privilege escalation due to incorrect parsing of the `–user` option (CVE-2026-30892) For more details about […]

🟠 High   ⏱ 15–60 min  Last verified: 21 April 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:11510 Related CVEs: CVE-2026-34982 CVE-2026-28417 CVE-2026-28421 CVE-2026-33412 CVE-2026-25749 CVE-2025-53905 CVE-2025-53906 CVE-2022-47024  +11 more Upstream summary: Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * […]

🟠 High   ⏱ 15–60 min  Last verified: 15 April 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:0247 Related CVEs: CVE-2023-52969 CVE-2023-52970 CVE-2023-52971 CVE-2025-13699 CVE-2025-21490 CVE-2025-30693 CVE-2025-30722 CVE-2022-32081  +9 more Upstream summary: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Security Fix(es): […]

🟠 High   ⏱ 15–60 min  Last verified: 15 April 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:4110 Related CVEs: CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2025-8714 CVE-2025-8715 CVE-2025-1094 CVE-2024-10976  +12 more Upstream summary: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL missing validation […]

🟠 High   ⏱ 15–60 min  Last verified: 15 April 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:16693 Related CVEs: CVE-2026-39979 CVE-2026-40164 CVE-2024-23337 CVE-2025-48060 Upstream summary: jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 April 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:13673 Related CVEs: CVE-2026-35091 CVE-2026-35092 CVE-2025-30472 Upstream summary: The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Security Fix(es): * corosync: Corosync: Denial of Service […]