CentOS Stream 9

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:0324 Related CVEs: CVE-2024-12085 CVE-2025-10158 CVE-2024-12087 CVE-2024-12088 CVE-2024-12747 CVE-2022-37434 Upstream summary: The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:23483 Related CVEs: CVE-2025-5987 CVE-2025-5318 CVE-2023-1667 CVE-2023-2283 CVE-2023-6004 CVE-2023-6918 Upstream summary: libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2022:4940 Related CVEs: CVE-2022-1271 Upstream summary: XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2023:6745 Related CVEs: CVE-2023-38545 CVE-2023-38546 CVE-2025-9086 CVE-2024-2398 CVE-2023-46218 CVE-2023-27533 CVE-2023-27534 CVE-2023-27536  +12 more Upstream summary: The curl packages provide the libcurl library and the curl utility for downloading files from servers […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:5603 Related CVEs: CVE-2026-23893 CVE-2024-0914 Upstream summary: The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2023:4411 Related CVEs: CVE-2023-37464 Upstream summary: CJose is C library implementing the Javascript Object Signing and Encryption (JOSE). Security Fix(es): * cjose: AES GCM decryption uses the Tag length from the […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:0126 Related CVEs: CVE-2025-32365 CVE-2024-6239 CVE-2022-38784 CVE-2022-27337 Upstream summary: Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Security Fix(es): * poppler: Out-of-Bounds Read in […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:0161 Related CVEs: CVE-2024-53580 CVE-2023-38403 CVE-2025-54349 CVE-2023-7250 CVE-2024-26306 Upstream summary: Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:1436 Related CVEs: CVE-2024-1597 CVE-2022-41946 CVE-2022-31197 Upstream summary: PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:6848 Related CVEs: CVE-2024-45769 CVE-2024-45770 CVE-2024-3019 CVE-2023-6917 Upstream summary: Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight […]