CentOS Stream 9

🟠 High   ⏱ 15–60 min  Last verified: 5 March 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:0161 Related CVEs: CVE-2024-53580 CVE-2023-38403 CVE-2025-54349 CVE-2023-7250 CVE-2024-26306 Upstream summary: Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay […]

🟠 High   ⏱ 15–60 min  Last verified: 4 March 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:11504 Related CVEs: CVE-2026-41651 Upstream summary: PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API. Security Fix(es): […]

🟠 High   ⏱ 15–60 min  Last verified: 1 March 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:1088 Related CVEs: CVE-2025-66418 CVE-2025-66471 CVE-2026-21441 CVE-2024-37891 Upstream summary: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. […]

🟠 High   ⏱ 15–60 min  Last verified: 1 March 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:6383 Related CVEs: CVE-2026-25679 CVE-2025-61726 CVE-2025-61729 CVE-2025-68121 CVE-2024-34156 CVE-2024-1394 CVE-2025-22871 CVE-2022-27664  +6 more Upstream summary: The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, […]

🟠 High   ⏱ 15–60 min  Last verified: 27 February 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:8859 Related CVEs: CVE-2026-23868 Upstream summary: giflib is a library for reading and writing gif images. Security Fix(es): * giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868) For more details […]

🟠 High   ⏱ 15–60 min  Last verified: 27 February 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:23049 Related CVEs: CVE-2025-31651 CVE-2025-55752 CVE-2025-48976 CVE-2025-48988 CVE-2025-48989 CVE-2025-49125 CVE-2025-52434 CVE-2025-52520  +12 more Upstream summary: Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security […]

🟠 High   ⏱ 15–60 min  Last verified: 25 February 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:9114 Related CVEs: CVE-2025-48734 Upstream summary: The Apache Commons BeanUtils library provides utility methods for accessing and modifying properties of arbitrary JavaBeans. Security Fix(es): * commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does […]

🟠 High   ⏱ 15–60 min  Last verified: 22 February 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:14493 Related CVEs: CVE-2025-54389 Upstream summary: Advanced Intrusion Detection Environment (AIDE) is a utility that creates a database of files on the system, and then uses that database to ensure file […]

🟠 High   ⏱ 15–60 min  Last verified: 21 February 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:3405 Related CVEs: CVE-2026-22695 CVE-2026-22801 CVE-2026-25646 CVE-2025-64720 CVE-2025-65018 CVE-2025-66293 CVE-2026-33416 CVE-2026-33636 Upstream summary: The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format […]