🟠 High ⏱ 15–60 min Last verified: 4 March 2026 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:11504 Related CVEs: CVE-2026-41651 Upstream summary: PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API. Security Fix(es): […]
🟡 Medium ⏱ 10–30 min Last verified: 2 March 2026 Affected versions: CentOS Stream 10 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:0002 Related CVEs: CVE-2025-45582 Upstream summary: The GNU tar program can save multiple files in an archive and restore files from an archive. Security Fix(es): * tar: Tar path traversal (CVE-2025-45582) […]
🟠 High ⏱ 15–60 min Last verified: 1 March 2026 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:1088 Related CVEs: CVE-2025-66418 CVE-2025-66471 CVE-2026-21441 CVE-2024-37891 Upstream summary: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. […]
🟠 High ⏱ 15–60 min Last verified: 1 March 2026 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:6383 Related CVEs: CVE-2026-25679 CVE-2025-61726 CVE-2025-61729 CVE-2025-68121 CVE-2024-34156 CVE-2024-1394 CVE-2025-22871 CVE-2022-27664 +6 more Upstream summary: The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, […]
🟠 High ⏱ 15–60 min Last verified: 27 February 2026 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:8859 Related CVEs: CVE-2026-23868 Upstream summary: giflib is a library for reading and writing gif images. Security Fix(es): * giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868) For more details […]
🟠 High ⏱ 15–60 min Last verified: 27 February 2026 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:23049 Related CVEs: CVE-2025-31651 CVE-2025-55752 CVE-2025-48976 CVE-2025-48988 CVE-2025-48989 CVE-2025-49125 CVE-2025-52434 CVE-2025-52520 +12 more Upstream summary: Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security […]
🟠 High ⏱ 15–60 min Last verified: 26 February 2026 Affected versions: CentOS Stream 10 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:3443 Related CVEs: CVE-2025-67733 CVE-2026-21863 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 CVE-2025-49844 Upstream summary: Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain […]
🟠 High ⏱ 15–60 min Last verified: 26 February 2026 Affected versions: CentOS Stream 10 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:13643 Related CVEs: CVE-2026-25679 CVE-2025-61726 CVE-2025-61728 CVE-2025-61729 CVE-2025-68121 CVE-2025-58183 Upstream summary: A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. […]
🟠 High ⏱ 15–60 min Last verified: 25 February 2026 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:9114 Related CVEs: CVE-2025-48734 Upstream summary: The Apache Commons BeanUtils library provides utility methods for accessing and modifying properties of arbitrary JavaBeans. Security Fix(es): * commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does […]
🟠 High ⏱ 15–60 min Last verified: 25 February 2026 Affected versions: CentOS Stream 10 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:10223 Related CVEs: CVE-2026-27877 CVE-2026-25679 CVE-2025-61726 CVE-2025-61728 CVE-2025-61729 CVE-2025-68121 CVE-2026-21721 CVE-2025-58183 Upstream summary: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security […]
