🟠 High ⏱ 15–60 min Last verified: 13 February 2026 Affected versions: CentOS Stream 10 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:11389 Related CVEs: CVE-2026-34982 CVE-2026-28417 CVE-2026-28421 CVE-2026-33412 CVE-2026-25749 CVE-2025-53905 CVE-2025-53906 Upstream summary: Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: arbitrary command […]
🔴 Critical ⏱ 15–90 min Last verified: 11 February 2026 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2023:6748 Related CVEs: CVE-2023-46846 CVE-2023-46847 CVE-2023-46848 CVE-2026-32748 CVE-2026-33526 CVE-2025-62168 CVE-2024-45802 CVE-2023-50269 +11 more Upstream summary: Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data […]
🟠 High ⏱ 15–60 min Last verified: 10 February 2026 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:9044 Related CVEs: CVE-2026-25679 CVE-2025-61726 CVE-2025-61728 CVE-2025-61729 CVE-2025-68121 CVE-2024-1394 CVE-2024-34158 CVE-2024-9355 +10 more Upstream summary: A service for building customized OS artifacts, such as VM images and OSTree commits, that uses […]
🟠 High ⏱ 15–60 min Last verified: 10 February 2026 Affected versions: CentOS Stream 10 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:8858 Related CVEs: CVE-2026-23868 Upstream summary: giflib is a library for reading and writing gif images. Security Fix(es): * giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868) For more details […]
🟠 High ⏱ 15–60 min Last verified: 6 February 2026 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:20928 Related CVEs: CVE-2025-7493 CVE-2025-4404 CVE-2024-2698 CVE-2024-3183 CVE-2024-11029 CVE-2024-1481 CVE-2023-5455 Upstream summary: AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise […]
🟠 High ⏱ 15–60 min Last verified: 4 February 2026 Affected versions: CentOS Stream 10 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:2719 Related CVEs: CVE-2026-24882 CVE-2025-68973 Upstream summary: The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards. Security […]
🟡 Medium ⏱ 10–30 min Last verified: 4 February 2026 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:12100 Related CVEs: CVE-2025-49133 CVE-2023-1017 CVE-2023-1018 Upstream summary: The libtpms is a library providing Trusted Platform Module (TPM) functionality for virtual machines. Security Fix(es): * libtpms: Libtpms Out-of-Bounds Read Vulnerability (CVE-2025-49133) […]
🟠 High ⏱ 15–60 min Last verified: 3 February 2026 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:3359 Related CVEs: CVE-2026-23490 Upstream summary: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces […]
🟠 High ⏱ 15–60 min Last verified: 3 February 2026 Affected versions: CentOS Stream 10 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:5941 Related CVEs: CVE-2025-61731 CVE-2026-25679 CVE-2025-61726 CVE-2025-61728 CVE-2025-61732 CVE-2025-68121 CVE-2025-61729 CVE-2025-4674 +3 more Upstream summary: The golang packages provide the Go programming language compiler. Security Fix(es): * cmd/go: cmd/go: Arbitrary file […]
🟠 High ⏱ 15–60 min Last verified: 2 February 2026 Affected versions: CentOS Stream 10 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:17075 Related CVEs: CVE-2026-32282 CVE-2026-32283 CVE-2026-25679 CVE-2025-61726 CVE-2025-61729 CVE-2025-68121 Upstream summary: yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the […]
