CentOS Stream

🟠 High   ⏱ 15–60 min  Last verified: 22 January 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:10739 Related CVEs: CVE-2026-33999 CVE-2026-34001 CVE-2026-34003 CVE-2026-34352 CVE-2025-62229 CVE-2025-62230 CVE-2025-62231 CVE-2025-49175  +12 more Upstream summary: Virtual Network Computing (VNC) is a remote display system which allows users to view a computing […]

🟠 High   ⏱ 15–60 min  Last verified: 21 January 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:7342 Related CVEs: CVE-2026-3608 CVE-2025-11232 CVE-2025-32801 CVE-2025-32802 CVE-2025-32803 Upstream summary: DHCP implementation from Internet Systems Consortium, Inc. that features fully functional DHCPv4, DHCPv6 and Dynamic DNS servers. Both DHCP servers fully […]

🟠 High   ⏱ 15–60 min  Last verified: 20 January 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:14200 Related CVEs: CVE-2026-32280 CVE-2026-32282 CVE-2026-32283 CVE-2026-25679 CVE-2025-61726 CVE-2025-61729 CVE-2025-68121 CVE-2025-26625  +12 more Upstream summary: Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 January 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:1597 Related CVEs: CVE-2025-54349 Upstream summary: Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss. […]

🟠 High   ⏱ 15–60 min  Last verified: 17 January 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:8469 Related CVEs: CVE-2026-26171 CVE-2026-32178 CVE-2026-32203 CVE-2026-33116 CVE-2026-26130 CVE-2025-55247 CVE-2025-55248 CVE-2025-55315  +12 more Upstream summary: .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several […]

🟠 High   ⏱ 15–60 min  Last verified: 16 January 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:7668 Related CVEs: CVE-2026-27135 CVE-2023-44487 CVE-2024-28182 Upstream summary: libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C. Security Fix(es): * nghttp2: nghttp2: Denial of Service […]

🟠 High   ⏱ 15–60 min  Last verified: 16 January 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:11533 Related CVEs: CVE-2024-50349 CVE-2024-52006 CVE-2025-27613 CVE-2025-27614 CVE-2025-46835 CVE-2025-48384 CVE-2025-48385 Upstream summary: Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with […]

🟠 High   ⏱ 15–60 min  Last verified: 15 January 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:9692 Related CVEs: CVE-2025-43213 CVE-2025-43214 CVE-2025-43457 CVE-2025-43511 CVE-2025-46299 CVE-2026-20608 CVE-2026-20635 CVE-2026-20636  +12 more Upstream summary: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security […]

🟠 High   ⏱ 15–60 min  Last verified: 5 January 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:7680 Related CVEs: CVE-2006-10002 CVE-2006-10003 Upstream summary: This module provides ways to parse XML documents. It is built on top of XML::Parser::Expat, which is a lower level interface to James Clark's […]