🟢 Low ⏱ 5–15 min Last verified: 17 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:9188 Related CVEs: CVE-2024-2313 Upstream summary: BPFtrace is a high-level tracing language for Linux enhanced Berkeley Packet Filter (eBPF) available in recent Linux kernels (4.x). BPFtrace uses LLVM as a backend […]
🟡 Medium ⏱ 10–30 min Last verified: 17 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:4756 Related CVEs: CVE-2024-24806 Upstream summary: libuv is a multi-platform support library with a focus on asynchronous I/O. Security Fix(es): * libuv: Improper Domain Lookup that potentially leads to SSRF attacks […]
🟠 High ⏱ 15–60 min Last verified: 17 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:13673 Related CVEs: CVE-2025-23266 CVE-2023-45290 CVE-2024-24785 CVE-2024-24788 CVE-2024-24791 CVE-2023-39318 CVE-2023-39319 CVE-2023-39326 +12 more Upstream summary: Toolbox is a tool for Linux operating systems, which allows the use of containerized command line […]
🟠 High ⏱ 5–30 min Last verified: 16 May 2025 Affected versions: CentOS Stream 10 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
🟠 High ⏱ 15–60 min Last verified: 15 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:0771 Related CVEs: CVE-2025-67268 CVE-2025-67269 Upstream summary: gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its […]
🟡 Medium ⏱ 10–30 min Last verified: 15 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:12083 Related CVEs: CVE-2025-5222 Upstream summary: The International Components for Unicode (ICU) library provides robust and full-featured Unicode services. Security Fix(es): * icu: Stack buffer overflow in the SRBRoot::addTag function (CVE-2025-5222) […]
🟡 Medium ⏱ 10–30 min Last verified: 13 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:15971 Related CVEs: CVE-2025-14087 CVE-2025-14512 CVE-2025-13601 CVE-2024-52533 CVE-2025-4373 CVE-2024-34397 CVE-2023-29499 CVE-2023-32611 +1 more Upstream summary: GLib provides the core application building blocks for libraries and applications written in C. It provides […]
🟠 High ⏱ 15–60 min Last verified: 13 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:9396 Related CVEs: CVE-2025-3891 CVE-2025-31492 CVE-2024-24814 CVE-2022-23527 CVE-2023-28625 Upstream summary: The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as […]
🟡 Medium ⏱ 10–30 min Last verified: 10 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:0700 Related CVEs: CVE-2025-46397 Upstream summary: The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)). Transfig […]
🟡 Medium ⏱ 10–30 min Last verified: 10 May 2025 Affected versions: CentOS Stream 10 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:15969 Related CVEs: CVE-2025-14087 CVE-2025-14512 CVE-2025-13601 Upstream summary: GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, […]
