🟡 Medium ⏱ 10–30 min Last verified: 9 February 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:6757 Related CVEs: CVE-2024-7383 CVE-2023-5215 CVE-2023-5871 Upstream summary: Network Block Device (NBD) is a protocol for accessing Block Devices (hard disks and disk-like devices) over a Network. The libnbd is a […]
🟡 Medium ⏱ 10–30 min Last verified: 9 February 2025 Affected versions: CentOS Stream 10 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:3477 Related CVEs: CVE-2025-14831 CVE-2025-9820 Upstream summary: The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security […]
🟡 Medium ⏱ 10–30 min Last verified: 8 February 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:1913 Related CVEs: CVE-2025-14104 Upstream summary: The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the […]
🟡 Medium ⏱ 10–30 min Last verified: 7 February 2025 Affected versions: CentOS Stream 10 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:20478 Related CVEs: CVE-2018-17828 Upstream summary: The zziplib is a lightweight library to easily extract data from zip files. Security Fix(es): * zziplib: directory traversal in unzzip_cat in the bins/unzzipcat-mem.c (CVE-2018-17828) […]
🟠 High ⏱ 15–60 min Last verified: 3 February 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:1436 Related CVEs: CVE-2024-1597 CVE-2022-41946 CVE-2022-31197 Upstream summary: PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL […]
🟠 High ⏱ 15–60 min Last verified: 1 February 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:9449 Related CVEs: CVE-2024-42472 CVE-2024-32462 CVE-2023-28100 CVE-2023-28101 Upstream summary: Bubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces. Security […]
🟠 High ⏱ 15–60 min Last verified: 29 January 2025 Affected versions: CentOS Stream 10 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:0668 Related CVEs: CVE-2025-68615 Upstream summary: The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting […]
🟠 High ⏱ 15–60 min Last verified: 27 January 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:15099 Related CVEs: CVE-2025-6020 CVE-2025-8941 CVE-2024-10963 CVE-2024-10041 CVE-2024-22365 Upstream summary: Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. […]
🟠 High ⏱ 15–60 min Last verified: 27 January 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:5231 Related CVEs: CVE-2024-1737 CVE-2024-1975 CVE-2024-4076 CVE-2023-4408 CVE-2023-50387 CVE-2023-50868 CVE-2023-5517 CVE-2023-5679 +1 more Upstream summary: The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. […]
🟠 High ⏱ 5–30 min Last verified: 26 January 2025 Affected versions: CentOS Stream 10 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
