CentOS Stream

CentOS Stream 9 — dpdk — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — dpdk — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 November 2024 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:0210 Related CVEs: CVE-2024-11614 CVE-2021-3839 CVE-2022-2132 CVE-2022-28199 Upstream summary: The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in […]

Read more
CentOS Stream 9 — libndp — vulnerability — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — libndp — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 11 November 2024 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:4636 Related CVEs: CVE-2024-5564 Upstream summary: Libndp is a library (used by NetworkManager) that provides a wrapper for the IPv6 Neighbor Discovery Protocol. It also provides a tool named ndptool for […]

Read more
CentOS Stream 9 — libreswan — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — libreswan — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 6 November 2024 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2023:3148 Related CVEs: CVE-2023-2295 CVE-2024-3652 CVE-2024-2357 CVE-2023-38710 CVE-2023-38711 CVE-2023-38712 CVE-2023-23009 Upstream summary: Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong […]

Read more
CentOS Stream 9 — oci-seccomp-bpf-hook — vulnerability — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — oci-seccomp-bpf-hook — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 5 November 2024 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:9277 Related CVEs: CVE-2024-24788 Upstream summary: OCI Hook to generate seccomp json files based on EBF syscalls used by container oci-seccomp-bpf-hook provides a library for applications looking to use the Container […]

Read more
CentOS Stream 9 — perl-App-cpanminus — vulnerability — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — perl-App-cpanminus — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 October 2024 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:10218 Related CVEs: CVE-2024-45321 Upstream summary: Why? It's dependency free, requires zero configuration, and stands alone but it's maintainable and extensible with plug-ins and friendly to shell scripting. When running, it […]

Read more
CentOS Stream 9 — tuned — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — tuned — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 21 October 2024 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:10384 Related CVEs: CVE-2024-52336 CVE-2024-52337 Upstream summary: The tuned packages provide a service that tunes system settings according to a selected profile. Security Fix(es): * tuned: `script_pre` and `script_post` options allow […]

Read more
CentOS Stream 9 — bubblewrap — vulnerability — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — bubblewrap — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 October 2024 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:9449 Related CVEs: CVE-2024-42472 Upstream summary: Bubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces. Security Fix(es): * flatpak: […]

Read more
CentOS Stream 9 — mod_jk — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — mod_jk — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 October 2024 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:7457 Related CVEs: CVE-2024-46544 CVE-2023-41081 CVE-2023-6710 Upstream summary: The mod_jk module is an Apache HTTP Server plug-in that enables the Apache HTTP Server to connect with the Apache Tomcat servlet engine. […]

Read more
CentOS Stream 9 — iptraf-ng — vulnerability — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — iptraf-ng — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 6 October 2024 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:7064 Related CVEs: CVE-2024-52949 Upstream summary: IPTraf-ng is a console-based network monitoring utility which includes an IP traffic monitor, a TCP and UDP service monitor, and a LAN statistics module. It […]

Read more
CentOS Stream 9 — libreoffice — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — libreoffice — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 22 September 2024 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:3835 Related CVEs: CVE-2023-6185 CVE-2023-6186 CVE-2024-6472 CVE-2024-3044 CVE-2022-38745 CVE-2023-0950 CVE-2023-1183 CVE-2023-2255  +4 more Upstream summary: LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as […]

Read more
CHAT