CentOS Stream

CentOS Stream 9 — dbus — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — dbus — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 4 June 2024 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2023:4569 Related CVEs: CVE-2023-34969 CVE-2022-42010 CVE-2022-42011 CVE-2022-42012 Upstream summary: D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a […]

Read more
CentOS Stream 9 — cyrus-imapd — vulnerability — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — cyrus-imapd — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 2 June 2024 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:9195 Related CVEs: CVE-2024-34055 Upstream summary: The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and SIEVE support. Security Fix(es): * cyrus-imapd: unbounded memory allocation by sending many […]

Read more
CentOS Stream 9 — socat — vulnerability — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — socat — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 31 May 2024 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:10353 Related CVEs: CVE-2024-54661 Upstream summary: The socat utility establishes bi-directional byte streams and transfers data between them. The utility can establish streams between a large set of channels, such as […]

Read more
CentOS Stream 9 — cloud-init — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — cloud-init — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 May 2024 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:10848 Related CVEs: CVE-2024-6174 CVE-2023-1786 Upstream summary: The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and […]

Read more
CentOS Stream 9 — glibc — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — glibc — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 May 2024 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:3339 Related CVEs: CVE-2024-2961 CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602 CVE-2023-4527 CVE-2023-4806 CVE-2023-4813  +7 more Upstream summary: The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries […]

Read more
CentOS Stream 9 — perl-CPAN — vulnerability — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — perl-CPAN — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2024 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2023:6539 Related CVEs: CVE-2023-31484 Upstream summary: The CPAN module is a tool to query, download and build perl modules from CPAN sites. Security Fix(es): * perl: CPAN.pm does not verify TLS […]

Read more
CentOS Stream 9 — subscription-manager — vulnerability — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — subscription-manager — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 May 2024 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2023:4708 Related CVEs: CVE-2023-3899 Upstream summary: The subscription-manager packages provide programs and libraries to allow users to manage subscriptions and yum repositories from the AlmaLinux entitlement platform. Security Fix(es): * subscription-manager: […]

Read more
CentOS Stream 9 — gnome-shell — vulnerability — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — gnome-shell — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 April 2024 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:9114 Related CVEs: CVE-2024-36472 Upstream summary: GNOME Shell acts as a compositing manager for the desktop, and displays both application windows and other objects. It provides core interface functions like switching […]

Read more
CentOS Stream 9 — python-requests — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — python-requests — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 April 2024 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:12519 Related CVEs: CVE-2024-47081 CVE-2024-35195 CVE-2023-32681 Upstream summary: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python […]

Read more
CentOS Stream 9 — NetworkManager — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — NetworkManager — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 21 March 2024 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:0377 Related CVEs: CVE-2024-3661 CVE-2024-6501 Upstream summary: NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing […]

Read more
CHAT