🟡 Medium ⏱ 10–30 min Last verified: 19 March 2024 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2023:5081 Related CVEs: CVE-2023-38633 Upstream summary: The librsvg2 packages provide a Scalable Vector Graphics (SVG) library based on the libart library. Security Fix(es): * librsvg: Arbitrary file read when xinclude href […]
🟡 Medium ⏱ 10–30 min Last verified: 19 March 2024 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:11237 Related CVEs: CVE-2024-50612 CVE-2022-33065 Upstream summary: libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fix(es): * libsndfile: Segmentation […]
🟡 Medium ⏱ 10–30 min Last verified: 11 March 2024 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:6192 Related CVEs: CVE-2024-38428 Upstream summary: The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Security Fix(es): * wget: Misinterpretation of input may lead […]
🟡 Medium ⏱ 10–30 min Last verified: 10 March 2024 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:9281 Related CVEs: CVE-2023-6681 CVE-2024-28102 Upstream summary: The python-jwcrypto package provides Python implementations of the JSON Web Key (JWK), JSON Web Signature (JWS), JSON Web Encryption (JWE), and JSON Web Token […]
🟡 Medium ⏱ 10–30 min Last verified: 8 March 2024 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:9128 Related CVEs: CVE-2024-8235 CVE-2024-4418 CVE-2024-2496 CVE-2024-1441 CVE-2024-2494 CVE-2023-3750 CVE-2023-2700 CVE-2022-0897 Upstream summary: Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains […]
🟠 High ⏱ 15–60 min Last verified: 7 March 2024 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:1671 Related CVEs: CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 +12 more Upstream summary: MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) […]
🟠 High ⏱ 15–60 min Last verified: 5 March 2024 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:9555 Related CVEs: CVE-2024-9050 Upstream summary: This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop Security Fix(es): * NetworkManager-libreswan: Local privilege escalation via leftupdown […]
🟡 Medium ⏱ 10–30 min Last verified: 3 March 2024 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:2366 Related CVEs: CVE-2024-24258 CVE-2024-24259 Upstream summary: freeglut is a completely open source alternative to the OpenGL Utility Toolkit (GLUT) library with an OSI approved free software license. Security Fix(es): * […]
🟠 High ⏱ 15–60 min Last verified: 2 March 2024 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:7867 Related CVEs: CVE-2024-43483 CVE-2024-43484 CVE-2024-43485 CVE-2024-21386 CVE-2024-21404 CVE-2024-0056 CVE-2024-0057 CVE-2024-21319 +12 more Upstream summary: .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several […]
🟡 Medium ⏱ 10–30 min Last verified: 1 March 2024 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:2483 Related CVEs: CVE-2023-46316 Upstream summary: The traceroute utility displays the route used by IP packets on their way to a specified network (or Internet) host. Security Fix(es): * traceroute: improper […]
