CentOS Stream

🟠 High   ⏱ 15–60 min  Last verified: 17 December 2023 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2023:5194 Related CVEs: CVE-2023-38802 CVE-2023-31489 CVE-2023-31490 CVE-2023-41358 CVE-2023-41359 CVE-2023-41360 CVE-2023-41909 CVE-2023-46752  +11 more Upstream summary: FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 11 December 2023 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:9243 Related CVEs: CVE-2023-51764 Upstream summary: The postfix packages provide a Mail Transport Agent (MTA), which supports protocols like LDAP, SMTP AUTH (SASL), and TLS. Security Fix(es): * postfix: SMTP smuggling […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 November 2023 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:2353 Related CVEs: CVE-2023-1579 Upstream summary: MinGW (Minimalist GNU for Windows) is a free and open source software development environment to create Microsoft Windows applications. Security Fix(es): * binutils: Heap-buffer-overflow binutils-gdb/bfd/libbfd.c […]

🟠 High   ⏱ 15–60 min  Last verified: 26 October 2023 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2023:2127 Related CVEs: CVE-2022-38023 CVE-2022-2127 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 CVE-2023-3961 CVE-2023-4091 CVE-2023-42669  +3 more Upstream summary: Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common […]

🟡 Medium   ⏱ 10–30 min  Last verified: 3 October 2023 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2023:6492 Related CVEs: CVE-2023-1672 Upstream summary: Tang is a server for binding data to network presence. It includes a daemon which provides cryptographic operations for binding to a remote service. The […]

🟠 High   ⏱ 15–60 min  Last verified: 17 September 2023 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2023:6595 Related CVEs: CVE-2022-27635 CVE-2022-36351 CVE-2022-38076 CVE-2022-40964 CVE-2022-46329 CVE-2023-20569 CVE-2023-20584 CVE-2023-31356  +2 more Upstream summary: The linux-firmware packages contain all of the firmware files that are required by various devices to […]

🟠 High   ⏱ 15–60 min  Last verified: 13 September 2023 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:2264 Related CVEs: CVE-2022-36763 CVE-2022-36764 CVE-2023-3446 CVE-2023-45229 CVE-2023-45231 CVE-2023-45232 CVE-2023-45233 CVE-2023-45235  +12 more Upstream summary: EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 September 2023 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2023:6569 Related CVEs: CVE-2023-33204 CVE-2022-39377 Upstream summary: The sysstat packages provide the sar and iostat commands. These commands enable system monitoring of disk, network, and other I/O activity. Security Fix(es): * […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 September 2023 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2023:4347 Related CVEs: CVE-2023-22652 Upstream summary: Libeconf is a highly flexible and configurable library to parse and manage key=value configuration files. It reads configuration file snippets from different directories and builds […]

🟠 High   ⏱ 15–60 min  Last verified: 7 September 2023 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2023:4411 Related CVEs: CVE-2023-37464 Upstream summary: CJose is C library implementing the Javascript Object Signing and Encryption (JOSE). Security Fix(es): * cjose: AES GCM decryption uses the Tag length from the […]