🟡 Medium ⏱ 10–30 min Last verified: 14 April 2023 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:1309 Related CVEs: CVE-2020-11023 Upstream summary: The gcc-toolset-13-gcc13 package contains the GNU Compiler Collection version 13. Security Fix(es): * jquery: Untrusted code execution via <option> tag in HTML passed to DOM […]
🟡 Medium ⏱ 10–30 min Last verified: 5 April 2023 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:2525 Related CVEs: CVE-2022-44638 Upstream summary: Pixman is a pixel manipulation library for the X Window System and Cairo. Security Fix(es): * pixman: Integer overflow in pixman_sample_floor_y leading to heap out-of-bounds […]
🟡 Medium ⏱ 10–30 min Last verified: 28 March 2023 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2023:2592 Related CVEs: CVE-2022-41715 Upstream summary: go-md2man converts markdown into roff (man pages). Security Fix(es): * golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715) For more details about the security […]
🟠 High ⏱ 15–60 min Last verified: 28 March 2023 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2023:1368 Related CVEs: CVE-2023-0767 CVE-2023-6135 CVE-2023-5388 Upstream summary: Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Security Fix(es): […]
🟡 Medium ⏱ 10–30 min Last verified: 24 March 2023 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:2396 Related CVEs: CVE-2021-40153 CVE-2021-41072 Upstream summary: SquashFS is a highly compressed read-only file system for Linux. These packages contain the utilities for manipulating squashfs file systems. Security Fix(es): * squashfs-tools: […]
🟡 Medium ⏱ 10–30 min Last verified: 22 March 2023 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2023:6551 Related CVEs: CVE-2023-33460 CVE-2022-24795 Upstream summary: Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator. Security Fix(es): […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2023 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2022:8100 Related CVEs: CVE-2022-23645 Upstream summary: SWTPM is a TPM emulator built on libtpms providing TPM functionality for QEMU VMs. Security Fix(es): * swtpm: Unchecked header size indicator against expected size […]
🟡 Medium ⏱ 10–30 min Last verified: 17 March 2023 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2022:8318 Related CVEs: CVE-2022-32746 Upstream summary: The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or use local TDB databases. The following packages […]
🟡 Medium ⏱ 10–30 min Last verified: 11 March 2023 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:0966 Related CVEs: CVE-2023-5992 CVE-2023-40660 CVE-2023-40661 CVE-2023-4535 CVE-2023-2977 Upstream summary: The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic […]
🟢 Low ⏱ 5–15 min Last verified: 10 March 2023 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2022:7958 Related CVEs: CVE-2022-2211 Upstream summary: The libguestfs packages contain a library used for accessing and modifying virtual machine disk images. Security Fix(es): * libguestfs: Buffer overflow in get_keys leads to […]
