🟡 Medium ⏱ 10–30 min Last verified: 6 January 2023 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2023:2258 Related CVEs: CVE-2022-40023 Upstream summary: Mako is a template library written in Python. It provides a familiar, non-XML syntax which compiles into Python modules for maximum performance. Security Fix(es): * […]
🟡 Medium ⏱ 10–30 min Last verified: 30 December 2022 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2022:8393 Related CVEs: CVE-2022-1348 Upstream summary: The logrotate utility simplifies the administration of multiple log files by allowing their automatic rotation, compression, removal, and mailing. Security Fix(es): * logrotate: potential DoS […]
🟢 Low ⏱ 5–15 min Last verified: 28 December 2022 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2022:7979 Related CVEs: CVE-2020-23903 Upstream summary: Speex is a patent-free compression format designed especially for speech. It is specialized for voice communications at low bit-rates. Security Fix(es): * speex: divide by […]
🟠 High ⏱ 15–60 min Last verified: 26 December 2022 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2022:4940 Related CVEs: CVE-2022-1271 Upstream summary: XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm […]
🟡 Medium ⏱ 10–30 min Last verified: 14 December 2022 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2023:7754 Related CVEs: CVE-2022-44638 Upstream summary: Pixman is a pixel manipulation library for the X Window System and Cairo. Security Fix(es): * pixman: Integer overflow in pixman_sample_floor_y leading to heap out-of-bounds […]
🟢 Low ⏱ 5–15 min Last verified: 12 December 2022 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:2512 Related CVEs: CVE-2022-48554 Upstream summary: The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file […]
🟢 Low ⏱ 5–15 min Last verified: 5 December 2022 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2023:6372 Related CVEs: CVE-2021-3826 Upstream summary: The GNU Debugger (GDB) allows users to debug programs written in various programming languages including C, C++, and Fortran. Security Fix(es): * libiberty: Heap/stack buffer […]
🟡 Medium ⏱ 10–30 min Last verified: 5 December 2022 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2023:2193 Related CVEs: CVE-2022-27664 CVE-2022-32189 Upstream summary: Butane translates human-readable Butane Configs into machine-readable Ignition configs for provisioning operating systems that use Ignition. The following packages have been upgraded to a […]
🟡 Medium ⏱ 10–30 min Last verified: 27 November 2022 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:7672 Related CVEs: CVE-2022-4055 Upstream summary: The xdg-utils package is a set of simple scripts that provide basic desktop integration functions for any Free Desktop. Security Fix(es): * xdg-utils: improper parse […]
🟢 Low ⏱ 5–15 min Last verified: 14 November 2022 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2022:8139 Related CVEs: CVE-2021-44269 Upstream summary: WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Security Fix(es): * wavpack: Heap out-of-bounds read […]
