CentOS Stream

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:12265 Related CVEs: CVE-2026-4775 CVE-2025-9900 CVE-2023-52356 Upstream summary: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: libtiff: Arbitrary code […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:16484 Related CVEs: CVE-2026-4150 CVE-2026-4151 CVE-2026-4152 CVE-2026-4153 CVE-2026-4154 CVE-2026-4887 CVE-2026-0797 CVE-2026-2044  +12 more Upstream summary: The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:12423 Related CVEs: CVE-2026-4878 Upstream summary: Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities. Security Fix(es): * libcap: libcap: Privilege escalation via TOCTOU race […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:16693 Related CVEs: CVE-2026-39979 CVE-2026-40164 CVE-2024-23337 CVE-2025-48060 Upstream summary: jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:13380 Related CVEs: CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388 CVE-2026-35414 CVE-2026-3497 CVE-2025-61984 CVE-2025-61985  +1 more Upstream summary: OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:13498 Related CVEs: CVE-2025-59032 CVE-2026-27857 CVE-2026-27858 Upstream summary: Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:18030 Related CVEs: CVE-2026-41316 CVE-2024-49761 CVE-2025-24294 CVE-2025-58767 CVE-2025-61594 CVE-2024-39908 CVE-2024-41123 CVE-2024-41946  +11 more Upstream summary: Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:18030 Related CVEs: CVE-2026-41316 CVE-2024-49761 CVE-2025-24294 CVE-2025-58767 CVE-2025-61594 CVE-2024-39908 CVE-2024-41123 CVE-2024-41946  +11 more Upstream summary: Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:13643 Related CVEs: CVE-2026-25679 CVE-2025-61726 CVE-2025-61728 CVE-2025-61729 CVE-2025-68121 CVE-2025-58183 Upstream summary: A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. […]