CentOS Stream

CentOS Stream 9 — php — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — php — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 6 June 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:1409 Related CVEs: CVE-2025-1220 CVE-2025-14177 CVE-2025-14178 CVE-2025-14180 CVE-2025-1735 CVE-2025-6491 CVE-2024-11235 CVE-2025-1217  +12 more Upstream summary: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * […]

Read more
CentOS Stream 10 — git-lfs — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 10

CentOS Stream 10 — git-lfs — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 6 June 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:7005 Related CVEs: CVE-2026-25679 CVE-2025-61726 CVE-2025-61729 CVE-2025-68121 CVE-2025-26625 Upstream summary: Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, […]

Read more
CentOS Stream 10 — nginx — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 10

CentOS Stream 10 — nginx — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 6 June 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:18063 Related CVEs: CVE-2026-42945 CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-32647 CVE-2026-1642 Upstream summary: nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and […]

Read more
CentOS Stream 9 — keylime — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — keylime — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 3 June 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:2224 Related CVEs: CVE-2026-1709 CVE-2025-13609 CVE-2023-38200 CVE-2023-38201 CVE-2022-3500 CVE-2023-3674 Upstream summary: Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution. Security Fix(es): * keylime: Keylime: […]

Read more
CentOS Stream 10 — curl — vulnerability — patch and remediation guide — diagnosis and fix on CentOS Stream 10

CentOS Stream 10 — curl — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 3 June 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:1825 Related CVEs: CVE-2025-9086 Upstream summary: The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security […]

Read more
CentOS Stream 10 — glibc — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 10

CentOS Stream 10 — glibc — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 June 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:1334 Related CVEs: CVE-2026-0861 CVE-2026-0915 CVE-2025-8058 CVE-2025-5702 Upstream summary: The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache […]

Read more
CentOS Stream 9 — cups — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — cups — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 31 May 2026 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:15700 Related CVEs: CVE-2025-58060 CVE-2025-58364 CVE-2023-32360 CVE-2025-58436 CVE-2025-61915 CVE-2024-35235 CVE-2023-32324 CVE-2023-34241  +1 more Upstream summary: The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar […]

Read more
CentOS Stream 10 — grafana-pcp — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 10

CentOS Stream 10 — grafana-pcp — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 31 May 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:6388 Related CVEs: CVE-2026-25679 CVE-2025-61726 CVE-2025-61729 CVE-2025-68121 Upstream summary: The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts […]

Read more
CentOS Stream 10 — firefox — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 10

CentOS Stream 10 — firefox — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 30 May 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:10767 Related CVEs: CVE-2026-6746 CVE-2026-6747 CVE-2026-6748 CVE-2026-6749 CVE-2026-6750 CVE-2026-6751 CVE-2026-6752 CVE-2026-6753  +12 more Upstream summary: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): […]

Read more
CentOS Stream 10 — dotnet10.0 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 10

CentOS Stream 10 — dotnet10.0 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 30 May 2026 Affected versions: CentOS Stream 10 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2026:4453 Related CVEs: CVE-2026-26127 CVE-2026-26130 Upstream summary: .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. […]

Read more
CHAT