Vulnerability Reportalmalinux:8.10-minimal-20260524

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. The most critical is an authentication bypass in gnutls (CVE-2026-42010) allowing remote attackers to gain unauthorized access, while an OpenSSL use-after-free (CVE-2026-45447) could lead to memory corruption or remote code execution. Because this is an official base image, these risks become part of your own image's attack surface. Prioritize upgrading the affected packages before deploying any image built on this base. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.