Vulnerability Reportalmalinux:9.7-minimal-20260425

This base/runtime image is a reasonable foundation, but it ships vulnerabilities worth remediating in the images built on top of it. The most concerning findings are in gnutls (CVE-2026-42011, CVE-2026-42012), which could allow certificate validation bypass and enable man-in-the-middle attacks in network-facing services. A local privilege escalation via symlink traversal in libacl (CVE-2026-54369) is also present, but it requires local access and is less likely to be exploited in a standard container runtime. There are 46 exposed findings in total, but only three reach severity 6.0 or above, and post-exploit findings are all below 4.0 severity. You should patch the gnutls and libacl packages in your final image or monitor for upstream fixes before going to production. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.