Vulnerability Reportalmalinux:9.8-minimal-20260902

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. The main inherited risks are denial-of-service in libevent (CVE-2026-63383) and an openssl-libs DTLS flaw (CVE-2026-84782) that can crash a process or disclose heap memory, so services using malformed RPC/tag parsing or DTLS could be disrupted or leak memory. No exposed finding reaches severity 7.0 or higher, and the post-exploit-only findings are all below severity 6.0, which keeps this at CAUTION rather than DANGEROUS. Not using DTLS in workloads built on this image would fully eliminate the CVE-2026-84782 exposure for that component. Configuration and platform details affect exploitability, so verify whether the affected libraries are exercised by your workloads. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.