Rocky Linux 10.2 [CIQ] Security Update: c-ares / c-ares-debuginfo / c-ares-debugsource / c-ares-devel (crlsa-2026_42096)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202642096 advisory. c-ares: c-ares: Use-after-free / double-free in query-completion handling CVE-2026-33630 Tenable has extracted the preceding description block directly from the...

CentOS Linux 7 [TuxCare] Security Update: c-ares / c-ares-devel (CENTOS7:CLSA-2025:1757608893)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1757608893 advisory. - Heap-based buffer overflow in the arescreatequery function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service...

Rocky Linux 8.6 [CIQ] Security Update: xmlrpc-c / xmlrpc-c-apps / xmlrpc-c-apps-debuginfo / xmlrpc-c-c++ / etc Multiple Vulnerabilities (ciqsa-2026_1037)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261037 advisory. This advisory aggregates security fixes for the xmlrpc-c SRPM in CIQ LTS 8.6. It addresses 2 CVEs: CVE-2024-45491, CVE-2023-52425. Tenable has extracted...

Rocky Linux 8 [CIQ] Security Update: gcc-toolset-10-gcc / gcc-toolset-10-gcc-c++ / etc (crlsa-2021_4585)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214585 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in gcc ...

Rocky Linux 8 [CIQ] Security Update: nodejs / nodejs-debuginfo / nodejs-debugsource / nodejs-devel / etc (crlsa-2025_4461)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20254461 advisory. c-ares: c-ares has a use-after-free in readanswers CVE-2025-31498 Tenable has extracted the preceding description block directly from the CIQ security advisory. Not...

Rocky Linux 9 [CIQ] Security Update: librabbitmq / librabbitmq-debuginfo / librabbitmq-debugsource / etc (crlsa-2023_6482)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20236482 advisory. rabbitmq-c/librabbitmq: Insecure credentials submission CVE-2023-35789 Tenable has extracted the preceding description block directly from the CIQ security advisory...

Rocky Linux 8 [CIQ] Security Update: Judy / Judy-debuginfo / Judy-debugsource Multiple Vulnerabilities (crlsa-2020_5500)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20205500 advisory. mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep CVE-2020-15180 mysql: InnoDB unspecified vulnerability CPU Oct 2019...

Rocky Linux 8.10 [CIQ] Security Update: gnutls / gnutls-c++ / gnutls-c++-debuginfo / gnutls-dane / etc Multiple Vulnerabilities (ciqsa-2026_0746)

The Rocky Linux 8.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260746 advisory. This advisory aggregates security fixes for the gnutls SRPM in CIQ FIPS 8.10 Certified. It addresses 11 CVEs: CVE-2006-0645, CVE-2006-4790,...

Rocky Linux 8 [CIQ] Security Update: nodejs / nodejs-debuginfo / nodejs-debugsource / nodejs-devel / etc Multiple Vulnerabilities (crlsa-2023_4034)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20234034 advisory. c-ares: 0-byte UDP payload Denial of Service CVE-2023-32067 c-ares: Buffer Underwrite in aresinetnetpton CVE-2023-31130 c-ares: Insufficient randomness in...

CentOS Linux 8.5 [TuxCare] Security Update: gnutls / gnutls-c++ / gnutls-dane / gnutls-devel / gnutls-utils (CENTOS8.5:CLSA-2025:1762192914)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2025:1762192914 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 9.2 [CIQ] Security Update: gnutls / gnutls-c++ / gnutls-c++-debuginfo / gnutls-dane / etc Multiple Vulnerabilities (ciqsa-2026_0423)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260423 advisory. This advisory aggregates security fixes for the gnutls SRPM in CIQ LTS 9.2. It addresses 3 CVEs: CVE-2023-5981, CVE-2024-0567, CVE-2024-0553. Tenable has...

AlmaLinux 9.6 [TuxCare] Security Update: opencryptoki / opencryptoki-ccatok / opencryptoki-devel / etc (ALMALINUX9.6:CLSA-2026:1790079559)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790079559 advisory. - openCryptoki is a PKCS11 library and provides tooling for Linux and AIX. In versions 3.26.0 and below, the BER/DER decoding functions in th...

Rocky Linux 8 [CIQ] Security Update: nodejs / nodejs-debuginfo / nodejs-debugsource / nodejs-devel / etc Multiple Vulnerabilities (crlsa-2021_3666)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20213666 advisory. nodejs: Use-after-free on close http2 on stream canceling CVE-2021-22930 nodejs: Use-after-free on close http2 on stream canceling CVE-2021-22940 c-ares:...

Rocky Linux 8.8 [CIQ] Security Update: c-ares / c-ares-debuginfo / c-ares-debugsource / c-ares-devel Multiple Vulnerabilities (ciqsa-2026_0285)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260285 advisory. This advisory aggregates security fixes for the c-ares SRPM in CIQ LTS 8.8. It addresses 3 CVEs: CVE-2020-22217, CVE-2023-31130, CVE-2022-4904. Tenable h...

Rocky Linux 9 [CIQ] Security Update: nodejs-nodemon / nodejs-packaging / nodejs-packaging-bundler (crlsa-2025_7426)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20257426 advisory. c-ares: c-ares has a use-after-free in readanswers CVE-2025-31498 Tenable has extracted the preceding description block directly from the CIQ security advisory. Not...

Rocky Linux 8.6 [CIQ] Security Update: c-ares / c-ares-debuginfo / c-ares-debugsource / c-ares-devel (ciqsa-2026_0016)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260016 advisory. This advisory aggregates security fixes for the c-ares SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-32067. Tenable has extracted the preceding description...

CentOS Linux 8 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (CENTOS-STREAM8:CLSA-2026:1784799471)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1784799471 advisory. - Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim...

CentOS Linux 7 [TuxCare] Security Update: python / python-debug / python-devel / python-libs / python-test / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1783705997)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1783705997 advisory. - The tarfile module would still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even while processing a multi-block member such...

CVE-2026-82357: NULL Pointer Dereference

RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromise...

Rocky Linux 9.2 [CIQ] Security Update: gnutls / gnutls-c++ / gnutls-c++-debuginfo / gnutls-dane / etc Multiple Vulnerabilities (ciqsa-2026_0621)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260621 advisory. This advisory aggregates security fixes for the gnutls SRPM in CIQ FIPS 9.2 Compliant. It addresses 5 CVEs: CVE-2006-0645, CVE-2006-4790, CVE-2019-3829,...