CentOS Linux 7.9 [CIQ] Security Update: libxml2 / libxml2-debuginfo / libxml2-devel / libxml2-python / etc Multiple Vulnerabilities (ciqsa-2026_0709)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260709 advisory. This advisory aggregates security fixes for the libxml2 SRPM in CIQ CentOS Bridge 7.9. It addresses 4 CVEs: CVE-2022-40304, CVE-2022-23308, CVE-2021-353...

CentOS Linux 7.9 [CIQ] Security Update: json-c / json-c-devel / json-c-doc (ciqsa-2026_1197)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261197 advisory. This advisory aggregates security fixes for the json-c SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2020-12762. Tenable has extracted the preceding...

CentOS Linux 7.9 [CIQ] Security Update: libxml2 / libxml2-debuginfo / libxml2-devel / libxml2-python / etc Multiple Vulnerabilities (ciqsa-2026_0710)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260710 advisory. This advisory aggregates security fixes for the libxml2 SRPM in CIQ CentOS Bridge 7.9. It addresses 15 CVEs: CVE-2024-25062, CVE-2023-39615,...

CentOS Linux 6 [TuxCare] Security Update: libwebp / libwebp-devel / libwebp-java / libwebp-tools Multiple Vulnerabilities (CENTOS6:CLSA-2025:1759154304)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2025:1759154304 advisory. - A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest...

CentOS Linux 7 [TuxCare] Security Update: libxml2 / libxml2-devel / libxml2-python / libxml2-static Multiple Vulnerabilities (CENTOS7:CLSA-2026:1781619427)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1781619427 advisory. - A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content,...

CentOS Linux 8 [TuxCare] Security Update: expat / expat-devel / expat-static Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1786009697)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1786009697 advisory. - libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy...

CentOS Linux 6 [TuxCare] Security Update: curl / libcurl / libcurl-devel Multiple Vulnerabilities (CENTOS6:CLSA-2026:1778786567)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1778786567 advisory. - libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP...

CentOS Linux 7.9 [CIQ] Security Update: java-1.7.0-openjdk / java-1.7.0-openjdk-accessibility / etc (ciqsa-2026_0684)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260684 advisory. This advisory aggregates security fixes for the java-1.7.0-openjdk SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2024-20952. Tenable has extracted the...

CentOS Linux 8.5 [TuxCare] Security Update: lemon / sqlite / sqlite-analyzer / sqlite-devel / sqlite-doc / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1785563058)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1785563058 advisory. - sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has...

CentOS Linux 8 [TuxCare] Security Update: libwebp / libwebp-devel / libwebp-java / libwebp-tools Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1776421961)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1776421961 advisory. - A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes. CVE-2018-25013 - A use of uninitializ...

CentOS Linux 8 [TuxCare] Security Update: platform-python / platform-python-debug / platform-python-devel / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1772810768)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1772810768 advisory. - There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module. When parsing...

CentOS Linux 7 [TuxCare] Security Update: httpd / httpd-devel / httpd-manual / httpd-tools / mod_ldap / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1758035329)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1758035329 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

CentOS Linux 8.5 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-export-devel / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1780475769)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1780475769 advisory. - BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumptio...

CentOS Linux 8.4 [TuxCare] Security Update: dmidecode (CENTOS8.4:CLSA-2025:1755004236)

The CentOS Linux 8.4 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2025:1755004236 advisory. - Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode v...

CentOS Linux 8.5 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal (CENTOS8.5:CLSA-2026:1786092535)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1786092535 advisory. - libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited...

CentOS Linux 7 [TuxCare] Security Update: httpd / httpd-devel / httpd-manual / httpd-tools / mod_ldap / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1751271625)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1751271625 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

CentOS Linux 8.5 [TuxCare] Security Update: dhcp-client / dhcp-common / dhcp-devel / dhcp-devel-doc / dhcp-libs / etc (CENTOS8.5:CLSA-2025:1762957104)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2025:1762957104 advisory. - Sending a flood of dynamic DNS updates may cause named to allocate large amounts of memory. This, in turn, may cause named to exit due to a...

CentOS Linux 6 [TuxCare] Security Update: python / python-devel / python-libs / python-test / python-tools / etc (CENTOS6:CLSA-2026:1786091187)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1786091187 advisory. - When using the tarfile module with a file opened in streaming mode mode=r| the tarfile module did not properly handle EOF, making archive parsi...

CentOS Linux 7.9 [CIQ] Security Update: sudo / sudo-debuginfo (ciqsa-2026_1499)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261499 advisory. This advisory aggregates security fixes for the sudo SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2021-23239. Tenable has extracted the preceding...

CentOS Linux 8.5 [TuxCare] Security Update: libssh / libssh-config / libssh-devel (CENTOS8.5:CLSA-2026:1777939234)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1777939234 advisory. - A flaw was found in libssh. The API function sshgethexa is vulnerable to a denial of service when processing zero-length input. This can be...