CentOS Linux 7.9 [CIQ] Security Update: postgresql / postgresql-contrib / postgresql-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0730)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260730 advisory. This advisory aggregates security fixes for the postgresql SRPM in CIQ CentOS Bridge 7.9. It addresses 2 CVEs: CVE-2024-7348, CVE-2024-10979. Tenable ha...

CentOS Linux 8 [TuxCare] Security Update: platform-python / platform-python-debug / platform-python-devel / etc (CENTOS-STREAM8:CLSA-2026:1785455842)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1785455842 advisory. - When using the tarfile module with a file opened in streaming mode mode=r| the tarfile module did not properly handle EOF, making archi...

CentOS Linux 7.9 [CIQ] Security Update: libxml2 / libxml2-debuginfo / libxml2-devel / libxml2-python / etc (ciqsa-2026_0711)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260711 advisory. This advisory aggregates security fixes for the libxml2 SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2022-49043. Tenable has extracted the preceding...

CentOS Linux 8.5 [TuxCare] Security Update: acl / libacl / libacl-devel Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1785151703)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1785151703 advisory. - acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions aclgetfile, aclsetfile,...

CentOS Linux 7.9 [CIQ] Security Update: lemon / sqlite / sqlite-debuginfo / sqlite-devel / sqlite-doc / etc (ciqsa-2026_0691)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260691 advisory. This advisory aggregates security fixes for the sqlite SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2025-6965. Tenable has extracted the preceding...

CentOS Linux 7 [TuxCare] Security Update: emacs-git-el / git-daemon / git-email / git-hg / git-p4 / git-svn / etc (CENTOS7:CLSA-2025:1752655814)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1752655814 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...

CentOS Linux 7.9 [CIQ] Security Update: libxml2 / libxml2-debuginfo / libxml2-devel / libxml2-python / etc (ciqsa-2026_1131)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261131 advisory. This advisory aggregates security fixes for the libxml2 SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2024-56171. Tenable has extracted the preceding...

CentOS Linux 7.9 [CIQ] Security Update: python / python-debug / python-devel / python-libs / python-test / etc Multiple Vulnerabilities (ciqsa-2026_1201)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261201 advisory. This advisory aggregates security fixes for the python SRPM in CIQ CentOS Bridge 7.9. It addresses 3 CVEs: CVE-2024-6232, CVE-2022-48560,...

CentOS Linux 8.4 [TuxCare] Security Update: dovecot / dovecot-devel / dovecot-mysql / dovecot-pgsql / etc (CENTOS8.4:CLSA-2026:1778172123)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1778172123 advisory. - Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory. Attacker...

CentOS Linux 8.5 [TuxCare] Security Update: microcode_ctl (CENTOS8.5:CLSA-2026:1789116715)

The CentOS Linux 8.5 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1789116715 advisory. - Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of...

CentOS Linux 6 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-libs / bind-sdb / bind-utils (CENTOS6:CLSA-2026:1781169600)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1781169600 advisory. - Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache...

CentOS Linux 8.5 [TuxCare] Security Update: python2 / python2-debug / python2-devel / python2-libs / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1772098033)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1772098033 advisory. - The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation reject...

CentOS Linux 7 [TuxCare] Security Update: libudisks2 / libudisks2-devel / udisks2 / udisks2-iscsi / etc (CENTOS7:CLSA-2025:1763141692)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1763141692 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...

CentOS Linux 7 [TuxCare] Security Update: ruby / ruby-devel / ruby-doc / ruby-irb / ruby-libs / ruby-tcltk / etc (CENTOS7:CLSA-2025:1758023679)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1758023679 advisory. - An exploitable heap overflow vulnerability exists in the Fiddle::Function.new initialize function functionality of Ruby. In Fiddle::Function.ne...

CentOS Linux 7 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (CENTOS7:CLSA-2025:1762437868)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1762437868 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...

CentOS Linux 8.5 [TuxCare] Security Update: grub2-common / grub2-efi-ia32 / grub2-efi-ia32-cdboot / etc (CENTOS8.5:CLSA-2026:1771955086)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1771955086 advisory. - A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext...

CentOS Linux 7 [TuxCare] Security Update: python3 / python3-debug / python3-devel / python3-idle / etc (CENTOS7:CLSA-2025:1759857092)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1759857092 advisory. - Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote...

CentOS Linux 7.9 [CIQ] Security Update: httpd / httpd-debuginfo / httpd-devel / httpd-manual / httpd-tools / etc (ciqsa-2026_0675)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260675 advisory. This advisory aggregates security fixes for the httpd SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2023-31122. Tenable has extracted the preceding...

CentOS Linux 7 [TuxCare] Security Update: libipa_hbac / libipa_hbac-devel / libsss_autofs / libsss_certmap / etc (CENTOS7:CLSA-2025:1763397525)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1763397525 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...

CentOS Linux 8 [TuxCare] Security Update: expat / expat-devel / expat-static Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1786009697)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1786009697 advisory. - libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy...