Rocky Linux 9.4 [CIQ] Security Update: rubygem-json / rubygem-json-debuginfo (ciqsa-2026_1290)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261290 advisory. This advisory aggregates security fixes for the ruby SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2024-49761. Tenable has extracted the preceding description bloc...

Rocky Linux 9.4 [CIQ] Security Update: ghostscript / ghostscript-debuginfo / ghostscript-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0529)

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260529 advisory. This advisory aggregates security fixes for the ghostscript SRPM in CIQ LTS 9.4. It addresses 3 CVEs: CVE-2024-46953, CVE-2024-46956, CVE-2024-46951...

Rocky Linux 8.6 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (ciqsa-2026_0041)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260041 advisory. This advisory aggregates security fixes for the firefox SRPM in CIQ LTS 8.6. It addresses 120 CVEs: CVE-2024-3857, CVE-2024-3859, CVE-2024-3864,...

Rocky Linux 9.2 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (ciqsa-2026_0412)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260412 advisory. This advisory aggregates security fixes for the firefox SRPM in CIQ LTS 9.2. It addresses 68 CVEs: CVE-2024-3857, CVE-2024-3859, CVE-2024-3864,...

Rocky Linux 8.6 [CIQ] Security Update: libfastjson / libfastjson-debuginfo / libfastjson-debugsource (ciqsa-2026_0073)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260073 advisory. This advisory aggregates security fixes for the libfastjson SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2020-12762. Tenable has extracted the preceding descripti...

Rocky Linux 8.6 [CIQ] Security Update: mecab / mecab-debuginfo / mecab-debugsource / mecab-devel Multiple Vulnerabilities (ciqsa-2026_0105)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260105 advisory. This advisory aggregates security fixes for the mecab SRPM in CIQ LTS 8.6. It addresses 129 CVEs: CVE-2022-21594, CVE-2022-21599, CVE-2022-21604,...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crxsa-2024_3138)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crxsa-20243138 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: For more details about the security issues, including...

Rocky Linux 8.8 [CIQ] Security Update: delve / delve-debuginfo / delve-debugsource Multiple Vulnerabilities (ciqsa-2026_0961)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260961 advisory. This advisory aggregates security fixes for the delve SRPM in CIQ LTS 8.8. It addresses 16 CVEs: CVE-2023-39321, CVE-2023-39325, CVE-2023-39326,...

Rocky Linux 8.8 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0340)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260340 advisory. This advisory aggregates security fixes for the tigervnc SRPM in CIQ LTS 8.8. It addresses 12 CVEs: CVE-2024-31083, CVE-2023-5380, CVE-2023-5367,...

SUSE SLES15 Security Update : google-osconfig-agent (SUSE-SU-2026:2611-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2611-1 advisory. This update for google-osconfig-agent fixes the following issue - CVE-2026-33186: Update google.golang.org/grpc dependency...

SUSE-SU-2026:2611-1 Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issue - CVE-2026-33186: Update google.golang.org/grpc dependency bsc1260264. - CVE-2026-39821: Update golang.org/x/net/idna dependency bsc1266603. - CVE-2026-39827: Update golang.org/x/crypto dependency bsc1266171. - CVE-2026-39828: Update...

Security update for google-guest-agent

This update for google-guest-agent fixes the following issues: CVE-2026-39827: Update golang.org/x/crypto dependency bsc1266171. CVE-2026-39828: Update golang.org/x/crypto dependency bsc1266171. CVE-2026-39829: Update golang.org/x/crypto dependency bsc1266171. CVE-2026-39830: Update...

SUSE-SU-2026:2581-1 Security update for google-guest-agent

This update for google-guest-agent fixes the following issues: - CVE-2026-39827: Update golang.org/x/crypto dependency bsc1266171. - CVE-2026-39828: Update golang.org/x/crypto dependency bsc1266171. - CVE-2026-39829: Update golang.org/x/crypto dependency bsc1266171. - CVE-2026-39830: Update...

RockyLinux 10 : crun (RLSA-2026:19020)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:19020 advisory. crun: crun: Privilege escalation due to incorrect parsing of the --user option CVE-2026-30892 Tenable has extracted the preceding description block directly fro...

Medium: php8.3

Issue Overview: NOTE: https://github.com/php/php-src/security/advisories/GHSA-3237-qqm7-mfv7 NOTE: https://github.com/php/php-src/commit/c5f28c7cf0a052f48e47877c7aa5c5bcc54f1cfc DEBIANBUG: 1123574 CVE-2025-14177 NOTE: https://github.com/php/php-src/security/advisories/GHSA-h96m-rvf9-jgm2 NOTE:...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READ CVE-2022-50410 In the Linux kernel, the following vulnerability has been resolved: icmp6: Fix null-ptr-deref of ip6nullentry-rt6iidev in icmp6dev...

Low: librsvg2

Issue Overview: RUSTSEC-2024-0429 is a vulnerability discovered in the glib Rust crate affecting versions prior to 0.20.0. The issue involves unsoundness in Iterator and DoubleEndedIterator implementations for glib::VariantStrIter, where passing an immutable reference to a function that mutates t...

CVE-2024-1431

A vulnerability was found in Netgear R7000 1.0.11.13610.2.120 and classified as problematic. Affected by this issue is some unknown functionality of the file /debuginfo.htm of the component Web Management Interface. The manipulation leads to information disclosure. The exploit has been disclosed ...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the debugInfo function in the cache.go file. An attacker can trigger a fatal error in the cache system by exploiting a race condition vulnerability that occurs when concurrent map iteration and map write...

Low: docker

Issue Overview: golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors...