Rocky Linux 9.6 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc Multiple Vulnerabilities (ciqsa-2026_1504)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261504 advisory. This advisory aggregates security fixes for the rsyslog SRPM in CIQ LTS 9.6. It addresses 4 CVEs: CVE-2022-24903, CVE-2011-3200, CVE-2014-3634,...

AlmaLinux 9.2 [TuxCare] Security Update: redis / redis-devel / redis-doc (ALMALINUX9.2:CLSA-2025:1754339372)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1754339372 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 8 [CIQ] Security Update: rubygem-abrt / rubygem-abrt-doc / rubygem-bson / etc Multiple Vulnerabilities (crlba-2019_3384)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlba-20193384 advisory. For detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section. This advisory is provided by...

CentOS Linux 8.4 [TuxCare] Security Update: lemon / sqlite / sqlite-analyzer / sqlite-devel / sqlite-doc / etc (CENTOS8.4:CLSA-2025:1754410836)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2025:1754410836 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 8.6 [CIQ] Security Update: python-psycopg2-doc / python2-psycopg2 / python2-psycopg2-debug / etc Multiple Vulnerabilities (ciqsa-2026_0178)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260178 advisory. This advisory aggregates security fixes for the python-psycopg2 SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2023-24329, CVE-2015-20107, CVE-2022-45061,...

AlmaLinux 9.2 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1753729385)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1753729385 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

AlmaLinux 9.6 [TuxCare] Security Update: libexif / libexif-devel / libexif-doc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1776769506)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776769506 advisory. - libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exifmnotedatagetvalue function gets passed in a 0 size, the passe...

Rocky Linux 9.2 [CIQ] Security Update: git / git-all / git-core / git-core-debuginfo / git-core-doc / etc Multiple Vulnerabilities (ciqsa-2026_0420)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260420 advisory. This advisory aggregates security fixes for the git SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2025-48384, CVE-2025-48385. Tenable has extracted the...

Rocky Linux 9.2 [CIQ] Security Update: libevent / libevent-devel / libevent-doc Multiple Vulnerabilities (ciqsa-2026_1562)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261562 advisory. This advisory aggregates security fixes for the libevent SRPM in CIQ LTS 9.2. It addresses 4 CVEs: CVE-2026-63383, CVE-2026-63384, CVE-2026-63385,...

Rocky Linux 9.4 [CIQ] Security Update: cockpit / cockpit-bridge / cockpit-doc / cockpit-packagekit / etc (ciqsa-2026_1332)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261332 advisory. This advisory aggregates security fixes for the cockpit SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2026-4631. Tenable has extracted the preceding description...

Rocky Linux 9.6 [TuxCare] Security Update: exiv2 / exiv2-devel / exiv2-doc / exiv2-libs (ALMALINUX9.6:CLSA-2025:1766136361)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1766136361 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

CentOS Linux 7.9 [CIQ] Security Update: json-c / json-c-devel / json-c-doc (ciqsa-2026_1197)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261197 advisory. This advisory aggregates security fixes for the json-c SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2020-12762. Tenable has extracted the preceding...

Rocky Linux 9.6 [CIQ] Security Update: glib2 / glib2-devel / glib2-doc / glib2-static / glib2-tests Multiple Vulnerabilities (ciqsa-2026_1522)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261522 advisory. This advisory aggregates security fixes for the glib2 SRPM in CIQ LTS 9.6. It addresses 2 CVEs: CVE-2026-58014, CVE-2026-16118. Tenable has extracted the...

CentOS Linux 7.9 [CIQ] Security Update: lemon / sqlite / sqlite-devel / sqlite-doc / sqlite-tcl (ciqsa-2026_0689)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260689 advisory. This advisory aggregates security fixes for the sqlite SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2019-5827. Tenable has extracted the preceding...

Rocky Linux 9.6 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (ciqsa-2026_1528)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261528 advisory. This advisory aggregates security fixes for the rsyslog SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2026-19654. Tenable has extracted the preceding description...

CVE-2023-54402

iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fetch arbitrary URLs by supplying a hardcoded default token value testtoken to bypass authentication. Attackers can exploit the unrestricted URL scheme handlin...

CVE-2023-54402 iDocView SSRF via /doc/upload Endpoint Hardcoded Token

iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fetch arbitrary URLs by supplying a hardcoded default token value testtoken to bypass authentication. Attackers can exploit the unrestricted URL scheme handlin...

CVE-2023-54402 iDocView SSRF via /doc/upload Endpoint Hardcoded Token

iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fetch arbitrary URLs by supplying a hardcoded default token value testtoken to bypass authentication. Attackers can exploit the unrestricted URL scheme handlin...

CVE-2023-54402

The software iDocView is vulnerable to a Server-Side Request Forgery (SSRF) flaw in its /doc/upload endpoint. Remote unauthenticated attackers can bypass authentication by using a hardcoded default token value (testtoken ) to fetch arbitrary URLs. Due to unrestricted URL scheme handling, includin...

AlmaLinux 9.6 [TuxCare] Security Update: edk2-aarch64 / edk2-ovmf / edk2-tools / edk2-tools-doc (ALMALINUX9.6:CLSA-2026:1772469540)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772469540 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...