PT-2026-109948

Security vulnerability affects the kube-state-metrics-fips package. This issue is resolved in later releases. See references for vulnerability details...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (ciqsa-2026_0635)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260635 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ FIPS 8 Compliant. It addresses 9 CVEs: CVE-2022-50403, CVE-2023-53257, CVE-2023-53373,...

Rocky Linux 9.2 [CIQ] Security Update: bpftool / bpftool-debuginfo Multiple Vulnerabilities (ciqsa-2026_1210)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261210 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ FIPS 9.2 Compliant. It addresses 11 CVEs: CVE-2019-25162, CVE-2024-40956,...

Rocky Linux 9.2 [CIQ] Security Update: bpftool-debuginfo Multiple Vulnerabilities (ciqsa-2026_1258)

The Rocky Linux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261258 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ FIPS 9.2 Compliant. It addresses 7 CVEs: CVE-2023-51042, CVE-2024-50151, CVE-2025-3800...

Rocky Linux 8.6 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (ciqsa-2026_0585)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260585 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ FIPS 8.6 Compliant. It addresses 2 CVEs: CVE-2022-49803, CVE-2022-49846. Tenable has...

Rocky Linux 9 [CIQ] Security Update: skopeo / skopeo-debuginfo / skopeo-debugsource / skopeo-tests (crlsa-2024_4502)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20244502 advisory. golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 Tenable has extracted the preceding description block directly from t...

Rocky Linux 8 [CIQ] Security Update: java-17-openjdk / java-17-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_0927)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20260927 advisory. JDK: Improve JMX connections CVE-2026-21925 JDK: Improve HttpServer Request handling CVE-2026-21933 JDK: Enhance Certificate Checking CVE-2026-21945 libpng...

Rocky Linux 8 [CIQ] Security Update: grafana-pcp / grafana-pcp-debuginfo / grafana-pcp-debugsource (crlsa-2024_1644)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20241644 advisory. golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 Bug Fixes: TRIAGE CVE-2024-1394 grafana-pcp: golang-fips/openssl:...

Rocky Linux 9.2 [CIQ] Security Update: libgcrypt / libgcrypt-devel Multiple Vulnerabilities (ciqsa-2026_0622)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260622 advisory. This advisory aggregates security fixes for the libgcrypt SRPM in CIQ FIPS 9.2 Compliant. It addresses 2 CVEs: CVE-2016-6316, CVE-2021-33560. Tenable has...

Rocky Linux 8 [CIQ] Security Update: grub2-common / grub2-debuginfo / grub2-efi-ia32 / etc Multiple Vulnerabilities (ciqsa-2026_1266)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261266 advisory. This advisory aggregates security fixes for the grub2 SRPM in CIQ FIPS 8. It addresses 3 CVEs: CVE-2024-1048, CVE-2023-4693, CVE-2023-4692. Tenable has...

Rocky Linux 9 [CIQ] Security Update: grafana-pcp / grafana-pcp-debuginfo / grafana-pcp-debugsource (crlsa-2024_1502)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20241502 advisory. grafana-pcp: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 This advisory is provided by Ctrl IQ, Inc for Rocky Linu...

Rocky Linux 8 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux Multiple Vulnerabilities (crlsa-2024_3265)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243265 advisory. golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 grafana: vulnerable to authorization bypass CVE-2024-1313...

Rocky Linux 9.2 [CIQ] Security Update: bpftool-debuginfo Multiple Vulnerabilities (ciqsa-2026_1249)

The Rocky Linux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261249 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ FIPS 9.2 Compliant. It addresses 22 CVEs: CVE-2023-53494, CVE-2023-53213,...

Rocky Linux 8.10 [CIQ] Security Update: nspr / nspr-debuginfo / nspr-devel / nss / nss-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0605)

The Rocky Linux 8.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260605 advisory. This advisory aggregates security fixes for the nss SRPM in CIQ FIPS 8.10 Compliant. It addresses 2 CVEs: CVE-2023-0767, CVE-2021-43527. Tenable has...

AlmaLinux 9.2 [TuxCare] Security Update: libreswan (ALMALINUX9.2:CLSA-2026:1785422092)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785422092 advisory. - In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However,...

Rocky Linux 9.2 [CIQ] Security Update: nspr-debuginfo Multiple Vulnerabilities (ciqsa-2026_1225)

The Rocky Linux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261225 advisory. This advisory aggregates security fixes for the nss SRPM in CIQ FIPS 9.2 Compliant. It addresses 2 CVEs: CVE-2021-43527, CVE-2023-0767. Tenable has...

PT-2026-109952

Security vulnerability affects the kube-state-metrics-fips package. This issue is resolved in later releases. See references for vulnerability details...

Rocky Linux 8.10 [CIQ] Security Update: nspr-debuginfo Multiple Vulnerabilities (ciqsa-2026_1224)

The Rocky Linux 8.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261224 advisory. This advisory aggregates security fixes for the nss SRPM in CIQ FIPS 8.10 Compliant. It addresses 2 CVEs: CVE-2021-43527, CVE-2023-0767. Tenable has...

Rocky Linux 9.2 [CIQ] Security Update: bpftool-debuginfo Multiple Vulnerabilities (ciqsa-2026_1227)

The Rocky Linux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261227 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ FIPS 9.2 Compliant. It addresses 29 CVEs: CVE-2025-38464, CVE-2023-53125,...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (ciqsa-2026_0636)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260636 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ FIPS 8 Compliant. It addresses 17 CVEs: CVE-2025-37797, CVE-2025-38086, CVE-2025-38177,...