Rocky Linux 8 [CIQ] Security Update: cups / cups-client / cups-client-debuginfo / cups-debuginfo / etc (crlsa-2025_15702)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202515702 advisory. cups: Authentication Bypass in CUPS Authorization Handling CVE-2025-58060 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 8.6 [CIQ] Security Update: libtasn1 / libtasn1-debuginfo / libtasn1-debugsource / etc (ciqsa-2026_0089)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260089 advisory. This advisory aggregates security fixes for the libtasn1 SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2021-46848. Tenable has extracted the preceding description...

Rocky Linux 9 [CIQ] Security Update: cockpit-composer / osbuild / osbuild-luks2 / osbuild-lvm2 / etc (crlsa-2022_7950)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20227950 advisory. golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service CVE-2022-32189 Tenabl...

Rocky Linux 9.2 [CIQ] Security Update: bpftool / bpftool-debuginfo Multiple Vulnerabilities (ciqsa-2026_1210)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261210 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ FIPS 9.2 Compliant. It addresses 11 CVEs: CVE-2019-25162, CVE-2024-40956,...

Rocky Linux 8.8 [CIQ] Security Update: git-lfs / git-lfs-debuginfo / git-lfs-debugsource (ciqsa-2026_0326)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260326 advisory. This advisory aggregates security fixes for the git-lfs SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2024-34156. Tenable has extracted the preceding description...

CentOS Linux 8 [TuxCare] Security Update: bpftool / kernel-debug-modules / kernel-debug-modules-internal / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2025:1753298759)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2025:1753298759 advisory. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use after free in hcisendacl This fixes the...

Rocky Linux 9 [CIQ] Security Update: krb5-debuginfo / krb5-debugsource / krb5-devel / krb5-libs / etc Multiple Vulnerabilities (crlsa-2026_19357)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619357 advisory. krb5: MIT Kerberos 5 krb5: Denial of Service via integer underflow and out-of-bounds read CVE-2026-40356 krb5: MIT Kerberos 5: Denial of Service via NULL...

CentOS Linux 7.9 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-whitelists / etc Multiple Vulnerabilities (ciqsa-2026_0648)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260648 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ CentOS Bridge 7.9. It addresses 3 CVEs: CVE-2022-49770, CVE-2023-6040, CVE-2023-5717...

Rocky Linux 8 [CIQ] Security Update: aardvark-dns / buildah / buildah-debuginfo / buildah-debugsource / etc Multiple Vulnerabilities (crlsa-2022_7469)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20227469 advisory. cri-o: memory exhaustion on the node when access to the kube api CVE-2022-1708 golang: crash in a golang.org/x/crypto/ssh server CVE-2022-27191 runc:...

Rocky Linux 10.2 [CIQ] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_59133)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202659133 advisory. gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow CVE-2026-18296 gstreamer: GStreamer: Remote code execution...

Rocky Linux 9 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc Multiple Vulnerabilities (crlsa-2026_8469)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20268469 advisory. dotnet: .NET: Security Bypass and Denial of Service Vulnerability CVE-2026-26171 dotnet: .NET: Denial of Service via stack overflow CVE-2026-32203 dotnet:...

CentOS Linux 6 [TuxCare] Security Update: python / python-devel / python-libs / python-test / python-tools / etc Multiple Vulnerabilities (CENTOS6:CLSA-2026:1784072295)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1784072295 advisory. - The tarfile module would still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even while processing a multi-block member such...

Rocky Linux 10.1 [CIQ] Security Update: pam / pam-debuginfo / pam-debugsource / pam-devel / pam-libs / etc (crlsa-2025_20181)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202520181 advisory. linux-pam: Linux-pam directory Traversal CVE-2025-6020 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 8.6 [CIQ] Security Update: qt5-rpm-macros / qt5-srpm-macros (ciqsa-2026_0253)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260253 advisory. This advisory aggregates security fixes for the qt5 SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2022-25255. Tenable has extracted the preceding description block...

Rocky Linux 9.2 [CIQ] Security Update: perl-CPAN / perl-CPAN-tests (ciqsa-2026_0475)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260475 advisory. This advisory aggregates security fixes for the perl-CPAN SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2023-31484. Tenable has extracted the preceding description...

Rocky Linux 9 [CIQ] Security Update: php / php-bcmath / php-bcmath-debuginfo / php-cli / etc Multiple Vulnerabilities (crlsa-2023_0965)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20230965 advisory. XKCP: buffer overflow in the SHA-3 reference implementation CVE-2022-37454 php: standard insecure cookie could be treated as a Host- or Secure- cookie by P...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crlsa-2021_3447)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20213447 advisory. kernel: powerpc: KVM guest OS users can cause host OS memory corruption CVE-2021-37576 kernel: slab-out-of-bounds access in xdrsetpagebase in...

Rocky Linux 10.1 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2025_23279)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202523279 advisory. kernel: cloneprivatemnt: make sure that caller has CAPSYSADMIN in the right userns CVE-2025-38499 kernel: net: tun: Update napi-skb after XDP process...

Rocky Linux 8.8 [CIQ] Security Update: emacs / emacs-common / emacs-common-debuginfo / emacs-debuginfo / etc (ciqsa-2026_0366)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260366 advisory. This advisory aggregates security fixes for the emacs SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2025-1244. Tenable has extracted the preceding description bloc...

Rocky Linux 8 [CIQ] Security Update: nodejs / nodejs-debuginfo / nodejs-debugsource / nodejs-devel / etc Multiple Vulnerabilities (crlsa-2024_2780)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242780 advisory. nodejs: CONTINUATION frames DoS CVE-2024-27983 nodejs: using the fetch function to retrieve content from an untrusted URL leads to denial of service...