Rocky Linux 8 [CIQ] Security Update: apcu-panel / libzip / libzip-debuginfo / libzip-debugsource / etc Multiple Vulnerabilities (crlsa-2022_6542)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20226542 advisory. ArchiveTar: allows an unserialization attack because phar: is blocked but PHAR: is not blocked CVE-2020-28948 ArchiveTar: improper filename sanitization...

Rocky Linux 9.4 [CIQ] Security Update: microcode_ctl Multiple Vulnerabilities (ciqsa-2026_0550)

The Rocky Linux 9.4 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260550 advisory. This advisory aggregates security fixes for the microcodectl SRPM in CIQ LTS 9.4. It addresses 16 CVEs: CVE-2024-28047, CVE-2024-37020, CVE-2024-31157,...

CentOS Linux 8.4 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1789464361)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1789464361 advisory. - Vim is an open source, command line text editor. Prior to 9.2.0846, setsofo in src/spellfile.c reuses slsalfirst without resetting...

Rocky Linux 8.6 [CIQ] Security Update: flatpak / flatpak-debuginfo / flatpak-debugsource / flatpak-devel / etc (ciqsa-2026_1107)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261107 advisory. This advisory aggregates security fixes for the flatpak SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-32462. Tenable has extracted the preceding description...

CentOS Linux 7 [TuxCare] Security Update: httpd / httpd-devel / httpd-manual / httpd-tools / mod_ldap / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1751271625)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1751271625 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2026-273-02)

The version of mozilla-thunderbird installed on the remote host is prior to 140.17.0esr / 153.4.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-273-02 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix securit...

Rocky Linux 9 [CIQ] Security Update: ignition / ignition-debuginfo / ignition-debugsource (crlsa-2022_8126)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20228126 advisory. ignition: configs are accessible from unprivileged containers in VMs running on VMware products CVE-2022-1706 Tenable has extracted the preceding description block...

Rocky Linux 8 [CIQ] Security Update: delve / delve-debuginfo / delve-debugsource / go-toolset / golang / etc Multiple Vulnerabilities (crlsa-2023_0446)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20230446 advisory. golang: archive/tar: unbounded memory consumption when reading headers CVE-2022-2879 golang: net/http/httputil: ReverseProxy should not forward unparseable...

Rocky Linux 9.6 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1786764414)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786764414 advisory. - When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a malicious file can cau...

Rocky Linux 8.6 [CIQ] Security Update: aspnetcore-runtime-6.0 / aspnetcore-targeting-pack-6.0 / dotnet / etc Multiple Vulnerabilities (ciqsa-2026_1017)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261017 advisory. This advisory aggregates security fixes for the dotnet6.0 SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2024-43485, CVE-2024-43484, CVE-2024-43483,...

Rocky Linux 8.6 [CIQ] Security Update: xmlrpc-c / xmlrpc-c-apps / xmlrpc-c-apps-debuginfo / xmlrpc-c-c++ / etc Multiple Vulnerabilities (ciqsa-2026_1037)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261037 advisory. This advisory aggregates security fixes for the xmlrpc-c SRPM in CIQ LTS 8.6. It addresses 2 CVEs: CVE-2024-45491, CVE-2023-52425. Tenable has extracted...

Rocky Linux 9 [CIQ] Security Update: podman / podman-debuginfo / podman-debugsource / podman-docker / etc Multiple Vulnerabilities (crlsa-2024_8039)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20248039 advisory. go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion CVE-2024-34155 encoding/gob:...

Rocky Linux 8.8 [CIQ] Security Update: tracker-miners / tracker-miners-debuginfo / etc (ciqsa-2026_1041)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261041 advisory. This advisory aggregates security fixes for the tracker-miners SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2023-5557. Tenable has extracted the preceding...

CentOS Linux 8 [TuxCare] Security Update: bpftool / kernel-debug-modules / kernel-debug-modules-internal / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2025:1753298759)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2025:1753298759 advisory. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use after free in hcisendacl This fixes the...

Rocky Linux 10.1 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_2721)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20262721 advisory. kernel: ntbhwswitchtec: Fix shift-out-of-bounds in switchtecntbmwsettrans CVE-2023-53034 kernel: Linux kernel erofs: Use-After-Free due to device type...

CentOS Linux 7.9 [CIQ] Security Update: cups-filters / cups-filters-debuginfo / cups-filters-devel / etc Multiple Vulnerabilities (ciqsa-2026_0658)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260658 advisory. This advisory aggregates security fixes for the cups-filters SRPM in CIQ CentOS Bridge 7.9. It addresses 2 CVEs: CVE-2024-47076, CVE-2024-47175. Tenable...

Rocky Linux 9.2 [CIQ] Security Update: cups / cups-client / cups-client-debuginfo / cups-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0404)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260404 advisory. This advisory aggregates security fixes for the cups SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2024-47175, CVE-2025-58060. Tenable has extracted the...

Rocky Linux 9.2 [CIQ] Security Update: iwl100-firmware / iwl1000-firmware / iwl105-firmware / etc Multiple Vulnerabilities (ciqsa-2026_0434)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260434 advisory. This advisory aggregates security fixes for the linux-firmware SRPM in CIQ LTS 9.2. It addresses 8 CVEs: CVE-2023-31315, CVE-2023-31356, CVE-2023-31346,...

Rocky Linux 9 [CIQ] Security Update: 389-ds-base / 389-ds-base-debuginfo / 389-ds-base-debugsource / etc (crlsa-2025_4491)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20254491 advisory. 389-ds-base: null pointer dereference leads to denial of service CVE-2025-2487 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 9 [CIQ] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_36834)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202636834 advisory. gstreamer1-plugins-bad-free: GStreamer: Denial of service via AV1 tilelistobu parser byte/bit confusion CVE-2026-52718 gstreamer1-plugins-bad-free:...