Rocky Linux 9 [CIQ] Security Update: python-tornado-debugsource / python3-tornado / etc Multiple Vulnerabilities (crlsa-2026_67146)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202667146 advisory. tornado: Tornado: Information disclosure via improper handling of credentials during HTTP redirects CVE-2026-49853 tornado: Tornado: Denial of Service via...

Rocky Linux 9 [CIQ] Security Update: python3-urllib3 Multiple Vulnerabilities (crlsa-2026_28158)

The Rocky Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202628158 advisory. urllib3: urllib3: Denial of Service due to excessive HTTP response decompression CVE-2026-44432 urllib3: urllib3: Information disclosure via cross-origin...

AlmaLinux 9.6 [TuxCare] Security Update: lasso / lasso-devel / perl-lasso / python3-lasso (ALMALINUX9.6:CLSA-2026:1787331325)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787331325 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 10.1 [CIQ] Security Update: python3-urllib3 Multiple Vulnerabilities (crlsa-2026_1086)

The Rocky Linux 10.1 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261086 advisory. urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion CVE-2025-66418 urllib3: urllib3 Streaming API improperly handles highly...

AlmaLinux 9.2 [TuxCare] Security Update: python3-setuptools / python3-setuptools-wheel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1765801059)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1765801059 advisory. - A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its...

Rocky Linux 9 [CIQ] Security Update: python3-kdcproxy Multiple Vulnerabilities (crlsa-2025_21139)

The Rocky Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202521139 advisory. python-kdcproxy: Unauthenticated SSRF via Realm?Controlled DNS SRV CVE-2025-59088 python-kdcproxy: Remote DoS via unbounded TCP upstream buffering...

Rocky Linux 9.6 [TuxCare] Security Update: lasso / lasso-devel / perl-lasso / python3-lasso (ALMALINUX9.6:CLSA-2026:1787331325)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787331325 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 9.2 [CIQ] Security Update: python3-rpm / python3-rpm-debuginfo / rpm / rpm-apidocs / rpm-build / etc Multiple Vulnerabilities (ciqsa-2026_0485)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260485 advisory. This advisory aggregates security fixes for the rpm SRPM in CIQ LTS 9.2. It addresses 3 CVEs: CVE-2021-35937, CVE-2021-35938, CVE-2021-35939. Tenable has...

CentOS Linux 7 [TuxCare] Security Update: python3 / python3-debug / python3-devel / python3-idle / etc (CENTOS7:CLSA-2025:1740133056)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1740133056 advisory. - A vulnerability has been found in the CPython venv module and CLI where path names provided when creating a virtual environment were not quoted...

AlmaLinux 9.2 [TuxCare] Security Update: lasso / lasso-devel / perl-lasso / python3-lasso (ALMALINUX9.2:CLSA-2026:1787329313)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1787329313 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 9.6 [CIQ] Security Update: brotli / brotli-devel / libbrotli / python3-brotli (ciqsa-2026_1417)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261417 advisory. This advisory aggregates security fixes for the brotli SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2025-6176. Tenable has extracted the preceding description blo...

Rocky Linux 8 [CIQ] Security Update: python3-unbound / python3-unbound-debuginfo / unbound / etc Multiple Vulnerabilities (crlsa-2025_0837)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20250837 advisory. unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation CVE-2024-1488 unbound: Unbounded name compression could...

CentOS Linux 7 [TuxCare] Security Update: python3 / python3-debug / python3-devel / python3-idle / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1762980908)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1762980908 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

Rocky Linux 8.6 [CIQ] Security Update: python3-libvirt / python3-libvirt-debuginfo Multiple Vulnerabilities (ciqsa-2026_0244)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260244 advisory. This advisory aggregates security fixes for the libvirt-python SRPM in CIQ LTS 8.6. It addresses 3 CVEs: CVE-2024-3446, CVE-2024-7383, CVE-2024-7409...

CentOS Linux 7 [TuxCare] Security Update: python3-pip Multiple Vulnerabilities (CENTOS7:CLSA-2026:1775723090)

The CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1775723090 advisory. - urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly...

Rocky Linux 9.2 [CIQ] Security Update: python3-idna (ciqsa-2026_0484)

The Rocky Linux 9.2 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260484 advisory. This advisory aggregates security fixes for the python-idna SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2024-3651. Tenable has extracted the preceding descriptio...

Rocky Linux 8 [CIQ] Security Update: python3-unbound / python3-unbound-debuginfo / unbound / etc Multiple Vulnerabilities (crlsa-2026_24365)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202624365 advisory. unbound: Heap overflow and crash with multiple nsid, cookie, padding EDNS options CVE-2026-42944 unbound: Unbound DNSSEC Validator Denial of Service via...

Rocky Linux 9.2 [CIQ] Security Update: python3-unbound / python3-unbound-debuginfo / unbound / etc Multiple Vulnerabilities (ciqsa-2026_1371)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261371 advisory. This advisory aggregates security fixes for the unbound SRPM in CIQ LTS 9.2. It addresses 15 CVEs: CVE-2025-5994, CVE-2024-8508, CVE-2024-43167,...

Rocky Linux 9 [CIQ] Security Update: python3-pyasn1 / python3-pyasn1-modules (crlsa-2026_59242)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202659242 advisory. pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values CVE-2026-59886 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 10.2 [CIQ] Security Update: python3-jwcrypto (crlsa-2026_19042)

The Rocky Linux 10.2 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202619042 advisory. JWCrypto: python-cryptography: python: JWCrypto: Memory exhaustion via crafted compressed JWE tokens CVE-2026-39373 Tenable has extracted the preceding...