Rocky Linux 8.6 [CIQ] Security Update: python2-rpm-macros Multiple Vulnerabilities (ciqsa-2026_0188)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260188 advisory. This advisory aggregates security fixes for the python2-rpm-macros SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681,...

Rocky Linux 8.6 [CIQ] Security Update: python3-rpm / python3-rpm-debuginfo / rpm / rpm-apidocs / rpm-build / etc Multiple Vulnerabilities (ciqsa-2026_0249)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260249 advisory. This advisory aggregates security fixes for the rpm SRPM in CIQ LTS 8.6. It addresses 3 CVEs: CVE-2021-35937, CVE-2021-35938, CVE-2021-35939. Tenable has...

Rocky Linux 9.2 [CIQ] Security Update: python3-rpm / python3-rpm-debuginfo / rpm / rpm-apidocs / rpm-build / etc Multiple Vulnerabilities (ciqsa-2026_0485)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260485 advisory. This advisory aggregates security fixes for the rpm SRPM in CIQ LTS 9.2. It addresses 3 CVEs: CVE-2021-35937, CVE-2021-35938, CVE-2021-35939. Tenable has...

Rocky Linux 8.8 [CIQ] Security Update: python3-rpm / python3-rpm-debuginfo / rpm / rpm-apidocs / rpm-build / etc Multiple Vulnerabilities (ciqsa-2026_0319)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260319 advisory. This advisory aggregates security fixes for the rpm SRPM in CIQ LTS 8.8. It addresses 3 CVEs: CVE-2021-35937, CVE-2021-35938, CVE-2021-35939. Tenable has...

Rocky Linux 9.6 [CIQ] Security Update: go-filesystem / go-rpm-macros / go-rpm-templates / go-srpm-macros Multiple Vulnerabilities (ciqsa-2026_1412)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261412 advisory. This advisory aggregates security fixes for the go-rpm-macros SRPM in CIQ LTS 9.6. It addresses 2 CVEs: CVE-2025-61726, CVE-2026-25679. Tenable has...

Rocky Linux 8.6 [CIQ] Security Update: qt5-rpm-macros / qt5-srpm-macros (ciqsa-2026_0253)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260253 advisory. This advisory aggregates security fixes for the qt5 SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2022-25255. Tenable has extracted the preceding description block...

Rocky Linux 8 [CIQ] Security Update: python3-rpm / python3-rpm-debuginfo / rpm / rpm-apidocs / rpm-build / etc (crlsa-2022_0368)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20220368 advisory. rpm: RPM does not require subkeys to have a valid binding signature CVE-2021-3521 Tenable has extracted the preceding description block directly from the CIQ securi...

Rocky Linux 8 [CIQ] Security Update: dnf / dnf-automatic / dnf-data / dnf-plugins-core / libdnf / etc (crlsa-2021_4464)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214464 advisory. libdnf: Signature verification bypass via signature placed in the main RPM header CVE-2021-3445 Tenable has extracted the preceding description block directly from...

AlmaLinux 9.6 [TuxCare] Security Update: go-filesystem / go-rpm-macros / go-rpm-templates / go-srpm-macros (ALMALINUX9.6:CLSA-2026:1776966842)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776966842 advisory. - url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. CVE-2026-25679 Note that Nessus has not...

Rocky Linux 8 [CIQ] Security Update: python3-rpm / python3-rpm-debuginfo / rpm / rpm-apidocs / rpm-build / etc Multiple Vulnerabilities (crlsa-2024_0647)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20240647 advisory. rpm: TOCTOU race in checks for unsafe symlinks CVE-2021-35937 rpm: races with chown/chmod/capabilities calls during installation CVE-2021-35938 rpm: checks...

AlmaLinux 9.2 [TuxCare] Security Update: go-filesystem / go-rpm-macros / go-rpm-templates / go-srpm-macros (ALMALINUX9.2:CLSA-2025:1765824979)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1765824979 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 8 [CIQ] Security Update: python3-rpm / python3-rpm-debuginfo / rpm / rpm-apidocs / rpm-build / etc (crlsa-2021_4489)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214489 advisory. rpm: missing length checks in hdrblobInit CVE-2021-20266 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 8 [CIQ] Security Update: python3-rpm / python3-rpm-debuginfo / rpm / rpm-apidocs / rpm-build / etc Multiple Vulnerabilities (crlsa-2021_2574)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20212574 advisory. rpm: Signature checks bypass via corrupted rpm package CVE-2021-20271 Tenable has extracted the preceding description block directly from the CIQ security...

Moderate: Red Hat Security Advisory: RHEL AI 3.0 RPM runtime CVE fix - ffmpeg

AIPCC Security Alerts identified CVEs in the 3.0 release of base-images. The CVEs are listed with a severity level of "Important" or higher. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...

SUSE CVE-2026-95520

A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAGLONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext that shrinks a buffer allocation to one byte, after which the payload's...

AZL-105810 CVE-2026-103242 affecting package rpm 4.18.2-2

A heap-based buffer overflow flaw was found in rpm. RPMTAGFILESIGNATURES in a crafted, unsigned RPM package's main header is declared with the wrong header type, causing hex2binv to allocate a one-byte buffer and then write the tag's attacker-controlled, hex-decoded content — of attacker-chosen...

CVE-2026-103242

A heap-based buffer overflow flaw was found in rpm. RPMTAGFILESIGNATURES in a crafted, unsigned RPM package's main header is declared with the wrong header type, causing hex2binv to allocate a one-byte buffer and then write the tag's attacker-controlled, hex-decoded content — of attacker-chosen...

DEBIAN-CVE-2026-103242

A heap-based buffer overflow flaw was found in rpm. RPMTAGFILESIGNATURES in a crafted, unsigned RPM package's main header is declared with the wrong header type, causing hex2binv to allocate a one-byte buffer and then write the tag's attacker-controlled, hex-decoded content — of attacker-chosen...

CVE-2026-103242

A heap-based buffer overflow flaw was found in rpm. RPMTAGFILESIGNATURES in a crafted, unsigned RPM package's main header is declared with the wrong header type, causing hex2binv to allocate a one-byte buffer and then write the tag's attacker-controlled, hex-decoded content — of attacker-chosen...

UBUNTU-CVE-2026-103242

A heap-based buffer overflow flaw was found in rpm. RPMTAGFILESIGNATURES in a crafted, unsigned RPM package's main header is declared with the wrong header type, causing hex2binv to allocate a one-byte buffer and then write the tag's attacker-controlled, hex-decoded content — of attacker-chosen...