Rocky Linux 9.2 [CIQ] Security Update: bpftool-debuginfo Multiple Vulnerabilities (ciqsa-2026_1228)

The Rocky Linux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261228 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ FIPS 9.2 Compliant. It addresses 8 CVEs: CVE-2023-52628, CVE-2025-38352, CVE-2021-4759...

Rocky Linux 9.4 [CIQ] Security Update: kernel-rt-debug-debuginfo / kernel-rt-debuginfo Multiple Vulnerabilities (ciqsa-2026_1270)

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261270 advisory. This advisory aggregates security fixes for the kernel-rt SRPM in CIQ LTS 9.4. It addresses 15 CVEs: CVE-2025-38352, CVE-2023-52482, CVE-2025-37797,...

Rocky Linux 8.6 [CIQ] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ciqsa-2026_1346)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261346 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ LTS 8.6. It addresses 10 CVEs: CVE-2026-43284, CVE-2022-48793, CVE-2026-23193,...

Rocky Linux 9.2 [CIQ] Security Update: bpftool Multiple Vulnerabilities (ciqsa-2026_1347)

The Rocky Linux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261347 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ LTS 9.2. It addresses 13 CVEs: CVE-2025-38154, CVE-2026-23193, CVE-2022-50042,...

Rocky Linux 8.6 [CIQ] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ciqsa-2026_1437)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261437 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ LTS 8.6. It addresses 3 CVEs: CVE-2026-43279, CVE-2026-43499, CVE-2026-53163. Tenable...

Rocky Linux 8.6 [CIQ] Security Update: ctdb / libsmbclient / libsmbclient-devel / libwbclient / etc Multiple Vulnerabilities (ciqsa-2026_1513)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261513 advisory. This advisory aggregates security fixes for the samba SRPM in CIQ LTS 8.6. It addresses 5 CVEs: CVE-2026-3012, CVE-2026-4408, CVE-2026-4480, CVE-2026-234...

CentOS Linux 7.9 [CIQ] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0728)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260728 advisory. This advisory aggregates security fixes for the php SRPM in CIQ CentOS Bridge 7.9. It addresses 65 CVEs: CVE-2014-0185, CVE-2014-3981, CVE-2014-9427,...

Rocky Linux 9.2 [CIQ] Security Update: nspr-debuginfo Multiple Vulnerabilities (ciqsa-2026_1225)

The Rocky Linux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261225 advisory. This advisory aggregates security fixes for the nss SRPM in CIQ FIPS 9.2 Compliant. It addresses 2 CVEs: CVE-2021-43527, CVE-2023-0767. Tenable has...

CentOS7_CVE-2021-3712_Remediation

:toc: :toclevels: 4 == 問題 顧客はEOLの古いCentOS7ボックスを所有している CentOS7で実行されている古いopensslは、link:https://nvd.nist.gov/vuln/detail/cve-2021-3712cve-2021-3712の影響を受ける 古いCentOS7上のopensslをどのようにCVEに対してパッチ適用すべきか？ == 手順 1. link:./docs/1.CVE-2021-3712-analysis.adocNVD、CVSS/EPSSスコア、CISA KEVデータを使用したCVE/脆弱性のトリアージ 2...

Rocky Linux 9.6 [TuxCare] Security Update: go-filesystem / go-rpm-macros / go-rpm-templates / go-srpm-macros (ALMALINUX9.6:CLSA-2025:1766233299)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1766233299 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

AlmaLinux 9.6 [TuxCare] Security Update: go-filesystem / go-rpm-macros / go-rpm-templates / go-srpm-macros (ALMALINUX9.6:CLSA-2025:1766233299)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1766233299 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

CLSA-2026-1778218633 jasper: Fix of 3 CVEs

Add Amazon Linux 2 ELS support mirrors centos7els branch with .amzn2 dist via / leapfrog over stock 1.900.1-33.amzn2.0.1 - Import CVE-2020-27828 patch from amzn2 stock SRPM out-of-bounds write in jpc encoder; jasper-2.0.14-CVE-2020-27828.patch - Import CVE-2021-3443 patch from amzn2 stock SRPM...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: qt6: qt6-filesystem-6.11.0-1.hum1 aarch64, x8664 qt6-rpm-macros-6.11.0-1.hum1 noarch qt6-srpm-macros-6.11.0-1.hum1 noarch qt6-6.11.0-1.hum1.src src...

Moderate: go-rpm-macros security update

This package provides build-stage rpm automation to simplify the creation of Go language golang packages. It does not need to be included in the default build root: go-srpm-macros will pull it in for Go packages only. Security Fixes: os/exec: Unexpected paths returned from LookPath in os/exec...

Rocky Linux 8 : qt5 (RLSA-2022:7482)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7482 advisory. - In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not...

Oracle Linux 8 : qt5 (ELSA-2022-7482)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7482 advisory. 5.15.3-1 - 5.15.3 Resolves: bz2061377 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

AlmaLinux 8 : qt5 (ALSA-2022:7482)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:7482 advisory. - In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not foun...

CentOS 8 : qt5 (CESA-2022:7482)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7482 advisory. - qt: QProcess could execute a binary from the current working directory when not found in the PATH CVE-2022-25255 Note that Nessus has not tested for this issu...

new packages: rust-srpm-macros

An update is available for rust-srpm-macros. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

new packages: perl-srpm-macros

An update is available for perl-srpm-macros. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...