CentOS Linux 8 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1791395301)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1791395301 advisory. - The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes fo...

CentOS Linux 7.9 [CIQ] Security Update: libevent / libevent-devel / libevent-doc Multiple Vulnerabilities (ciqsa-2026_1590)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261590 advisory. This advisory aggregates security fixes for the libevent SRPM in CIQ CentOS Bridge 7.9. It addresses 2 CVEs: CVE-2026-63383, CVE-2026-63387. Tenable has...

CentOS Linux 8.4 [TuxCare] Security Update: platform-python / platform-python-debug / platform-python-devel / etc (CENTOS8.4:CLSA-2026:1791413715)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791413715 advisory. - A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context...

CentOS 9 : pcre2-10.40-7.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the pcre2-10.40-7.el9 build changelog. - In PCRE2 before 10.48, pcre2jitmatch mishandles a previously copied subject being passed in as a context. An incorrect free operation can...

CentOS Linux 7 [TuxCare] Security Update: expat / expat-devel / expat-static (CENTOS7:CLSA-2026:1790918446)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1790918446 advisory. - Expat before 2.8.5 fails to validate that a high surrogate in UTF-16 input is followed by a low surrogate, allowing malformed UTF-16 sequences ...

CentOS Linux 7.9 [CIQ] Security Update: bpftool / kernel / kernel-abi-whitelists / kernel-debug / etc Multiple Vulnerabilities (ciqsa-2026_1586)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261586 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ CentOS Bridge 7.9. It addresses 3 CVEs: CVE-2026-53196, CVE-2026-53266, CVE-2025-3996...

iconvfix

iconvfix Script Bash para parchear CVE-2024-2961 Actualmente funciona en CentOS7. Sin garantía, no usar en sistemas de producción, esto es solo una ayuda interna : Uso tsh ssh username@target sudo 'bash -s' iconvfix.sh...

CentOS Linux 8.4 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1790933443)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1790933443 advisory. - Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when...

CentOS Linux 8 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1790933563)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1790933563 advisory. - Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when...

CentOS Linux 8.5 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1790933161)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1790933161 advisory. - Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when...

CentOS Linux 7.9 [CIQ] Security Update: gd / gd-debuginfo / gd-devel / gd-progs Multiple Vulnerabilities (ciqsa-2026_0662)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260662 advisory. This advisory aggregates security fixes for the gd SRPM in CIQ CentOS Bridge 7.9. It addresses 2 CVEs: CVE-2016-8670, CVE-2016-9317. Tenable has extract...

CentOS Linux 7.9 [CIQ] Security Update: krb5-devel / krb5-libs / krb5-pkinit / krb5-server / etc (ciqsa-2026_0688)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260688 advisory. This advisory aggregates security fixes for the krb5 SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2024-3596. Tenable has extracted the preceding...

CentOS Linux 7.9 [CIQ] Security Update: libxslt / libxslt-debuginfo / libxslt-devel / libxslt-python Multiple Vulnerabilities (ciqsa-2026_0716)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260716 advisory. This advisory aggregates security fixes for the libxslt SRPM in CIQ CentOS Bridge 7.9. It addresses 2 CVEs: CVE-2024-55549, CVE-2025-24855. Tenable has...

CentOS Linux 7.9 [CIQ] Security Update: python / python-debug / python-devel / python-libs / python-test / etc Multiple Vulnerabilities (ciqsa-2026_1201)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261201 advisory. This advisory aggregates security fixes for the python SRPM in CIQ CentOS Bridge 7.9. It addresses 3 CVEs: CVE-2024-6232, CVE-2022-48560,...

CentOS Linux 7 [TuxCare] Security Update: ruby / ruby-devel / ruby-doc / ruby-irb / ruby-libs / ruby-tcltk / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1777444043)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1777444043 advisory. - The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip...

CentOS Linux 6 [TuxCare] Security Update: perl / perl-Archive-Extract / perl-Archive-Tar / perl-CGI / etc Multiple Vulnerabilities (CENTOS6:CLSA-2026:1777879919)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1777879919 advisory. - In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and...

CentOS Linux 7.9 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (ciqsa-2026_0686)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260686 advisory. This advisory aggregates security fixes for the java-1.8.0-openjdk SRPM in CIQ CentOS Bridge 7.9. It addresses 6 CVEs: CVE-2024-21131, CVE-2024-21138,...

CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1773048865)

"The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1773048865 advisory. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid field-overflowing memcpy In preparation for...

CentOS Linux 7.9 [CIQ] Security Update: httpd / httpd-debuginfo / httpd-devel / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (ciqsa-2026_0670)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260670 advisory. This advisory aggregates security fixes for the httpd SRPM in CIQ CentOS Bridge 7.9. It addresses 16 CVEs: CVE-2023-25690, CVE-2021-40438, CVE-2021-3927...

CentOS Linux 7.9 [CIQ] Security Update: libjpeg-turbo / libjpeg-turbo-debuginfo / libjpeg-turbo-devel / etc (ciqsa-2026_0698)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260698 advisory. This advisory aggregates security fixes for the libjpeg-turbo SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2020-17541. Tenable has extracted the...