PT-2026-103983

The Joyland AI app accepts any TLS certificates from any server without validation...

Rocky Linux 9 [CIQ] Security Update: ca-certificates (crlba-2024_5691)

The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlba-20245691 advisory. The ca-certificates package contains a set of Certificate Authority CA certificates chosen by the Mozilla Foundation for use with the Internet Public Key...

Rocky Linux 8.6 [CIQ] Security Update: ca-certificates (ciqsa-2026_0015)

The Rocky Linux 8.6 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260015 advisory. This advisory aggregates security fixes for the ca-certificates SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-37920. Tenable has extracted the preceding...

Rocky Linux 9 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource (crlsa-2023_0608)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20230608 advisory. Mozilla: Revocation status of S/Mime signature certificates was not checked CVE-2023-0430 Tenable has extracted the preceding description block directly from the CI...

Rocky Linux 9 [CIQ] Security Update: python3.11-cryptography / python3.11-cryptography-debuginfo / etc (crlsa-2024_2337)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20242337 advisory. python-cryptography: NULL-dereference when loading PKCS7 certificates CVE-2023-49083 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 9 [CIQ] Security Update: python-cryptography-debugsource / python3-cryptography / etc (crlsa-2025_15874)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202515874 advisory. python-cryptography: NULL-dereference when loading PKCS7 certificates CVE-2023-49083 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 8 [CIQ] Security Update: ca-certificates (crlba-2024_5736)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlba-20245736 advisory. The ca-certificates package contains a set of Certificate Authority CA certificates chosen by the Mozilla Foundation for use with the Internet Public Key...

Rocky Linux 8 [CIQ] Security Update: cockpit / cockpit-bridge / cockpit-debuginfo / cockpit-debugsource / etc Multiple Vulnerabilities (crlsa-2022_2008)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20222008 advisory. cockpit: authenticates with revoked certificates CVE-2021-3698 cockpit: pages vulnerable to clickjacking CVE-2021-3660 Tenable has extracted the preceding...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-targeting-pack-8.0 / dotnet / etc Multiple Vulnerabilities (crlsa-2024_0150)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20240150 advisory. dotnet: Information Disclosure: MD.SqlClientMDS & System.data.SQLClient SDS CVE-2024-0056 dotnet: X509 Certificates - Validation Bypass across Azure...

Rocky Linux 8.8 [CIQ] Security Update: ca-certificates (ciqsa-2026_0359)

The Rocky Linux 8.8 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260359 advisory. This advisory aggregates security fixes for the ca-certificates SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2023-37920. Tenable has extracted the preceding...

Rocky Linux 9 [CIQ] Security Update: aspnetcore-runtime-6.0 / aspnetcore-targeting-pack-6.0 / etc (crlsa-2023_6242)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20236242 advisory. dotnet: Denial of Service with Client Certificates using .NET Kestrel CVE-2023-36799 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-6.0 / aspnetcore-targeting-pack-6.0 / etc (crlsa-2023_6245)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20236245 advisory. dotnet: Denial of Service with Client Certificates using .NET Kestrel CVE-2023-36799 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 8 [CIQ] Security Update: python-cryptography-debugsource / python3-cryptography / etc (crlsa-2025_14553)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202514553 advisory. python-cryptography: NULL-dereference when loading PKCS7 certificates CVE-2023-49083 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 9.2 [CIQ] Security Update: ca-certificates (ciqsa-2026_0399)

The Rocky Linux 9.2 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260399 advisory. This advisory aggregates security fixes for the ca-certificates SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2023-37920. Tenable has extracted the preceding...

Rocky Linux 9 [CIQ] Security Update: perl-CPAN (crlsa-2023_6539)

The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20236539 advisory. perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS CVE-2023-31484 Tenable has extracted the preceding description block direct...

CentOS Linux 7.9 [CIQ] Security Update: ca-certificates (ciqsa-2026_0654)

The CentOS Linux 7.9 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260654 advisory. This advisory aggregates security fixes for the ca-certificates SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2023-37920. Tenable has extracted the...

Rocky Linux 8 [CIQ] Security Update: perl-CPAN (crlsa-2024_3094)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20243094 advisory. perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS CVE-2023-31484 Tenable has extracted the preceding description block direct...

Rocky Linux 8 [CIQ] Security Update: python3.11-cryptography / python3.11-cryptography-debuginfo / etc (crlsa-2024_3105)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20243105 advisory. python-cryptography: NULL-dereference when loading PKCS7 certificates CVE-2023-49083 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-6.0 / aspnetcore-targeting-pack-6.0 / etc (crlsa-2023_5144)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20235144 advisory. dotnet: Denial of Service with Client Certificates using .NET Kestrel CVE-2023-36799 Tenable has extracted the preceding description block directly from the CIQ...

CVE-2026-101916 @grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized

@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.6 and 1.14.5, getAuthContext does not distinguish authorized from unauthorized peer certificates when server credentials set requireClientCertificate to false. When applications use th...