Rocky Linux 8.6 [CIQ] Security Update: toolbox / toolbox-debuginfo / toolbox-debugsource / toolbox-tests Multiple Vulnerabilities (ciqsa-2026_0269)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260269 advisory. This advisory aggregates security fixes for the toolbox SRPM in CIQ LTS 8.6. It addresses 33 CVEs: CVE-2018-25091, CVE-2024-34155, CVE-2021-33198,...

Rocky Linux 8 [CIQ] Security Update: libyang / libyang-debuginfo / libyang-debugsource Multiple Vulnerabilities (crlea-2021_1906)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlea-20211906 advisory. For detailed information on changes in this release, see the Rocky Enterprise Software Foundation Enterprise Linux 8.4 Release Notes linked from the...

Rocky Linux 10.1 [CIQ] Security Update: delve / delve-debuginfo / delve-debugsource Multiple Vulnerabilities (crlsa-2026_8842)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20268842 advisory. crypto/x509: Incorrect enforcement of email constraints in crypto/x509 CVE-2026-27137 net/url: Incorrect parsing of IPv6 host literals in net/url...

Rocky Linux 10.2 [CIQ] Security Update: golang-github-openprinting-ipp-usb-debugsource / ipp-usb / etc Multiple Vulnerabilities (crlsa-2026_19144)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619144 advisory. crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application CVE-2026-33810 golang:...

Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2022_1705)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20221705 advisory. Mozilla: Bypassing permission prompt in nested browsing contexts CVE-2022-29909 Mozilla: iframe Sandbox bypass CVE-2022-29911 Mozilla: Fullscreen...

Rocky Linux 9.2 [CIQ] Security Update: pgaudit / pgaudit-debuginfo / pgaudit-debugsource (ciqsa-2026_1171)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261171 advisory. This advisory aggregates security fixes for the pgaudit SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2024-7348. Tenable has extracted the preceding description...

Rocky Linux 10.1 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux Multiple Vulnerabilities (crlsa-2026_11712)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202611712 advisory. golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root CVE-2026-32282 crypto/tls: golang: Go crypto/tls: Denial of Service via...

Rocky Linux 9 [CIQ] Security Update: skopeo / skopeo-debuginfo / skopeo-debugsource / skopeo-tests (crlsa-2024_11217)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202411217 advisory. encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion CVE-2024-34156 Tenable...

Rocky Linux 8 [CIQ] Security Update: python-pillow-debuginfo / python-pillow-debugsource / etc Multiple Vulnerabilities (crlsa-2026_48021)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202648021 advisory. Pillow: Pillow: Native heap out-of-bounds write CVE-2026-59197 Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image...

Rocky Linux 9.2 [CIQ] Security Update: acl / acl-debuginfo / acl-debugsource / libacl / libacl-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_1456)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261456 advisory. This advisory aggregates security fixes for the acl SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2026-54369, CVE-2026-54370. Tenable has extracted the...

Rocky Linux 10.2 [CIQ] Security Update: delve / delve-debuginfo / delve-debugsource Multiple Vulnerabilities (crlsa-2026_23102)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202623102 advisory. crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation CVE-2026-32281 crypto/tls: golang: Go crypto/tls:...

Rocky Linux 8 [CIQ] Security Update: git-lfs / git-lfs-debuginfo / git-lfs-debugsource (crlba-2024_3053)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlba-20243053 advisory. For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section. This advisory is provided by Ctrl IQ...

Rocky Linux 8.6 [CIQ] Security Update: mecab / mecab-debuginfo / mecab-debugsource / mecab-devel Multiple Vulnerabilities (ciqsa-2026_0105)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260105 advisory. This advisory aggregates security fixes for the mecab SRPM in CIQ LTS 8.6. It addresses 129 CVEs: CVE-2022-21594, CVE-2022-21599, CVE-2022-21604,...

Rocky Linux 9 [CIQ] Security Update: python-tornado-debugsource / python3-tornado / etc Multiple Vulnerabilities (crlsa-2026_19189)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619189 advisory. tornado-python: Tornado: Denial of Service via large multipart bodies CVE-2026-31958 tornado: Tornado: Cookie attribute injection due to improper handling...

Rocky Linux 9.6 [CIQ] Security Update: libreswan / libreswan-debuginfo / libreswan-debugsource Multiple Vulnerabilities (ciqsa-2026_1471)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261471 advisory. This advisory aggregates security fixes for the libreswan SRPM in CIQ LTS 9.6. It addresses 4 CVEs: CVE-2026-12413, CVE-2026-14957, CVE-2026-50721,...

Rocky Linux 9.4 [CIQ] Security Update: pgaudit / pgaudit-debuginfo / pgaudit-debugsource Multiple Vulnerabilities (ciqsa-2026_1051)

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261051 advisory. This advisory aggregates security fixes for the pgaudit SRPM in CIQ LTS 9.4. It addresses 3 CVEs: CVE-2024-10979, CVE-2024-10976, CVE-2024-10978. Tenable...

Rocky Linux 9.2 [CIQ] Security Update: pgaudit / pgaudit-debuginfo / pgaudit-debugsource (ciqsa-2026_1167)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261167 advisory. This advisory aggregates security fixes for the pgaudit SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2024-7348. Tenable has extracted the preceding description...

Rocky Linux 8.10 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc Multiple Vulnerabilities (ciqsa-2026_0607)

The Rocky Linux 8.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260607 advisory. This advisory aggregates security fixes for the openssl SRPM in CIQ FIPS 8.10 Compliant. It addresses 27 CVEs: CVE-2006-2937, CVE-2006-2940,...

Rocky Linux 9.4 [CIQ] Security Update: libsoup / libsoup-debuginfo / libsoup-debugsource / libsoup-devel Multiple Vulnerabilities (ciqsa-2026_1125)

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261125 advisory. This advisory aggregates security fixes for the libsoup SRPM in CIQ LTS 9.4. It addresses 2 CVEs: CVE-2024-52530, CVE-2024-52532. Tenable has extracted t...

Rocky Linux 8.8 [CIQ] Security Update: pgaudit / pgaudit-debuginfo / pgaudit-debugsource (ciqsa-2026_0369)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260369 advisory. This advisory aggregates security fixes for the pgaudit SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2025-1094. Tenable has extracted the preceding description...