Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2024_1484)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20241484 advisory. nss: timing attack against RSA decryption CVE-2023-5388 Mozilla: Crash in NSS TLS method CVE-2024-0743 Mozilla: JIT code failed to save return registers on...

Rocky Linux 8.8 [CIQ] Security Update: mod_md / mod_md-debuginfo / mod_md-debugsource Multiple Vulnerabilities (ciqsa-2026_0312)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260312 advisory. This advisory aggregates security fixes for the modmd SRPM in CIQ LTS 8.8. It addresses 3 CVEs: CVE-2023-31122, CVE-2024-38476, CVE-2023-38709. Tenable h...

Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2022_0510)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20220510 advisory. Mozilla: Extensions could have bypassed permission confirmation during update CVE-2022-22754 Mozilla: Memory safety bugs fixed in Firefox 97 and Firefox ES...

Rocky Linux 8.6 [CIQ] Security Update: dnsmasq / dnsmasq-debuginfo / dnsmasq-debugsource / dnsmasq-utils / etc Multiple Vulnerabilities (ciqsa-2026_0034)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260034 advisory. This advisory aggregates security fixes for the dnsmasq SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2023-50868, CVE-2022-0934, CVE-2023-50387,...

Rocky Linux 9.2 [CIQ] Security Update: dnsmasq / dnsmasq-debuginfo / dnsmasq-debugsource / dnsmasq-utils / etc Multiple Vulnerabilities (ciqsa-2026_0407)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260407 advisory. This advisory aggregates security fixes for the dnsmasq SRPM in CIQ LTS 9.2. It addresses 3 CVEs: CVE-2023-50868, CVE-2023-50387, CVE-2023-28450. Tenable...

Rocky Linux 8 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2022_5774)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20225774 advisory. Mozilla: Memory safety bugs fixed in Firefox 103 and 102.1 CVE-2022-2505 Mozilla: Directory indexes for bundled resources reflected URL parameters...

Rocky Linux 8 [CIQ] Security Update: libyang / libyang-debuginfo / libyang-debugsource Multiple Vulnerabilities (crlea-2021_1906)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlea-20211906 advisory. For detailed information on changes in this release, see the Rocky Enterprise Software Foundation Enterprise Linux 8.4 Release Notes linked from the...

Rocky Linux 8.6 [CIQ] Security Update: toolbox / toolbox-debuginfo / toolbox-debugsource / toolbox-tests Multiple Vulnerabilities (ciqsa-2026_0269)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260269 advisory. This advisory aggregates security fixes for the toolbox SRPM in CIQ LTS 8.6. It addresses 33 CVEs: CVE-2018-25091, CVE-2024-34155, CVE-2021-33198,...

Rocky Linux 8.6 [CIQ] Security Update: curl / curl-debuginfo / curl-debugsource / curl-minimal / etc Multiple Vulnerabilities (ciqsa-2026_0932)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260932 advisory. This advisory aggregates security fixes for the curl SRPM in CIQ LTS 8.6. It addresses 6 CVEs: CVE-2023-38546, CVE-2022-43552, CVE-2023-23916,...

Rocky Linux 9.4 [CIQ] Security Update: libsoup / libsoup-debuginfo / libsoup-debugsource / libsoup-devel Multiple Vulnerabilities (ciqsa-2026_1125)

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261125 advisory. This advisory aggregates security fixes for the libsoup SRPM in CIQ LTS 9.4. It addresses 2 CVEs: CVE-2024-52530, CVE-2024-52532. Tenable has extracted t...

Rocky Linux 9 [CIQ] Security Update: python-tornado-debugsource / python3-tornado / etc Multiple Vulnerabilities (crlsa-2026_19189)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619189 advisory. tornado-python: Tornado: Denial of Service via large multipart bodies CVE-2026-31958 tornado: Tornado: Cookie attribute injection due to improper handling...

Rocky Linux 9.4 [CIQ] Security Update: pgaudit / pgaudit-debuginfo / pgaudit-debugsource Multiple Vulnerabilities (ciqsa-2026_1051)

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261051 advisory. This advisory aggregates security fixes for the pgaudit SRPM in CIQ LTS 9.4. It addresses 3 CVEs: CVE-2024-10979, CVE-2024-10976, CVE-2024-10978. Tenable...

Rocky Linux 9.2 [CIQ] Security Update: pgaudit / pgaudit-debuginfo / pgaudit-debugsource (ciqsa-2026_1167)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261167 advisory. This advisory aggregates security fixes for the pgaudit SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2024-7348. Tenable has extracted the preceding description...

Rocky Linux 9.6 [CIQ] Security Update: libreswan / libreswan-debuginfo / libreswan-debugsource Multiple Vulnerabilities (ciqsa-2026_1471)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261471 advisory. This advisory aggregates security fixes for the libreswan SRPM in CIQ LTS 9.6. It addresses 4 CVEs: CVE-2026-12413, CVE-2026-14957, CVE-2026-50721,...

Rocky Linux 8 [CIQ] Security Update: git-lfs / git-lfs-debuginfo / git-lfs-debugsource (crlba-2024_3053)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlba-20243053 advisory. For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section. This advisory is provided by Ctrl IQ...

Rocky Linux 8.8 [CIQ] Security Update: pgaudit / pgaudit-debuginfo / pgaudit-debugsource (ciqsa-2026_0369)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260369 advisory. This advisory aggregates security fixes for the pgaudit SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2025-1094. Tenable has extracted the preceding description...

Rocky Linux 10.2 [CIQ] Security Update: delve / delve-debuginfo / delve-debugsource Multiple Vulnerabilities (crlsa-2026_23102)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202623102 advisory. crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation CVE-2026-32281 crypto/tls: golang: Go crypto/tls:...

Rocky Linux 8.8 [CIQ] Security Update: buildah / buildah-debuginfo / buildah-debugsource / buildah-tests / etc Multiple Vulnerabilities (ciqsa-2026_0805)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260805 advisory. This advisory aggregates security fixes for the buildah SRPM in CIQ LTS 8.8. It addresses 39 CVEs: CVE-2020-10756, CVE-2021-3592, CVE-2021-3593,...

Rocky Linux 8.8 [CIQ] Security Update: toolbox / toolbox-debuginfo / toolbox-debugsource / toolbox-tests Multiple Vulnerabilities (ciqsa-2026_0804)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260804 advisory. This advisory aggregates security fixes for the toolbox SRPM in CIQ LTS 8.8. It addresses 39 CVEs: CVE-2020-10756, CVE-2021-3592, CVE-2021-3593,...

Rocky Linux 10.1 [CIQ] Security Update: delve / delve-debuginfo / delve-debugsource Multiple Vulnerabilities (crlsa-2026_8842)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20268842 advisory. crypto/x509: Incorrect enforcement of email constraints in crypto/x509 CVE-2026-27137 net/url: Incorrect parsing of IPv6 host literals in net/url...