Rocky Linux 8 [CIQ] Security Update: pgaudit / pgaudit-debuginfo / pgaudit-debugsource / etc Multiple Vulnerabilities (crlsa-2021_2372)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20212372 advisory. postgresql: Buffer overrun from integer overflow in array subscripting calculations CVE-2021-32027 postgresql: Memory disclosure in INSERT ... ON CONFLICT...

Rocky Linux 9.6 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785755669)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785755669 advisory. - In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescape functi...

Rocky Linux 8 [CIQ] Security Update: postgresql / postgresql-contrib / postgresql-contrib-debuginfo / etc (crlsa-2023_7790)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20237790 advisory. postgresql: Buffer overrun from integer overflow in array modification CVE-2023-5869 Tenable has extracted the preceding description block directly from the CIQ...

AlmaLinux 9.2 [TuxCare] Security Update: corosync / corosync-vqsim / corosynclib / corosynclib-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1776435617)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1776435617 advisory. - A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync...

Rocky Linux 9 [CIQ] Security Update: mingw32-glib2 / mingw32-glib2-debuginfo / mingw32-glib2-static / etc (crlsa-2026_18705)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202618705 advisory. glib: Integer overflow in in gescapeuristring CVE-2025-13601 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note th...

Rocky Linux 9 [CIQ] Security Update: mingw32-pixman / mingw64-pixman (crlsa-2024_2525)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20242525 advisory. pixman: Integer overflow in pixmansamplefloory leading to heap out-of-bounds write CVE-2022-44638 Tenable has extracted the preceding description block directly fro...

Rocky Linux 9.6 [TuxCare] Security Update: hplip / hplip-common / hplip-libs / libsane-hpaio Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1782213578)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782213578 advisory. - A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerabili...

AlmaLinux 9.2 [TuxCare] Security Update: openexr / openexr-devel / openexr-libs (ALMALINUX9.2:CLSA-2026:1774604404)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1774604404 advisory. - OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture...

CentOS Linux 7 [TuxCare] Security Update: lz4 / lz4-devel / lz4-static (CENTOS7:CLSA-2023:1695326199)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2023:1695326199 advisory. - There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow,...

Rocky Linux 9.6 [TuxCare] Security Update: libtiff / libtiff-devel / libtiff-static / libtiff-tools (ALMALINUX9.6:CLSA-2026:1778090588)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778090588 advisory. - A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the...

Rocky Linux 9.6 [TuxCare] Security Update: libxml2 / libxml2-devel / libxml2-static / python3-libxml2 (ALMALINUX9.6:CLSA-2026:1789467963)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789467963 advisory. - In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow. CVE-2026-86138 No...

Rocky Linux 9 [CIQ] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_2287)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242287 advisory. gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video CVE-2023-40474 gstreamer-plugins-bad: Intege...

Rocky Linux 9 [CIQ] Security Update: harfbuzz / harfbuzz-debuginfo / harfbuzz-debugsource / etc (crlsa-2022_8384)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20228384 advisory. harfbuzz: integer overflow in the component hb-ot-shape-fallback.cc CVE-2022-33068 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 8 [CIQ] Security Update: cargo / cargo-debuginfo / cargo-doc / clippy / clippy-debuginfo / etc Multiple Vulnerabilities (crlsa-2021_3063)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20213063 advisory. rust: optimization for joining strings can cause uninitialized bytes to be exposed CVE-2020-36323 rust: heap-based buffer overflow in readtoend because it...

Rocky Linux 8 [CIQ] Security Update: openjpeg2 / openjpeg2-debuginfo / openjpeg2-debugsource / etc Multiple Vulnerabilities (crlsa-2021_4251)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20214251 advisory. openjpeg: use-after-free and double-free via a mix of valid and invalid files in a directory operated on by the decompressor CVE-2020-15389 openjpeg:...

Rocky Linux 8 [CIQ] Security Update: libsoup / libsoup-debuginfo / libsoup-debugsource / libsoup-devel Multiple Vulnerabilities (crlsa-2025_19714)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202519714 advisory. libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup CVE-2025-4945 libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP...

Rocky Linux 9.6 [TuxCare] Security Update: jq / jq-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1777881308)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777881308 advisory. - jq is a command-line JSON processor. An integer overflow vulnerability exists through version 1.8.1 within the jvpstringappend a...

Rocky Linux 9 [CIQ] Security Update: gimp / gimp-debuginfo / gimp-debugsource / gimp-libs / etc Multiple Vulnerabilities (crlsa-2025_3617)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20253617 advisory. gimp: dds buffer overflow RCE CVE-2023-44441 gimp: PSD buffer overflow RCE CVE-2023-44442 gimp: psp integer overflow RCE CVE-2023-44443 gimp: psp off-by-on...

Rocky Linux 10 [CIQ] Security Update: glibc / glibc-all-langpacks / glibc-benchtests / etc Multiple Vulnerabilities (crlsa-2026_1334)

The Rocky Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261334 advisory. glibc: Integer overflow in memalign leads to heap corruption CVE-2026-0861 glibc: glibc: Information disclosure via zero-valued network query CVE-2026-091...

Rocky Linux 10.2 [CIQ] Security Update: mingw32-glib2 / mingw32-glib2-debuginfo / mingw32-glib2-static / etc (crlsa-2026_18344)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202618344 advisory. glib: Integer overflow in in gescapeuristring CVE-2025-13601 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...