Rocky Linux 9.2 [CIQ] Security Update: expat / expat-debuginfo / expat-debugsource / expat-devel / etc (ciqsa-2026_0410)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260410 advisory. This advisory aggregates security fixes for the expat SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2024-8176. Tenable has extracted the preceding description bloc...

Rocky Linux 9.4 [CIQ] Security Update: libtiff / libtiff-debuginfo / libtiff-debugsource / libtiff-devel / etc Multiple Vulnerabilities (ciqsa-2026_0541)

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260541 advisory. This advisory aggregates security fixes for the libtiff SRPM in CIQ LTS 9.4. It addresses 3 CVEs: CVE-2024-7006, CVE-2025-8176, CVE-2025-9900. Tenable ha...

Rocky Linux 8 [CIQ] Security Update: libpng / libpng-debuginfo / libpng-debugsource / libpng-devel / etc Multiple Vulnerabilities (crlsa-2026_0241)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20260241 advisory. libpng: LIBPNG buffer overflow CVE-2025-64720 libpng: LIBPNG heap buffer overflow CVE-2025-65018 libpng: LIBPNG out-of-bounds read in pngimagereadcomposite...

Rocky Linux 9 [CIQ] Security Update: python3.11 / python3.11-debug / python3.11-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_10774)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202610774 advisory. python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules CVE-2026-6100 python: cpython: Python:...

Rocky Linux 8.8 [CIQ] Security Update: toolbox / toolbox-debuginfo / toolbox-debugsource / toolbox-tests (ciqsa-2026_0315)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260315 advisory. This advisory aggregates security fixes for the toolbox SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2023-44487. Tenable has extracted the preceding description...

Rocky Linux 8.8 [CIQ] Security Update: golang / golang-bin / golang-docs / golang-misc / golang-src / etc Multiple Vulnerabilities (ciqsa-2026_0960)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260960 advisory. This advisory aggregates security fixes for the golang SRPM in CIQ LTS 8.8. It addresses 16 CVEs: CVE-2023-39321, CVE-2023-39325, CVE-2023-39326,...

Rocky Linux 8 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (crlsa-2023_5928)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20235928 advisory. HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack Rapid Reset Attack CVE-2023-44487 Tenable has extracted the preceding description block...

Rocky Linux 9 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-core-debuginfo / etc (crlsa-2023_6120)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20236120 advisory. HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack Rapid Reset Attack CVE-2023-44487 Tenable has extracted the preceding description block...

Rocky Linux 9.2 [CIQ] Security Update: iscsi-initiator-utils / iscsi-initiator-utils-iscsiuio / etc Multiple Vulnerabilities (ciqsa-2026_1509)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261509 advisory. This advisory aggregates security fixes for the iscsi-initiator-utils SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2026-44943, CVE-2026-44944. Tenable h...

Rocky Linux 9 [CIQ] Security Update: aspnetcore-runtime-7.0 / aspnetcore-targeting-pack-7.0 / etc Multiple Vulnerabilities (crlsa-2024_2843)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242843 advisory. dotnet: stack buffer overrun in Double Parse CVE-2024-30045 dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop...

Rocky Linux 8 [CIQ] Security Update: apr-util / apr-util-bdb / apr-util-bdb-debuginfo / etc (crlsa-2023_3109)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20233109 advisory. apr-util: out-of-bounds writes in the aprbase64 CVE-2022-25147 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

Rocky Linux 9.2 [CIQ] Security Update: libxslt / libxslt-debuginfo / libxslt-debugsource / libxslt-devel (ciqsa-2026_0457)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260457 advisory. This advisory aggregates security fixes for the libxslt SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2024-55549. Tenable has extracted the preceding description...

Rocky Linux 10.2 [CIQ] Security Update: coreutils / coreutils-common / coreutils-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_67886)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202667886 advisory. coreutils: GNU coreutils uniq: Denial of Service and information disclosure via out-of-bounds read with multibyte input CVE-2026-56391 coreutils: GNU...

Rocky Linux 9.4 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-64k / kernel-64k-core / etc Multiple Vulnerabilities (ciqsa-2026_0509)

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260509 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ LTS 9.4. It addresses 4 CVEs: CVE-2023-52922, CVE-2024-53122, CVE-2024-57882,...

Rocky Linux 10.2 [CIQ] Security Update: podman / podman-debuginfo / podman-debugsource / podman-docker / etc Multiple Vulnerabilities (crlsa-2026_19017)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619017 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denia...

Rocky Linux 8 [CIQ] Security Update: osbuild-composer / osbuild-composer-core / etc Multiple Vulnerabilities (crlsa-2026_67148)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202667148 advisory. crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec CVE-2025-22866 crypto/x509: golang: Go crypto/x509: Deni...

Rocky Linux 9 [CIQ] Security Update: libksba / libksba-debuginfo / libksba-debugsource / libksba-devel (crlsa-2023_0626)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20230626 advisory. libksba: integer overflow to code executiona CVE-2022-47629 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

CentOS Linux 7.9 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-whitelists / etc Multiple Vulnerabilities (ciqsa-2026_0646)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260646 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ CentOS Bridge 7.9. It addresses 3 CVEs: CVE-2024-53150, CVE-2024-53141, CVE-2022-4992...

CentOS Linux 7.9 [CIQ] Security Update: lz4 / lz4-debuginfo / lz4-devel / lz4-static (ciqsa-2026_0717)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260717 advisory. This advisory aggregates security fixes for the lz4 SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2021-3520. Tenable has extracted the preceding...

Rocky Linux 10.1 [CIQ] Security Update: haproxy / haproxy-debuginfo / haproxy-debugsource (crlsa-2025_21691)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202521691 advisory. haproxy: denial of service vulnerability in HAProxy mjson library CVE-2025-11230 Tenable has extracted the preceding description block directly from the CIQ...