Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc (crlsa-2025_21926)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202521926 advisory. kernel: mm: slub: avoid wake up kswapd in settrackprepare CVE-2025-39843 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 8.8 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (ciqsa-2026_0993)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260993 advisory. This advisory aggregates security fixes for the bind SRPM in CIQ LTS 8.8. It addresses 3 CVEs: CVE-2023-50868, CVE-2023-4408, CVE-2023-50387. Tenable has...

Rocky Linux 8.6 [CIQ] Security Update: libpq / libpq-debuginfo / libpq-debugsource / libpq-devel / etc (ciqsa-2026_0082)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260082 advisory. This advisory aggregates security fixes for the libpq SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2025-1094. Tenable has extracted the preceding description bloc...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2025_8057)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20258057 advisory. kernel: net/mlx5: Always stop health timer during driver removal CVE-2024-40906 kernel: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink CVE-2024-44970...

Rocky Linux 9.4 [CIQ] Security Update: libxml2 / libxml2-debuginfo / libxml2-debugsource / libxml2-devel / etc (ciqsa-2026_0545)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260545 advisory. This advisory aggregates security fixes for the libxml2 SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2025-24928. Tenable has extracted the preceding description...

Rocky Linux 8.8 [CIQ] Security Update: nss / nss-devel / nss-pkcs11-devel / nss-softokn / etc (ciqsa-2026_0339)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260339 advisory. This advisory aggregates security fixes for the nss SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2023-5388. Tenable has extracted the preceding description block...

Rocky Linux 9 [CIQ] Security Update: systemd / systemd-container / systemd-container-debuginfo / etc (crlsa-2023_0336)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20230336 advisory. systemd: buffer overrun in formattimespan function CVE-2022-3821 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

Rocky Linux 9 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc Multiple Vulnerabilities (crlsa-2026_54574)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202654574 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET Denia...

Rocky Linux 9 [CIQ] Security Update: galera / galera-debuginfo / galera-debugsource Multiple Vulnerabilities (crlsa-2025_0914)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20250914 advisory. mysql: InnoDB unspecified vulnerability CPU Oct 2023 CVE-2023-22084 mysql: Client: mysqldump unspecified vulnerability CPU Apr 2024 CVE-2024-21096 Tenable...

Linux Distros Unpatched Vulnerability : CVE-2025-54627

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds write vulnerability in the skia module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CVE-2025-54627...

Rocky Linux 8 [CIQ] Security Update: lemon / lemon-debuginfo / sqlite / sqlite-debuginfo / etc Multiple Vulnerabilities (crlsa-2021_1581)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20211581 advisory. sqlite: integer overflow in sqlite3strvappendf function in printf.c CVE-2020-13434 sqlite: heap-based buffer overflow in multiSelectOrderBy due to...

Rocky Linux 9.6 [CIQ] Security Update: gdk-pixbuf2 / gdk-pixbuf2-devel / gdk-pixbuf2-modules (ciqsa-2026_1520)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261520 advisory. This advisory aggregates security fixes for the gdk-pixbuf2 SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2025-6199. Tenable has extracted the preceding descriptio...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_67150)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202667150 advisory. kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset CVE-2025-68745 kernel: drm/xe: Open-code...

CentOS Linux 7 [TuxCare] Security Update: bzip2 / bzip2-devel / bzip2-libs Multiple Vulnerabilities (CENTOS7:CLSA-2026:1776956583)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1776956583 advisory. - Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service crash via a crafted...

Rocky Linux 9.4 [CIQ] Security Update: bpftool-debuginfo Multiple Vulnerabilities (ciqsa-2026_1250)

The Rocky Linux 9.4 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261250 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ LTS 9.4. It addresses 21 CVEs: CVE-2023-53494, CVE-2025-38461, CVE-2025-38527,...

CentOS Linux 7 [TuxCare] Security Update: xorg-x11-server-Xdmx / xorg-x11-server-Xephyr / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1757501564)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1757501564 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

Rocky Linux 9.6 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc (ALMALINUX9.6:CLSA-2026:1787681542)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787681542 advisory. - When using the configparser module to write configuration files containing multi-line text values with carriage return characters \r the...

Rocky Linux 9.2 [CIQ] Security Update: pcp / pcp-conf / pcp-debuginfo / pcp-debugsource / pcp-devel / etc Multiple Vulnerabilities (ciqsa-2026_1500)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261500 advisory. This advisory aggregates security fixes for the pcp SRPM in CIQ LTS 9.2. It addresses 5 CVEs: CVE-2026-16529, CVE-2026-16524, CVE-2026-16527,...

Rocky Linux 10.2 [CIQ] Security Update: osbuild-composer / osbuild-composer-core / etc Multiple Vulnerabilities (crlsa-2026_65895)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202665895 advisory. crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application CVE-2026-33810 net/mail: golang: net/mai...

Rocky Linux 9 [CIQ] Security Update: httpd / httpd-core / httpd-core-debuginfo / httpd-debuginfo / etc (crlsa-2024_2278)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20242278 advisory. httpd: modmacro: out-of-bounds read vulnerability CVE-2023-31122 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...