Rocky Linux 8.6 [CIQ] Security Update: runc / runc-debuginfo / runc-debugsource Multiple Vulnerabilities (ciqsa-2026_0256)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260256 advisory. This advisory aggregates security fixes for the runc SRPM in CIQ LTS 8.6. It addresses 33 CVEs: CVE-2018-25091, CVE-2024-34155, CVE-2021-33198,...

Rocky Linux 8 [CIQ] Security Update: custodia / python3-custodia / python3-jwcrypto / python3-kdcproxy / etc Multiple Vulnerabilities (crlsa-2020_4670)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20204670 advisory. js-jquery: Cross-site scripting via cross-domain ajax requests CVE-2015-9251 bootstrap: XSS in the data-target attribute CVE-2016-10735 bootstrap: Cross-si...

Rocky Linux 8.6 [CIQ] Security Update: container-selinux Multiple Vulnerabilities (ciqsa-2026_0024)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260024 advisory. This advisory aggregates security fixes for the container-selinux SRPM in CIQ LTS 8.6. It addresses 33 CVEs: CVE-2018-25091, CVE-2024-34155,...

Rocky Linux 8.6 [CIQ] Security Update: crun / crun-debuginfo / crun-debugsource Multiple Vulnerabilities (ciqsa-2026_0026)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260026 advisory. This advisory aggregates security fixes for the crun SRPM in CIQ LTS 8.6. It addresses 33 CVEs: CVE-2018-25091, CVE-2024-34155, CVE-2021-33198,...

Rocky Linux 8.6 [CIQ] Security Update: netavark Multiple Vulnerabilities (ciqsa-2026_0116)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260116 advisory. This advisory aggregates security fixes for the netavark SRPM in CIQ LTS 8.6. It addresses 33 CVEs: CVE-2018-25091, CVE-2024-34155, CVE-2021-33198,...

Rocky Linux 9 [CIQ] Security Update: oci-seccomp-bpf-hook / oci-seccomp-bpf-hook-debuginfo / etc (crlsa-2024_9277)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20249277 advisory. golang: net: malformed DNS message can cause infinite loop CVE-2024-24788 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 9.2 [CIQ] Security Update: bpftool-debuginfo Multiple Vulnerabilities (ciqsa-2026_1249)

The Rocky Linux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261249 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ FIPS 9.2 Compliant. It addresses 22 CVEs: CVE-2023-53494, CVE-2023-53213,...

Rocky Linux 9.4 [CIQ] Security Update: bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ciqsa-2026_0518)

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260518 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ LTS 9.4. It addresses 21 CVEs: CVE-2023-53331, CVE-2025-38718, CVE-2025-38211,...

Rocky Linux 9.4 [CIQ] Security Update: bpftool-debuginfo Multiple Vulnerabilities (ciqsa-2026_1250)

The Rocky Linux 9.4 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261250 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ LTS 9.4. It addresses 21 CVEs: CVE-2023-53494, CVE-2025-38461, CVE-2025-38527,...

Rocky Linux 8 [CIQ] Security Update: aardvark-dns / buildah / buildah-debuginfo / buildah-debugsource / etc Multiple Vulnerabilities (crlsa-2024_0748)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20240748 advisory. runc: file descriptor leak Leaky Vessels CVE-2024-21626 A Rocky Enterprise Software Foundation Security Bulletin which addresses further details about the...

Rocky Linux 8 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux Multiple Vulnerabilities (crlsa-2024_8327)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20248327 advisory. golang-fips: Golang FIPS zeroed buffer CVE-2024-9355 dompurify: nesting-based mutation XSS vulnerability CVE-2024-47875 Tenable has extracted the preceding...

Rocky Linux 9 [CIQ] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc Multiple Vulnerabilities (crlsa-2023_0328)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20230328 advisory. golang: archive/tar: unbounded memory consumption when reading headers CVE-2022-2879 golang: net/http/httputil: ReverseProxy should not forward unparseable...

Rocky Linux 8.6 [CIQ] Security Update: fuse-overlayfs / fuse-overlayfs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0048)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260048 advisory. This advisory aggregates security fixes for the fuse-overlayfs SRPM in CIQ LTS 8.6. It addresses 33 CVEs: CVE-2018-25091, CVE-2024-34155, CVE-2021-33198,...

Rocky Linux 8.6 [CIQ] Security Update: go-toolset Multiple Vulnerabilities (ciqsa-2026_1008)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261008 advisory. This advisory aggregates security fixes for the go-toolset SRPM in CIQ LTS 8.6. It addresses 3 CVEs: CVE-2023-45288, CVE-2024-24789, CVE-2024-24790...

Rocky Linux 9.2 [CIQ] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc Multiple Vulnerabilities (ciqsa-2026_1006)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261006 advisory. This advisory aggregates security fixes for the golang SRPM in CIQ LTS 9.2. It addresses 9 CVEs: CVE-2024-1394, CVE-2023-45288, CVE-2023-45290,...

Rocky Linux 8 [CIQ] Security Update: aardvark-dns / buildah / buildah-debuginfo / buildah-debugsource / etc Multiple Vulnerabilities (crlsa-2024_5258)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20245258 advisory. golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 golang: net/http: memory exhaustion in...

Rocky Linux 9 [CIQ] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc Multiple Vulnerabilities (crlsa-2024_6913)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20246913 advisory. net/http: Denial of service due to improper 100-continue handling in net/http CVE-2024-24791 go/parser: golang: Calling any of the Parse functions containi...

Rocky Linux 9.2 [CIQ] Security Update: bpftool-debuginfo Multiple Vulnerabilities (ciqsa-2026_1234)

The Rocky Linux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261234 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ FIPS 9.2 Compliant. It addresses 26 CVEs: CVE-2024-49978, CVE-2023-53047,...

Rocky Linux 8.6 [CIQ] Security Update: go-toolset Multiple Vulnerabilities (ciqsa-2026_1003)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261003 advisory. This advisory aggregates security fixes for the go-toolset SRPM in CIQ LTS 8.6. It addresses 5 CVEs: CVE-2024-34155, CVE-2024-34156, CVE-2024-34158,...

Rocky Linux 9 [CIQ] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc Multiple Vulnerabilities (crlsa-2023_3923)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20233923 advisory. golang: cmd/go: go command may generate unexpected code at build time when using cgo CVE-2023-29402 golang: cmd/go: go command may execute arbitrary code a...