Rocky Linux 8.6 [CIQ] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-debuginfo / etc (ciqsa-2026_0058)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260058 advisory. This advisory aggregates security fixes for the gstreamer1-plugins-bad-free SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-44446. Tenable has extracted the...

CentOS Linux 7.9 [CIQ] Security Update: libnl / libnl-devel (ciqsa-2026_0701)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260701 advisory. This advisory aggregates security fixes for the libnl SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2017-0553. Tenable has extracted the preceding...

Rocky Linux 9 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (crlsa-2026_36879)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202636879 advisory. Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor CVE-2026-29146 Apache Tomcat: Apache Tomcat:...

Rocky Linux 9.6 [CIQ] Security Update: openexr / openexr-devel / openexr-libs Multiple Vulnerabilities (ciqsa-2026_1517)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261517 advisory. This advisory aggregates security fixes for the openexr SRPM in CIQ LTS 9.6. It addresses 2 CVEs: CVE-2021-45942, CVE-2023-5481. Tenable has extracted th...

AlmaLinux 9.2 [TuxCare] Security Update: libxml2 / libxml2-devel / libxml2-static / python3-libxml2 (ALMALINUX9.2:CLSA-2026:1778006676)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778006676 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

CentOS Linux 7.9 [CIQ] Security Update: flatpak-builder (ciqsa-2026_1284)

The CentOS Linux 7.9 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20261284 advisory. This advisory aggregates security fixes for the flatpak SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2024-42472. Tenable has extracted the preceding...

AlmaLinux 9.6 [TuxCare] Security Update: lasso / lasso-devel / perl-lasso / python3-lasso (ALMALINUX9.6:CLSA-2025:1765478656)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1765478656 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 9.4 [CIQ] Security Update: pam / pam-debuginfo / pam-debugsource / pam-devel / pam-docs (ciqsa-2026_0557)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260557 advisory. This advisory aggregates security fixes for the pam SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2024-10963. Tenable has extracted the preceding description block...

Rocky Linux 9.6 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1783356847)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783356847 advisory. - Improper Authorization vulnerability in Apache Tomcat leads to security constraints specified for the default servlet ignoring a...

Rocky Linux 8.6 [CIQ] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-debuginfo / etc (ciqsa-2026_0059)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260059 advisory. This advisory aggregates security fixes for the gstreamer1-plugins-good SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2021-3497. Tenable has extracted the precedin...

AlmaLinux 9.6 [TuxCare] Security Update: exiv2 / exiv2-devel / exiv2-doc / exiv2-libs (ALMALINUX9.6:CLSA-2025:1766500438)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1766500438 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 9 [CIQ] Security Update: libssh / libssh-config / libssh-debuginfo / libssh-debugsource / etc Multiple Vulnerabilities (crlsa-2024_2504)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242504 advisory. libssh: ProxyCommand/ProxyJump features allow injection of malicious code through hostname CVE-2023-6004 libssh: Missing checks for return values for diges...

CentOS Linux 7.9 [CIQ] Security Update: graphite2 / graphite2-debuginfo / graphite2-devel (ciqsa-2026_0667)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260667 advisory. This advisory aggregates security fixes for the graphite2 SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2018-7999. Tenable has extracted the preceding...

Rocky Linux 8 [CIQ] Security Update: libssh / libssh-config / libssh-debuginfo / libssh-debugsource / etc Multiple Vulnerabilities (crlsa-2024_3233)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243233 advisory. libssh: ProxyCommand/ProxyJump features allow injection of malicious code through hostname CVE-2023-6004 libssh: Missing checks for return values for diges...

Rocky Linux 8 [CIQ] Security Update: prometheus-jmx-exporter / prometheus-jmx-exporter-openjdk11 / etc (crlsa-2022_6820)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20226820 advisory. snakeyaml: Denial of Service due to missing nested depth limitation for collections CVE-2022-25857 Tenable has extracted the preceding description block directly fr...

Rocky Linux 9.6 [TuxCare] Security Update: expat / expat-devel / expat-static (ALMALINUX9.6:CLSA-2025:1765987202)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1765987202 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

CentOS Linux 7.9 [CIQ] Security Update: microcode_ctl (ciqsa-2026_0718)

The CentOS Linux 7.9 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260718 advisory. This advisory aggregates security fixes for the microcodectl SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2022-21233. Tenable has extracted the precedi...

Rocky Linux 8 [CIQ] Security Update: gfbgraph / gfbgraph-debuginfo / gfbgraph-debugsource (crlsa-2022_1801)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20221801 advisory. gfbgraph: missing TLS certificate verification CVE-2021-39358 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note th...

Rocky Linux 8.8 [CIQ] Security Update: squashfs-tools (ciqsa-2026_0309)

The Rocky Linux 8.8 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260309 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2021-41072. Tenable has extracted the preceding...

Rocky Linux 8.8 [CIQ] Security Update: less / less-debuginfo / less-debugsource (ciqsa-2026_0303)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260303 advisory. This advisory aggregates security fixes for the less SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2024-32487. Tenable has extracted the preceding description bloc...