Rocky Linux 8 [CIQ] Security Update: nodejs-nodemon / nodejs-packaging Multiple Vulnerabilities (crlea-2020_0330)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlea-20200330 advisory. The following packages have been upgraded to a later upstream version: nodejs 12.14.1. BZ1791067 This advisory is provided by Ctrl IQ, Inc for Rocky Linux...

Rocky Linux 9.6 [TuxCare] Security Update: poppler / poppler-cpp / poppler-cpp-devel / poppler-devel / etc (ALMALINUX9.6:CLSA-2026:1784038553)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784038553 advisory. - NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential...

Rocky Linux 8.8 [CIQ] Security Update: python39-wheel / python39-wheel-wheel (ciqsa-2026_1159)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261159 advisory. This advisory aggregates security fixes for the python-wheel SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2024-6345. Tenable has extracted the preceding descripti...

Rocky Linux 8.8 [CIQ] Security Update: expat / expat-debuginfo / expat-debugsource / expat-devel / etc Multiple Vulnerabilities (ciqsa-2026_1117)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261117 advisory. This advisory aggregates security fixes for the expat SRPM in CIQ LTS 8.8. It addresses 3 CVEs: CVE-2024-45491, CVE-2024-45490, CVE-2024-45492. Tenable h...

Rocky Linux 8.6 [CIQ] Security Update: libtiff / libtiff-debuginfo / libtiff-debugsource / libtiff-devel / etc Multiple Vulnerabilities (ciqsa-2026_0938)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260938 advisory. This advisory aggregates security fixes for the libtiff SRPM in CIQ LTS 8.6. It addresses 6 CVEs: CVE-2022-48281, CVE-2023-0800, CVE-2023-0804,...

Rocky Linux 9 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux Multiple Vulnerabilities (crlsa-2024_8678)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20248678 advisory. golang-fips: Golang FIPS zeroed buffer CVE-2024-9355 dompurify: nesting-based mutation XSS vulnerability CVE-2024-47875 Tenable has extracted the preceding...

Rocky Linux 8.8 [CIQ] Security Update: libxml2 / libxml2-debuginfo / libxml2-debugsource / libxml2-devel / etc (ciqsa-2026_1099)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261099 advisory. This advisory aggregates security fixes for the libxml2 SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2024-25062. Tenable has extracted the preceding description...

Rocky Linux 8.8 [CIQ] Security Update: python39 / python39-debuginfo / python39-debugsource / etc (ciqsa-2026_0349)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260349 advisory. This advisory aggregates security fixes for the python39 SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2024-6232. Tenable has extracted the preceding description...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2025_16920)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202516920 advisory. kernel: nfsd: don't ignore the return code of svcprocregister CVE-2025-22026 kernel: netsched: hfsc: Fix a UAF vulnerability in class handling...

Rocky Linux 10.1 [CIQ] Security Update: grub2-common / grub2-debuginfo / grub2-debugsource / grub2-efi-aa64 / etc (crlsa-2026_4649)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20264649 advisory. grub2: Missing unregister call for gettext command may lead to use-after-free CVE-2025-61662 Tenable has extracted the preceding description block directly from...

Rocky Linux 9.2 [CIQ] Security Update: bpftool-debuginfo Multiple Vulnerabilities (ciqsa-2026_1243)

The Rocky Linux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261243 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ FIPS 9.2 Compliant. It addresses 6 CVEs: CVE-2024-36886, CVE-2024-0646, CVE-2022-49803...

Rocky Linux 10.2 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-crypto-debuginfo / etc (crlsa-2026_67584)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202667584 advisory. rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd CVE-2026-19654...

Rocky Linux 8 [CIQ] Security Update: ldapjdk / ldapjdk-javadoc (crlsa-2021_0966)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20210966 advisory. pki-core: Unprivileged users can renew any certificate CVE-2021-20179 Tenable has extracted the preceding description block directly from the CIQ security advisory...

Rocky Linux 8 [CIQ] Security Update: cloud-init (crlsa-2021_3081)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20213081 advisory. cloud-init: randomly generated passwords logged in clear-text to world-readable file CVE-2021-3429 Tenable has extracted the preceding description block directly fr...

Rocky Linux 8.8 [CIQ] Security Update: expat / expat-debuginfo / expat-debugsource / expat-devel / etc (ciqsa-2026_0302)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260302 advisory. This advisory aggregates security fixes for the expat SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2024-8176. Tenable has extracted the preceding description bloc...

Rocky Linux 9 [CIQ] Security Update: NetworkManager / NetworkManager-adsl / etc (crlsa-2026_18597)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202618597 advisory. networkmanagr: NetworkManager File Access CVE-2025-9615 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 8.6 [CIQ] Security Update: iwl100-firmware / iwl1000-firmware / iwl105-firmware / etc Multiple Vulnerabilities (ciqsa-2026_0062)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260062 advisory. This advisory aggregates security fixes for the linux-firmware SRPM in CIQ LTS 8.6. It addresses 10 CVEs: CVE-2023-31315, CVE-2023-31356, CVE-2023-31346,...

Rocky Linux 8.6 [CIQ] Security Update: supermin / supermin-debuginfo / supermin-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0835)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260835 advisory. This advisory aggregates security fixes for the supermin SRPM in CIQ LTS 8.6. It addresses 6 CVEs: CVE-2021-3507, CVE-2022-0897, CVE-2022-2211,...

Rocky Linux 8.6 [CIQ] Security Update: netavark (ciqsa-2026_1093)

The Rocky Linux 8.6 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20261093 advisory. This advisory aggregates security fixes for the netavark SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding description...

Rocky Linux 9.4 [CIQ] Security Update: rubygem-io-console / rubygem-io-console-debuginfo (ciqsa-2026_1292)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261292 advisory. This advisory aggregates security fixes for the ruby SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2024-49761. Tenable has extracted the preceding description bloc...