Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crlsa-2022_1550)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20221550 advisory. kernel: use-after-free in RDMA listen CVE-2021-4028 kernel: heap out of bounds write in nfdupnetdev.c CVE-2022-25636 Tenable has extracted the preceding...

Rocky Linux 8.6 [CIQ] Security Update: platform-python-setuptools / python2-setuptools / etc (ciqsa-2026_1134)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261134 advisory. This advisory aggregates security fixes for the python-setuptools SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-6345. Tenable has extracted the preceding...

Rocky Linux 9 [CIQ] Security Update: glibc / glibc-all-langpacks / glibc-benchtests / etc (crlsa-2026_33226)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202633226 advisory. glibc: glibc: Heap Buffer Overflow in scanf with %mc format specifier and large width CVE-2026-5450 Bug Fixes and Enhancements: glibc: counter overflow in...

Rocky Linux 9.4 [CIQ] Security Update: pgvector / pgvector-debuginfo / pgvector-debugsource Multiple Vulnerabilities (ciqsa-2026_1054)

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261054 advisory. This advisory aggregates security fixes for the pgvector SRPM in CIQ LTS 9.4. It addresses 3 CVEs: CVE-2024-10979, CVE-2024-10976, CVE-2024-10978. Tenabl...

Rocky Linux 10.1 [CIQ] Security Update: vim-X11 / vim-X11-debuginfo / vim-common / vim-data / vim-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_21015)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202521015 advisory. vim: Vim path traversal CVE-2025-53906 vim: Vim path traversial CVE-2025-53905 Tenable has extracted the preceding description block directly from the...

Rocky Linux 9.6 [TuxCare] Security Update: binutils / binutils-devel / binutils-gold / cross-binutils-aarch64 / etc (ALMALINUX9.6:CLSA-2025:1767003370)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1767003370 advisory. - A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elfswapshdr in the library bfd/elfcode.h of the...

Rocky Linux 9.4 [CIQ] Security Update: libpq / libpq-debuginfo / libpq-debugsource / libpq-devel / etc (ciqsa-2026_0539)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260539 advisory. This advisory aggregates security fixes for the libpq SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2025-1094. Tenable has extracted the preceding description bloc...

Rocky Linux 9 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc Multiple Vulnerabilities (crlsa-2026_67165)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202667165 advisory. openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server CVE-2026-14456 openssl: QUIC server may trigger double free when processing...

Rocky Linux 8.8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (ciqsa-2026_0928)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260928 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ LTS 8.8. It addresses 8 CVEs: CVE-2024-41090, CVE-2024-53104, CVE-2023-2163,...

Rocky Linux 8.6 [CIQ] Security Update: python2-attrs Multiple Vulnerabilities (ciqsa-2026_0156)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260156 advisory. This advisory aggregates security fixes for the python-attrs SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681, CVE-2022-45061,...

Rocky Linux 8 [CIQ] Security Update: libipa_hbac / libipa_hbac-debuginfo / libsss_autofs / etc (crlsa-2025_19610)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202519610 advisory. sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems CVE-2025-11561 Tenable has extracted the preceding description blo...

Rocky Linux 8 [CIQ] Security Update: NetworkManager / NetworkManager-adsl / etc (crlsa-2021_1574)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20211574 advisory. NetworkManager: Profile with match.path setting triggers crash CVE-2021-20297 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 8.6 [CIQ] Security Update: Judy / Judy-debuginfo / Judy-debugsource (ciqsa-2026_0066)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260066 advisory. This advisory aggregates security fixes for the Judy SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-24805. Tenable has extracted the preceding description bloc...

Rocky Linux 9.6 [TuxCare] Security Update: expat / expat-devel / expat-static Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1774611572)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1774611572 advisory. - libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content. CVE-2026-32776 - libexpat...

Rocky Linux 9.6 [TuxCare] Security Update: protobuf / protobuf-compiler / protobuf-devel / protobuf-emacs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1772451263)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772451263 advisory. - Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags...

Rocky Linux 9.4 [CIQ] Security Update: emacs / emacs-common / emacs-common-debuginfo / emacs-debuginfo / etc (ciqsa-2026_0525)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260525 advisory. This advisory aggregates security fixes for the emacs SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2025-1244. Tenable has extracted the preceding description bloc...

Rocky Linux 8.6 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (ciqsa-2026_0930)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260930 advisory. This advisory aggregates security fixes for the kernel-rt SRPM in CIQ LTS 8.6. It addresses 13 CVEs: CVE-2024-36971, CVE-2024-41090, CVE-2024-53104,...

Rocky Linux 10.1 [CIQ] Security Update: jq / jq-debuginfo / jq-debugsource / jq-devel Multiple Vulnerabilities (crlsa-2026_16692)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202616692 advisory. jq: out-of-bounds read in jvparsesized on error formatting for non-NUL-terminated buffers CVE-2026-39979 jq: jq: Denial of Service via crafted JSON...

Rocky Linux 8.6 [CIQ] Security Update: tar / tar-debuginfo / tar-debugsource (ciqsa-2026_0267)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260267 advisory. This advisory aggregates security fixes for the tar SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2022-48303. Tenable has extracted the preceding description block...

Rocky Linux 8.6 [CIQ] Security Update: c-ares / c-ares-debuginfo / c-ares-debugsource / c-ares-devel (ciqsa-2026_0016)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260016 advisory. This advisory aggregates security fixes for the c-ares SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-32067. Tenable has extracted the preceding description...