Rocky Linux 9.2 [CIQ] Security Update: python3-tornado / python3-tornado-debuginfo Multiple Vulnerabilities (ciqsa-2026_0487)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260487 advisory. This advisory aggregates security fixes for the python-tornado SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2024-52804, CVE-2023-28370. Tenable has...

Rocky Linux 8 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (crlsa-2026_55775)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202655775 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 Tenable has extracted t...

Rocky Linux 9.4 [CIQ] Security Update: postgresql / postgresql-contrib / postgresql-contrib-debuginfo / etc (ciqsa-2026_0570)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260570 advisory. This advisory aggregates security fixes for the postgresql SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2025-1094. Tenable has extracted the preceding description...

Rocky Linux 9 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crxsa-2023_0951)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crxsa-20230951 advisory. kernel: use-after-free caused by l2capreassemblesdu in net/bluetooth/l2capcore.c CVE-2022-3564 kernel: stack overflow in doprocdointvec and procskipspaces...

Rocky Linux 10.2 [CIQ] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc Multiple Vulnerabilities (crlsa-2026_60306)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202660306 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial ...

Rocky Linux 9.6 [CIQ] Security Update: python-unversioned-command / python3 / python3-debug / etc Multiple Vulnerabilities (ciqsa-2026_1430)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261430 advisory. This advisory aggregates security fixes for the python3.9 SRPM in CIQ LTS 9.6. It addresses 9 CVEs: CVE-2025-12084, CVE-2024-5642, CVE-2025-6075,...

Rocky Linux 8 [CIQ] Security Update: Cython-debugsource / PyYAML-debugsource / numpy-debugsource / etc Multiple Vulnerabilities (crlsa-2024_3466)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243466 advisory. python39:3.9/python39: python: Path traversal on tempfile.TemporaryDirectory CVE-2023-6597 python39:3.9/python39: python: The zipfile module is vulnerable ...

Rocky Linux 8 [CIQ] Security Update: libsoup / libsoup-debuginfo / libsoup-debugsource / libsoup-devel Multiple Vulnerabilities (crlsa-2024_9573)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20249573 advisory. libsoup: infinite loop while reading websocket data CVE-2024-52532 libsoup: HTTP request smuggling via stripping null bytes from the ends of header names...

Rocky Linux 10.1 [CIQ] Security Update: pam / pam-debuginfo / pam-debugsource / pam-devel / pam-libs / etc (crlsa-2025_20181)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202520181 advisory. linux-pam: Linux-pam directory Traversal CVE-2025-6020 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 9 [CIQ] Security Update: qt5-qtbase / qt5-qtbase-common / qt5-qtbase-debuginfo / etc (crlsa-2026_65993)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202665993 advisory. qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 10.2 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc Multiple Vulnerabilities (crlsa-2026_25111)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202625111 advisory. dotnet: .NET: Local file tampering via link following vulnerability CVE-2026-45491 dotnet: ASP.NET Core: Denial of Service via uncontrolled resource...

Rocky Linux 9 [CIQ] Security Update: less / less-debuginfo / less-debugsource (crlsa-2024_3513)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20243513 advisory. less: OS command injection CVE-2024-32487 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus has not...

Rocky Linux 9.6 [TuxCare] Security Update: gawk / gawk-all-langpacks / gawk-devel / gawk-doc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1784217178)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784217178 advisory. - Use After Free vulnerability has been found in io.c program file of gawk dogetlineredir routine. This issue may lead to a crash...

Rocky Linux 10.1 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2025_23279)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202523279 advisory. kernel: cloneprivatemnt: make sure that caller has CAPSYSADMIN in the right userns CVE-2025-38499 kernel: net: tun: Update napi-skb after XDP process...

Rocky Linux 9.2 [CIQ] Security Update: python3.11 / python3.11-debug / python3.11-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0958)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260958 advisory. This advisory aggregates security fixes for the python3.11 SRPM in CIQ LTS 9.2. It addresses 3 CVEs: CVE-2024-4032, CVE-2023-6597, CVE-2023-24329. Tenabl...

Rocky Linux 9 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (crlsa-2025_21110)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202521110 advisory. bind: Cache poisoning attacks with unsolicited RRs CVE-2025-40778 bind: Cache poisoning due to weak PRNG CVE-2025-40780 Tenable has extracted the precedin...

Rocky Linux 10.0 [CIQ] Security Update: varnish / varnish-devel / varnish-docs (crlsa-2025_8550)

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20258550 advisory. varnish: request smuggling attacks CVE-2025-47905 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus...

Rocky Linux 8 [CIQ] Security Update: libecap / libecap-debuginfo / libecap-debugsource / libecap-devel Multiple Vulnerabilities (crlsa-2020_2041)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20202041 advisory. squid: improper check for new member in ESIExpression::Evaluate allows for stack buffer overflow CVE-2019-12519 squid: improper access restriction upon...

Rocky Linux 8.6 [CIQ] Security Update: libtasn1 / libtasn1-debuginfo / libtasn1-debugsource / etc (ciqsa-2026_0089)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260089 advisory. This advisory aggregates security fixes for the libtasn1 SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2021-46848. Tenable has extracted the preceding description...

Rocky Linux 9.2 [CIQ] Security Update: pam / pam-debuginfo / pam-debugsource / pam-devel / pam-docs Multiple Vulnerabilities (ciqsa-2026_1045)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261045 advisory. This advisory aggregates security fixes for the pam SRPM in CIQ LTS 9.2. It addresses 3 CVEs: CVE-2024-10963, CVE-2024-10041, CVE-2024-22365. Tenable has...