Rocky Linux 9.2 [CIQ] Security Update: emacs / emacs-common / emacs-common-debuginfo / emacs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0409)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260409 advisory. This advisory aggregates security fixes for the emacs SRPM in CIQ LTS 9.2. It addresses 11 CVEs: CVE-2012-0035, CVE-2025-1244, CVE-2024-30203,...

Rocky Linux 9.2 [CIQ] Security Update: 389-ds-base / 389-ds-base-libs / python3-lib389 Multiple Vulnerabilities (ciqsa-2026_1546)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261546 advisory. This advisory aggregates security fixes for the 389-ds-base SRPM in CIQ LTS 9.2. It addresses 3 CVEs: CVE-2024-3657, CVE-2024-2199, CVE-2026-18922. Tenab...

Rocky Linux 8.6 [CIQ] Security Update: cups-filters / cups-filters-debuginfo / cups-filters-debugsource / etc (ciqsa-2026_1040)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261040 advisory. This advisory aggregates security fixes for the cups-filters SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-5388. Tenable has extracted the preceding descripti...

CentOS Linux 8 [TuxCare] Security Update: glib2 / glib2-devel / glib2-doc / glib2-fam / glib2-static / etc (CENTOS-STREAM8:CLSA-2025:1753207715)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2025:1753207715 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEV...

Rocky Linux 8.6 [CIQ] Security Update: qemu-guest-agent / qemu-guest-agent-debuginfo / qemu-img / etc Multiple Vulnerabilities (ciqsa-2026_0836)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260836 advisory. This advisory aggregates security fixes for the qemu-kvm SRPM in CIQ LTS 8.6. It addresses 6 CVEs: CVE-2021-3507, CVE-2023-2700, CVE-2022-4144,...

gvfs security update

1.48.1-8.1 - Backport several CVE fixes CVE-2026-84268, CVE-2026-88924 Resolves: RHEL-252312, RHEL-257348...

rsync security, bug fix, and enhancement update

3.1.3-28 - Resolves: RHEL-256903 - Fix latest CVEs in rsync in RHEL8 - Fixing a regression introduced with the security patches...

PT-2026-103990

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the update handler fetches a user-supplied URL with file get contents after only format validation FILTER VALIDATE URL — there is no validation of the request...

PT-2026-103715

Name of the Vulnerable Software and Affected Versions ByteCoreStack – MCP Connector for AI Tools versions prior to 1.2.4 Description Authenticated users with Subscriber-level access or higher can elevate their privileges to Administrator. The issue exists in the execute tool function within the w...

Rocky Linux 8.6 [CIQ] Security Update: python39-cffi / python39-cffi-debuginfo (ciqsa-2026_0226)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260226 advisory. This advisory aggregates security fixes for the python-cffi SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2021-28861. Tenable has extracted the preceding descripti...

Rocky Linux 8.6 [CIQ] Security Update: cups / cups-client / cups-client-debuginfo / cups-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0028)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260028 advisory. This advisory aggregates security fixes for the cups SRPM in CIQ LTS 8.6. It addresses 40 CVEs: CVE-2010-0540, CVE-2018-4181, CVE-2007-5393, CVE-2020-389...

Rocky Linux 9.6 [CIQ] Security Update: expat / expat-debuginfo / expat-debugsource / expat-devel (ciqsa-2026_1449)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261449 advisory. This advisory aggregates security fixes for the expat SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2026-45186. Tenable has extracted the preceding description blo...

CVE-2026-56662: Cross-Site Request Forgery (CSRF)

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the UpdateCE update form contained no anti-CSRF token, and the POST handler performed no token or request-origin verification. A remote attacker can host a page that...

Rocky Linux 9.6 [TuxCare] Security Update: buildah / buildah-tests (ALMALINUX9.6:CLSA-2026:1779182426)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779182426 advisory. - If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock,...

Rocky Linux 9.2 [CIQ] Security Update: cockpit / cockpit-bridge / cockpit-debuginfo / cockpit-debugsource / etc (ciqsa-2026_1502)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261502 advisory. This advisory aggregates security fixes for the cockpit SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2026-76235. Tenable has extracted the preceding description...

Rocky Linux 8 [CIQ] Security Update: frr / frr-debuginfo / frr-debugsource / frr-selinux (crlsa-2026_49511)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202649511 advisory. frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 Tenable has extracted the preceding description block directly from the CIQ securit...

Rocky Linux 9.4 [CIQ] Security Update: libxslt / libxslt-debuginfo / libxslt-debugsource / libxslt-devel (ciqsa-2026_0548)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260548 advisory. This advisory aggregates security fixes for the libxslt SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2025-24855. Tenable has extracted the preceding description...

AlmaLinux 9.2 [TuxCare] Security Update: libxslt / libxslt-devel (ALMALINUX9.2:CLSA-2026:1778898606)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778898606 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

CentOS Linux 7.9 [CIQ] Security Update: lz4 / lz4-debuginfo / lz4-devel / lz4-static (ciqsa-2026_0717)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260717 advisory. This advisory aggregates security fixes for the lz4 SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2021-3520. Tenable has extracted the preceding...

AlmaLinux 9.6 [TuxCare] Security Update: mod_http2 (ALMALINUX9.6:CLSA-2026:1781175625)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1781175625 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...