Rocky Linux 9.6 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc (ciqsa-2026_1382)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261382 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2026-46243. Tenable has extracted the preceding description...

Rocky Linux 9.2 [CIQ] Security Update: emacs / emacs-common / emacs-common-debuginfo / emacs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0409)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260409 advisory. This advisory aggregates security fixes for the emacs SRPM in CIQ LTS 9.2. It addresses 11 CVEs: CVE-2012-0035, CVE-2025-1244, CVE-2024-30203,...

Rocky Linux 9.2 [CIQ] Security Update: systemd / systemd-boot-unsigned / systemd-boot-unsigned-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0497)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260497 advisory. This advisory aggregates security fixes for the systemd SRPM in CIQ LTS 9.2. It addresses 12 CVEs: CVE-2025-4598, CVE-2018-15688, CVE-2019-6454,...

Rocky Linux 9.2 [CIQ] Security Update: NetworkManager-libreswan / NetworkManager-libreswan-debuginfo / etc (ciqsa-2026_0464)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260464 advisory. This advisory aggregates security fixes for the NetworkManager-libreswan SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2024-9050. Tenable has extracted the precedi...

Rocky Linux 9.6 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc (ciqsa-2026_1464)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261464 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ FIPS 9.6 Compliant. It addresses 1 CVE: CVE-2026-64561. Tenable has extracted the preceding...

CentOS Linux 7.9 [CIQ] Security Update: squashfs-tools (ciqsa-2026_0739)

The CentOS Linux 7.9 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260739 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2021-40153. Tenable has extracted the...

Rocky Linux 8.6 [CIQ] Security Update: bind9.16 / bind9.16-chroot / bind9.16-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0007)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260007 advisory. This advisory aggregates security fixes for the bind9.16 SRPM in CIQ LTS 8.6. It addresses 34 CVEs: CVE-2009-0696, CVE-2018-5738, CVE-2006-4095,...

Rocky Linux 8.6 [CIQ] Security Update: python39-cffi / python39-cffi-debuginfo (ciqsa-2026_0226)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260226 advisory. This advisory aggregates security fixes for the python-cffi SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2021-28861. Tenable has extracted the preceding descripti...

Rocky Linux 9.2 [CIQ] Security Update: curl / curl-debuginfo / curl-debugsource / curl-minimal / etc Multiple Vulnerabilities (ciqsa-2026_0406)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260406 advisory. This advisory aggregates security fixes for the curl SRPM in CIQ LTS 9.2. It addresses 105 CVEs: CVE-2022-27775, CVE-2022-32221, CVE-2019-5481,...

Rocky Linux 8 [CIQ] Security Update: ca-certificates (crlba-2024_5736)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlba-20245736 advisory. The ca-certificates package contains a set of Certificate Authority CA certificates chosen by the Mozilla Foundation for use with the Internet Public Key...

Rocky Linux 9.2 [CIQ] Security Update: postgresql / postgresql-contrib / postgresql-contrib-debuginfo / etc (ciqsa-2026_1163)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261163 advisory. This advisory aggregates security fixes for the postgresql SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2024-7348. Tenable has extracted the preceding description...

Rocky Linux 9.2 [CIQ] Security Update: pg_repack / pg_repack-debuginfo / pg_repack-debugsource (ciqsa-2026_1166)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261166 advisory. This advisory aggregates security fixes for the pgrepack SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2024-7348. Tenable has extracted the preceding description...

Rocky Linux 9.2 [CIQ] Security Update: cockpit / cockpit-bridge / cockpit-debuginfo / cockpit-debugsource / etc (ciqsa-2026_1502)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261502 advisory. This advisory aggregates security fixes for the cockpit SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2026-76235. Tenable has extracted the preceding description...

Rocky Linux 9.2 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux Multiple Vulnerabilities (ciqsa-2026_0425)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260425 advisory. This advisory aggregates security fixes for the grafana SRPM in CIQ LTS 9.2. It addresses 30 CVEs: CVE-2020-12459, CVE-2022-21698, CVE-2022-21673,...

Rocky Linux 8.6 [CIQ] Security Update: libjpeg-turbo / libjpeg-turbo-debuginfo / libjpeg-turbo-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0078)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260078 advisory. This advisory aggregates security fixes for the libjpeg-turbo SRPM in CIQ LTS 8.6. It addresses 7 CVEs: CVE-2020-17541, CVE-2013-6630, CVE-2013-6629,...

Rocky Linux 9.2 [CIQ] Security Update: perl-CPAN / perl-CPAN-tests Multiple Vulnerabilities (ciqsa-2026_0475)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260475 advisory. This advisory aggregates security fixes for the perl-CPAN SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2023-31484, CVE-2016-1238. Tenable has extracted...

Rocky Linux 8.6 [CIQ] Security Update: cups / cups-client / cups-client-debuginfo / cups-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0028)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260028 advisory. This advisory aggregates security fixes for the cups SRPM in CIQ LTS 8.6. It addresses 40 CVEs: CVE-2010-0540, CVE-2018-4181, CVE-2007-5393, CVE-2020-389...

virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use

downloadwheel runs pip download and hands the result straight to the seeder, with nothing checking the bytes it gets back. The embedded pip and setuptools wheels carry a BUNDLESHA256 that virtualenv checks on every load, but a wheel fetched over the network for the periodic-update feature or the...

GitPython submodule update path traversal can write outside the repository

Affected: GitPython 3.1.61 latest release and main — git/objects/submodule/base.py. git diff 3.1.61 origin/main -- git/objects/submodule/ is empty, so both are identical here. --- The gap The fix for GHSA-hmq2-w58f-27jc added Submodule.validatedname and wired it into update and five siblings,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs24: nodejs24-24.21.0-1.2.hum1 aarch64, x8664 nodejs24-bin-24.21.0-1.2.hum1 noarch nodejs24-devel-24.21.0-1.2.hum1 aarch64, x8664 nodejs24-docs-24.21.0-1.2.hum1 noarch...