Rocky Linux 9 [CIQ] Security Update: libvirt / libvirt-client / libvirt-client-debuginfo / etc (crlsa-2023_3715)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20233715 advisory. libvirt: Memory leak in virPCIVirtualFunctionList cleanup CVE-2023-2700 Tenable has extracted the preceding description block directly from the CIQ security advisor...

Rocky Linux 10.0 [CIQ] Security Update: python-unversioned-command / python3 / python3-debug / etc (crlsa-2025_14984)

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202514984 advisory. cpython: Cpython infinite loop when parsing a tarfile CVE-2025-8194 Tenable has extracted the preceding description block directly from the CIQ security advisor...

CentOS Linux 8 [TuxCare] Security Update: expat / expat-devel / expat-static (CENTOS-STREAM8:CLSA-2026:1770648267)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1770648267 advisory. - In libexpat before 2.7.4, XMLExternalEntityParserCreate does not copy unknown encoding handler user data. CVE-2026-24515 Note that Ness...

Rocky Linux 9.2 [CIQ] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ciqsa-2026_0609)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260609 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ FIPS 9.2 Compliant. It addresses 3 CVEs: CVE-2024-53104, CVE-2023-6817, CVE-2022-42896...

Rocky Linux 8 [CIQ] Security Update: webkit2gtk3 / webkit2gtk3-debuginfo / webkit2gtk3-debugsource / etc Multiple Vulnerabilities (crlsa-2022_1777)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20221777 advisory. webkitgtk: maliciously crafted web content may lead to arbitrary code execution due to use after free CVE-2022-22620 webkitgtk: Use-after-free leading to...

Rocky Linux 9 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-crypto-debuginfo / etc (crlsa-2026_67583)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202667583 advisory. rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd CVE-2026-19654 Tenabl...

Rocky Linux 8.8 [CIQ] Security Update: freetype / freetype-debuginfo / freetype-debugsource / etc (ciqsa-2026_0380)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260380 advisory. This advisory aggregates security fixes for the freetype SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2025-27363. Tenable has extracted the preceding description...

CentOS Linux 8.4 [TuxCare] Security Update: libatomic / libatomic-static / libgomp / liblsan / liblsan-static / etc (CENTOS8.4:CLSA-2025:1744925221)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2025:1744925221 advisory. - In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after...

Rocky Linux 8.6 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc (ciqsa-2026_1385)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261385 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2026-46333. Tenable has extracted the preceding description...

Rocky Linux 8 [CIQ] Security Update: kernel-rt-debug-debuginfo / kernel-rt-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_19664)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619664 advisory. kernel: Fragnesia is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation LPE vulnerability in the Linux kernel...

Rocky Linux 9.6 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ciqsa-2026_1337)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261337 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ LTS 9.6. It addresses 16 CVEs: CVE-2026-23204, CVE-2026-23111, CVE-2026-23193,...

Rocky Linux 8 [CIQ] Security Update: vim-X11 / vim-X11-debuginfo / vim-common / vim-common-debuginfo / etc (crlsa-2020_4453)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20204453 advisory. vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode CVE-2019-20807 Tenable has extracted the preceding description blo...

Rocky Linux 9.6 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-dnssec-doc / etc (ALMALINUX9.6:CLSA-2026:1782473390)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782473390 advisory. - Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue...

AlmaLinux 9.6 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc (ALMALINUX9.6:CLSA-2026:1789749056)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789749056 advisory. - In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link...

Rocky Linux 8 [CIQ] Security Update: openssh / openssh-askpass / openssh-askpass-debuginfo / etc (crlsa-2023_4419)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20234419 advisory. openssh: Remote code execution in ssh-agent PKCS11 support CVE-2023-38408 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 9 [CIQ] Security Update: git / git-all / git-core / git-core-debuginfo / git-core-doc / etc Multiple Vulnerabilities (crlsa-2024_4083)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20244083 advisory. git: Recursive clones RCE CVE-2024-32002 git: RCE while cloning local repos CVE-2024-32004 git: additional local RCE CVE-2024-32465 git: insecure hardlinks...

Rocky Linux 9 [CIQ] Security Update: git-lfs / git-lfs-debuginfo / git-lfs-debugsource Multiple Vulnerabilities (crlsa-2025_7256)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20257256 advisory. golang: crypto/tls: panic when processing post-handshake message on QUIC connections CVE-2023-39321 golang: crypto/tls: lack of a limit on buffered...

Rocky Linux 8.6 [CIQ] Security Update: skopeo / skopeo-tests Multiple Vulnerabilities (ciqsa-2026_0259)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260259 advisory. This advisory aggregates security fixes for the skopeo SRPM in CIQ LTS 8.6. It addresses 33 CVEs: CVE-2018-25091, CVE-2024-34155, CVE-2021-33198,...

Rocky Linux 8.8 [CIQ] Security Update: git / git-all / git-core / git-core-debuginfo / git-core-doc / etc Multiple Vulnerabilities (ciqsa-2026_1106)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261106 advisory. This advisory aggregates security fixes for the git SRPM in CIQ LTS 8.8. It addresses 5 CVEs: CVE-2024-32021, CVE-2024-32002, CVE-2024-32020,...

Rocky Linux 8 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2024_7699)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20247699 advisory. thunderbird: 115.16/128.3 firefox: thunderbird: Specially crafted WebTransport requests could lead to denial of service CVE-2024-9399 firefox: thunderbird:...

Rocky Linux 9.6 [CIQ] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc Multiple Vulnerabilities (ciqsa-2026_1419)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261419 advisory. This advisory aggregates security fixes for the openssh SRPM in CIQ LTS 9.6. It addresses 11 CVEs: CVE-2023-51385, CVE-2025-61984, CVE-2025-61985,...

Rocky Linux 8.6 [CIQ] Security Update: aardvark-dns Multiple Vulnerabilities (ciqsa-2026_0001)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260001 advisory. This advisory aggregates security fixes for the aardvark-dns SRPM in CIQ LTS 8.6. It addresses 33 CVEs: CVE-2018-25091, CVE-2024-34155, CVE-2021-33198,...

Rocky Linux 8.6 [CIQ] Security Update: openssh / openssh-askpass / openssh-askpass-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0126)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260126 advisory. This advisory aggregates security fixes for the openssh SRPM in CIQ LTS 8.6. It addresses 3 CVEs: CVE-2023-51385, CVE-2023-38408, CVE-2023-48795. Tenable...

Rocky Linux 8.8 [CIQ] Security Update: expat / expat-debuginfo / expat-debugsource / expat-devel / etc (ciqsa-2026_0302)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260302 advisory. This advisory aggregates security fixes for the expat SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2024-8176. Tenable has extracted the preceding description bloc...

Rocky Linux 8 [CIQ] Security Update: grafana / grafana-debuginfo (crlsa-2021_3771)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20213771 advisory. grafana: Snapshot authentication bypass CVE-2021-39226 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Ness...

Rocky Linux 9 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource / firefox-x11 Multiple Vulnerabilities (crlsa-2025_10072)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202510072 advisory. firefox: Content-Disposition header ignored when a file is included in an embed or object tag CVE-2025-6430 firefox: Use-after-free in FontFaceSet...

Rocky Linux 8 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2024_8790)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20248790 advisory. firefox: thunderbird: History interface could have been used to cause a Denial of Service condition in the browser CVE-2024-10464 firefox: thunderbird: XSS...

CentOS Linux 8 [TuxCare] Security Update: platform-python / platform-python-debug / platform-python-devel / etc (CENTOS-STREAM8:CLSA-2026:1789719542)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1789719542 advisory. - In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard...

Rocky Linux 8 [CIQ] Security Update: Judy / Judy-debuginfo / Judy-debugsource / galera / etc Multiple Vulnerabilities (crlsa-2023_5259)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20235259 advisory. mariadb: segmentation fault via the component subselect CVE-2022-32084 mariadb: server crash in JOINCACHE::free or in copyfields CVE-2022-32091 mariadb:...

Rocky Linux 8.6 [CIQ] Security Update: edk2-aarch64 / edk2-ovmf / edk2-tools / edk2-tools-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0037)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260037 advisory. This advisory aggregates security fixes for the edk2 SRPM in CIQ LTS 8.6. It addresses 14 CVEs: CVE-2019-14560, CVE-2022-36763, CVE-2022-36764,...

Rocky Linux 8.6 [CIQ] Security Update: python2-idna Multiple Vulnerabilities (ciqsa-2026_0168)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260168 advisory. This advisory aggregates security fixes for the python-idna SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681, CVE-2022-45061,...

Rocky Linux 8.6 [CIQ] Security Update: python2-virtualenv Multiple Vulnerabilities (ciqsa-2026_0195)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260195 advisory. This advisory aggregates security fixes for the python-virtualenv SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681, CVE-2022-4506...

Rocky Linux 8.6 [CIQ] Security Update: python39-scipy / python39-scipy-debuginfo / scipy-debugsource Multiple Vulnerabilities (ciqsa-2026_0759)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260759 advisory. This advisory aggregates security fixes for the scipy SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2020-10735, CVE-2021-28861,...

Rocky Linux 8.6 [CIQ] Security Update: python39-pysocks Multiple Vulnerabilities (ciqsa-2026_0774)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260774 advisory. This advisory aggregates security fixes for the python-pysocks SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2020-10735, CVE-2021-28861,...

Rocky Linux 8.8 [CIQ] Security Update: python39 / python39-debuginfo / python39-debugsource / etc (ciqsa-2026_0349)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260349 advisory. This advisory aggregates security fixes for the python39 SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2024-6232. Tenable has extracted the preceding description...

Rocky Linux 8.8 [CIQ] Security Update: expat / expat-debuginfo / expat-debugsource / expat-devel / etc (ciqsa-2026_1034)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261034 advisory. This advisory aggregates security fixes for the expat SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2023-52425. Tenable has extracted the preceding description blo...

Rocky Linux 8 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc Multiple Vulnerabilities (crlsa-2023_1405)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20231405 advisory. openssl: X.400 address type confusion in X.509 GeneralName CVE-2023-0286 openssl: timing attack in RSA Decryption implementation CVE-2022-4304 openssl:...

Rocky Linux 8 [CIQ] Security Update: python3.11 / python3.11-debug / python3.11-debuginfo / etc (crlsa-2023_5463)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20235463 advisory. python: TLS handshake bypass CVE-2023-40217 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus has not...

Rocky Linux 9 [CIQ] Security Update: python3.12 / python3.12-debug / python3.12-debuginfo / etc (crlsa-2024_6146)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20246146 advisory. cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection CVE-2024-6923 Tenable has extracted the preceding...

CentOS Linux 8.5 [TuxCare] Security Update: python2 / python2-debug / python2-devel / python2-libs / etc (CENTOS8.5:CLSA-2026:1781169880)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1781169880 advisory. - xml.parsers.expat and xml.etree.ElementTree use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML documen...

Rocky Linux 8.6 [CIQ] Security Update: python2-backports-ssl_match_hostname Multiple Vulnerabilities (ciqsa-2026_0158)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260158 advisory. This advisory aggregates security fixes for the python-backports-sslmatchhostname SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-3268...

Rocky Linux 8.6 [CIQ] Security Update: python2-markupsafe Multiple Vulnerabilities (ciqsa-2026_0172)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260172 advisory. This advisory aggregates security fixes for the python-markupsafe SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681, CVE-2022-4506...

Rocky Linux 8.6 [CIQ] Security Update: python38-chardet Multiple Vulnerabilities (ciqsa-2026_0201)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260201 advisory. This advisory aggregates security fixes for the python-chardet SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2020-10735, CVE-2021-28861,...

Rocky Linux 8.6 [CIQ] Security Update: python39-urllib3 Multiple Vulnerabilities (ciqsa-2026_0762)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260762 advisory. This advisory aggregates security fixes for the python-urllib3 SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2020-10735, CVE-2021-28861,...

Rocky Linux 8.6 [CIQ] Security Update: python39-cffi / python39-cffi-debuginfo Multiple Vulnerabilities (ciqsa-2026_0763)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260763 advisory. This advisory aggregates security fixes for the python-cffi SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2020-10735, CVE-2021-28861,...

Rocky Linux 8.6 [CIQ] Security Update: python39-six Multiple Vulnerabilities (ciqsa-2026_0764)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260764 advisory. This advisory aggregates security fixes for the python3x-six SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2020-10735, CVE-2021-28861,...

Rocky Linux 8.6 [CIQ] Security Update: python39-pip / python39-pip-wheel Multiple Vulnerabilities (ciqsa-2026_0767)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260767 advisory. This advisory aggregates security fixes for the python3x-pip SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2020-10735, CVE-2021-28861,...

Rocky Linux 8 [CIQ] Security Update: Cython-debugsource / PyYAML-debugsource / babel / etc Multiple Vulnerabilities (crlsa-2020_1605)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20201605 advisory. python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure CVE-2018-20060 python: Cookie domain check returns...

Rocky Linux 8 [CIQ] Security Update: python3.11 / python3.11-debug / python3.11-debuginfo / etc (crlsa-2024_8838)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20248838 advisory. python: cpython: tarfile: ReDos via excessive backtracking while parsing header values CVE-2024-6232 Tenable has extracted the preceding description block directly...

Rocky Linux 9 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc Multiple Vulnerabilities (crlsa-2023_0946)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20230946 advisory. openssl: X.400 address type confusion in X.509 GeneralName CVE-2023-0286 openssl: read buffer overflow in X.509 certificate verification CVE-2022-4203...