AlmaLinux 9.2 [TuxCare] Security Update: thunderbird Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1779786876)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779786876 advisory. - NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacke...

Rocky Linux 10.0 [CIQ] Security Update: exiv2 / exiv2-debuginfo / exiv2-debugsource / exiv2-devel / etc (crlsa-2025_7457)

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20257457 advisory. exiv2: Use After Free in Exiv2 CVE-2025-26623 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus has...

Rocky Linux 10.2 [CIQ] Security Update: python3-jwcrypto (crlsa-2026_19042)

The Rocky Linux 10.2 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202619042 advisory. JWCrypto: python-cryptography: python: JWCrypto: Memory exhaustion via crafted compressed JWE tokens CVE-2026-39373 Tenable has extracted the preceding...

Rocky Linux 9 [CIQ] Security Update: webkit2gtk3 / webkit2gtk3-debuginfo / webkit2gtk3-debugsource / etc Multiple Vulnerabilities (crlsa-2024_8180)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20248180 advisory. webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution CVE-2024-40776 webkitgtk: webkit2gtk: Processing maliciously crafted web content ma...

CentOS Linux 8 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1777614769)

"The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1777614769 advisory. - In the Linux kernel, the following vulnerability has been resolved: asix: fix uninit-value in asixmdioread asixreadcmd may rea...

AlmaLinux 9.6 [TuxCare] Security Update: libsndfile / libsndfile-devel / libsndfile-utils (ALMALINUX9.6:CLSA-2026:1780515309)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780515309 advisory. - An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path line 241 was fixed with sfcountt cast, but the WAV code pat...

Rocky Linux 8 [CIQ] Security Update: delve / delve-debuginfo / delve-debugsource / go-toolset / golang / etc (crlsa-2024_1962)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20241962 advisory. golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS CVE-2023-45288 Tenable has extracted the preceding description block directly from...

Rocky Linux 8 [CIQ] Security Update: delve / delve-debuginfo / delve-debugsource / go-toolset / golang / etc Multiple Vulnerabilities (crlsa-2024_3259)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243259 advisory. golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS CVE-2023-45288 golang: net/http/cookiejar: incorrect forwarding of...

Rocky Linux 9.2 [CIQ] Security Update: git-lfs / git-lfs-debuginfo / git-lfs-debugsource Multiple Vulnerabilities (ciqsa-2026_1007)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261007 advisory. This advisory aggregates security fixes for the git-lfs SRPM in CIQ LTS 9.2. It addresses 4 CVEs: CVE-2023-45288, CVE-2023-45290, CVE-2023-45289,...

Rocky Linux 8.8 [CIQ] Security Update: gnutls / gnutls-c++ / gnutls-c++-debuginfo / gnutls-dane / etc Multiple Vulnerabilities (ciqsa-2026_0341)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260341 advisory. This advisory aggregates security fixes for the gnutls SRPM in CIQ LTS 8.8. It addresses 3 CVEs: CVE-2023-5981, CVE-2024-0553, CVE-2024-28834. Tenable ha...

Rocky Linux 8 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource (crlsa-2024_1646)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20241646 advisory. golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 Bug Fixes: TRIAGE CVE-2024-1394 grafana: golang-fips/openssl: Memory...

Rocky Linux 9 [CIQ] Security Update: gnutls / gnutls-c++ / gnutls-c++-debuginfo / gnutls-dane / etc (ciqsa-2026_1102)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261102 advisory. This advisory aggregates security fixes for the gnutls SRPM in CIQ FIPS 9. It addresses 1 CVE: CVE-2024-28834. Tenable has extracted the preceding description block...

Rocky Linux 8.6 [CIQ] Security Update: curl / curl-debuginfo / curl-debugsource / curl-minimal / etc Multiple Vulnerabilities (ciqsa-2026_0030)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260030 advisory. This advisory aggregates security fixes for the curl SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2023-38546, CVE-2023-46218, CVE-2023-28322,...

Rocky Linux 8 [CIQ] Security Update: grafana-pcp / grafana-pcp-debuginfo / grafana-pcp-debugsource (crlsa-2024_1644)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20241644 advisory. golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 Bug Fixes: TRIAGE CVE-2024-1394 grafana-pcp: golang-fips/openssl:...

Rocky Linux 9.2 [CIQ] Security Update: gnutls / gnutls-c++ / gnutls-c++-debuginfo / gnutls-dane / etc Multiple Vulnerabilities (ciqsa-2026_0621)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260621 advisory. This advisory aggregates security fixes for the gnutls SRPM in CIQ FIPS 9.2 Compliant. It addresses 5 CVEs: CVE-2006-0645, CVE-2006-4790, CVE-2019-3829,...

Rocky Linux 9 [CIQ] Security Update: grafana-pcp / grafana-pcp-debuginfo / grafana-pcp-debugsource (crlsa-2024_1502)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20241502 advisory. grafana-pcp: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 This advisory is provided by Ctrl IQ, Inc for Rocky Linu...

Rocky Linux 8.6 [CIQ] Security Update: crit / criu / criu-debuginfo / criu-debugsource / criu-devel / etc Multiple Vulnerabilities (ciqsa-2026_0898)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260898 advisory. This advisory aggregates security fixes for the criu SRPM in CIQ LTS 8.6. It addresses 20 CVEs: CVE-2022-2989, CVE-2022-2990, CVE-2022-41723,...

Rocky Linux 8.6 [CIQ] Security Update: aardvark-dns Multiple Vulnerabilities (ciqsa-2026_0909)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260909 advisory. This advisory aggregates security fixes for the aardvark-dns SRPM in CIQ LTS 8.6. It addresses 20 CVEs: CVE-2022-2989, CVE-2022-2990, CVE-2022-41723,...

Rocky Linux 8.8 [CIQ] Security Update: runc / runc-debuginfo / runc-debugsource Multiple Vulnerabilities (ciqsa-2026_0790)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260790 advisory. This advisory aggregates security fixes for the runc SRPM in CIQ LTS 8.8. It addresses 39 CVEs: CVE-2020-10756, CVE-2021-3592, CVE-2021-3593,...

Rocky Linux 8.8 [CIQ] Security Update: containers-common Multiple Vulnerabilities (ciqsa-2026_0793)

The Rocky Linux 8.8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260793 advisory. This advisory aggregates security fixes for the containers-common SRPM in CIQ LTS 8.8. It addresses 39 CVEs: CVE-2020-10756, CVE-2021-3592, CVE-2021-3593...

Rocky Linux 8.8 [CIQ] Security Update: crun / crun-debuginfo / crun-debugsource Multiple Vulnerabilities (ciqsa-2026_0797)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260797 advisory. This advisory aggregates security fixes for the crun SRPM in CIQ LTS 8.8. It addresses 39 CVEs: CVE-2020-10756, CVE-2021-3592, CVE-2021-3593,...

Rocky Linux 8 [CIQ] Security Update: aardvark-dns / buildah / buildah-debuginfo / buildah-debugsource / etc Multiple Vulnerabilities (crlsa-2026_3428)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20263428 advisory. golang: html/template: errors returned from MarshalJSON methods may break template escaping CVE-2024-24785 crypto/x509: golang: Denial of Service due to...

AlmaLinux 9.2 [TuxCare] Security Update: gnutls / gnutls-c++ / gnutls-dane / gnutls-devel / gnutls-utils (ALMALINUX9.2:CLSA-2024:1727373881)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1727373881 advisory. - A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle...

AlmaLinux 9.2 [TuxCare] Security Update: nodejs / nodejs-devel / nodejs-docs / nodejs-full-i18n / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1756305640)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1756305640 advisory. - node-tar is a Tar for Node.js. node-tar prior to version 6.2.1 has no limit on the number of sub-folders created in the folder...

AlmaLinux 9.2 [TuxCare] Security Update: tar (ALMALINUX9.2:CLSA-2026:1778820779)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778820779 advisory. - In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c. CVE-2023-39804 Note...

AlmaLinux 9.2 [TuxCare] Security Update: skopeo / skopeo-tests (ALMALINUX9.2:CLSA-2026:1778661840)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778661840 advisory. - The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when...

CentOS Linux 8.4 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / etc (CENTOS8.4:CLSA-2026:1784800112)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1784800112 advisory. - A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the...

CentOS Linux 8 [TuxCare] Security Update: python3-unbound / unbound / unbound-devel / unbound-libs (CENTOS-STREAM8:CLSA-2026:1768211704)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1768211704 advisory. - The Closest Encloser Proof aspect of the DNS protocol in RFC 5155 when RFC 9276 guidance is skipped allows remote attackers to cause a...

Rocky Linux 8.6 [CIQ] Security Update: java-17-openjdk / java-17-openjdk-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0954)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260954 advisory. This advisory aggregates security fixes for the java-17-openjdk SRPM in CIQ LTS 8.6. It addresses 16 CVEs: CVE-2024-20918, CVE-2024-20921, CVE-2024-20945...

Rocky Linux 8.8 [CIQ] Security Update: less / less-debuginfo / less-debugsource (ciqsa-2026_0941)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260941 advisory. This advisory aggregates security fixes for the less SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2022-48624. Tenable has extracted the preceding description bloc...

Rocky Linux 8 [CIQ] Security Update: postgresql / postgresql-contrib / postgresql-contrib-debuginfo / etc (crlsa-2024_0956)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20240956 advisory. postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL CVE-2024-0985 Tenable has extracted the preceding description block directly...

Rocky Linux 9.2 [CIQ] Security Update: postgresql-jdbc / postgresql-jdbc-javadoc (ciqsa-2026_0479)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260479 advisory. This advisory aggregates security fixes for the postgresql-jdbc SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2024-1597. Tenable has extracted the preceding...

AlmaLinux 9.2 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-demo / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1752655009)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1752655009 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component...

CentOS Linux 8.5 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-export-devel / etc (CENTOS8.5:CLSA-2026:1787659784)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1787659784 advisory. - To keep its cache database efficient, named running as a recursive resolver occasionally attempts to clean up the database. It uses several...

Rocky Linux 8 [CIQ] Security Update: webkit2gtk3 / webkit2gtk3-debuginfo / webkit2gtk3-debugsource / etc Multiple Vulnerabilities (crlsa-2022_1777)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20221777 advisory. webkitgtk: maliciously crafted web content may lead to arbitrary code execution due to use after free CVE-2022-22620 webkitgtk: Use-after-free leading to...

Rocky Linux 8 [CIQ] Security Update: pcs / pcs-snmp Multiple Vulnerabilities (crlsa-2024_2953)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242953 advisory. rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing CVE-2024-25126 rubygem-rack: Possible DoS Vulnerability with Range Header in Rac...

Rocky Linux 9.2 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_1039)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261039 advisory. This advisory aggregates security fixes for the tigervnc SRPM in CIQ LTS 9.2. It addresses 7 CVEs: CVE-2023-5367, CVE-2023-6377, CVE-2024-0229,...

Rocky Linux 9 [CIQ] Security Update: libgcrypt / libgcrypt-debuginfo / libgcrypt-debugsource / etc (crlsa-2024_9404)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20249404 advisory. libgcrypt: vulnerable to Marvin Attack CVE-2024-2236 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus...

Rocky Linux 8 [CIQ] Security Update: httpd / httpd-debuginfo / httpd-debugsource / httpd-devel / etc (crlsa-2024_1786)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20241786 advisory. httpd: modhttp2: CONTINUATION frames DoS CVE-2024-27316 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 8 [CIQ] Security Update: libnghttp2 / libnghttp2-debuginfo / libnghttp2-devel / nghttp2 / etc (crlsa-2024_4252)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20244252 advisory. nghttp2: CONTINUATION frames DoS CVE-2024-28182 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus has...

Rocky Linux 9 [CIQ] Security Update: mod_http2 / mod_http2-debuginfo / mod_http2-debugsource (crlsa-2024_2564)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20242564 advisory. modhttp2: httpd: CONTINUATION frames DoS CVE-2024-27316 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 8 [CIQ] Security Update: delve / delve-debuginfo / delve-debugsource / go-toolset / golang / etc (crlsa-2024_1472)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20241472 advisory. golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 Tenable has extracted the preceding description block directly from t...

Rocky Linux 9.2 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource (ciqsa-2026_1065)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261065 advisory. This advisory aggregates security fixes for the grafana SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2024-1394. Tenable has extracted the preceding description...

Rocky Linux 9 [CIQ] Security Update: grafana-pcp / grafana-pcp-debuginfo / grafana-pcp-debugsource (crlsa-2024_2569)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20242569 advisory. grafana-pcp: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 Tenable has extracted the preceding description block...

CentOS Linux 7 [TuxCare] Security Update: emacs / emacs-common / emacs-el / emacs-filesystem / emacs-nox / etc (CENTOS7:CLSA-2026:1787211247)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1787211247 advisory. - In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23. CVE-2024-30205 Note that...

AlmaLinux 9.2 [TuxCare] Security Update: golang / golang-bin / golang-docs / golang-misc / golang-race / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1747058667)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1747058667 advisory. - When following an HTTP redirect to a domain which is not a subdomain match or exact match of the initial domain, an http.Client do...

Rocky Linux 8.8 [CIQ] Security Update: oci-seccomp-bpf-hook / oci-seccomp-bpf-hook-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0800)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260800 advisory. This advisory aggregates security fixes for the oci-seccomp-bpf-hook SRPM in CIQ LTS 8.8. It addresses 39 CVEs: CVE-2020-10756, CVE-2021-3592,...

Rocky Linux 8.8 [CIQ] Security Update: fuse-overlayfs / fuse-overlayfs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0801)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260801 advisory. This advisory aggregates security fixes for the fuse-overlayfs SRPM in CIQ LTS 8.8. It addresses 39 CVEs: CVE-2020-10756, CVE-2021-3592, CVE-2021-3593,...

Rocky Linux 8.8 [CIQ] Security Update: udica Multiple Vulnerabilities (ciqsa-2026_0803)

The Rocky Linux 8.8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260803 advisory. This advisory aggregates security fixes for the udica SRPM in CIQ LTS 8.8. It addresses 39 CVEs: CVE-2020-10756, CVE-2021-3592, CVE-2021-3593,...

Rocky Linux 9 [CIQ] Security Update: buildah / buildah-debuginfo / buildah-debugsource / buildah-tests / etc Multiple Vulnerabilities (crlsa-2024_3827)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243827 advisory. golang: net/http: memory exhaustion in Request.ParseMultipartForm CVE-2023-45290 jose-go: improper handling of highly compressed data CVE-2024-28180 builda...