# Vulnerabilities found after Tenable Scan in Rocky Linux 9.2

**URL:** <https://forums.rockylinux.org/t/vulnerabilities-found-after-tenable-scan-in-rocky-linux-9-2/15160>\
**Category:** Rocky Linux Help & Support\
**Created:** [July 23, 2024, 12:38pm UTC](https://forums.rockylinux.org/t/vulnerabilities-found-after-tenable-scan-in-rocky-linux-9-2/15160 "2024-07-23T12:38:31Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![HairulMisni](https://avatars.discourse-cdn.com/v4/letter/h/a3d4f5/32.png) [@HairulMisni](https://forums.rockylinux.org/u/HairulMisni)\
**Post date:** [July 23, 2024, 12:38pm UTC](https://forums.rockylinux.org/t/vulnerabilities-found-after-tenable-scan-in-rocky-linux-9-2/15160/1 "2024-07-23T12:38:31Z")

</div>

Hi Support,

After i did a Tenable Scan on my rocky linux servers, there are findings of the following vulnerabilities.

Current Version: Rocky Linux 9.2 (Unable to upgrade to latest versiondue to company TA baseline)  
Current Environment: Air Gap ( No Internet Connection )

Tenable Report:

Rocky Linux 9: libxml2 (RSLA-2024-2679) -High - libxml2-2.9.13-3.e19\_1.x86\_64  
Rocky Linux 9: dbus (RSLA-2023-4569) - Medium - dbus-1.12.20-8.el9.x86\_64  
SSH Terrapin Prefix Truncation Weakness (CVE-2023-48795) - Medium openssh-8.7p1-29.e19\_2.x86\_64  
Rocky Linux 9: file (RSLA-2024-2512) - Medium - file-5.39-12.e19.x86\_64  
Rocky Linux 9: OpenSSH (CVE-2024-6358) - Medium openssh-8.7p1-29.e19\_2.x86\_64

I would appreciate if you can point to me the packages that i can download to update to address the vulnerabilities found.

---

<div class="post-metadata">

**Author:** ![jlehtone](https://avatars.discourse-cdn.com/v4/letter/j/e9a140/32.png) [@jlehtone](https://forums.rockylinux.org/u/jlehtone)\
**Post date:** [July 23, 2024, 1:23pm UTC](https://forums.rockylinux.org/t/vulnerabilities-found-after-tenable-scan-in-rocky-linux-9-2/15160/2 "2024-07-23T13:23:10Z")

</div>

The “updates” would be the _latest version_. Your “company TA” forbids that …

> [@HairulMisni](#):
>
> Current Environment: Air Gap

Should you get rid of people in your company, because they are the only ones that can access the machine and exploit the vulnerabilities?

Besides, you can look at – for example – the

```bash
rpm -q --changelog openssh

```

The changelog tends to list the cve that are fixed. Some scanners report false positives when Red Hat has already _backported_ fixes and scanner does not do real tests.

---

<div class="post-metadata">

**Author:** ![iwalker](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/iwalker/32/2599_2.png) [@iwalker](https://forums.rockylinux.org/u/iwalker)\
**Post date:** [July 25, 2024, 12:34pm UTC](https://forums.rockylinux.org/t/vulnerabilities-found-after-tenable-scan-in-rocky-linux-9-2/15160/3 "2024-07-25T12:34:01Z")

</div>

No release prior to the current one 9.4 is not supported. As @jlehtone says, upgrade your system. If your company won’t let you do that, then they are stupid. Updates are what fix CVE issues.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/rockylinux/original/1X/91b7219eec10e30013422e4df76c1d898711a5d5.svg) [@system](https://forums.rockylinux.org/u/system)\
**Post date:** [September 23, 2024, 12:34pm UTC](https://forums.rockylinux.org/t/vulnerabilities-found-after-tenable-scan-in-rocky-linux-9-2/15160/4 "2024-09-23T12:34:45Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.