Summary

Tenable is introducing vulnerability detection plugins for Linux distributions covered by CIQ's extended lifecycle support programs. Customers using CIQ's extended support, CIQ Bridge for CentOS 7, Rocky Linux Long-Term Support, and RLC Pro, will now receive accurate vulnerability findings that account for patches delivered by these third-party vendors.

Change

Before this update, Tenable had no dedicated vulnerability detection for third-party support advisories published by CIQ. Hosts running distributions covered by this extended support program were not recognized as having access to third-party patches, which could result in inaccurate or missing findings for vulnerabilities that CIQ had already addressed.

After this update, Tenable will publish plugins sourced directly from CIQ advisory feeds. These plugins detect vulnerabilities for which third-party patches are available from CIQ. Additionally, existing unpatched vulnerability plugins will be updated to check for third-party patch availability, preventing false positive unpatched findings on hosts with an active CIQ subscription.

Note: Findings resolved by these plugins require an active paid subscription to CIQ extended lifecycle support service.

Impact

Customers running CIQ-supported distributions will receive dedicated vulnerability coverage for those environments. Customers who have already applied available third-party patches may see previously reported unpatched findings correctly resolved. Customers who have not yet applied available patches will see new findings corresponding to vulnerabilities addressed in CIQ advisories.

Target Release Date

September 28, 2026