The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:33722 advisory.

    * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)

    * github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted     JSON Web Encryption (JWE) object (CVE-2026-34986)

    * crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation     (CVE-2026-32281)

    * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages     (CVE-2026-32283)

    * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building     (CVE-2026-32280)

    Bug Fix(es) and Enhancement(s):

    * user_u SELinux user can't run podman containers as rootless (JIRA:Rocky Linux-135342)

    * podman does not clean up all files and leaves orphaned files consuming disk space [rhel-8.10.z]     (JIRA:Rocky Linux-173978)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RockyLinux 8 : container-tools:rhel8 (RLSA-2026:33722)

high Nessus Plugin ID 324041

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.2

Version 1.8 Jul 8, 2026, 6:25 PM Detection (updated detection logic) Plugin Feed: 202607081825
Version 1.7 Jul 8, 2026, 11:53 AM Detection (updated detection logic) Plugin Feed: 202607081153
Version 1.6 Jul 7, 2026, 4:32 PM Detection (updated detection logic) Plugin Feed: 202607071632
Version 1.5 Jul 7, 2026, 11:10 AM Detection (updated detection logic) Plugin Feed: 202607071110
Version 1.4 Jul 4, 2026, 4:43 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607041643
Version 1.2 Jul 2, 2026, 3:38 PM New Detection (updated detection logic) Plugin Feed: 202607021538