The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36199 advisory.

    - rebuild for CVE-2026-39822
    - bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830
    - Rebuild for CVE-2026-25679

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-33cccee12b advisory.

    Automatic update for docker-buildx-0.35.0-1.fc45.

    ##### **Changelog**

    ```
    * Thu Jun 18 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 0.35.0-1
    - Update to release v0.35.0
    - Resolves: rhbz#2487819
    - Resolves CVE-2026-39828: rhbz#2489918, rhbz#2490102
    - Upstream enhancements, new features, and fixes

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2467-1 advisory.

    This update for amazon-ssm-agent fixes the following issues

    Update to version 3.3.4624.0:

    - CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of     golang.org/x/crypto/ssh       (bsc#1239342).
    - CVE-2025-22870: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238702).
    - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected     message type in       response to a key listing or signing request (bsc#1253611).
    - CVE-2026-1229: the CombinedMult function in the ecc/p384 package produces an incorrect value for     specific inputs       (bsc#1265474).
    - CVE-2026-25934: github.com/go-git/go-git/v5: improper verification of data integrity values for .pack     and .idx files       can lead to the consumption of corrupted files (bsc#1258095).
    - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for     validation       bypass and privilege esca (bsc#1266781).
    - CVE-2026-41506: github.com/go-git/go-git/v5: HTTP authentication credential leak when following     redirects during       smart-HTTP clone and fetch operations (bsc#1264952).
    - CVE-2026-44740: github.com/go-git/go-billy/v5: improper input handling in many components can lead to     DoS via infinite       loops, panics or resource consumption (bsc#1267332).
    - CVE-2026-39827: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh     (bsc#1266200).
    - CVE-2026-39828: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh (bsc#1266200).
    - CVE-2026-39829: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh     (bsc#1266200).
    - CVE-2026-39830: Invoking client can cause server deadlock on unexpected responses in     golang.org/x/crypto/ssh       (bsc#1266200).
    - CVE-2026-39831: Invoking bypass of FIDO/U2F security keys physical interaction in     golang.org/x/crypto/ssh       (bsc#1266200).
    - CVE-2026-39832: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent       (bsc#1266200).
    - CVE-2026-39833: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent (bsc#1266200).
    - CVE-2026-39834: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh (bsc#1266200).
    - CVE-2026-39835: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh     (bsc#1266200).
    - CVE-2026-42508: Invoking auth bypass via unenforced @revoked status in     golang.org/x/crypto/ssh/knownhosts       (bsc#1266200).
    - CVE-2026-46595: Invoking VerifiedPublicKeyCallback permissions skip enforcement in     golang.org/x/crypto/ssh       (bsc#1266200).
    - CVE-2026-46597: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh     (bsc#1266200).
    - CVE-2026-46598: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent     (bsc#1266200).

    Changes:

     * Bump golang.org/x/crypto from v0.51.0 to v0.52.0
     * Bump golang.org/x/net from v0.54.0 to v0.55.0
     * Enforce directory boundary in BuildSafePath
     * Fix visibility issue with Bottlerocket OS in document output
     * Update go-git from v5.17.1 to v5.19.1 (bsc#1264952, CVE-2026-41506), this        also updates go-billy from v5.8.0 to v5.9.0 (bsc#1267332, CVE-2026-44740)
     * Bump golang.org/x/net from v0.48.0 to v0.53.0 (bsc#1266781, CVE-2026-39821)
     * Quit if sysprep failed and log its current state
     * Remove attached legacy cloudwatch plugin packages
     * Upgrade Go version to 1.25.10
     * Use BuildSafePath wherever it is applicable
     * Add OOM killer protection to systemd service files
     * Apply more sanitation to file and registry inventory gatherers
     * Bump go-git to v5.17.1
     * Deprecate legacy cloudwatch plugin
     * Preserve network error details in credential refresher SSM API failures
     * Upgrade Go version to 1.25.9
     * Add SSM Distributor support for Bottlerocket OS
     * Implement flush credentials command in ssm-cli
     * Log ec2messages access denied as debug instead of error to reduce log noise
     * Make credential refresher refresh cache quickly in case of credential flush
     * Make Greengrass component registration resilient with retry
     * Add EnforceWorkspaceRootOwnership configuration to support disable        hardening of agent workspace
     * Add reboot comment to Windows shutdown command for SSM Agent traceability
     * Update privilege access check to verify ownership and permissions        of document state files
     * Add read-only version check prior to install and uninstall        in case of occupied package manager locks
     * Add ANSI processing for CloudWatch and S3 log
     * Upgrade go-git to v5.17.0 and cloudflare/circl to v1.6.3        to fix CVE-2026-1229
    - Switch to systemd-tmpfiles to store runtime data (jsc#PED-14843)
     * Disable Go 1.25 container-aware GOMAXPROCS to prevent holding        cgroup file descriptors open
     * Upgrade Go version to 1.25.8
     * Document CommandWorkerBufferLimit config
     * Include package update in Dockerfile
     * Reduce CloudWatch event message length threshold
     * Upgrade Go version to 1.25.7
     * Update github.com/go-git/go-git/v5 to 5.16.5 (bsc#1258095, CVE-2026-25934)
     * Update greengrass version
     * Update Golang version to 1.24.12
     * Updating golang.org/x/crypto from v0.37.0 to v0.47.0, golang.org/x/net        from v0.39.0 to v0.48.0 and golang.org/x/sys from v0.32.0 to v0.40.0        (bsc#1253611, CVE-2025-47913)
     * Categorize integration tests by adding new tags to split fast and slow ones
     * Fix bug where IP field being empty string and causing UII API failure
     * Allow Patch execution to persist across reboots not registered to SSM Agent
     * Fix ENV_VAR interpolation to work correctly with parameter store value
     * Implement immediate retries for failed reply messages to MGS for RunCommand documents
     * Improve ssm-cli get-diagnostics command log output
     * Support DomainJoin endpoint for EU sovereign cloud
     * Support dualstack S3 endpoint for distributor packages
     * Upgrade Go version to 1.24.11
     * Add initial IPv6 support with UseDualStackEndpoint configuration option
     * Fix CPU utilization issue for instances with thousands of network interfaces
     * Add IMDS retry count to account for EC2 droplet refresh
     * Fix duplicate uid error logging in MDS module
     * Update aws:Domainjoin plugin logging from Log4Net to NLog
     * Upgrade Go version to 1.24.7
     * Update github.com/go-git/go-git/v5 to 5.15.0
     * Update golang.org/x/crypto to v0.37.0 (bsc#1238702, CVE-2025-22870)
     * Update golang.org/x/net to v0.39.0
     * Update golang.org/x/sys to v0.32.0
     * Add EU sovereign cloud S3 endpoint for DownloadContent plugin
     * Add configurable credential rotation max backoff interval
     * Migrate from twinj/uuid to google/uuid library
     * Allow newer agent versions to be installed when deploying on Greengrass
     * Harden function to remove non-admin run command documents in execution path
     * Fix macOS credential refresher test issue due to missing Debugf from serialport skip file
     * Enhance testability of custom certificate usage in debug SSM Agent builds
     * Decouple serial port from startup and add credential refresher serialport logging
     * Add GlobalEnhancedTelemetryEnabled config to README
     * Add cloudwatch logs endpoint configuration to optional config for agent
     * Update Greengrass component version
     * Add file privilege check before processing document state file
     * Storing AWS document interpolation ENV_VAR types as environment variables
     * Throw explicit error when running local cli as non-priviledged user
     * Harden telemetry dynamic config folder permissions
     * Add configuration option for HandshakeTimeout
     * Improve unit tests
     * Add setup for emitting telemetry logs and metrics
     * Add initial selection of error logs to emit to telemetry
     * Simplify checkstyle and import organization in build scripts
     * Update golang.org/x/net from v0.37.0 to v0.38.0
     * Agent hibernation reason is logged to EC2 system logs
     * Add metrics for the EC2Detector and IMDS EC2 status findings
     * Change Linux DomainJoin plugin parameter KeepHostName to accept        both boolean and string
     * Upgrade GoLang to version 1.23.8
     * Update golang.org/x/crypto from v0.32.0 to v0.36.0 (bsc#1239342, CVE-2025-22869)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:29455 advisory.

    The buildah package provides a tool for facilitating building OCI container images. Among other things,     buildah enables you to: Create a working container, either from scratch or using an image as a starting     point; Create an image, either from a working container or using the instructions in a Dockerfile; Build     both Docker and OCI images.

    Security Fix(es):

    * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)

    * crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation     (CVE-2026-32281)

    * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages     (CVE-2026-32283)

    * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building     (CVE-2026-32280)

    * golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with     excessive parameters (CVE-2026-39829)

    * golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited     SSH responses (CVE-2026-39830)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21069-1 advisory.

    This update for google-guest-agent fixes the following issues

    - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2     :path pseudo-       header (bsc#1260264).
    - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for     validation       bypass and privilege escalation (bsc#1266603).
    - CVE-2026-39827: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh     (bsc#1266171).
    - CVE-2026-39828: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh (bsc#1266171).
    - CVE-2026-39829: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh     (bsc#1266171).
    - CVE-2026-39830: Invoking client can cause server deadlock on unexpected responses in     golang.org/x/crypto/ssh       (bsc#1266171).
    - CVE-2026-39831: Invoking bypass of FIDO/U2F security keys physical interaction in     golang.org/x/crypto/ssh       (bsc#1266171).
    - CVE-2026-39832: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent       (bsc#1266171).
    - CVE-2026-39833: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent (bsc#1266171).
    - CVE-2026-39834: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh (bsc#1266171).
    - CVE-2026-39835: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh     (bsc#1266171).
    - CVE-2026-42508: Invoking auth bypass via unenforced @revoked status in     golang.org/x/crypto/ssh/knownhosts       (bsc#1266171).
    - CVE-2026-46595: Invoking VerifiedPublicKeyCallback permissions skip enforcement in     golang.org/x/crypto/ssh       (bsc#1266171).
    - CVE-2026-46597: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh     (bsc#1266171).
    - CVE-2026-46598: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent     (bsc#1266171).

    Changes for google-guest-agent:

    - Update to version 20260529.00
     * Dependency updates (#616)
    - from version 20260522.00
     * Fix improper umask calculation on socket creation (#614)
    - from version 20260520.01
     * Update OWNERS (#609)
     * Bump google.golang.org/grpc from 1.75.0 to 1.79.3 (#602) (bsc#1260264, CVE-2026-33186)
    - Update to version 20250506.01 (bsc#1243254, bsc#1243505)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-126 advisory.

    The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key     with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during     signature verification. This could be triggered by unauthenticated clients during public key     authentication. RSA moduli are now limited to 8192 bits, and DSA parameters are validated per FIPS 186-2.
    (CVE-2026-39829)

    A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking     the connection's read loop. The blocked goroutine could not be released by calling Close(), resulting in a     resource leak per connection. Unsolicited global responses are now discarded. (CVE-2026-39830)

    The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-     ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch     were accepted, allowing unattended use of a hardware security key. To restore the previous behavior,     return a no-touch-required extension in Permissions.Extensions from PublicKeyCallback. (CVE-2026-39831)

    The in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint     but never enforced it. The key would sign without any confirmation prompt, with no indication to the     caller that the constraint was not in effect. NewKeyring() now returns an error when unsupported     constraints are requested. (CVE-2026-39833)

    Docker: Race condition in docker cp allows bind mount redirection to host path (CVE-2026-42306)

    Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both     the 'key' and 'key.SignatureKey' are checked for @revoked. (CVE-2026-42508)

    Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any     other type of callback is passed other than public key, then the source-address validation would be     skipped. (CVE-2026-46595)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of nerdctl installed on the remote host is prior to 2.2.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3334 advisory.

    Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service.
    (CVE-2026-25680)

    Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can     be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
    (CVE-2026-25681)

    Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can     be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
    (CVE-2026-27136)

    The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-     only label. For example, ToUnicode(xn--example-.com) incorrectly returns the name example.com rather     than an error. This behavior can lead to privilege escalation in programs using the idna package. For     example, a program which performs privilege checks on the ASCII hostname may reject example.com but     permit xn--example-.com. If that program subsequently converts the ASCII hostname to Unicode, it will     inadvertently permits access to the Unicode name example.com. (CVE-2026-39821)

    An authenticated SSH client that repeatedly opened channels which were rejected by the server caused     unbounded memory growth, eventually crashing the server process and affecting all connected users.
    Rejected channels are now properly removed from the connection's internal state and released for garbage     collection. (CVE-2026-39827)

    When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those     permissions were silently discarded, potentially dropping certificate restrictions such as force-command     after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a     connection error. (CVE-2026-39828)

    The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key     with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during     signature verification. This could be triggered by unauthenticated clients during public key     authentication. RSA moduli are now limited to 8192 bits, and DSA parameters are validated per FIPS 186-2.
    (CVE-2026-39829)

    A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking     the connection's read loop. The blocked goroutine could not be released by calling Close(), resulting in a     resource leak per connection. Unsolicited global responses are now discarded. (CVE-2026-39830)

    The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-     ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch     were accepted, allowing unattended use of a hardware security key. To restore the previous behavior,     return a no-touch-required extension in Permissions.Extensions from PublicKeyCallback. (CVE-2026-39831)

    When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com     were not serialized in the request. Destination restrictions were silently stripped when forwarding keys,     allowing unrestricted use of the key on the remote host. The client now serializes all constraint     extensions. Additionally, the in-memory keyring returned by NewKeyring() now rejects keys with unsupported     constraint extensions instead of silently ignoring them. (CVE-2026-39832)

    The in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint     but never enforced it. The key would sign without any confirmation prompt, with no indication to the     caller that the constraint was not in effect. NewKeyring() now returns an error when unsupported     constraints are requested. (CVE-2026-39833)

    When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the     internal payload size calculation caused the write loop to spin indefinitely, sending empty packets     without making progress. The size comparison now uses int64 to prevent truncation. (CVE-2026-39834)

    SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or     IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an     error instead of panicking when these callbacks are nil. (CVE-2026-39835)

    Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can     be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
    (CVE-2026-42502)

    Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can     be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
    (CVE-2026-42506)

    Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both     the 'key' and 'key.SignatureKey' are checked for @revoked. (CVE-2026-42508)

    Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any     other type of callback is passed other than public key, then the source-address validation would be     skipped. (CVE-2026-46595)

    An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder     for well-crafted inputs. (CVE-2026-46597)

    For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to     a panic when used. (CVE-2026-46598)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-29455 advisory.

    - Rebuild for CVE-2026-25679

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2581-1 advisory.

    - CVE-2026-39827: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39828: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39829: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39830: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39831: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39832: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39833: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39834: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39835: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-42508: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-46595: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-46597: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-46598: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2024-45337: Update golang.org/x/crypto/ssh dependency (bsc#1234563).
    - CVE-2026-39821: Update golang.org/x/net dependency (bsc#1266603).
    - CVE-2023-45288: Update golang.org/x/net/http2 dependency (bsc#1236533).
    - CVE-2025-22869: Update golang.org/x/crypto dependency (bsc#1239334).
    - CVE-2025-22869: Update golang.org/x/crypto dependency (bsc#1253889).
    - CVE-2026-33814: Update golang.org/x/net/http2 dependency (bsc#1265762).
    - CVE-2026-33186: Update google.golang.org/grpc dependency (bsc#1260264).
    - CVE-2026-34986: Fix crafted JWE input with a missing encrypted key can lead to a denial of service     (bsc#1262926).

    Bug fixes:

    - Update to version 20260402.00 (bsc#1257010).
    - Update to version 20250506.01 (bsc#1243254, bsc#1243505).
    - Install google_metadata_script_runner_adapt script (bsc#1245759).
    - Add -buildmode=pie to go build command line (bsc#1239944).
    - Re-enable binary stripping and debuginfo (bsc#1210938).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-105f7df940 advisory.

    - Update to release v0.35.0
    - Resolves: rhbz#2487819
    - Resolves CVE-2026-39828: rhbz#2489918, rhbz#2490102
    - Upstream enhancements, new features, and fixes

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1e00728616 advisory.

    - Update to release v0.31.0
    - Resolve CVE-2026-39829: rhbz#2489939, rhbz#2490056
    - Upstream new features and fixes

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:36796 advisory.

    Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused     management of edge devices and applications. It supports image-mode RHEL and     container workloads that run on Podman/Docker or Kubernetes.

    RHEM is now available as a standalone feature, providing greater flexibility for     edge deployments. In addition to the standalone version, RHEM continues to be     offered as a plugin for the following platforms:

    Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge     devices.
    Red Hat Ansible Automation Platform (AAP): Integrates edge management with     Ansible automation.

    This integration enables organizations to optimize the management and     orchestration of their fleets of edge devices; whether its thousands of     dispersed retail point-of-sale systems or industrial machinery on remote factory     floors.

    Value for customers and partners:

    * This solution not only helps customers manage thousands of devices but helps     scale operations.
    * To manage large-scale deployments, customers need to be able to integrate with     their existing management systems, support remote configuration and over-the-air     updates, and collect telemetry data for advanced analytics.
    * Red Hat Edge Manager offers a simple and security-focused lifecycle     management, from onboarding to decommissioning of edge devices.

    This complete end-to-end solution empowers organizations to gain the most value     from the fleets of devices that generate data, all from a centralized location.

    Security fixes:

    * golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)
    * golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses     (CVE-2026-39830)
    * golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters     (CVE-2026-39829)
    * golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828)
    * golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)
    * golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions     (CVE-2026-39832)
    * golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)
    * golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
    * Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
    * Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)
    * Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application     (CVE-2026-33810)
    * Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
    * Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)
    * Go crypto/x509: Incorrect enforcement of email constraints (CVE-2026-27137)
    * Go net/url: Incorrect parsing of IPv6 host literals (CVE-2026-25679)
    * golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
    * github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33815)
    * github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33816)
    * gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)
    * Prometheus: Information disclosure of Azure OAuth client secret via config API (CVE-2026-42151)
    * Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint     (CVE-2026-42154)
    * Root.Chmod can follow symlinks out of the root (CVE-2026-32282)
    * Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code (CVE-2026-35469)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
329344	Oracle Linux 10 : buildah (ELSA-2026-36199)	Nessus	Oracle Linux Local Security Checks	7/24/2026	7/24/2026	high
321733	Fedora 45 : docker-buildx (2026-33cccee12b)	Nessus	Fedora Local Security Checks	6/20/2026	7/3/2026	high
321917	SUSE SLES15 Security Update : amazon-ssm-agent (SUSE-SU-2026:2467-1)	Nessus	SuSE Local Security Checks	6/22/2026	6/22/2026	medium
322553	RHEL 9 : buildah (RHSA-2026:29455)	Nessus	Red Hat Local Security Checks	6/24/2026	6/24/2026	high
324053	openSUSE 16 Security Update : google-guest-agent (openSUSE-SU-2026:21069-1)	Nessus	SuSE Local Security Checks	7/1/2026	7/1/2026	critical
319764	Amazon Linux 2 : docker, --advisory ALAS2DOCKER-2026-126 (ALASDOCKER-2026-126)	Nessus	Amazon Linux Local Security Checks	6/8/2026	6/17/2026	high
319783	Amazon Linux 2 : nerdctl, --advisory ALAS2-2026-3334 (ALAS-2026-3334)	Nessus	Amazon Linux Local Security Checks	6/8/2026	8/26/2026	critical
322885	Oracle Linux 9 : buildah (ELSA-2026-29455)	Nessus	Oracle Linux Local Security Checks	6/26/2026	6/26/2026	high
323027	SUSE SLES12 Security Update : google-guest-agent (SUSE-SU-2026:2581-1)	Nessus	SuSE Local Security Checks	6/26/2026	6/26/2026	high
323133	Fedora 44 : docker-buildx (2026-105f7df940)	Nessus	Fedora Local Security Checks	6/26/2026	7/1/2026	high
323141	Fedora 44 : docker-buildkit (2026-1e00728616)	Nessus	Fedora Local Security Checks	6/26/2026	7/1/2026	high
325733	RHEL 9 : Red Hat Edge Manager Version 1.0.3 Security Update (Important) (RHSA-2026:36796)	Nessus	Red Hat Local Security Checks	7/9/2026	8/4/2026	high

Detections

Analytics

Plugins Search

high

high

medium

high

critical

high

critical

high

high

high

high

high