The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21213-1 advisory.

    This update for containerd fixes the following issues

    Update to 1.7.33:

    - CVE-2024-25621: overly broad default permission vulnerability (bsc#1253126).
    - CVE-2025-64329: goroutine leaks can lead to memory exhaustion on the host (bsc#1253132).
    - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2     :path pseudo-       header (bsc#1260296).
    - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad     SETTINGS_MAX_FRAME_SIZE       (bsc#1265794).
    - CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a     missing       encrypted key can lead to a denial of service (bsc#1262948).
    - CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial     of service       (bsc#1262266).
    - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for     validation       bypass and privilege escalation (bsc#1266640).
    - CVE-2026-46680: containerd user ID handling bypass allows runAsNonRoot evasion (bsc#1268355).
    - CVE-2026-47262: Denial of Service (DoS) condition via a maliciously crafted image (bsc#1268441).
    - CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation     (bsc#1268430).

    Changes for containerd:

     * https://github.com/containerd/containerd/releases/tag/v1.7.33
     * https://github.com/containerd/containerd/releases/tag/v1.7.32
     * https://github.com/containerd/containerd/releases/tag/v1.7.31
     * https://github.com/containerd/containerd/releases/tag/v1.7.30
     * https://github.com/containerd/containerd/releases/tag/v1.7.29
     * https://github.com/containerd/containerd/releases/tag/v1.7.28

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:41019 advisory.

    Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused     management of edge devices and applications. It supports image-mode RHEL and     container workloads that run on Podman/Docker or Kubernetes.

    RHEM is now available as a standalone feature, providing greater flexibility for     edge deployments. In addition to the standalone version, RHEM continues to be     offered as a plugin for the following platforms:

    Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge     devices.
    Red Hat Ansible Automation Platform (AAP): Integrates edge management with     Ansible automation.

    This integration enables organizations to optimize the management and     orchestration of their fleets of edge devices; whether its thousands of     dispersed retail point-of-sale systems or industrial machinery on remote factory     floors.

    Value for customers and partners:

    * This solution not only helps customers manage thousands of devices but helps     scale operations.
    * To manage large-scale deployments, customers need to be able to integrate with     their existing management systems, support remote configuration and over-the-air     updates, and collect telemetry data for advanced analytics.
    * Red Hat Edge Manager offers a simple and security-focused lifecycle     management, from onboarding to decommissioning of edge devices.

    This complete end-to-end solution empowers organizations to gain the most value     from the fleets of devices that generate data, all from a centralized location.

    Security fixes:

    * golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)
    * golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses     (CVE-2026-39830)
    * golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters     (CVE-2026-39829)
    * golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828)
    * golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)
    * golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions     (CVE-2026-39832)
    * golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)
    * golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
    * Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
    * Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)
    * Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
    * Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)
    * Go crypto/x509: Incorrect enforcement of email constraints (CVE-2026-27137)
    * Go net/url: Incorrect parsing of IPv6 host literals (CVE-2026-25679)
    * golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
    * github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33816)
    * github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33815)
    * gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)
    * Prometheus: Information disclosure of Azure OAuth client secret via config API (CVE-2026-42151)
    * Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint     (CVE-2026-42154)
    * Root.Chmod can follow symlinks out of the root (CVE-2026-32282)
    * Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code (CVE-2026-35469)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dc2cbc1bc8 advisory.

    Automatic update for containerd-2.3.2-1.fc45.

    ##### **Changelog**

    ```
    * Fri Jun 26 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 2.3.2-1
    - Update to release v2.3.2
    - Resolves: rhbz#2464270
    - Resolves CVE-2026-34986: rhbz#2455637, rhbz#2455646
    - Resolves CVE-2026-35469: rhbz#2467593
    - Resolves CVE-2026-50195
    - Resolves CVE-2026-53488
    - Resolves CVE-2026-53492
    - Resolves CVE-2026-53489
    - Resolves CVE-2026-47262
    - Upstream fixes
    * Thu May 21 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 2.3.1-1
    - Update to release v2.3.1
    - Resolves: rhbz#2464270
    - Upstream feature enhancements and fixes
    - Resolves CVE-2026-34986: rhbz#2455637, rhbz#2455646
    - Resolves CVE-2026-35469: rhbz#2467593
    * Thu May 21 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 2.3.0-2
    - Build shim as static-pie
    - Build shim as static using static-pie to retain pie benefits and static       build. See https://github.com/containerd/containerd/discussions/13340#dis       cussioncomment-16883392 for additional information.
    * Fri May  1 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 2.3.0-1
    - Update to release v2.3.0
    - Refreshed spec file using go2rpm
    - Build now using gobuild macro for most binaries.
    - 'go build' is used for containerd-shim-runc-v2 to emulate makefile static       build

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f8b0e6c297 advisory.

    Automatic update for kubernetes1.35-1.35.6-1.fc45.

    ##### **Changelog**

    ```
    * Fri Jun 12 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.6-1
    - Update to release v1.35.6
    - Resolves: rhbz#2467606
    - Upstream fixes

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0544eff1d8 advisory.

    - Update to release v1.35.6
    - Resolves: rhbz#2467606
    - Upstream fixes

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-88ab77d111 advisory.

    - Update to release v1.34.9
    - Resolves: rhbz#2467605
    - Upstream fixes

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c2a89ccca5 advisory.

    - Update to release 1.33.13
    - Resolves: rhbz#2467604
    - Upstream fix

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2783-1 advisory.

    - CVE-2026-9804: Symlink escape in the VMExport dir       handler let an attacker controlling an exported PVC read sensitive       files (TLS keys, tokens, service-account creds) from the exporter       pod. (bsc#1266733)
    - CVE-2025-14525: A VM reporting many guest-internal       interfaces via the guest agent could flood VMI status and fill etcd       (denial of service). Caps reported interfaces at 10. (bsc#1256434)
    - CVE-2026-35469: resource-exhaustion       in the SPDY/3 protocol implementation of       github.com/moby/spdystream. (GHSA-pc3f-x583-g7j2,bsc#1262265)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2340-1 advisory.

    This update for kubernetes1.23 fixes the following issues

    - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad     SETTINGS_MAX_FRAME_SIZE       (bsc#1265740).
    - CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial     of service       (bsc#1262271).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2343-1 advisory.

    This update for kubernetes1.24 fixes the following issues

    - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad     SETTINGS_MAX_FRAME_SIZE       (bsc#1265740).
    - CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial     of service       (bsc#1262271).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2322-1 advisory.

    This update for kubernetes1.24 fixes the following issues

    - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad     SETTINGS_MAX_FRAME_SIZE       (bsc#1265740).
    - CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial     of service       (bsc#1262271).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3203-1 advisory.

    - Security: re-vendor the bundled Go dependencies (no upstream source       changes; tarball rebuilt from v1.7.4 with updated go.mod/vendor):
      * golang.org/x/net v0.48.0 -> v0.55.0: CVE-2026-33814 (bsc#1265736),         CVE-2026-39821 (bsc#1266575), CVE-2026-25680, CVE-2026-25681,         CVE-2026-27136, CVE-2026-42502, CVE-2026-42506 (bsc#1267120)
      * golang.org/x/crypto v0.46.0 -> v0.52.0: CVE-2026-39827,         CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831,         CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835,         CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598         (bsc#1266151)
      * github.com/moby/spdystream v0.5.0 -> v0.5.1 folded into the vendor         tree;
    - Build with Go >= 1.25 (required by golang.org/x/net 0.55).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-18d1f457ba advisory.

    Automatic update for kubernetes1.34-1.34.9-1.fc45.

    ##### **Changelog**

    ```
    * Fri Jun 12 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.9-1
    - Update to release v1.34.9
    - Resolves: rhbz#2467605
    - Upstream fixes

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2342-1 advisory.

    This update for kubernetes fixes the following issues

    - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad     SETTINGS_MAX_FRAME_SIZE       (bsc#1265748).
    - CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial     of service       (bsc#1262270).

    Changes for kubernetes:

    - Update to version 1.35.4:

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:36796 advisory.

    Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused     management of edge devices and applications. It supports image-mode RHEL and     container workloads that run on Podman/Docker or Kubernetes.

    RHEM is now available as a standalone feature, providing greater flexibility for     edge deployments. In addition to the standalone version, RHEM continues to be     offered as a plugin for the following platforms:

    Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge     devices.
    Red Hat Ansible Automation Platform (AAP): Integrates edge management with     Ansible automation.

    This integration enables organizations to optimize the management and     orchestration of their fleets of edge devices; whether its thousands of     dispersed retail point-of-sale systems or industrial machinery on remote factory     floors.

    Value for customers and partners:

    * This solution not only helps customers manage thousands of devices but helps     scale operations.
    * To manage large-scale deployments, customers need to be able to integrate with     their existing management systems, support remote configuration and over-the-air     updates, and collect telemetry data for advanced analytics.
    * Red Hat Edge Manager offers a simple and security-focused lifecycle     management, from onboarding to decommissioning of edge devices.

    This complete end-to-end solution empowers organizations to gain the most value     from the fleets of devices that generate data, all from a centralized location.

    Security fixes:

    * golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)
    * golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses     (CVE-2026-39830)
    * golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters     (CVE-2026-39829)
    * golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828)
    * golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)
    * golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions     (CVE-2026-39832)
    * golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)
    * golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
    * Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
    * Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)
    * Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application     (CVE-2026-33810)
    * Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
    * Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)
    * Go crypto/x509: Incorrect enforcement of email constraints (CVE-2026-27137)
    * Go net/url: Incorrect parsing of IPv6 host literals (CVE-2026-25679)
    * golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
    * github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33815)
    * github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33816)
    * gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)
    * Prometheus: Information disclosure of Azure OAuth client secret via config API (CVE-2026-42151)
    * Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint     (CVE-2026-42154)
    * Root.Chmod can follow symlinks out of the root (CVE-2026-32282)
    * Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code (CVE-2026-35469)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
325038	openSUSE 16 Security Update : containerd (openSUSE-SU-2026:21213-1)	Nessus	SuSE Local Security Checks	2026/7/3	2026/7/3	critical
327424	RHEL 10 / 9 : Red Hat Edge Manager Version 1.1.3 Security Update (Important) (RHSA-2026:41019)	Nessus	Red Hat Local Security Checks	2026/7/16	2026/7/16	high
323660	Fedora 45 : containerd (2026-dc2cbc1bc8)	Nessus	Fedora Local Security Checks	2026/6/29	2026/7/7	critical
320884	Fedora 45 : kubernetes1.35 (2026-f8b0e6c297)	Nessus	Fedora Local Security Checks	2026/6/12	2026/6/12	high
321845	Fedora 43 : kubernetes1.35 (2026-0544eff1d8)	Nessus	Fedora Local Security Checks	2026/6/21	2026/6/21	high
321855	Fedora 43 : kubernetes1.34 (2026-88ab77d111)	Nessus	Fedora Local Security Checks	2026/6/21	2026/6/21	high
321862	Fedora 43 : kubernetes1.33 (2026-c2a89ccca5)	Nessus	Fedora Local Security Checks	2026/6/21	2026/6/21	high
325999	SUSE SLES15 Security Update : kubevirt-1.6 (SUSE-SU-2026:2783-1)	Nessus	SuSE Local Security Checks	2026/7/9	2026/7/9	high
321052	SUSE SLES15 Security Update : kubernetes1.23 (SUSE-SU-2026:2340-1)	Nessus	SuSE Local Security Checks	2026/6/14	2026/6/14	high
321063	SUSE SLES15 Security Update : kubernetes1.24 (SUSE-SU-2026:2343-1)	Nessus	SuSE Local Security Checks	2026/6/14	2026/6/14	high
321067	SUSE SLES15 Security Update : kubernetes1.24 (SUSE-SU-2026:2322-1)	Nessus	SuSE Local Security Checks	2026/6/14	2026/6/14	high
329285	SUSE SLES15 Security Update : kubevirt (SUSE-SU-2026:3203-1)	Nessus	SuSE Local Security Checks	2026/7/24	2026/7/24	high
320885	Fedora 45 : kubernetes1.34 (2026-18d1f457ba)	Nessus	Fedora Local Security Checks	2026/6/12	2026/6/12	high
321046	SUSE SLES15 Security Update : kubernetes (SUSE-SU-2026:2342-1)	Nessus	SuSE Local Security Checks	2026/6/14	2026/6/14	high
325733	RHEL 9 : Red Hat Edge Manager Version 1.0.3 Security Update (Important) (RHSA-2026:36796)	Nessus	Red Hat Local Security Checks	2026/7/9	2026/7/9	high

检测

插件搜索

critical

high

critical

high

high

high

high

high

high

high

high

high

high

high

high