The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:1006-1 advisory.

    - CVE-2025-22868: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing     (bsc#1239197)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:0881-1 advisory.

    - CVE-2025-22868: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing     (bsc#1239197)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:0103-1 advisory.

    - update to 0.52.1:

      * Make resctrl optional/pluggable

    - update to 0.52.0:

      * bump containerd related deps: api v1.8.0; errdefs v1.0.0; ttrpc v1.2.6
      * chore: Update Prometheus libraries
      * bump runc to v1.2.4
      * Add Pressure Stall Information Metrics
      * Switch to opencontainers/cgroups repository (includes update         from golang 1.22 to 1.24)
      * Bump to newer opencontainers/image-spec @ v1.1.1

    - update to 0.49.2:

      * Cp fix test
      * Revert 'reduce_logs_for_kubelet_use_crio'

     - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in     golang.org/x/oauth2  (boo#1239291)

    - Update to version 0.49.1:

      * build docker - add --provenance=false flag
      * Remove s390x support
      * Disable libipmctl in build
      * Ugrade base image to 1.22 and alpine 3.18
      * fix type of C.malloc in cgo
      * Bump runc to v1.1.12
      * Bump to bullseye
      * Remove section about canary image
      * Add note about WebUI auth
      * Remove mentions of accelerator from the docs
      * reduce_logs_for_kubelet_use_crio
      * upgrade actions/checkout and actions/setup-go and actions/upload-artifact
      * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /cmd
      * add cadvisor and crio upstream changes
      * Avoid using container/podman in manager.go
      * container: skip checking for files in non-existent directories.
      * Adjust the log level of Initialize Plugins
      * add ignored device
      * fix: variable naming
      * build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 in /cmd
      * manager: require higher verbosity level for container info misses
      * Information should be logged on increased verbosity only
      * Running do mod tidy
      * Running go mod tidy
      * Running go mod tidy
      * container/libcontainer: Improve limits file parsing perf
      * container/libcontainer: Add limit parsing benchmark
      * build(deps): bump github.com/cyphar/filepath-securejoin in /cmd
      * build(deps): bump github.com/cyphar/filepath-securejoin
      * Set verbosity after flag definition
      * fix: error message typo
      * vendor: bump runc to 1.1.9
      * Switch to use busybox from registry.k8s.io
      * Bump golang ci lint to v1.54.1
      * Bump github.com/docker/docker in /cmd
      * Bump github.com/docker/docker
      * Bump github.com/docker/distribution in /cmd
      * Bump github.com/docker/distribution
      * Update genproto dependency to isolated submodule
      * remove the check for the existence of NFS files, which will cause unnecessary requests.
      * reduce inotify watch
      * fix performance degradation of NFS
      * fix: fix type issue
      * fix: fix cgo memory leak
      * ft: export memory kernel usage
      * sysinfo: Ignore 'hidden' sysfs device entries
      * Increasing required verbosity level
      * Patch to fix issue 2341
      * podman support: Enable Podman support.
      * podman support: Create Podman handler.
      * podman support: Changes in Docker handler.
      * unit test: machine_swap_bytes
      * Add documentation for machine_swap_bytes metric
      * Add a machine_swap_bytes metric
      * fix: add space trimming for label allowlist
      * Upgrade to blang/semver/v4 v4.0.0
      * docs(deploy/k8s): remote build for kustomize
      * Update dependencies
      * Change filepaths to detect online CPUs
      * Update actions/checkout to v3
      * Fix flags typo
      * Updating location of kubernetes/pause image
      * Using t.TempDir() in tests
      * Unit test: MachineInfo Clone() method
      * Bugfix: MachineInfo Clone() - clone SwapCapacity
      * Optimize network metrics collection
      * Removing calls to deprecates io/ioutil package
      * Updating minimum Go version to 1.19
      * Request the pid of another container if current pid is not longer valid
      * Restructure
      * Add CRI-O client timeout setting
      * Set containerd grpc.MaxCallRecvMsgSize to 16MB
      * Fix asset build
      * feat(logging): add verbosity to non-NUMA node warning
      * add nerdctl to ignoredDevices
      * nvm: Change the 'no NVM devices' log.
      * nvm: Fix typo.
      * Fix CVE-2022-27664 (#3248)
      * resctrl: Reduce size and mode files check (#3264)
      * readme: Update Creatone contributor info. (#3265)
      * Fix comment to refer to correct client
      * build: bump golang to 1.20
      * ci: Update golang ci-lint to v1.51.2
      * build: Update shebang to python3
      * Revert 'dockerfile: Fix typo in go build tags.'
      * Decreasing verbosity level for 'Cannot read vendor id correctly, set empty'
      * dockerfile: Fix typo in go build tags.
      * deps: Move from cloud.google.com/go/compute -> cloud.google.com/go
      * use memory.min for reservation memory instead of high
      * Mark GOPATH as git safe.directory to fix CI build
      * switch to gomodule/redigo from garyburd/redigo
      * update go.mod/sum both in root and cmd/
      * Drop accelerator metrics and nvidia integration
      * Add s390x support for docker image
      * typo in MachineInfo spec for SwapCapacity
      * add support for swap in machine/info

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of docker installed on the remote host is prior to 25.0.8-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2025-053 advisory.

    An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during     parsing. (CVE-2025-22868)

    SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from     clients which complete the key exchange slowly, or not at all, causing pending content to be read into     memory, but never transmitted. (CVE-2025-22869)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of azcopy / blobfuse2 / cert-manager / containerized-data-importer / coredns installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22868 advisory.

  - An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during     parsing. (CVE-2025-22868)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20279-1 advisory.

    Update to version 1.64.0.

    Security issues fixed:

    - CVE-2024-28180: improper handling of highly compressed data (bsc#1235204).
    - CVE-2024-45338: denial of service due to non-linear parsing of case-insensitive content (bsc#1235365).
    - CVE-2025-22868: unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239205).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:3593 advisory.

    Collector with the supported components for a Red Hat build of OpenTelemetry

    Security Fix(es):

    * golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect     (CVE-2024-45336)

    * go-jose: Go JOSE's Parsing Vulnerable to Denial of Service (CVE-2025-27144)

    * golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws     (CVE-2025-22868)

    * github.com/expr-lang/expr: Memory Exhaustion in Expr Parser with Unrestricted Input (CVE-2025-29786)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2581-1 advisory.

    - CVE-2026-39827: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39828: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39829: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39830: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39831: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39832: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39833: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39834: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39835: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-42508: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-46595: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-46597: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-46598: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2024-45337: Update golang.org/x/crypto/ssh dependency (bsc#1234563).
    - CVE-2026-39821: Update golang.org/x/net dependency (bsc#1266603).
    - CVE-2023-45288: Update golang.org/x/net/http2 dependency (bsc#1236533).
    - CVE-2025-22869: Update golang.org/x/crypto dependency (bsc#1239334).
    - CVE-2025-22869: Update golang.org/x/crypto dependency (bsc#1253889).
    - CVE-2026-33814: Update golang.org/x/net/http2 dependency (bsc#1265762).
    - CVE-2026-33186: Update google.golang.org/grpc dependency (bsc#1260264).
    - CVE-2026-34986: Fix crafted JWE input with a missing encrypted key can lead to a denial of service     (bsc#1262926).

    Bug fixes:

    - Update to version 20260402.00 (bsc#1257010).
    - Update to version 20250506.01 (bsc#1243254, bsc#1243505).
    - Install google_metadata_script_runner_adapt script (bsc#1245759).
    - Add -buildmode=pie to go build command line (bsc#1239944).
    - Re-enable binary stripping and debuginfo (bsc#1210938).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21210-1 advisory.

    This update for google-osconfig-agent fixes the following issues

    - CVE-2023-45288: golang.org/x/net/http2: close connections when receiving too many headers.
    - CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML     documents       (bsc#1251453).
    - CVE-2025-58190: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when     processing specially       crafted input (bsc#1251704).
    - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2     :path pseudo-       header (bsc#1260264).
    - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad     SETTINGS_MAX_FRAME_SIZE       (bsc#1265762).
    - CVE-2026-34986: github.com/go-jose/go-jose/v4: crafted JWE input with a missing encrypted key can lead     to a denial of       service (bsc#1262926).
    - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for     validation       bypass and privilege escalation (bsc#1266603).
    - CVE-2026-39827: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh     (bsc#1266171).
    - CVE-2026-39828: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh (bsc#1266171).
    - CVE-2026-39829: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh     (bsc#1266171).
    - CVE-2026-39830: Invoking client can cause server deadlock on unexpected responses in     golang.org/x/crypto/ssh       (bsc#1266171).
    - CVE-2026-39831: Invoking bypass of FIDO/U2F security keys physical interaction in     golang.org/x/crypto/ssh       (bsc#1266171).
    - CVE-2026-39832: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent       (bsc#1266171).
    - CVE-2026-39833: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent (bsc#1266171).
    - CVE-2026-39834: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh (bsc#1266171).
    - CVE-2026-39835: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh     (bsc#1266171).
    - CVE-2026-42508: Invoking auth bypass via unenforced @revoked status in     golang.org/x/crypto/ssh/knownhosts       (bsc#1266171).
    - CVE-2026-46595: Invoking VerifiedPublicKeyCallback permissions skip enforcement in     golang.org/x/crypto/ssh       (bsc#1266171).
    - CVE-2026-46597: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh     (bsc#1266171).
    - CVE-2026-46598: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent     (bsc#1266171).
    - CVE-2026-41506: github.com/go-git/go-git/v5: HTTP authentication credential leak when following     redirects during       smart-HTTP clone and fetch operations (bsc#1264923).

    Changes for google-osconfig-agent:

    - Update to version 20260615.01
     * Upgrade golang.org/x/crypto & golang.org/x/net (#1006)
    - from version 20260615.00
     * Add unit tests for ospatch_apt_upgrade.go (#938)
    - Update to version 20260611.00
     * Add unit tests for policies/policies.go PART 5 (#998)
    - from version 20260610.00
     * Add unit tests for policies/policies.go PART 4 (#997)
    - from version 20260609.02
     * squash commits (#936)
    - from version 20260609.01
     * Add unit tests for policies/policies.go PART 3 (#996)
    - from version 20260609.00
     * Add unit tests for policies/policies.go PART 2 (#991)
    - from version 20260602.01
     * Align format of dates and timestamp collected across Windows packages (#973)
    - from version 20260602.00
     * Add unit tests for config/config,go (#979)
    - from version 20260528.00
     * Bump github.com/containerd/containerd (#990)
    - from version 20260521.00
     * Cover agentconfig functionality by unit tests (#925)
    - from version 20260520.04
     * Add unit tests for policies/googet.go (#961)
     * Bump github.com/go-git/go-git/v5 (#987)
    - from version 20260520.02
     * Add unit tests for policies/yum.go (#952)
     * Add unit tests for policies/apt.go PART 3 (#951)
    - from version 20260520.00
     * Add unit tests for policies/zypper.go (#953)
    - from version 20260519.00
     * Add unit tests for policies/policies.go PART 1 (#949)
    - from version 20260513.01
     * Bump github.com/go-git/go-git/v5 (#981), this also updates      golang.org/x/net to v0.53.0 (bsc#1265762, CVE-2026-33814)
    - from version 20260513.00
     * upgrade a few packages (#980)
    - from version 20260512.02
     * Add/improve unit tests for agentendpoint/exec_task.go (#933)
    - from version 20260512.01
     * Cover google_update.go by unit tests (#941)
    - from version 20260512.00
     * Change zone for arm64 builds because of stockout (#978)
    - Update to version 20260511.00
     * switch to t2a-standard-2 on ARM package build (#977)
    - from version 20260505.03
     * Cover zypper_patch by unit tests (#958)
    - from version 20260505.02
     * Remove unused functions DisableAutoUpdates (#970)
    - from version 20260505.01
     * Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc (#966)
    - from version 20260505.00
     * Upgrade a few dependencies across the repo (#968)      + github.com/go-git/go-git/v5 5.16.2->5.18.0 (bsc#1264923, CVE-2026-41506)      + github.com/go-jose/go-jose/v4 4.1.3->4.1.4 (bsc#1262926, CVE-2026-34986)      + github.com/go-viper/mapstructure/v2 2.3.0->2.4.0      + go.opentelemetry.io/otel 1.40.0->1.41.0      + go.opentelemetry.io/otel/sdk 1.39.0->1.43.0
    - from version 20260504.01
     * bump github.com/docker/cli to 29.2.0 (#962)
    - from version 20260504.00
     * Bump github.com/opencontainers/selinux (#960)
    - Update to version 20260428.00
     * Add/improve unit tests for agentendpoint/agentendpoint.go (#930)
    - from version 20260427.03
     * Cover config/file.go by unit tests (#935)
    - from version 20260422.01
     * Cover patch_linux.go by unit tests (#932)
    - from version 20260422.00
     * upgrade grpc package in main package and e2e tests (#959)      (bsc#1260264, CVE-2026-33186)
    - from version 20260417.04
     * Bump OSV-Scalibr version to v0.4.3 (#956)
    - from version 20260417.03
     * Add unit tests for updates_linux.go (#937)
    - from version 20260417.02
     * Add zone to CreateDisk step (#955)
    - from version 20260417.01
     * Change disk type for deb11 (#954)
    - from version 20260417.00
     * Add unit tests for policies/apt.go PART 1 (#950)
    - from version 20260410.02
     * Add unit tests for packages/pty_linux.go (#943)
    - from version 20260410.01
     * fix disk type for arm workflows (#948)
    - from version 20260410.00
     * Change machine type for arm based workflows (#946)
    - Update to version 20260330.00
     * bump timeouts for all workflows (#940)
    - from version 20260326.00
     * Cover exec_resource.go by unit tests (#934)
    - from version 20260318.00
     * Integrate OSConfig agent with ReportVmInventory (#923)
    - from version 20260313.02
     * remove cacheonly flag from yum upgrade (#924)
    - from version 20260313.01
     * conditions python version override (#927)
    - from version 20260313.00
     * Fix presubmits by explicitly set python version for rpm based systems (#926)
    - from version 20260311.00
     * Bump osconfig version (#922)
    - from version 20260309.02
     * Extend OSV scalibr extractor (#921)
    - from version 20260309.01
     * upgrade golang.org/x/crypto and it's transitive deps (#918)
    - from version 20260309.00
     * Add purl to pkg info (#920)
    - from version 20260306.00
     * Add 'Type' field to PkgInfo (#919)
    - from version 20260303.01
     * Upgrade go.opentelemetry.io/otel/sdk (#913)
    - from version 20260303.00
     * Bump github.com/vbatts/tar-split from 0.11.5 to 0.12.2 (#908)
    - from version 20260302.00
     * Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.7 (#906)
    - from version 20260126.00
     * Bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.39.0 (#905)
     * Bump github.com/sirupsen/logrus (#894)
    - Update to version 20260119.00
     * Bump cloud.google.com/go/storage from 1.56.0 to 1.58.0 (#899)
    - Update to version 20251230.00
     * chore: Migrate gsutil usage to gcloud storage (#904)
    - from version 20251223.00
     * fix e2e tests for report inventory (#903)
    - from version 20251222.01
     * Revert Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882) (#902)
    - from version 20251222.00
     * Bump golang to the new version (#900)
    - from version 20251218.00
     * add new CODEOWNERS (#901)
    - from version 20251217.00
     * Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882)
    - Bump the golang compiler version to 1.24.5
    - Update to version 20251202.00
     * Revert Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887) (#893)
    - Update to version 20251201.00
     * Revert Bump github.com/containerd/containerd (#890) (#892)
    - Update to version 20251126.00
     * Bump github.com/containerd/containerd (#890)
     * Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887)
    - Update to version 20251028.00
     * Bump go.opentelemetry.io/otel/sdk/metric from 1.35.0 to 1.38.0 (#886)
     * Bump github.com/tidwall/pretty from 1.2.0 to 1.2.1 (#880)
    - from version 20251023.02
     * Create multiple_os.yaml (#883)
    - from version 20251023.00
     * Bump github.com/docker/go-connections from 0.4.0 to 0.6.0 (#877)
     * Add test runner for e2e tests (#876)
    - Update to version 20250925.00
     * Bump cloud.google.com/go/auth/oauth2adapt from 0.2.7 to 0.2.8 (#870)
     * Bump google.golang.org/protobuf from 1.36.6 to 1.36.9 (#874)
     * Bump go.opentelemetry.io/otel from 1.35.0 to 1.38.0 (#872)
     * Bump github.com/golang/glog from 1.2.4 to 1.2.5 (#830)
    - Update to version 20250902.01
     * Bump github.com/googleapis/enterprise-certificate-proxy (#829)
    - from version 20250902.00
     * update github.com/go-jose/go-jose/v4 (#869)
     * Upgrade scalibr and other deps (#866)
    - from version 20250901.00
     * Fix possibility of path traversal for zip and tar archival (#868)
    - from version 20250825.00
     * set CODEOWNERS file as required by org (#863)
    - from version 20250819.00
     * Fix/rhel10 build centos image (#860)
    - from version 20250814.00
     * Fix/rhel10 build image (#859)
    - from version 20250813.00
     * Fix: Add RHEL 10 support to RPM startup script (#858)
    - from version 20250811.00
     * Remove old/sles-15-sp4-sap as image is deprecated (#857)
    - Update to version 20250806.00
     * Fixed JSON identifier for the universe domain (#855)
    - from version 20250729.00
     * Bump github.com/google/s2a-go from 0.1.8 to 0.1.9 (#828)
    - from version 20250725.02
     * Update utils.go (#854)
     * Upgrade golang.org/x/oauth2 package to the latest. (#853)
     * Bump golang.org/x/time from 0.9.0 to 0.12.0 (#839)
    - from version 20250725.01
     * Bump golang.org/x/oauth2 (#848)
     * Port fix for debian 11 to goo package manager. (#852)
    - from version 20250725.00
     * Update Golang version in common.sh and skip backports      repo for debian 11 (#850)
    - from version 20250723.01
     * Add workflows to build package for el10 (#849)
    - from version 20250721.00
     * Make OS Config agent TPC aware (#846)
    - from version 20250718.00
     * Create workflows for new Debian 13. (#847)
    - Update to version 20250703.00
     * Fix sles images (#844)
    - from version 20250702.00
     * Remove rhel-sap 8-4 add rhel-sap 8-10 (#843)
    - from version 20250701.00
     * Bump the go_modules group across 1 directory with 2 updates (#840)
    - Update to version 20250606.00
     * Change base docker images Google's official base images. (#838)
    - Update to version 20250523.01
     * Add a simple no-op OS policy for user testing (#837)
    - from version 20250523.00
     * Introduce scalibr inventory extractor for dpkg/rpm/cos      os/filesystem extractors (linux) (#834)
     * Trace GetInstalledPackages memory levels (#835)
    - from version 20250520.00
    - Update to version 20250513.00
     * Fix rpm extractor, handle (none) value correctly. (#833)
    - from version 20250512.01
     * Bump github.com/envoyproxy/go-control-plane from 0.13.1 to 0.13.4 (#816)
    - from version 20250512.00
     * Bump golang.org/x/net from 0.39.0 to 0.40.0 (#819)
    - from version 20250508.01
     * cosmetic refactoring to osinfo package (#826)
    - from version 20250508.00
     * Refactor /inventory with dependency injection (#825)
     * Add debian, ubuntu (InstalledDebPackages) snapshots (#821)
     * cover packages_linux.go file with tests (#824)
     * Add debian (10,11,12) GetPackageUpdates output snapshots (#822)
    - from version 20250507.00
     * Add InstalledRPMPackages snapshot tests (#823)
    - from version 20250506.02
     * Yum tests: simplify initialization of exit errors (#820)
    - from version 20250506.01
     * Improve test coverage for gem package manager (#818)
    - from version 20250506.00
     * after go/x/crypto update 0.32.0 -> 0.37.0 (#817)
    - from version 20250505.01
     * Improve packages package coverage (#814)
     * Bump golang.org/x/net from 0.34.0 to 0.39.0 (#807)
    - from version 20250505.00
     * Bump golang.org/x/crypto from 0.32.0 to 0.37.0 (#806)
    - from version 20250430.00
     * Snapshot YumUpdates (GetPackageUpdates) output (#813)
    - from version 20250428.00
     * Snapshot ZypperPatches, ZypperUpdates (GetPackageUpdates) output      for sles 12, 15 testdata (#812)
    - from version 20250423.00
     * Introduce MatchSnapshot large test results matcher function, snapshot      apt-deb GetPackageUpdates (#811)
    - from version 20250416.02

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03540-1 advisory.

    - Include historical changelog data from before the docker-stable fork. The       initial changelog entry did technically provide all the necessary       information, but our CVE tracking tools do not understand how the package is       forked and so it seems that this package does not include fixes for ~12 years       of updates. So, include a copy of the original package's changelog up until       the fork point. (bsc#1250596)

    - Remove git-core recommends on SLE. Most SLE systems have       installRecommends=yes by default and thus end up installing git with Docker.
      bsc#1250508

      This feature is mostly intended for developers ('docker build git://') so       most users already have the dependency installed, and the error when git is       missing is fairly straightforward (so they can easily figure out what they       need to install).

    - Backport <https://github.com/moby/moby/pull/48517>. bsc#1247362

    - Update to docker-buildx v0.25.0. Upstream changelog:
      <https://github.com/docker/buildx/releases/tag/v0.25.0>

    - Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as       Docker does not have permission to access the host zypper credentials in this       mode (and unprivileged users cannot disable the feature using       /etc/docker/suse-secrets-enable.) bsc#1240150

    - Initial docker-stable fork, forked from Docker 24.0.7-ce release       (packaged on 2024-02-14). The original changelog is included below for       historical reference.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
233341	SUSE SLES15 / openSUSE 15 Security Update : google-osconfig-agent (SUSE-SU-2025:1006-1)	Nessus	SuSE Local Security Checks	2025/3/26	2025/3/26	high
232998	SUSE SLES12 Security Update : google-cloud-sap-agent (SUSE-SU-2025:0881-1)	Nessus	SuSE Local Security Checks	2025/3/20	2025/3/20	high
233307	openSUSE 15 Security Update : cadvisor (openSUSE-SU-2025:0103-1)	Nessus	SuSE Local Security Checks	2025/3/25	2025/3/25	high
234527	Amazon Linux 2 : docker (ALASNITRO-ENCLAVES-2025-053)	Nessus	Amazon Linux Local Security Checks	2025/4/17	2025/4/17	high
232491	CBL Mariner 2.0 Security Update: azcopy / blobfuse2 / cert-manager / containerized-data-importer / coredns (CVE-2025-22868)	Nessus	MarinerOS Local Security Checks	2025/3/10	2025/3/20	high
300773	openSUSE 16 Security Update : containerized-data-importer (openSUSE-SU-2026:20279-1)	Nessus	SuSE Local Security Checks	2026/3/5	2026/3/5	high
233934	RHEL 9 : opentelemetry-collector (RHSA-2025:3593)	Nessus	Red Hat Local Security Checks	2025/4/5	2025/6/5	high
277007	openSUSE 16 Security Update : trivy (openSUSE-SU-2025-20117-1)	Nessus	SuSE Local Security Checks	2025/12/2	2025/12/2	medium
323027	SUSE SLES12 Security Update : google-guest-agent (SUSE-SU-2026:2581-1)	Nessus	SuSE Local Security Checks	2026/6/26	2026/6/26	high
325024	openSUSE 16 Security Update : google-osconfig-agent (openSUSE-SU-2026:21210-1)	Nessus	SuSE Local Security Checks	2026/7/3	2026/7/9	high
270099	SUSE SLES12 Security Update : docker-stable (SUSE-SU-2025:03540-1)	Nessus	SuSE Local Security Checks	2025/10/11	2025/10/11	critical

检测

插件搜索

high

high

high

high

high

high

high

medium

high

high

critical