The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21244-1 advisory.

    This update for podman fixes the following issues

    - CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a     missing       encrypted key can lead to a denial of service (bsc#1262856).
    - CVE-2026-39827: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh     (bsc#1266125).
    - CVE-2026-39828: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh (bsc#1266125).
    - CVE-2026-39829: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh     (bsc#1266125).
    - CVE-2026-39830: Invoking client can cause server deadlock on unexpected responses in     golang.org/x/crypto/ssh       (bsc#1266125).
    - CVE-2026-39831: Invoking bypass of FIDO/U2F security keys physical interaction in     golang.org/x/crypto/ssh       (bsc#1266125).
    - CVE-2026-39832: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent       (bsc#1266125).
    - CVE-2026-39833: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent (bsc#1266125).
    - CVE-2026-39834: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh (bsc#1266125).
    - CVE-2026-39835: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh     (bsc#1266125).
    - CVE-2026-42508: Invoking auth bypass via unenforced @revoked status in     golang.org/x/crypto/ssh/knownhosts       (bsc#1266125).
    - CVE-2026-46595: Invoking VerifiedPublicKeyCallback permissions skip enforcement in     golang.org/x/crypto/ssh       (bsc#1266125).
    - CVE-2026-46597: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh     (bsc#1266125).
    - CVE-2026-46598: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent     (bsc#1266125).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02808-1 advisory.

    - CVE-2025-6032: Fixed machine init command failing to verify TLS certificate (bsc#1245320)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:10549 advisory.

    * podman: podman missing TLS verification (CVE-2025-6032)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-10551 advisory.

    - fixes 'CVE-2025-6032 container-tools:rhel8/podman: podman missing TLS verification [rhel-8.10.z]'

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9766 advisory.

  - podman: podman missing TLS verification (CVE-2025-6032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9766 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution     designed for on-premise or private cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container     Platform 4.16.43. See the following advisory for the container images for this release:

    https://access.redhat.com/errata/RHSA-2025:9765

    Security Fix(es):

    * podman: podman missing TLS verification (CVE-2025-6032)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References     section.

    All OpenShift Container Platform 4.16 users are advised to upgrade to these     updated packages and images when they are available in the appropriate release channel. To check for     available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are     available at     https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html-     single/updating_clusters/index#updating-cluster-cli.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10295 advisory.

  - podman: podman missing TLS verification (CVE-2025-6032)

  - net/http: Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
326019	openSUSE 16 Security Update : podman (openSUSE-SU-2026:21244-1)	Nessus	SuSE Local Security Checks	2026/7/9	2026/7/9	high
250305	SUSE SLES15 / openSUSE 15 Security Update : podman (SUSE-SU-2025:02808-1)	Nessus	SuSE Local Security Checks	2025/8/16	2025/8/16	high
269887	AlmaLinux 10 : podman (ALSA-2025:10549)	Nessus	Alma Linux Local Security Checks	2025/10/9	2025/10/9	high
241635	Oracle Linux 8 : container-tools:rhel8 (ELSA-2025-10551)	Nessus	Oracle Linux Local Security Checks	2025/7/9	2025/7/9	high
311525	RHCOS 4 : OpenShift Container Platform 4.16.43 (RHSA-2025:9766)	Nessus	Red Hat Local Security Checks	2026/5/2	2026/5/2	high
241182	RHEL 8 / 9 : OpenShift Container Platform 4.16.43 (RHSA-2025:9766)	Nessus	Red Hat Local Security Checks	2025/7/2	2025/7/2	high
311872	RHCOS 4 : OpenShift Container Platform 4.17.35 (RHSA-2025:10295)	Nessus	Red Hat Local Security Checks	2026/5/4	2026/5/4	critical

检测

插件搜索

high

high

high

high

high

high

critical