The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7ea30e843c advisory.

    New prerelease version


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3d13d52f58 advisory.

    Update to python-3.11.15, backport fixes for CVE-2026-4519, CVE-2026-3644, CVE-2026-4224, CVE-2026-2297

    ----

    Update to python-3.11.15.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-30fbc5a8b2 advisory.

    Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644,     CVE-2026-4224

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a5ba8297fd advisory.

    Automatic update for python3.11-3.11.15-4.fc45.

    ##### **Changelog**

    ```
    * Fri Apr 17 2026 Charalampos Stratakis <cstratak@redhat.com> - 3.11.15-4
    - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE 2026-3644,     CVE-2026-4224     Resolves: rhbz#2457941, rhbz#2458221, rhbz#2458013, rhbz#2444704, rhbz#2448188, rhbz#2448204
    * Sat Apr 11 2026 Miro Hronok <mhroncok@redhat.com> - 3.11.15-3
    - Explicitly build with OpenSSL 3

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-bb0e94c26c advisory.

    Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644,     CVE-2026-4224

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1292-1 advisory.

    - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead     to       misinterpretation of tar archives (bsc#1259611).
    - CVE-2026-3479: improper resource argument validation in `pkgutil.get_data()` can lead to path traversal     (bsc#1259989).
    - CVE-2026-3644: incomplete control character validation in http.cookies can lead to input validation     bypass       (bsc#1259734).
    - CVE-2026-4224: parsing XML with deeply nested DTD content models can lead to C stack overflow     (bsc#1259735).
    - CVE-2026-4519: failure to sanitize leading dashes in URLs in the `webbrowser.open()` API can lead to web     browser       command line option injection (bsc#1260026).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:10950 advisory.

    * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small     document that is submitted for parsing (CVE-2025-59375)
      * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)
      * cpython: Out-of-memory when loading Plist (CVE-2025-13837)
      * cpython: Header injection via newlines in data URL mediatype in Python (CVE-2025-15282)
      * cpython: Header injection in http.cookies.Morsel in Python (CVE-2026-0672)
      * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)
      * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)
      * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)
      * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)
      * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression     modules (CVE-2026-6100)
      * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API     (CVE-2026-4786)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-523:13 advisory.

    * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small     document that is submitted for parsing (CVE-2025-59375)
      * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)
      * cpython: Out-of-memory when loading Plist (CVE-2025-13837)
      * cpython: Header injection via newlines in data URL mediatype in Python (CVE-2025-15282)
      * cpython: Header injection in http.cookies.Morsel in Python (CVE-2026-0672)
      * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)
      * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)
      * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)
      * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)
      * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression     modules (CVE-2026-6100)
      * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API     (CVE-2026-4786)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
306619	Fedora 43 : python3.15 (2026-7ea30e843c)	Nessus	Fedora Local Security Checks	2026/4/16	2026/4/17	high
310693	Fedora 44 : mingw-python3 (2026-3d13d52f58)	Nessus	Fedora Local Security Checks	2026/4/28	2026/4/28	high
307516	Fedora 42 : python3.12 (2026-30fbc5a8b2)	Nessus	Fedora Local Security Checks	2026/4/19	2026/4/19	critical
307588	Fedora 45 : python3.11 (2026-a5ba8297fd)	Nessus	Fedora Local Security Checks	2026/4/20	2026/4/20	critical
310586	Fedora 44 : python3.12 (2026-bb0e94c26c)	Nessus	Fedora Local Security Checks	2026/4/28	2026/4/28	critical
306309	SUSE SLES15 / openSUSE 15 Security Update : python312 (SUSE-SU-2026:1292-1)	Nessus	SuSE Local Security Checks	2026/4/14	2026/4/30	high
310955	AlmaLinux 8 : python3.12 (ALSA-2026:10950)	Nessus	Alma Linux Local Security Checks	2026/4/29	2026/4/29	critical
311812	MiracleLinux 8 : python3.12-3.12.13-2.el8_10 (AXSA:2026-523:13)	Nessus	Miracle Linux Local Security Checks	2026/5/3	2026/5/3	critical

检测

插件搜索

high

high

critical

critical

critical

high

critical

critical