The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_90424 advisory.

    * podman: Arbitrary file write when importing OCI archive (CVE-2025-11395)

    * golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages     (CVE-2026-56855)

    * net/http: golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667)

    * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates     (CVE-2026-111943)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_90462 advisory.

    * podman: Arbitrary file write when importing OCI archive (CVE-2025-11395)

    * net/http: golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667)

    * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates     (CVE-2026-111943)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70641 advisory.

    Command line utility to inspect images and repositories directly on Docker registries without the need to     pull them.

    Security Fix(es):

    * skopeo: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)

    * skopeo: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)

    * skopeo: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860)

    * skopeo: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853)

    * skopeo: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:70641 advisory.

    * skopeo: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)

    * skopeo: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)

    * skopeo: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860)

    * skopeo: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853)

    * skopeo: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1913:05 advisory.

    * skopeo: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)
      * skopeo: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)
      * skopeo: golang net/url: Denial of Service from quadratic complexity in path resolution     (CVE-2026-56860)
      * skopeo: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853)
      * skopeo: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-70640 advisory.

    - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-33818 CVE-2026-56860 CVE-2026-56862
    - Ensures golang.org/x/crypto v0.53.0 for CVE-2026-46597 fix

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-93464 advisory.

    - update to the latest upstream commit aae8b839 - fixes CVE-2025-11395

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89761 advisory.

    The skopeo command lets you inspect images from container image registries, get images and image layers,     and use signatures to create and verify files.

    Security Fix(es):

    * podman: Arbitrary file write when importing OCI archive (CVE-2025-11395)

    * net/http: golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667)

    * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates     (CVE-2026-111943)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89761 advisory.

    * podman: Arbitrary file write when importing OCI archive (CVE-2025-11395)

    * net/http: golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667)

    * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates     (CVE-2026-111943)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-90424 advisory.

    - Rebuild for CVE-2026-78667 and CVE-2026-111943
    - Update to buildah 1.43.4 (c7061d00) - fix CVE-2026-56855       (golang.org/x/crypto/ssh DoS) and CVE-2025-11395 (arbitrary file write in       copier)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:90424 advisory.

    * podman: Arbitrary file write when importing OCI archive (CVE-2025-11395)

    * golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages     (CVE-2026-56855)

    * net/http: golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667)

    * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates     (CVE-2026-111943)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:93464 advisory.

    * podman: Arbitrary file write when importing OCI archive (CVE-2025-11395)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:90424 advisory.

    The buildah package provides a tool for facilitating building OCI container images. Among other things,     buildah enables you to: Create a working container, either from scratch or using an image as a starting     point; Create an image, either from a working container or using the instructions in a Dockerfile; Build     both Docker and OCI images.

    Security Fix(es):

    * podman: Arbitrary file write when importing OCI archive (CVE-2025-11395)

    * golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages     (CVE-2026-56855)

    * net/http: golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667)

    * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates     (CVE-2026-111943)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-70641 advisory.

    - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-33818 CVE-2026-56860 CVE-2026-56862

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_70640 advisory.

    * buildah: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853)

    * buildah: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)

    * buildah: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)

    * buildah: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860)

    * buildah: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
374049	Rocky Linux 9 [CIQ] Security Update: buildah / buildah-debuginfo / buildah-debugsource / buildah-tests / etc Multiple Vulnerabilities (crlsa-2026_90424)	Nessus	Rocky Linux Local Security Checks	2026/10/30	2026/11/6	medium
374079	Rocky Linux 9 [CIQ] Security Update: skopeo / skopeo-debuginfo / skopeo-debugsource / skopeo-tests Multiple Vulnerabilities (crlsa-2026_90462)	Nessus	Rocky Linux Local Security Checks	2026/10/30	2026/11/6	medium
349625	RHEL 9 : skopeo (RHSA-2026:70641)	Nessus	Red Hat Local Security Checks	2026/9/24	2026/9/24	medium
349901	RockyLinux 9 : skopeo (RLSA-2026:70641)	Nessus	Rocky Linux Local Security Checks	2026/9/24	2026/9/24	medium
350097	MiracleLinux 9 : skopeo-1.22.2-8.el9_8 (AXSA:2026-1913:05)	Nessus	Miracle Linux Local Security Checks	2026/9/25	2026/9/29	medium
350188	Oracle Linux 9 : buildah (ELSA-2026-70640)	Nessus	Oracle Linux Local Security Checks	2026/9/25	2026/9/25	medium
375174	Oracle Linux 10 : podman (ELSA-2026-93464)	Nessus	Oracle Linux Local Security Checks	2026/11/2	2026/11/2	medium
372015	RHEL 10 : skopeo (RHSA-2026:89761)	Nessus	Red Hat Local Security Checks	2026/10/26	2026/11/6	medium
372429	RockyLinux 10 : skopeo (RLSA-2026:89761)	Nessus	Rocky Linux Local Security Checks	2026/10/27	2026/11/6	medium
372641	Oracle Linux 9 : buildah (ELSA-2026-90424)	Nessus	Oracle Linux Local Security Checks	2026/10/27	2026/11/6	medium
373669	RockyLinux 9 : buildah (RLSA-2026:90424)	Nessus	Rocky Linux Local Security Checks	2026/10/29	2026/11/6	medium
375449	RockyLinux 10 : podman (RLSA-2026:93464)	Nessus	Rocky Linux Local Security Checks	2026/11/3	2026/11/6	medium
373542	RHEL 9 : buildah (RHSA-2026:90424)	Nessus	Red Hat Local Security Checks	2026/10/29	2026/11/6	medium
349766	Oracle Linux 9 : skopeo (ELSA-2026-70641)	Nessus	Oracle Linux Local Security Checks	2026/9/24	2026/9/24	medium
356527	Rocky Linux 9 [CIQ] Security Update: buildah / buildah-debuginfo / buildah-debugsource / buildah-tests / etc Multiple Vulnerabilities (crlsa-2026_70640)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium