The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0612-1 advisory.

    - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively     unfoldable       characters (bsc#1257029).
    - CVE-2026-0672: HTTP header injection via user-controlled cookie values and parameters when using     http.cookies.Morsel       (bsc#1257031).
    - CVE-2026-0865: user-controlled header containing newlines can allow injecting HTTP headers     (bsc#1257042).
    - CVE-2025-15366: user-controlled command can allow additional commands injected using newlines     (bsc#1257044).
    - CVE-2025-15282: user-controlled data URLs parsed may allow injecting headers (bsc#1257046).
    - CVE-2025-15367: control characters may allow the injection of additional commands (bsc#1257041).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-b1b37b00ef advisory.

    Update to 3.13.12





Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19176 advisory.

    - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100     Resolves: RHEL-167918, RHEL-168160
    - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865     Related: RHEL-167918, RHEL-168160
    - Security fix for CVE-2026-4519     Resolves: RHEL-158115
    - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865,     CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367     Resolves: RHEL-144896, RHEL-143115, RHEL-143173

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19019 advisory.

    - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100     Resolves: RHEL-168121, RHEL-167887
    - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865     Related: RHEL-168121, RHEL-167887
    - Security fix for CVE-2026-4519     Resolves: RHEL-158114
    - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865,     CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367     Resolves: RHEL-144855, RHEL-143058, RHEL-143111

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1774022191 advisory.

  - The imaplib module, when passed a user-controlled command, can have additional commands injected using     newlines. Mitigation rejects commands containing control characters. (CVE-2025-15366)

  - The poplib module, when passed a user-controlled command, can have additional commands injected using     newlines. Mitigation rejects commands containing control characters. (CVE-2025-15367)

  - User-controlled header names and values containing newlines can allow injecting HTTP headers.
    (CVE-2026-0865)

  - The email module, specifically the BytesGenerator class, didn't properly quote newlines for email     headers when serializing an email message allowing for header injection when an email is serialized. This     is only applicable if using LiteralHeader writing headers that don't respect email folding rules, the     new behavior will reject the incorrectly folded headers in BytesGenerator. (CVE-2026-1299)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1774261018 advisory.

  - The poplib module, when passed a user-controlled command, can have additional commands injected using     newlines. Mitigation rejects commands containing control characters. (CVE-2025-15367)

  - User-controlled header names and values containing newlines can allow injecting HTTP headers.
    (CVE-2026-0865)

  - The email module, specifically the BytesGenerator class, didn't properly quote newlines for email     headers when serializing an email message allowing for header injection when an email is serialized. This     is only applicable if using LiteralHeader writing headers that don't respect email folding rules, the     new behavior will reject the incorrectly folded headers in BytesGenerator. (CVE-2026-1299)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
300036	SUSE SLES12 Security Update : python36 (SUSE-SU-2026:0612-1)	Nessus	SuSE Local Security Checks	2026/2/26	2026/4/30	medium
300517	Fedora 42 : python3-docs / python3.13 (2026-b1b37b00ef)	Nessus	Fedora Local Security Checks	2026/3/4	2026/3/4	medium
322193	Oracle Linux 9 : python3.14 (ELSA-2026-19176)	Nessus	Oracle Linux Local Security Checks	2026/6/23	2026/6/23	critical
327059	Oracle Linux 10 : python3.14 (ELSA-2026-19019)	Nessus	Oracle Linux Local Security Checks	2026/7/15	2026/7/15	critical
352679	AlmaLinux 9.6 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1774022191)	Nessus	Alma Linux Local Security Checks	2026/9/30	2026/9/30	medium
360969	AlmaLinux 9.2 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1774261018)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/1	medium

检测

插件搜索

medium

medium

critical

critical

medium

medium