RHEL 9 : Satellite 6.17 (RHSA-2026:95656)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Red Hat Security Advisory RHSA-2026:95656. The text
# itself is copyright (C) Red Hat, Inc.
##

include('compat.inc');

if (description)
{
  script_id(376943);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/11/06");

  script_cve_id(
    "CVE-2026-15307",
    "CVE-2026-73619",
    "CVE-2026-78677",
    "CVE-2026-87819",
    "CVE-2026-89078",
    "CVE-2026-93577",
    "CVE-2026-96640",
    "CVE-2026-96643",
    "CVE-2026-96778",
    "CVE-2026-97229",
    "CVE-2026-97687",
    "CVE-2026-97689",
    "CVE-2026-104895",
    "CVE-2026-110264",
    "CVE-2026-110856",
    "CVE-2026-110857",
    "CVE-2026-110858",
    "CVE-2026-110859",
    "CVE-2026-111497",
    "CVE-2026-112390",
    "CVE-2026-112391",
    "CVE-2026-112392",
    "CVE-2026-112393",
    "CVE-2026-112397",
    "CVE-2026-112398",
    "CVE-2026-112399",
    "CVE-2026-112400",
    "CVE-2026-112402",
    "CVE-2026-112403",
    "CVE-2026-112404",
    "CVE-2026-112405",
    "CVE-2026-112406",
    "CVE-2026-112892",
    "CVE-2026-112893",
    "CVE-2026-112894",
    "CVE-2026-112895",
    "CVE-2026-112896",
    "CVE-2026-112897",
    "CVE-2026-114145",
    "CVE-2026-115731",
    "CVE-2026-115732"
  );
  script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2026/11/01");
  script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2026/11/10");
  script_xref(name:"RHSA", value:"2026:95656");

  script_name(english:"RHEL 9 : Satellite 6.17 (RHSA-2026:95656)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Red Hat host is missing one or more security updates for Satellite 6.17.");
  script_set_attribute(attribute:"description", value:
"The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as
referenced in the RHSA-2026:95656 advisory.

    This advisory provides security fixes for affected packages used by Red Hat
    Satellite. The updates address the vulnerabilities described below.

    Security Fix(es):

    * python-django: Django: Remote code execution via GeoDjango spatial lookups (CVE-2026-15307)
    * python-gitpython: GitPython: Arbitrary Code Execution via Path Traversal (CVE-2026-78677)
    * python-gitpython: GitPython: Denial of Service via crafted commit author field (CVE-2026-87819)
    * python-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser
    (CVE-2026-97689)
    * python-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override
    (CVE-2026-97687)
    * python-gitpython: GitPython: Arbitrary code execution via unsafe URL protocol handling (CVE-2026-110857)
    * python-gitpython: GitPython: Arbitrary file read via argument injection in branch checkout
    (CVE-2026-110859)
    * python-gitpython: GitPython: Denial of Service via regular expression backtracking in date parsing
    (CVE-2026-110856)
    * python-gitpython: GitPython: Arbitrary file read vulnerability via `Repo.archive()` (CVE-2026-73619)
    * python-pillow: Pillow: Denial of Service via unbounded recursion in PDF parser (CVE-2026-112391)
    * python-pillow: Pillow: Denial of Service via infinite loop during crafted MIC image parsing
    (CVE-2026-112390)
    * python-pillow: Pillow: Denial of Service via null pointer dereference in Image.merge() (CVE-2026-112405)
    * python-pillow: pillow: Denial of service via crafted APNG image (CVE-2026-112399)
    * python-pillow: pillow: Denial of Service via zero-size images in rank filters (CVE-2026-112392)
    * python-pillow: pillow: Denial of Service via out-of-bounds memory access on zero-width images
    (CVE-2026-112397)
    * python-pillow: pillow: Denial of Service via memory exhaustion from crafted GIF image (CVE-2026-112400)
    * python-pillow: pillow: Denial of Service via crafted multi-frame image conversion (CVE-2026-112894)
    * python-pillow: pillow: Denial of service via crafted PDF during append operations (CVE-2026-112895)
    * python-pillow: pillow: Denial of service via double free during image transformation (CVE-2026-112402)
    * python-pillow: Pillow: Denial of Service via invalid pointer free during font rendering
    (CVE-2026-112893)
    * python-pillow: pillow: Information disclosure via uninitialized buffer in TIFF decoding
    (CVE-2026-112897)
    * python-pillow: Pillow: Denial of Service via out-of-bounds read in TIFF encoder (CVE-2026-112896)
    * python-pillow: Pillow: Denial of Service via out-of-bounds read in TIFF decoding (CVE-2026-112404)
    * python-gitpython: GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec
    (CVE-2026-110858)
    * python-pillow: pillow: Denial of Service via infinite loop during PDF page rewriting (CVE-2026-112406)
    * python-pillow: pillow: Arbitrary code execution via JPEG encoder buffer overflow (CVE-2026-96778)
    * python-gitpython: GitPython: arbitrary code execution via improper submodule path validation
    (CVE-2026-114145)
    * python-pillow: pillow: Denial of Service via duplicate page references in PDF files (CVE-2026-96640)
    * python-pillow: pillow: Denial of Service via repeated EXIF headers (CVE-2026-96643)
    * python-brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497)
    * python-pillow: pillow: Denial of Service via unbounded memory expansion in MSP image decoder
    (CVE-2026-112892)
    * python-pillow: Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO
    (CVE-2026-112393)
    * python-pillow: Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution
    (CVE-2026-112398)
    * python-pillow: Pillow: Heap buffer overflow in ImagingJpegDecode (CVE-2026-112403)
    * openvox-server: puppetserver: authenticated remote code execution via report event deserialization
    (CVE-2026-115731)
    * puppetserver: puppetserver: authenticated remote code execution via report event deserialization
    (CVE-2026-115731)
    * puppetserver: trapperkeeper-authorization: certificate name authorization bypass via flawed hostname ACL
    match (CVE-2026-115732)
    * openvox-server: trapperkeeper-authorization: certificate name authorization bypass via flawed hostname
    ACL match (CVE-2026-115732)
    * openvox-agent: integer overflow issueCVE-2026-89078 in regular expression compiler (CVE-2026-110264)
    * openvox-agent: integer overflow issue in CI/CD regular expression compiler (CVE-2026-97229)
    * openvox-agent: integer overflow issue in regular expression compiler (CVE-2026-93577)
    * openvox-agent: double free issue in regular expression parser (CVE-2026-89078)
    * openvox-server: jackson-dataformat-smile: Denial of Service via unbounded memory allocation in
    asynchronous parser (CVE-2026-104895)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/updates/classification/#critical");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2511095");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2515265");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2523215");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2530742");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2539836");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2539842");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2543245");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2543255");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2550153");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2552959");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2552966");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2552977");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2552989");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2555846");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2555848");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2555851");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2555859");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2555863");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2555864");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2555866");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2555867");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2555868");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2555871");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2555873");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2555874");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2555875");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2555878");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2555879");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2555888");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2555890");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2556322");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2558563");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2558566");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2558567");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2558576");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2558632");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2558973");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2559393");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2562517");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2566291");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/show_bug.cgi?id=2566451");
  # https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_95656.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?f5a79d0a");
  script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/errata/RHSA-2026:95656");
  script_set_attribute(attribute:"solution", value:
"Update the RHEL Satellite 6.17 package based on the guidance in RHSA-2026:95656.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:H/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:H/RL:O/RC:C");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H");
  script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:A");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-96778");
  script_set_attribute(attribute:"cvss3_score_source", value:"CVE-2026-112403");
  script_set_attribute(attribute:"cvss4_score_source", value:"CVE-2026-115731");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_cwe_id(22, 73, 88, 124, 125, 190, 295, 409, 415, 434, 476, 502, 606, 763, 770, 787, 835, 863, 908, 1333, 1341);
  script_set_attribute(attribute:"vendor_severity", value:"Critical");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/05/14");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/11/05");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/11/06");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:9");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openvox-agent");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openvox-server");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-brotli");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-django");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-gitpython");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-pillow");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-urllib3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.11-brotli");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.11-django");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.11-gitpython");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.11-pillow");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.11-urllib3");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Red Hat Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info2.nasl", "redhat_repos.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu");

  exit(0);
}


include('rpm2.inc');
include('rhel.inc');

if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_product = get_kb_item('installed_os/local/SSH/0/product');
if (isnull(os_product) || 'Red Hat' >!< os_product) audit(AUDIT_OS_NOT, 'Red Hat');
var os_version = get_kb_item('installed_os/local/SSH/0/version');
if (isnull(os_version)) audit(AUDIT_UNKNOWN_APP_VER, 'Red Hat');
if (!rhel_check_release(operator: 'ge', os_version: os_version, rhel_version: '9')) audit(AUDIT_OS_NOT, 'Red Hat 9.x', 'Red Hat ' + os_version);

if (!get_kb_item('Host/RedHat/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 's390' >!< cpu && 'aarch64' >!< cpu && 'ppc' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Red Hat', cpu);

var constraints = [
  {
    'release': '9',
    'repo_relative_urls': [
      'content/dist/layered/rhel9/x86_64/sat-capsule/6.17/debug',
      'content/dist/layered/rhel9/x86_64/sat-capsule/6.17/os',
      'content/dist/layered/rhel9/x86_64/sat-capsule/6.17/source/SRPMS',
      'content/dist/layered/rhel9/x86_64/satellite/6.17/debug',
      'content/dist/layered/rhel9/x86_64/satellite/6.17/os',
      'content/dist/layered/rhel9/x86_64/satellite/6.17/source/SRPMS'
    ],
    'pkgs': [
      {'reference':'openvox-agent-8.32.0-1.el9sat', 'cpu':'x86_64', 'el_string':'el9sat', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'satellite-6', 'cves':['CVE-2026-89078', 'CVE-2026-93577', 'CVE-2026-97229', 'CVE-2026-110264', 'CVE-2026-115731', 'CVE-2026-115732']},
      {'reference':'openvox-server-8.18.0-1.el9sat', 'el_string':'el9sat', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'satellite-6', 'cves':['CVE-2026-104895', 'CVE-2026-115731', 'CVE-2026-115732']},
      {'reference':'python3.11-brotli-1.2.1-1.el9pc', 'cpu':'x86_64', 'el_string':'el9pc', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'satellite-6', 'cves':['CVE-2026-111497']},
      {'reference':'python3.11-django-4.2.30-2.el9pc', 'el_string':'el9pc', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'satellite-6', 'cves':['CVE-2026-15307']},
      {'reference':'python3.11-gitpython-3.2.1-1.el9pc', 'el_string':'el9pc', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'satellite-6', 'cves':['CVE-2026-73619', 'CVE-2026-78677', 'CVE-2026-87819', 'CVE-2026-110856', 'CVE-2026-110857', 'CVE-2026-110858', 'CVE-2026-110859', 'CVE-2026-114145']},
      {'reference':'python3.11-pillow-13.0.0-1.el9pc', 'cpu':'x86_64', 'el_string':'el9pc', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'satellite-6', 'cves':['CVE-2026-96640', 'CVE-2026-96643', 'CVE-2026-96778', 'CVE-2026-112390', 'CVE-2026-112391', 'CVE-2026-112392', 'CVE-2026-112393', 'CVE-2026-112397', 'CVE-2026-112398', 'CVE-2026-112399', 'CVE-2026-112400', 'CVE-2026-112402', 'CVE-2026-112403', 'CVE-2026-112404', 'CVE-2026-112405', 'CVE-2026-112406', 'CVE-2026-112892', 'CVE-2026-112893', 'CVE-2026-112894', 'CVE-2026-112895', 'CVE-2026-112896', 'CVE-2026-112897']},
      {'reference':'python3.11-urllib3-2.8.0-1.el9pc', 'el_string':'el9pc', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'satellite-6', 'cves':['CVE-2026-97687', 'CVE-2026-97689']}
    ]
  }
];

var applicable_repo_urls = rhel_determine_applicable_repository_urls(constraints:constraints);
if(applicable_repo_urls == RHEL_REPOS_NO_OVERLAP_MESSAGE) exit(0, RHEL_REPO_NOT_ENABLED);

var os_release = get_one_kb_item('installed_os/local/SSH/0/release');
var os_sp = get_one_kb_item('Host/*/minor_release');

var flag = 0;
var repo_relative_urls;
var reference;
var sp;
var _cpu;
var el_string;
var rpm_spec_vers_cmp;
var epoch;
var allowmaj;
var exists_check;
var cves;
foreach var constraint ( constraints ) {
  # Check that the target release is equal to the affected release
  if (!empty_or_null(constraint['release'])){
    if (constraint['release'] != os_release) continue;
  }
  if (!empty_or_null(constraint['sp'])){
    if (constraint['sp'] != os_sp) continue;
  }

  if (!empty_or_null(constraint['repo_relative_urls'])) repo_relative_urls = constraint['repo_relative_urls'];

  foreach var pkg ( constraint['pkgs'] ) {
    reference = NULL;
    sp = NULL;
    _cpu = NULL;
    el_string = NULL;
    rpm_spec_vers_cmp = NULL;
    epoch = NULL;
    allowmaj = NULL;
    exists_check = NULL;
    cves = NULL;
    if (!empty_or_null(pkg['reference'])) reference = pkg['reference'];
    if (!empty_or_null(pkg['sp'])) sp = pkg['sp'];
    if (!empty_or_null(pkg['cpu'])) _cpu = pkg['cpu'];
    if (!empty_or_null(pkg['el_string'])) el_string = pkg['el_string'];
    if (!empty_or_null(pkg['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = pkg['rpm_spec_vers_cmp'];
    if (!empty_or_null(pkg['epoch'])) epoch = pkg['epoch'];
    if (!empty_or_null(pkg['allowmaj'])) allowmaj = pkg['allowmaj'];
    if (!empty_or_null(pkg['exists_check'])) exists_check = pkg['exists_check'];
    if (!empty_or_null(pkg['cves'])) cves = pkg['cves'];
    if (reference &&
        rhel_decide_repo_relative_url_check(required_repo_url_list:repo_relative_urls) &&
        (applicable_repo_urls || (!exists_check || rpm_exists(rpm:exists_check))) &&
        rpm_check(sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj, cves:cves)) flag++;
  }
}

if (flag)
{
  var extra = NULL;
  if (isnull(applicable_repo_urls) || !applicable_repo_urls) extra = rpm_report_get() + redhat_report_repo_caveat();
  else extra = rpm_report_get();
  security_report_v4(
      port       : 0,
      severity   : SECURITY_HOLE,
      extra      : extra
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'openvox-agent / openvox-server / python3.11-brotli / etc');
}