Linux Distros Unpatched Vulnerability : CVE-2026-84782

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(351165);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/09/30");

  script_cve_id("CVE-2026-84782");

  script_name(english:"Linux Distros Unpatched Vulnerability : CVE-2026-84782");

  script_set_attribute(attribute:"synopsis", value:
"The Linux/Unix host has one or more packages installed with a vulnerability that the vendor indicates will not be
patched.");
  script_set_attribute(attribute:"description", value:
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied
patch available.

  - Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is
    suspended part-way through. The retransmitted message can be read past the message buffer and the
    retransmission overwrites the internal state the suspended write needs to resume correctly. Impact
    summary: The retransmitted message can disclose a heap memory to the peer as plaintext handshake data or
    cause a crash and a Denial of Service when the read reaches an unmapped memory region. CWE: CWE-125: Out-
    of-bounds Read Description: DTLS handshake messages can be written out in multiple fragments, and a write
    can suspend mid-message (returning WANT_WRITE) if the underlying transport temporarily cannot accept more
    data. While such a write is suspended, the DTLS retransmission timer may independently fire and ask the
    retransmission logic to resend an earlier, already-acknowledged-as-sent message from its retransmit queue.
    The retransmission logic reused the same internal buffer and position tracking as the message that was
    still being written, without resetting the position back to the start of the message being retransmitted.
    As a result the retransmission was read starting from wherever the suspended write had left off, producing
    a mislabelled message whose body was leftover bytes from the other, larger message still in flight -
    content that was never meant to be sent at that point, and which could run past the end of the allocated
    buffer. Separately, even when the retransmission is positioned correctly, allowing it to run to completion
    while another write is suspended overwrites the same shared bookkeeping that the suspended write depends
    on to resume. When the application later resumes the suspended write (via a subsequent SSL_read(),
    SSL_write(), SSL_accept(), or SSL_connect() call), it finds that bookkeeping in a state inconsistent with
    the message and aborts the process in a debugging build. The fix resets the retransmission's read position
    to the start of the message before resending, and skips retransmission entirely whenever a handshake write
    is still suspended, deferring to the next call that resumes it instead. FIPS impact: no The affected code
    is outside the FIPS module boundary. (CVE-2026-84782)

Note that Nessus relies on the presence of the package as reported by the vendor.");
  script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2026-84782");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2026-84782");
  script_set_attribute(attribute:"see_also", value:"https://ubuntu.com/security/CVE-2026-84782");
  script_set_attribute(attribute:"solution", value:
"There is no known solution at this time.");
  script_set_attribute(attribute:"agent", value:"unix");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:U/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:U/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-84782");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_set_attribute(attribute:"vendor_unpatched", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/09/29");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/09/29");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:14.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:16.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:20.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:22.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:24.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:26.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:7");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:8");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:12.0");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:14.0");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:10");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:6");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:8");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:9");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:edk2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:edk2-hwe");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:nodejs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openssl1.0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:389-ds-base");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:389-ds-base-bdb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:389-ds-base-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:389-ds-base-legacy-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:389-ds-base-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:389-ds-base-snmp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:AAVMF");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:OVMF");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:afterburn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:afterburn-dracut");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:bootc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:bootupd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:clevis-pin-tpm2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:cockpit-389-ds");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:compat-openssl10");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:compat-openssl11");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:edk2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:edk2-aarch64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:edk2-ovmf");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:edk2-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:edk2-tools-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:firefox");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:firefox-x11");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:glx-utils");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:goose");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:keylime-agent-rust");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:keylime-agent-rust-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:keylime-agent-rust-ima-emulator");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:keylime-agent-rust-push");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mesa-demos");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mesa-dri-drivers");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mesa-filesystem");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mesa-libEGL");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mesa-libEGL-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mesa-libGL");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mesa-libGL-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mesa-libGLU");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mesa-libGLU-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mesa-libOSMesa");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mesa-libOSMesa-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mesa-libgbm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mesa-libgbm-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mesa-libglapi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mesa-libxatracker");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mesa-vulkan-drivers");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mingw-openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mingw32-openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mingw64-openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mokutil");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mozjs60");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mozjs60-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:openssl-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:openssl-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:openssl-perl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:openssl-static");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:ovmf");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-lib389");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.12-cryptography");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.14-cryptography");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rpm-ostree");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rpm-ostree-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:ruby");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:ruby-bundled-gems");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:ruby-default-gems");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:ruby-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:ruby-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:ruby-irb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:ruby-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:ruby4.0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:ruby4.0-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:ruby4.0-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:ruby4.0-rubygem-mysql2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:ruby4.0-rubygem-pg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-abrt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-abrt-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-bigdecimal");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-bson");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-bson-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-bundler");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-bundler-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-did_you_mean");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-io-console");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-irb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-json");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-minitest");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-mongo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-mongo-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-mysql2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-mysql2-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-net-telnet");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-pg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-pg-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-power_assert");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-psych");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-racc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-rake");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-rbs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-rdoc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-rexml");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-rss");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-test-unit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-typeprof");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygem-xmlrpc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygems");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rubygems-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rust-bootupd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:rust-sequoia-sq");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:s390utils");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:s390utils-base");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:s390utils-chreipl-fcp-mpath");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:s390utils-cmsfs-fuse");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:s390utils-core");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:s390utils-cpacfstatsd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:s390utils-cpuplugd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:s390utils-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:s390utils-hmcdrvfs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:s390utils-iucvterm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:s390utils-mon_statd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:s390utils-osasnmpd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:s390utils-se-data");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:s390utils-zdsfs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:s390utils-ziomon");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:sequoia-sq");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:sevctl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:shim");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:shim-aa64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:shim-ia32");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:shim-signed");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:shim-unsigned-aarch64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:shim-unsigned-x64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:shim-x64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:system-reinstall-bootc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:trustee-guest-components");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:trustee-kbs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:virt-firmware-rs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:389-ds-base");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:389-ds-base-bdb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:389-ds-base-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:389-ds-base-legacy-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:389-ds-base-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:389-ds-base-snmp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:AAVMF");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:OVMF");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:afterburn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:afterburn-dracut");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:bootc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:bootupd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:clevis-pin-tpm2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:cockpit-389-ds");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:compat-openssl10");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:compat-openssl11");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:edk2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:edk2-aarch64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:edk2-ovmf");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:edk2-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:edk2-tools-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:firefox");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:firefox-x11");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:glx-utils");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:goose");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:keylime-agent-rust");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:keylime-agent-rust-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:keylime-agent-rust-ima-emulator");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:keylime-agent-rust-push");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mesa-demos");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mesa-dri-drivers");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mesa-filesystem");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mesa-libEGL");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mesa-libEGL-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mesa-libGL");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mesa-libGL-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mesa-libGLU");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mesa-libGLU-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mesa-libOSMesa");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mesa-libOSMesa-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mesa-libgbm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mesa-libgbm-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mesa-libglapi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mesa-libxatracker");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mesa-vulkan-drivers");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mingw-openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mingw32-openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mingw64-openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mokutil");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mozjs60");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mozjs60-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openssl-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openssl-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openssl-perl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openssl-static");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ovmf");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-lib389");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.12-cryptography");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.14-cryptography");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rpm-ostree");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rpm-ostree-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ruby");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ruby-bundled-gems");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ruby-default-gems");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ruby-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ruby-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ruby-irb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ruby-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ruby4.0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ruby4.0-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ruby4.0-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ruby4.0-rubygem-mysql2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ruby4.0-rubygem-pg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-abrt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-abrt-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-bigdecimal");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-bson");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-bson-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-bundler");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-bundler-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-did_you_mean");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-io-console");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-irb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-json");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-minitest");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-mongo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-mongo-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-mysql2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-mysql2-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-net-telnet");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-pg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-pg-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-power_assert");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-psych");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-racc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-rake");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-rbs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-rdoc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-rexml");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-rss");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-test-unit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-typeprof");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-xmlrpc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygems");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygems-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rust-bootupd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rust-sequoia-sq");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:s390utils");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:s390utils-base");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:s390utils-chreipl-fcp-mpath");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:s390utils-cmsfs-fuse");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:s390utils-core");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:s390utils-cpacfstatsd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:s390utils-cpuplugd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:s390utils-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:s390utils-hmcdrvfs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:s390utils-iucvterm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:s390utils-mon_statd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:s390utils-osasnmpd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:s390utils-se-data");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:s390utils-zdsfs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:s390utils-ziomon");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:sequoia-sq");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:sevctl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:shim");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:shim-aa64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:shim-ia32");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:shim-signed");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:shim-unsigned-aarch64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:shim-unsigned-x64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:shim-x64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:system-reinstall-bootc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:trustee-guest-components");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:trustee-kbs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:virt-firmware-rs");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info2.nasl", "set_linux_os_id.nasl");
  script_require_keys("Host/cpu", "Host/local_checks_enabled", "global_settings/vendor_unpatched", "Host/OS/identifier");
  script_require_ports("Host/OS/CentOS Linux-7", "Host/OS/CentOS Linux-8", "Host/OS/Debian Linux-12", "Host/OS/Debian Linux-14", "Host/OS/Red Hat Enterprise Linux-10", "Host/OS/Red Hat Enterprise Linux-6", "Host/OS/Red Hat Enterprise Linux-7", "Host/OS/Red Hat Enterprise Linux-8", "Host/OS/Red Hat Enterprise Linux-9", "Host/OS/Ubuntu Linux-14.04", "Host/OS/Ubuntu Linux-16.04", "Host/OS/Ubuntu Linux-18.04", "Host/OS/Ubuntu Linux-20.04", "Host/OS/Ubuntu Linux-22.04", "Host/OS/Ubuntu Linux-24.04", "Host/OS/Ubuntu Linux-26.04");

  exit(0);
}

if (!get_kb_item("global_settings/vendor_unpatched")) exit(0, "Unpatched Vulnerabilities Detection not active.");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (empty_or_null(get_one_kb_item("Host/CentOS/rpm-list")) && empty_or_null(get_one_kb_item("Host/Debian/dpkg-l")) && empty_or_null(get_one_kb_item("Host/RedHat/rpm-list"))) audit(AUDIT_PACKAGE_LIST_MISSING);

include('linux_unpatched.inc');

var distro_constraints_array = {
  "Debian Linux-12": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "12",
        "pkgs": [
          {"reference": "libcrypto3-udeb"},
          {"reference": "libssl-dev"},
          {"reference": "libssl-doc"},
          {"reference": "libssl3"},
          {"reference": "libssl3-udeb"},
          {"reference": "openssl"}
        ]
      }
    ]
  },
  "Debian Linux-14": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "14",
        "pkgs": [
          {"reference": "libcrypto3-udeb"},
          {"reference": "libssl-dev"},
          {"reference": "libssl-doc"},
          {"reference": "libssl3-udeb"},
          {"reference": "libssl3t64"},
          {"reference": "openssl"},
          {"reference": "openssl-provider-fips"},
          {"reference": "openssl-provider-legacy"}
        ]
      }
    ]
  },
  "Ubuntu Linux-14.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "14.04",
        "pkgs": [
          {"reference": "libcrypto1.0.0-udeb"},
          {"reference": "libssl-dev"},
          {"reference": "libssl-doc"},
          {"reference": "libssl1.0.0"},
          {"reference": "libssl1.0.0-dbg"},
          {"reference": "libssl1.0.0-udeb"},
          {"reference": "openssl"}
        ]
      }
    ]
  },
  "Ubuntu Linux-16.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "16.04",
        "pkgs": [
          {"reference": "edk2"},
          {"reference": "libcrypto1.0.0-udeb"},
          {"reference": "libssl-dev"},
          {"reference": "libssl-doc"},
          {"reference": "libssl1.0.0"},
          {"reference": "libssl1.0.0-dbg"},
          {"reference": "libssl1.0.0-udeb"},
          {"reference": "nodejs"},
          {"reference": "openssl"}
        ]
      }
    ]
  },
  "Ubuntu Linux-18.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "18.04",
        "pkgs": [
          {"reference": "edk2"},
          {"reference": "libcrypto1.0.0-udeb"},
          {"reference": "libcrypto1.1-udeb"},
          {"reference": "libssl-dev"},
          {"reference": "libssl-doc"},
          {"reference": "libssl1.0-dev"},
          {"reference": "libssl1.0.0"},
          {"reference": "libssl1.0.0-udeb"},
          {"reference": "libssl1.1"},
          {"reference": "libssl1.1-udeb"},
          {"reference": "nodejs"},
          {"reference": "openssl"},
          {"reference": "openssl1.0"}
        ]
      }
    ]
  },
  "Ubuntu Linux-20.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "20.04",
        "pkgs": [
          {"reference": "libcrypto1.1-udeb"},
          {"reference": "libssl-dev"},
          {"reference": "libssl-doc"},
          {"reference": "libssl1.1"},
          {"reference": "libssl1.1-udeb"},
          {"reference": "openssl"},
          {"reference": "ovmf"},
          {"reference": "qemu-efi"},
          {"reference": "qemu-efi-aarch64"},
          {"reference": "qemu-efi-arm"}
        ]
      }
    ]
  },
  "Ubuntu Linux-22.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "22.04",
        "pkgs": [
          {"reference": "nodejs"},
          {"reference": "ovmf"},
          {"reference": "ovmf-ia32"},
          {"reference": "qemu-efi"},
          {"reference": "qemu-efi-aarch64"},
          {"reference": "qemu-efi-arm"}
        ]
      }
    ]
  },
  "Ubuntu Linux-24.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "24.04",
        "pkgs": [
          {"reference": "efi-shell-aa64"},
          {"reference": "efi-shell-arm"},
          {"reference": "efi-shell-ia32"},
          {"reference": "efi-shell-riscv64"},
          {"reference": "efi-shell-x64"},
          {"reference": "ovmf"},
          {"reference": "ovmf-ia32"},
          {"reference": "qemu-efi-aarch64"},
          {"reference": "qemu-efi-arm"},
          {"reference": "qemu-efi-riscv64"}
        ]
      }
    ]
  },
  "Ubuntu Linux-26.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "26.04",
        "pkgs": [
          {"reference": "efi-shell-aa64"},
          {"reference": "efi-shell-aa64-hwe"},
          {"reference": "efi-shell-loongarch64"},
          {"reference": "efi-shell-loongarch64-hwe"},
          {"reference": "efi-shell-riscv64"},
          {"reference": "efi-shell-riscv64-hwe"},
          {"reference": "efi-shell-x64"},
          {"reference": "efi-shell-x64-hwe"},
          {"reference": "ovmf"},
          {"reference": "ovmf-amdsev"},
          {"reference": "ovmf-amdsev-hwe"},
          {"reference": "ovmf-generic"},
          {"reference": "ovmf-generic-hwe"},
          {"reference": "ovmf-hwe"},
          {"reference": "ovmf-inteltdx"},
          {"reference": "ovmf-inteltdx-hwe"},
          {"reference": "ovmf-legacy"},
          {"reference": "ovmf-legacy-hwe"},
          {"reference": "qemu-efi-aarch64"},
          {"reference": "qemu-efi-aarch64-hwe"},
          {"reference": "qemu-efi-loongarch64"},
          {"reference": "qemu-efi-loongarch64-hwe"},
          {"reference": "qemu-efi-riscv64"},
          {"reference": "qemu-efi-riscv64-hwe"}
        ]
      }
    ]
  },
  "Red Hat Enterprise Linux-10": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "10",
        "pkgs": [
          {"reference": "389-ds-base"},
          {"reference": "389-ds-base-bdb"},
          {"reference": "389-ds-base-devel"},
          {"reference": "389-ds-base-libs"},
          {"reference": "389-ds-base-snmp"},
          {"reference": "afterburn"},
          {"reference": "afterburn-dracut"},
          {"reference": "bootc"},
          {"reference": "bootupd"},
          {"reference": "clevis-pin-tpm2"},
          {"reference": "edk2"},
          {"reference": "edk2-aarch64"},
          {"reference": "edk2-ovmf"},
          {"reference": "edk2-tools"},
          {"reference": "edk2-tools-doc"},
          {"reference": "firefox"},
          {"reference": "goose"},
          {"reference": "keylime-agent-rust"},
          {"reference": "keylime-agent-rust-common"},
          {"reference": "keylime-agent-rust-ima-emulator"},
          {"reference": "keylime-agent-rust-push"},
          {"reference": "mokutil"},
          {"reference": "openssl"},
          {"reference": "openssl-devel"},
          {"reference": "openssl-libs"},
          {"reference": "openssl-perl"},
          {"reference": "python3-lib389"},
          {"reference": "python3.14-cryptography"},
          {"reference": "rpm-ostree"},
          {"reference": "rpm-ostree-libs"},
          {"reference": "ruby"},
          {"reference": "ruby-bundled-gems"},
          {"reference": "ruby-default-gems"},
          {"reference": "ruby-devel"},
          {"reference": "ruby-doc"},
          {"reference": "ruby-libs"},
          {"reference": "ruby4.0"},
          {"reference": "ruby4.0-devel"},
          {"reference": "ruby4.0-doc"},
          {"reference": "ruby4.0-rubygem-mysql2"},
          {"reference": "ruby4.0-rubygem-pg"},
          {"reference": "rubygem-bigdecimal"},
          {"reference": "rubygem-bundler"},
          {"reference": "rubygem-io-console"},
          {"reference": "rubygem-irb"},
          {"reference": "rubygem-json"},
          {"reference": "rubygem-minitest"},
          {"reference": "rubygem-power_assert"},
          {"reference": "rubygem-psych"},
          {"reference": "rubygem-racc"},
          {"reference": "rubygem-rake"},
          {"reference": "rubygem-rbs"},
          {"reference": "rubygem-rdoc"},
          {"reference": "rubygem-rexml"},
          {"reference": "rubygem-rss"},
          {"reference": "rubygem-test-unit"},
          {"reference": "rubygem-typeprof"},
          {"reference": "rubygems"},
          {"reference": "rubygems-devel"},
          {"reference": "s390utils"},
          {"reference": "s390utils-base"},
          {"reference": "s390utils-chreipl-fcp-mpath"},
          {"reference": "s390utils-cmsfs-fuse"},
          {"reference": "s390utils-core"},
          {"reference": "s390utils-cpacfstatsd"},
          {"reference": "s390utils-cpuplugd"},
          {"reference": "s390utils-devel"},
          {"reference": "s390utils-hmcdrvfs"},
          {"reference": "s390utils-iucvterm"},
          {"reference": "s390utils-mon_statd"},
          {"reference": "s390utils-osasnmpd"},
          {"reference": "s390utils-se-data"},
          {"reference": "s390utils-zdsfs"},
          {"reference": "s390utils-ziomon"},
          {"reference": "sequoia-sq"},
          {"reference": "sevctl"},
          {"reference": "shim-aa64"},
          {"reference": "shim-unsigned-aarch64"},
          {"reference": "shim-unsigned-x64"},
          {"reference": "shim-x64"},
          {"reference": "system-reinstall-bootc"},
          {"reference": "trustee-guest-components"},
          {"reference": "trustee-kbs"},
          {"reference": "virt-firmware-rs"}
        ]
      }
    ]
  },
  "Red Hat Enterprise Linux-6": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "6",
        "pkgs": [
          {"reference": "openssl"},
          {"reference": "openssl-devel"},
          {"reference": "openssl-perl"},
          {"reference": "openssl-static"}
        ]
      }
    ]
  },
  "CentOS Linux-7": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "7",
        "pkgs": [
          {"reference": "AAVMF"},
          {"reference": "OVMF"},
          {"reference": "mokutil"},
          {"reference": "openssl"},
          {"reference": "openssl-devel"},
          {"reference": "openssl-libs"},
          {"reference": "openssl-perl"},
          {"reference": "openssl-static"},
          {"reference": "ovmf"},
          {"reference": "shim"},
          {"reference": "shim-ia32"},
          {"reference": "shim-signed"},
          {"reference": "shim-x64"}
        ]
      }
    ]
  },
  "Red Hat Enterprise Linux-7": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "7",
        "pkgs": [
          {"reference": "AAVMF"},
          {"reference": "OVMF"},
          {"reference": "mokutil"},
          {"reference": "openssl"},
          {"reference": "openssl-devel"},
          {"reference": "openssl-libs"},
          {"reference": "openssl-perl"},
          {"reference": "openssl-static"},
          {"reference": "ovmf"},
          {"reference": "shim"},
          {"reference": "shim-ia32"},
          {"reference": "shim-signed"},
          {"reference": "shim-x64"}
        ]
      }
    ]
  },
  "CentOS Linux-8": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "8",
        "pkgs": [
          {"reference": "389-ds-base"},
          {"reference": "389-ds-base-devel"},
          {"reference": "389-ds-base-legacy-tools"},
          {"reference": "389-ds-base-libs"},
          {"reference": "389-ds-base-snmp"},
          {"reference": "cockpit-389-ds"},
          {"reference": "compat-openssl10"},
          {"reference": "edk2"},
          {"reference": "edk2-aarch64"},
          {"reference": "edk2-ovmf"},
          {"reference": "mingw-openssl"},
          {"reference": "mingw32-openssl"},
          {"reference": "mingw64-openssl"},
          {"reference": "mozjs60"},
          {"reference": "mozjs60-devel"},
          {"reference": "openssl"},
          {"reference": "openssl-devel"},
          {"reference": "openssl-libs"},
          {"reference": "openssl-perl"},
          {"reference": "openssl-static"},
          {"reference": "python3-lib389"},
          {"reference": "python3.12-cryptography"},
          {"reference": "ruby"},
          {"reference": "ruby-bundled-gems"},
          {"reference": "ruby-default-gems"},
          {"reference": "ruby-devel"},
          {"reference": "ruby-doc"},
          {"reference": "ruby-irb"},
          {"reference": "ruby-libs"},
          {"reference": "rubygem-abrt"},
          {"reference": "rubygem-abrt-doc"},
          {"reference": "rubygem-bigdecimal"},
          {"reference": "rubygem-bson"},
          {"reference": "rubygem-bson-doc"},
          {"reference": "rubygem-bundler"},
          {"reference": "rubygem-bundler-doc"},
          {"reference": "rubygem-did_you_mean"},
          {"reference": "rubygem-io-console"},
          {"reference": "rubygem-irb"},
          {"reference": "rubygem-json"},
          {"reference": "rubygem-minitest"},
          {"reference": "rubygem-mongo"},
          {"reference": "rubygem-mongo-doc"},
          {"reference": "rubygem-mysql2"},
          {"reference": "rubygem-mysql2-doc"},
          {"reference": "rubygem-net-telnet"},
          {"reference": "rubygem-openssl"},
          {"reference": "rubygem-pg"},
          {"reference": "rubygem-pg-doc"},
          {"reference": "rubygem-power_assert"},
          {"reference": "rubygem-psych"},
          {"reference": "rubygem-racc"},
          {"reference": "rubygem-rake"},
          {"reference": "rubygem-rbs"},
          {"reference": "rubygem-rdoc"},
          {"reference": "rubygem-rexml"},
          {"reference": "rubygem-rss"},
          {"reference": "rubygem-test-unit"},
          {"reference": "rubygem-typeprof"},
          {"reference": "rubygem-xmlrpc"},
          {"reference": "rubygems"},
          {"reference": "rubygems-devel"},
          {"reference": "shim"},
          {"reference": "shim-aa64"},
          {"reference": "shim-ia32"},
          {"reference": "shim-unsigned-aarch64"},
          {"reference": "shim-unsigned-x64"},
          {"reference": "shim-x64"}
        ]
      }
    ]
  },
  "Red Hat Enterprise Linux-8": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "8",
        "pkgs": [
          {"reference": "389-ds-base"},
          {"reference": "389-ds-base-devel"},
          {"reference": "389-ds-base-legacy-tools"},
          {"reference": "389-ds-base-libs"},
          {"reference": "389-ds-base-snmp"},
          {"reference": "cockpit-389-ds"},
          {"reference": "compat-openssl10"},
          {"reference": "edk2"},
          {"reference": "edk2-aarch64"},
          {"reference": "edk2-ovmf"},
          {"reference": "mingw-openssl"},
          {"reference": "mingw32-openssl"},
          {"reference": "mingw64-openssl"},
          {"reference": "mozjs60"},
          {"reference": "mozjs60-devel"},
          {"reference": "openssl"},
          {"reference": "openssl-devel"},
          {"reference": "openssl-libs"},
          {"reference": "openssl-perl"},
          {"reference": "openssl-static"},
          {"reference": "python3-lib389"},
          {"reference": "python3.12-cryptography"},
          {"reference": "ruby"},
          {"reference": "ruby-bundled-gems"},
          {"reference": "ruby-default-gems"},
          {"reference": "ruby-devel"},
          {"reference": "ruby-doc"},
          {"reference": "ruby-irb"},
          {"reference": "ruby-libs"},
          {"reference": "rubygem-abrt"},
          {"reference": "rubygem-abrt-doc"},
          {"reference": "rubygem-bigdecimal"},
          {"reference": "rubygem-bson"},
          {"reference": "rubygem-bson-doc"},
          {"reference": "rubygem-bundler"},
          {"reference": "rubygem-bundler-doc"},
          {"reference": "rubygem-did_you_mean"},
          {"reference": "rubygem-io-console"},
          {"reference": "rubygem-irb"},
          {"reference": "rubygem-json"},
          {"reference": "rubygem-minitest"},
          {"reference": "rubygem-mongo"},
          {"reference": "rubygem-mongo-doc"},
          {"reference": "rubygem-mysql2"},
          {"reference": "rubygem-mysql2-doc"},
          {"reference": "rubygem-net-telnet"},
          {"reference": "rubygem-openssl"},
          {"reference": "rubygem-pg"},
          {"reference": "rubygem-pg-doc"},
          {"reference": "rubygem-power_assert"},
          {"reference": "rubygem-psych"},
          {"reference": "rubygem-racc"},
          {"reference": "rubygem-rake"},
          {"reference": "rubygem-rbs"},
          {"reference": "rubygem-rdoc"},
          {"reference": "rubygem-rexml"},
          {"reference": "rubygem-rss"},
          {"reference": "rubygem-test-unit"},
          {"reference": "rubygem-typeprof"},
          {"reference": "rubygem-xmlrpc"},
          {"reference": "rubygems"},
          {"reference": "rubygems-devel"},
          {"reference": "shim"},
          {"reference": "shim-aa64"},
          {"reference": "shim-ia32"},
          {"reference": "shim-unsigned-aarch64"},
          {"reference": "shim-unsigned-x64"},
          {"reference": "shim-x64"}
        ]
      }
    ]
  },
  "Red Hat Enterprise Linux-9": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "9",
        "pkgs": [
          {"reference": "389-ds-base"},
          {"reference": "389-ds-base-devel"},
          {"reference": "389-ds-base-libs"},
          {"reference": "389-ds-base-snmp"},
          {"reference": "bootc"},
          {"reference": "bootupd"},
          {"reference": "compat-openssl11"},
          {"reference": "edk2"},
          {"reference": "edk2-aarch64"},
          {"reference": "edk2-ovmf"},
          {"reference": "edk2-tools"},
          {"reference": "edk2-tools-doc"},
          {"reference": "firefox"},
          {"reference": "firefox-x11"},
          {"reference": "glx-utils"},
          {"reference": "goose"},
          {"reference": "keylime-agent-rust"},
          {"reference": "mesa-demos"},
          {"reference": "mesa-dri-drivers"},
          {"reference": "mesa-filesystem"},
          {"reference": "mesa-libEGL"},
          {"reference": "mesa-libEGL-devel"},
          {"reference": "mesa-libGL"},
          {"reference": "mesa-libGL-devel"},
          {"reference": "mesa-libGLU"},
          {"reference": "mesa-libGLU-devel"},
          {"reference": "mesa-libOSMesa"},
          {"reference": "mesa-libOSMesa-devel"},
          {"reference": "mesa-libgbm"},
          {"reference": "mesa-libgbm-devel"},
          {"reference": "mesa-libglapi"},
          {"reference": "mesa-libxatracker"},
          {"reference": "mesa-vulkan-drivers"},
          {"reference": "openssl"},
          {"reference": "openssl-devel"},
          {"reference": "openssl-libs"},
          {"reference": "openssl-perl"},
          {"reference": "python3-lib389"},
          {"reference": "python3.12-cryptography"},
          {"reference": "python3.14-cryptography"},
          {"reference": "ruby"},
          {"reference": "ruby-default-gems"},
          {"reference": "ruby-devel"},
          {"reference": "ruby-doc"},
          {"reference": "ruby-libs"},
          {"reference": "rubygem-bigdecimal"},
          {"reference": "rubygem-bundler"},
          {"reference": "rubygem-io-console"},
          {"reference": "rubygem-irb"},
          {"reference": "rubygem-json"},
          {"reference": "rubygem-minitest"},
          {"reference": "rubygem-power_assert"},
          {"reference": "rubygem-psych"},
          {"reference": "rubygem-rake"},
          {"reference": "rubygem-rbs"},
          {"reference": "rubygem-rdoc"},
          {"reference": "rubygem-rexml"},
          {"reference": "rubygem-rss"},
          {"reference": "rubygem-test-unit"},
          {"reference": "rubygem-typeprof"},
          {"reference": "rubygems"},
          {"reference": "rubygems-devel"},
          {"reference": "rust-bootupd"},
          {"reference": "rust-sequoia-sq"},
          {"reference": "shim"},
          {"reference": "shim-aa64"},
          {"reference": "shim-unsigned-aarch64"},
          {"reference": "shim-unsigned-x64"},
          {"reference": "shim-x64"},
          {"reference": "system-reinstall-bootc"},
          {"reference": "trustee-guest-components"}
        ]
      }
    ]
  }
};

var distro_constraints_values = linux_unpatched::get_distro_constraints(distro_constraints_arr:distro_constraints_array);
if (empty_or_null(distro_constraints_values)) audit(AUDIT_HOST_NOT, 'affected');

var third_party_support = get_kb_item('Host/OS/extended-third-party');
if (!empty_or_null(third_party_support)) {
    var third_party_vendors = distro_constraints_values['third_party'];
    if (!empty_or_null(third_party_vendors)) {
        var vendor;
        foreach vendor (third_party_vendors) {
            if (vendor == third_party_support) exit(0, 'A third party management patch is available for this vulnerability from ' + vendor + '.\n');
        }
    }
}

var report = linux_unpatched::check_unpatched_constraints(distro_constraints_values:distro_constraints_values);

if (!empty_or_null(report))
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : report
  );
  exit(0);
}
else
{
  audit(AUDIT_HOST_NOT, 'affected');
}