Oracle Linux 10 : podman (ELSA-2026-24470)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-24470 advisory. - rebuild for CVE-2026-39822 - fixes CVE-2026-42508 CVE-2026-39829 CVE-2026-39830 CVE-2026-39832 CVE-2026-39835 - fixes CVE-2026-57231 CVE-2026-25681...

Alibaba Cloud Linux 3 : 0216: golang (ALINUX3-SA-2026:0216)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0216 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-27145:...

SUSE SLED15 / SLES15 Security Update : go1.25-openssl (SUSE-SU-2026:3151-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3151-1 advisory. This update for go1.25-openssl fixes the following issues - Update to version go1.25.12 bsc1244485. -...

Oracle Linux 10 : podman (ELSA-2026-18289)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-18289 advisory. - rebuild for CVE-2026-39822 - fixes CVE-2026-42508 CVE-2026-39829 CVE-2026-39830 CVE-2026-39832 CVE-2026-39835 - fixes CVE-2026-57231 CVE-2026-25681...

SUSE-SU-2026:3151-1 Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues - Update to version go1.25.12 bsc1244485. - CVE-2026-25679: net/url: reject IPv6 literal not at start of host bsc1259264. - CVE-2026-27139: os: FileInfo can escape from a Root bsc1259268. - CVE-2026-27142: html/template: URLs in meta conte...

CLEANSTART-2026-ZY59905 Security fixes for CVE-2025-65637, CVE-2025-68121, CVE-2026-33186, CVE-2026-33814, CVE-2026-39822, CVE-2026-39834, CVE-2026-42502, CVE-2026-42504, CVE-2026-42505, CVE-2026-42506, CVE-2026-42507, CVE-2026-46598 applied in versions: 0_git20250325-r0, 0_git20250325-r1

Multiple security vulnerabilities affect the go-discover package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SO86245 Security fixes for CVE-2025-61729, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27137, CVE-2026-27138, CVE-2026-27142, CVE-2026-27145, CVE-2026-39821, CVE-2026-39822, CVE-2026-42502, CVE-2026-42504, CVE-2026-42505, CVE-2026-42506, CVE-2026-42507, CVE-2026-46600, CVE-2026-56852 applied in versions: 0.20.2-r1, 0.22.1-r2, 0.23.0-r0

Multiple security vulnerabilities affect the trust-manager package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VY16523 Security fixes for CVE-2026-39822, CVE-2026-42505, CVE-2026-46600, CVE-2026-56852 applied in versions: 0.8.0-r1

Multiple security vulnerabilities affect the wave package. These issues are resolved in later releases. See references for individual vulnerability details...

Oracle Linux 10 : buildah (ELSA-2026-38494)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-38494 advisory. - rebuild for CVE-2026-39822 - bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830 - Rebuild for CVE-2026-25679 Tenable has extracted the preceding...

SUSE SLED15 / SLES15 Security Update : go1.26-openssl (SUSE-SU-2026:3102-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3102-1 advisory. This update for go1.26-openssl fixes the following issues - Update to version go1.26.5 bsc1255111. -...

Security update for go1.26-openssl

This update for go1.26-openssl fixes the following issues Update to version go1.26.5 bsc1255111. CVE-2026-27145: crypto/x509: split candidate hostname only once bsc1267450. CVE-2026-39822: os: Root escape via symlink plus trailing slash bsc1271014. CVE-2026-42504: mime: quadratic complexity in...

SUSE-SU-2026:3102-1 Security update for go1.26-openssl

This update for go1.26-openssl fixes the following issues - Update to version go1.26.5 bsc1255111. - CVE-2026-27145: crypto/x509: split candidate hostname only once bsc1267450. - CVE-2026-39822: os: Root escape via symlink plus trailing slash bsc1271014. - CVE-2026-42504: mime: quadratic complexi...

SUSE SLES16 Security Update : go1.26-openssl (SUSE-SU-2026:22641-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22641-1 advisory. This update for go1.26-openssl fixes the following issues - Update to version go1.26.5 bsc1255111. - CVE-2026-39822: os: Root esca...

openSUSE 16 Security Update : go1.25 (openSUSE-SU-2026:21324-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21324-1 advisory. This update for go1.25 fixes the following issues - Update to version go1.25.12 bsc1244485. - CVE-2026-25679: net/url: reject IPv6 literal not a...

openSUSE 16 Security Update : go1.26-openssl (openSUSE-SU-2026:21321-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21321-1 advisory. This update for go1.26-openssl fixes the following issues - Update to version go1.26.5 bsc1255111. - CVE-2026-39822: os: Root escape via symlink...

RockyLinux 8 : go-toolset:rhel8 (RLSA-2026:38995)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:38995 advisory. golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 crypto/x509: golang:...

RLSA-2026:38495 Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: os: golang: Go os.Root: Symlink following vulnerability allows directory traversal...

buildah security update

An update is available for buildah. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The buildah package provides a tool for facilitating building OCI container...

podman security update

An update is available for podman. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The podman tool manages pods, container images, and containers. It is part of...

RLSA-2026:38494 Important: buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...