Fedora 44 : rust-webpki-root-certs / rust-webpki-roots (2026-6ceed7409a)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-6ceed7409a advisory. Update webpki-roots / webpki-root-certs to version 1.0.11. These releases contain a followup fix for the eMudhra Intermediate CA Compromise. Tenable has...

Fedora 43 : rust-webpki-root-certs / rust-webpki-roots (2026-eb6ed8d276)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-eb6ed8d276 advisory. Update webpki-roots / webpki-root-certs to version 1.0.11. These releases contain a followup fix for the eMudhra Intermediate CA Compromise. Tenable has...

Fedora 45 : rust-rustls-webpki / rust-webpki-root-certs / rust-webpki-roots (2026-ec2ce9d2ef)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ec2ce9d2ef advisory. - Update the rustls-webpki crate to version 0.103.16. - Update the webpki-roots and webpki-root-certs crates to version 1.0.11. This addresses security...

emudhra-weak-keys

emudra-weak-keys This is a Zeek package to detect connections that use eMudhra intermediate CA certificates with compromised/well-known private keys. For more information see, e.g., the original Bugzilla entry or https://emudhra.we-have-a-problem.com/. Please note that this detection only works f...

Fedora 44 : rust-cargo-semver-checks / rust-trustfall-rustdoc-adapter / etc (2026-8e6e09deb9)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-8e6e09deb9 advisory. Rebuild cargo-semver-checks with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, and RUSTSEC-2026-0349, with faster-hex 0.10.1 fo...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 13.0 (python-botocore) security update

An update for python-botocore is now available for Red Hat OpenStack Platform 13 Queens. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Amazon Linux 2 : golang-github-cpuguy83-go-md2man (ALAS-2026-4056)

The version of golang-github-cpuguy83-go-md2man installed on the remote host is prior to 1.0.4-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4056 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certifica...

Medium: golang-github-cpuguy83-md2man

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: cni-plugins

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: runfinch-finch

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: nerdctl

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2026-4049)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300073.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4049 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific...

RHEL 8 : Red Hat OpenStack Platform 16.2 (python-botocore) (RHSA-2026:93044)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:93044 advisory. A low-level interface to a growing number of Amazon Web Services. The botocore package is the foundation for the AWS CLI as well as boto3. Security...

Medium: oci-add-hooks

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Amazon Linux 2023 : amazon-ssm-agent (ALAS2023-2026-3358)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3358 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Medium: cni-plugins

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Amazon Linux 2 : oci-add-hooks (ALASDOCKER-2026-160)

The version of oci-add-hooks installed on the remote host is prior to 0-0.13.20200504git325a340. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2026-160 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific...

Medium: rclone

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: credentials-fetcher

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: yq

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...