xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-15f6a132bf advisory.

    Rebuild

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-eda09a0a51 advisory.

    Rebuild

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-11b6deb0b8 advisory.

    Rebuild

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-5d38037ea1 advisory.

    prometheus-podman-exporter v1.18.1

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7ed37510cc advisory.

    prometheus-podman-exporter v1.18.1

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-89d6e0363e advisory.

    prometheus-podman-exporter v1.18.1

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-29c34ad84a advisory.

    podman-tui release 1.8.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b529f6bfed advisory.

    podman-tui release 1.8.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7a565ff5c2 advisory.

    podman-tui release 1.8.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-94112c7319 advisory.

    Update to 8.28.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a1a4cba6f5 advisory.

    Update to 8.28.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-bac4da5419 advisory.

    This is an upstream security and bugfix release. Please refer to the upstream release notes for versions     [12.0.2](https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/12.0.2.md) and     [12.0.3](https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/12.0.3.md) for     details about changes.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d3cfe902f5 advisory.

    Update to 8.28.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-9b094ba1d6 advisory.

    Add python3-click build dependency

    ----

    Update to upstream version 1.4.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-ba1dacf88c advisory.

    Add python3-click build dependency

    ----

    Update to upstream version 1.4.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-cecd883ce1 advisory.

    Add python3-click build dependency

    ----

    Update to upstream version 1.4.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-a84028b53c advisory.

    Automatic update for gdu-5.31.0-1.fc44.

    ##### **Changelog**

    ```
    * Fri Aug 29 2025 Mikel Olasagasti Uranga <mikel@olasagasti.info> - 5.31.0-1
    - Update to 5.31.0 - Closes rhbz#2370708 rhbz#2391602

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is     possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading     the header. This can lead to increased memory consumption because the current implementation allocates the     full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or     has a checksum to detect such an issue according to the specification. Note that the code recognizes the     issue later while reading the stream, but at this time the memory allocation has already been done. This     issue has been patched in version 0.5.14. (CVE-2025-58058)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
265717	Fedora 41 : checkpointctl (2025-15f6a132bf)	Nessus	Fedora Local Security Checks	medium
265715	Fedora 43 : checkpointctl (2025-eda09a0a51)	Nessus	Fedora Local Security Checks	medium
265714	Fedora 42 : checkpointctl (2025-11b6deb0b8)	Nessus	Fedora Local Security Checks	medium
265692	Fedora 41 : prometheus-podman-exporter (2025-5d38037ea1)	Nessus	Fedora Local Security Checks	medium
265691	Fedora 43 : prometheus-podman-exporter (2025-7ed37510cc)	Nessus	Fedora Local Security Checks	medium
265690	Fedora 42 : prometheus-podman-exporter (2025-89d6e0363e)	Nessus	Fedora Local Security Checks	medium
265689	Fedora 43 : podman-tui (2025-29c34ad84a)	Nessus	Fedora Local Security Checks	medium
265688	Fedora 41 : podman-tui (2025-b529f6bfed)	Nessus	Fedora Local Security Checks	medium
265687	Fedora 42 : podman-tui (2025-7a565ff5c2)	Nessus	Fedora Local Security Checks	medium
265390	Fedora 42 : gitleaks (2025-94112c7319)	Nessus	Fedora Local Security Checks	medium
265385	Fedora 41 : gitleaks (2025-a1a4cba6f5)	Nessus	Fedora Local Security Checks	medium
265384	Fedora 42 : forgejo (2025-bac4da5419)	Nessus	Fedora Local Security Checks	medium
265357	Fedora 43 : gitleaks (2025-d3cfe902f5)	Nessus	Fedora Local Security Checks	medium
264654	Fedora 43 : checkpointctl (2025-9b094ba1d6)	Nessus	Fedora Local Security Checks	medium
264593	Fedora 42 : checkpointctl (2025-ba1dacf88c)	Nessus	Fedora Local Security Checks	medium
264587	Fedora 41 : checkpointctl (2025-cecd883ce1)	Nessus	Fedora Local Security Checks	medium
261233	Fedora 44 : gdu (2025-a84028b53c)	Nessus	Fedora Local Security Checks	medium
260739	Linux Distros Unpatched Vulnerability : CVE-2025-58058	Nessus	Misc.	medium

Detections

Analytics

CVE-2025-58058

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium