rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.24 to before 0.10.78, the FFI trampolines behind SslContextBuilder::set_psk_client_callback, set_psk_server_callback, set_cookie_generate_cb, and set_stateless_cookie_generate_cb forwarded the user closure's returned usize directly to OpenSSL without checking it against the &mut [u8] that was handed to the closure. This can lead to buffer overflows and other unintended consequences. This vulnerability is fixed in 0.10.78.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f8e0fbaa84 advisory.

    Rebuild with version 0.10.79 of the `openssl` crate which includes fixes for the following security     issues:

    - CVE-2026-41676 / [GHSA-pqf5-4pqq-29f5](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-pqf5-4pqq-29f5)
    - CVE-2026-41677 / [GHSA-xmgf-hq76-4vx2](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xmgf-hq76-4vx2)
    - CVE-2026-41678 / [GHSA-8c75-8mhr-p7r9](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-8c75-8mhr-p7r9)
    - CVE-2026-41681 / [GHSA-ghm9-cr32-g9qj](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-ghm9-cr32-g9qj)
    - CVE-2026-41898 / [GHSA-hppc-g8h3-xhp3](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-hppc-g8h3-xhp3)
    - CVE-2026-42327 / [GHSA-xp3w-r5p5-63rr](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xp3w-r5p5-63rr)
    - CVE-2026-44662 / [GHSA-xv59-967r-8726](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xv59-967r-8726)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fc7afe14b7 advisory.

    Rebuild with version 0.10.79 of the `openssl` crate which includes fixes for the following security     issues:

    - CVE-2026-41676 / [GHSA-pqf5-4pqq-29f5](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-pqf5-4pqq-29f5)
    - CVE-2026-41677 / [GHSA-xmgf-hq76-4vx2](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xmgf-hq76-4vx2)
    - CVE-2026-41678 / [GHSA-8c75-8mhr-p7r9](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-8c75-8mhr-p7r9)
    - CVE-2026-41681 / [GHSA-ghm9-cr32-g9qj](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-ghm9-cr32-g9qj)
    - CVE-2026-41898 / [GHSA-hppc-g8h3-xhp3](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-hppc-g8h3-xhp3)
    - CVE-2026-42327 / [GHSA-xp3w-r5p5-63rr](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xp3w-r5p5-63rr)
    - CVE-2026-44662 / [GHSA-xv59-967r-8726](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xv59-967r-8726)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b00a9673c8 advisory.

    Rebuild with version 0.10.79 of the `openssl` crate which includes fixes for the following security     issues:

    - CVE-2026-41676 / [GHSA-pqf5-4pqq-29f5](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-pqf5-4pqq-29f5)
    - CVE-2026-41677 / [GHSA-xmgf-hq76-4vx2](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xmgf-hq76-4vx2)
    - CVE-2026-41678 / [GHSA-8c75-8mhr-p7r9](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-8c75-8mhr-p7r9)
    - CVE-2026-41681 / [GHSA-ghm9-cr32-g9qj](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-ghm9-cr32-g9qj)
    - CVE-2026-41898 / [GHSA-hppc-g8h3-xhp3](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-hppc-g8h3-xhp3)
    - CVE-2026-42327 / [GHSA-xp3w-r5p5-63rr](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xp3w-r5p5-63rr)
    - CVE-2026-44662 / [GHSA-xv59-967r-8726](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xv59-967r-8726)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6de0476940 advisory.

    Rebuild with version 0.10.79 of the `openssl` crate which includes fixes for the following security     issues:

    - CVE-2026-41676 / [GHSA-pqf5-4pqq-29f5](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-pqf5-4pqq-29f5)
    - CVE-2026-41677 / [GHSA-xmgf-hq76-4vx2](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xmgf-hq76-4vx2)
    - CVE-2026-41678 / [GHSA-8c75-8mhr-p7r9](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-8c75-8mhr-p7r9)
    - CVE-2026-41681 / [GHSA-ghm9-cr32-g9qj](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-ghm9-cr32-g9qj)
    - CVE-2026-41898 / [GHSA-hppc-g8h3-xhp3](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-hppc-g8h3-xhp3)
    - CVE-2026-42327 / [GHSA-xp3w-r5p5-63rr](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xp3w-r5p5-63rr)
    - CVE-2026-44662 / [GHSA-xv59-967r-8726](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xv59-967r-8726)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-813872cbff advisory.

    Rebuild with version 0.10.79 of the `openssl` crate which includes fixes for the following security     issues:

    - CVE-2026-41676 / [GHSA-pqf5-4pqq-29f5](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-pqf5-4pqq-29f5)
    - CVE-2026-41677 / [GHSA-xmgf-hq76-4vx2](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xmgf-hq76-4vx2)
    - CVE-2026-41678 / [GHSA-8c75-8mhr-p7r9](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-8c75-8mhr-p7r9)
    - CVE-2026-41681 / [GHSA-ghm9-cr32-g9qj](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-ghm9-cr32-g9qj)
    - CVE-2026-41898 / [GHSA-hppc-g8h3-xhp3](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-hppc-g8h3-xhp3)
    - CVE-2026-42327 / [GHSA-xp3w-r5p5-63rr](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xp3w-r5p5-63rr)
    - CVE-2026-44662 / [GHSA-xv59-967r-8726](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xv59-967r-8726)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-aac0adf7f7 advisory.

    Rebuild with version 0.10.79 of the `openssl` crate which includes fixes for the following security     issues:

    - CVE-2026-41676 / [GHSA-pqf5-4pqq-29f5](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-pqf5-4pqq-29f5)
    - CVE-2026-41677 / [GHSA-xmgf-hq76-4vx2](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xmgf-hq76-4vx2)
    - CVE-2026-41678 / [GHSA-8c75-8mhr-p7r9](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-8c75-8mhr-p7r9)
    - CVE-2026-41681 / [GHSA-ghm9-cr32-g9qj](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-ghm9-cr32-g9qj)
    - CVE-2026-41898 / [GHSA-hppc-g8h3-xhp3](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-hppc-g8h3-xhp3)
    - CVE-2026-42327 / [GHSA-xp3w-r5p5-63rr](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xp3w-r5p5-63rr)
    - CVE-2026-44662 / [GHSA-xv59-967r-8726](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xv59-967r-8726)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-30a8b60b25 advisory.

    Rebuild with version 0.10.79 of the `openssl` crate which includes fixes for the following security     issues:

    - CVE-2026-41676 / [GHSA-pqf5-4pqq-29f5](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-pqf5-4pqq-29f5)
    - CVE-2026-41677 / [GHSA-xmgf-hq76-4vx2](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xmgf-hq76-4vx2)
    - CVE-2026-41678 / [GHSA-8c75-8mhr-p7r9](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-8c75-8mhr-p7r9)
    - CVE-2026-41681 / [GHSA-ghm9-cr32-g9qj](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-ghm9-cr32-g9qj)
    - CVE-2026-41898 / [GHSA-hppc-g8h3-xhp3](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-hppc-g8h3-xhp3)
    - CVE-2026-42327 / [GHSA-xp3w-r5p5-63rr](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xp3w-r5p5-63rr)
    - CVE-2026-44662 / [GHSA-xv59-967r-8726](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xv59-967r-8726)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9002354692 advisory.

    Rebuild with version 0.10.79 of the `openssl` crate which includes fixes for the following security     issues:

    - CVE-2026-41676 / [GHSA-pqf5-4pqq-29f5](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-pqf5-4pqq-29f5)
    - CVE-2026-41677 / [GHSA-xmgf-hq76-4vx2](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xmgf-hq76-4vx2)
    - CVE-2026-41678 / [GHSA-8c75-8mhr-p7r9](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-8c75-8mhr-p7r9)
    - CVE-2026-41681 / [GHSA-ghm9-cr32-g9qj](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-ghm9-cr32-g9qj)
    - CVE-2026-41898 / [GHSA-hppc-g8h3-xhp3](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-hppc-g8h3-xhp3)
    - CVE-2026-42327 / [GHSA-xp3w-r5p5-63rr](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xp3w-r5p5-63rr)
    - CVE-2026-44662 / [GHSA-xv59-967r-8726](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xv59-967r-8726)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9695dd338f advisory.

    Rebuild with version 0.10.79 of the `openssl` crate which includes fixes for the following security     issues:

    - CVE-2026-41676 / [GHSA-pqf5-4pqq-29f5](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-pqf5-4pqq-29f5)
    - CVE-2026-41677 / [GHSA-xmgf-hq76-4vx2](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xmgf-hq76-4vx2)
    - CVE-2026-41678 / [GHSA-8c75-8mhr-p7r9](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-8c75-8mhr-p7r9)
    - CVE-2026-41681 / [GHSA-ghm9-cr32-g9qj](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-ghm9-cr32-g9qj)
    - CVE-2026-41898 / [GHSA-hppc-g8h3-xhp3](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-hppc-g8h3-xhp3)
    - CVE-2026-42327 / [GHSA-xp3w-r5p5-63rr](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xp3w-r5p5-63rr)
    - CVE-2026-44662 / [GHSA-xv59-967r-8726](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xv59-967r-8726)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b631ccd99a advisory.

    Rebuild with version 0.10.79 of the `openssl` crate which includes fixes for the following security     issues:

    - CVE-2026-41676 / [GHSA-pqf5-4pqq-29f5](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-pqf5-4pqq-29f5)
    - CVE-2026-41677 / [GHSA-xmgf-hq76-4vx2](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xmgf-hq76-4vx2)
    - CVE-2026-41678 / [GHSA-8c75-8mhr-p7r9](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-8c75-8mhr-p7r9)
    - CVE-2026-41681 / [GHSA-ghm9-cr32-g9qj](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-ghm9-cr32-g9qj)
    - CVE-2026-41898 / [GHSA-hppc-g8h3-xhp3](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-hppc-g8h3-xhp3)
    - CVE-2026-42327 / [GHSA-xp3w-r5p5-63rr](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xp3w-r5p5-63rr)
    - CVE-2026-44662 / [GHSA-xv59-967r-8726](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xv59-967r-8726)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8e53f4aa95 advisory.

    Rebuild with version 0.10.79 of the `openssl` crate which includes fixes for the following security     issues:

    - CVE-2026-41676 / [GHSA-pqf5-4pqq-29f5](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-pqf5-4pqq-29f5)
    - CVE-2026-41677 / [GHSA-xmgf-hq76-4vx2](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xmgf-hq76-4vx2)
    - CVE-2026-41678 / [GHSA-8c75-8mhr-p7r9](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-8c75-8mhr-p7r9)
    - CVE-2026-41681 / [GHSA-ghm9-cr32-g9qj](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-ghm9-cr32-g9qj)
    - CVE-2026-41898 / [GHSA-hppc-g8h3-xhp3](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-hppc-g8h3-xhp3)
    - CVE-2026-42327 / [GHSA-xp3w-r5p5-63rr](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xp3w-r5p5-63rr)
    - CVE-2026-44662 / [GHSA-xv59-967r-8726](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xv59-967r-8726)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-72a1f0b109 advisory.

    Rebuild with version 0.10.79 of the `openssl` crate which includes fixes for the following security     issues:

    - CVE-2026-41676 / [GHSA-pqf5-4pqq-29f5](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-pqf5-4pqq-29f5)
    - CVE-2026-41677 / [GHSA-xmgf-hq76-4vx2](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xmgf-hq76-4vx2)
    - CVE-2026-41678 / [GHSA-8c75-8mhr-p7r9](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-8c75-8mhr-p7r9)
    - CVE-2026-41681 / [GHSA-ghm9-cr32-g9qj](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-ghm9-cr32-g9qj)
    - CVE-2026-41898 / [GHSA-hppc-g8h3-xhp3](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-hppc-g8h3-xhp3)
    - CVE-2026-42327 / [GHSA-xp3w-r5p5-63rr](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xp3w-r5p5-63rr)
    - CVE-2026-44662 / [GHSA-xv59-967r-8726](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xv59-967r-8726)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ba5710ebd0 advisory.

    Rebuild with version 0.10.79 of the `openssl` crate which includes fixes for the following security     issues:

    - CVE-2026-41676 / [GHSA-pqf5-4pqq-29f5](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-pqf5-4pqq-29f5)
    - CVE-2026-41677 / [GHSA-xmgf-hq76-4vx2](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xmgf-hq76-4vx2)
    - CVE-2026-41678 / [GHSA-8c75-8mhr-p7r9](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-8c75-8mhr-p7r9)
    - CVE-2026-41681 / [GHSA-ghm9-cr32-g9qj](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-ghm9-cr32-g9qj)
    - CVE-2026-41898 / [GHSA-hppc-g8h3-xhp3](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-hppc-g8h3-xhp3)
    - CVE-2026-42327 / [GHSA-xp3w-r5p5-63rr](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xp3w-r5p5-63rr)
    - CVE-2026-44662 / [GHSA-xv59-967r-8726](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xv59-967r-8726)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-acda6951c6 advisory.

    Rebuild with version 0.10.79 of the `openssl` crate which includes fixes for the following security     issues:

    - CVE-2026-41676 / [GHSA-pqf5-4pqq-29f5](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-pqf5-4pqq-29f5)
    - CVE-2026-41677 / [GHSA-xmgf-hq76-4vx2](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xmgf-hq76-4vx2)
    - CVE-2026-41678 / [GHSA-8c75-8mhr-p7r9](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-8c75-8mhr-p7r9)
    - CVE-2026-41681 / [GHSA-ghm9-cr32-g9qj](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-ghm9-cr32-g9qj)
    - CVE-2026-41898 / [GHSA-hppc-g8h3-xhp3](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-hppc-g8h3-xhp3)
    - CVE-2026-42327 / [GHSA-xp3w-r5p5-63rr](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xp3w-r5p5-63rr)
    - CVE-2026-44662 / [GHSA-xv59-967r-8726](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xv59-967r-8726)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f55df93b17 advisory.

    Rebuild with version 0.10.79 of the `openssl` crate which includes fixes for the following security     issues:

    - CVE-2026-41676 / [GHSA-pqf5-4pqq-29f5](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-pqf5-4pqq-29f5)
    - CVE-2026-41677 / [GHSA-xmgf-hq76-4vx2](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xmgf-hq76-4vx2)
    - CVE-2026-41678 / [GHSA-8c75-8mhr-p7r9](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-8c75-8mhr-p7r9)
    - CVE-2026-41681 / [GHSA-ghm9-cr32-g9qj](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-ghm9-cr32-g9qj)
    - CVE-2026-41898 / [GHSA-hppc-g8h3-xhp3](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-hppc-g8h3-xhp3)
    - CVE-2026-42327 / [GHSA-xp3w-r5p5-63rr](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xp3w-r5p5-63rr)
    - CVE-2026-44662 / [GHSA-xv59-967r-8726](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xv59-967r-8726)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-95cc69e19a advisory.

    Rebuild with version 0.10.79 of the `openssl` crate which includes fixes for the following security     issues:

    - CVE-2026-41676 / [GHSA-pqf5-4pqq-29f5](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-pqf5-4pqq-29f5)
    - CVE-2026-41677 / [GHSA-xmgf-hq76-4vx2](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xmgf-hq76-4vx2)
    - CVE-2026-41678 / [GHSA-8c75-8mhr-p7r9](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-8c75-8mhr-p7r9)
    - CVE-2026-41681 / [GHSA-ghm9-cr32-g9qj](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-ghm9-cr32-g9qj)
    - CVE-2026-41898 / [GHSA-hppc-g8h3-xhp3](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-hppc-g8h3-xhp3)
    - CVE-2026-42327 / [GHSA-xp3w-r5p5-63rr](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xp3w-r5p5-63rr)
    - CVE-2026-44662 / [GHSA-xv59-967r-8726](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xv59-967r-8726)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-941244e8ee advisory.

    Rebuild with version 0.10.79 of the `openssl` crate which includes fixes for the following security     issues:

    - CVE-2026-41676 / [GHSA-pqf5-4pqq-29f5](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-pqf5-4pqq-29f5)
    - CVE-2026-41677 / [GHSA-xmgf-hq76-4vx2](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xmgf-hq76-4vx2)
    - CVE-2026-41678 / [GHSA-8c75-8mhr-p7r9](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-8c75-8mhr-p7r9)
    - CVE-2026-41681 / [GHSA-ghm9-cr32-g9qj](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-ghm9-cr32-g9qj)
    - CVE-2026-41898 / [GHSA-hppc-g8h3-xhp3](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-hppc-g8h3-xhp3)
    - CVE-2026-42327 / [GHSA-xp3w-r5p5-63rr](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xp3w-r5p5-63rr)
    - CVE-2026-44662 / [GHSA-xv59-967r-8726](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xv59-967r-8726)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6b01755e7d advisory.

    Rebuild with version 0.10.79 of the `openssl` crate which includes fixes for the following security     issues:

    - CVE-2026-41676 / [GHSA-pqf5-4pqq-29f5](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-pqf5-4pqq-29f5)
    - CVE-2026-41677 / [GHSA-xmgf-hq76-4vx2](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xmgf-hq76-4vx2)
    - CVE-2026-41678 / [GHSA-8c75-8mhr-p7r9](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-8c75-8mhr-p7r9)
    - CVE-2026-41681 / [GHSA-ghm9-cr32-g9qj](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-ghm9-cr32-g9qj)
    - CVE-2026-41898 / [GHSA-hppc-g8h3-xhp3](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-hppc-g8h3-xhp3)
    - CVE-2026-42327 / [GHSA-xp3w-r5p5-63rr](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xp3w-r5p5-63rr)
    - CVE-2026-44662 / [GHSA-xv59-967r-8726](https://github.com/rust-openssl/rust-     openssl/security/advisories/GHSA-xv59-967r-8726)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.24 to before 0.10.78,     the FFI trampolines behind SslContextBuilder::set_psk_client_callback, set_psk_server_callback,     set_cookie_generate_cb, and set_stateless_cookie_generate_cb forwarded the user closure's returned usize     directly to OpenSSL without checking it against the &mut [u8] that was handed to the closure. This can     lead to buffer overflows and other unintended consequences. This vulnerability is fixed in 0.10.78.
    (CVE-2026-41898)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
315982	Fedora 43 : rustup (2026-f8e0fbaa84)	Nessus	Fedora Local Security Checks	critical
315978	Fedora 44 : rustup (2026-fc7afe14b7)	Nessus	Fedora Local Security Checks	critical
315977	Fedora 43 : rust-nu (2026-b00a9673c8)	Nessus	Fedora Local Security Checks	critical
315976	Fedora 44 : rust-nu (2026-6de0476940)	Nessus	Fedora Local Security Checks	critical
315371	Fedora 43 : rust-cargo-vendor-filterer (2026-813872cbff)	Nessus	Fedora Local Security Checks	critical
315370	Fedora 44 : rust-rpki (2026-aac0adf7f7)	Nessus	Fedora Local Security Checks	critical
315367	Fedora 43 : keylime-agent-rust (2026-30a8b60b25)	Nessus	Fedora Local Security Checks	critical
315366	Fedora 44 : keylime-agent-rust (2026-9002354692)	Nessus	Fedora Local Security Checks	critical
315364	Fedora 43 : rust-oo7-cli (2026-9695dd338f)	Nessus	Fedora Local Security Checks	critical
315363	Fedora 44 : rust-cargo-vendor-filterer (2026-b631ccd99a)	Nessus	Fedora Local Security Checks	critical
315362	Fedora 44 : rust-oo7-cli (2026-8e53f4aa95)	Nessus	Fedora Local Security Checks	critical
315359	Fedora 43 : rust-sevctl (2026-72a1f0b109)	Nessus	Fedora Local Security Checks	critical
315358	Fedora 43 : rust-ingredients (2026-ba5710ebd0)	Nessus	Fedora Local Security Checks	critical
315355	Fedora 44 : rust-tealdeer (2026-acda6951c6)	Nessus	Fedora Local Security Checks	critical
315354	Fedora 43 : rust-rpki (2026-f55df93b17)	Nessus	Fedora Local Security Checks	critical
315353	Fedora 43 : rust-tealdeer (2026-95cc69e19a)	Nessus	Fedora Local Security Checks	critical
315352	Fedora 44 : rust-sevctl (2026-941244e8ee)	Nessus	Fedora Local Security Checks	critical
315351	Fedora 44 : rust-ingredients (2026-6b01755e7d)	Nessus	Fedora Local Security Checks	critical
310525	Linux Distros Unpatched Vulnerability : CVE-2026-41898	Nessus	Misc.	high

Detections

Analytics

CVE-2026-41898

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

high