Debian Linux - libgit2 - None

Ubuntu Linux - [Unknown description]

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-61dffcfbe9 advisory.

    - Update libgit2 to version 1.9.6.
    - Update the libgit2-sys Rust crate to the corresponding version 0.18.7.

    This includes fixes for various security issues, including - but not limited to:

    - [CVE-2026-53583](https://github.com/libgit2/libgit2/security/advisories/GHSA-h7gc-w2gg-p9xp)
    - [CVE-2026-53584](https://github.com/libgit2/libgit2/security/advisories/GHSA-cw77-j82w-mchm)
    - [CVE-2026-53585](https://github.com/libgit2/libgit2/security/advisories/GHSA-27m5-gxxh-x79j)
    - [CVE-2026-53586](https://github.com/libgit2/libgit2/security/advisories/GHSA-2889-x8f6-mc4x)
    - [CVE-2026-53587](https://github.com/libgit2/libgit2/security/advisories/GHSA-pm24-4jhq-3xvm)

    The Fedora package is not affected by [GHSA-     wfx7-g85r-q6vw](https://github.com/libgit2/libgit2/security/advisories/GHSA-h7gc-w2gg-p9xp) since Fedora     packages always linked the system PCRE2 and did not use the bundled PCRE.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - - Update libgit2 to version 1.9.6. - Update the libgit2-sys Rust crate to the corresponding version     0.18.7.  This includes fixes for various security issues, including - but not limited to:  -     [CVE-2026-53583](https://github.com/libgit2/libgit2/security/advisories/GHSA-h7gc-w2gg-p9xp) -     [CVE-2026-53584](https://github.com/libgit2/libgit2/security/advisories/GHSA-cw77-j82w-mchm) -     [CVE-2026-53585](https://github.com/libgit2/libgit2/security/advisories/GHSA-27m5-gxxh-x79j) -     [CVE-2026-53586](https://github.com/libgit2/libgit2/security/advisories/GHSA-2889-x8f6-mc4x) -     [CVE-2026-53587](https://github.com/libgit2/libgit2/security/advisories/GHSA-pm24-4jhq-3xvm)  The Fedora     package is not affected by [GHSA-     wfx7-g85r-q6vw](https://github.com/libgit2/libgit2/security/advisories/GHSA-h7gc-w2gg-p9xp) since Fedora     packages always linked the system PCRE2 and did not use the bundled PCRE.  (CVE-2026-53586)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-9d59721e9b advisory.

    - Update libgit2 to version 1.9.6.
    - Update the libgit2-sys Rust crate to the corresponding version 0.18.7.

    This includes fixes for various security issues, including - but not limited to:

    - [CVE-2026-53583](https://github.com/libgit2/libgit2/security/advisories/GHSA-h7gc-w2gg-p9xp)
    - [CVE-2026-53584](https://github.com/libgit2/libgit2/security/advisories/GHSA-cw77-j82w-mchm)
    - [CVE-2026-53585](https://github.com/libgit2/libgit2/security/advisories/GHSA-27m5-gxxh-x79j)
    - [CVE-2026-53586](https://github.com/libgit2/libgit2/security/advisories/GHSA-2889-x8f6-mc4x)
    - [CVE-2026-53587](https://github.com/libgit2/libgit2/security/advisories/GHSA-pm24-4jhq-3xvm)

    The Fedora package is not affected by [GHSA-     wfx7-g85r-q6vw](https://github.com/libgit2/libgit2/security/advisories/GHSA-h7gc-w2gg-p9xp) since Fedora     packages always linked the system PCRE2 and did not use the bundled PCRE.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-7c3fc14617 advisory.

    - Update libgit2 to version 1.9.6.
    - Update the libgit2-sys Rust crate to the corresponding version 0.18.7.

    This includes fixes for various security issues, including - but not limited to:

    - [CVE-2026-53583](https://github.com/libgit2/libgit2/security/advisories/GHSA-h7gc-w2gg-p9xp)
    - [CVE-2026-53584](https://github.com/libgit2/libgit2/security/advisories/GHSA-cw77-j82w-mchm)
    - [CVE-2026-53585](https://github.com/libgit2/libgit2/security/advisories/GHSA-27m5-gxxh-x79j)
    - [CVE-2026-53586](https://github.com/libgit2/libgit2/security/advisories/GHSA-2889-x8f6-mc4x)
    - [CVE-2026-53587](https://github.com/libgit2/libgit2/security/advisories/GHSA-pm24-4jhq-3xvm)

    The Fedora package is not affected by [GHSA-     wfx7-g85r-q6vw](https://github.com/libgit2/libgit2/security/advisories/GHSA-h7gc-w2gg-p9xp) since Fedora     packages always linked the system PCRE2 and did not use the bundled PCRE.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
331601	Fedora 43 : libgit2 / rust-libgit2-sys (2026-61dffcfbe9)	Nessus	Fedora Local Security Checks	Local	critical
331302	Linux Distros Unpatched Vulnerability : CVE-2026-53586	Nessus	Misc.	Local	critical
330052	Fedora 44 : libgit2 / rust-libgit2-sys (2026-9d59721e9b)	Nessus	Fedora Local Security Checks	Local	critical
329273	Fedora 45 : libgit2_1.9 / rust-libgit2-sys (2026-7c3fc14617)	Nessus	Fedora Local Security Checks	Local	critical

Detections

Analytics

CVE-2026-53586

critical

Tenable Plugins

critical

critical

critical

critical