The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-fd61fd216d advisory.

    - Update the time crate to version 0.3.47.
    - Update the time-macros crate to version 0.2.27.
    - Update the time-core crate to version 0.1.8.
    - Update the num-conv crate to version 0.2.0.
    - Update the git2 crate to version 0.20.4.
    - Update the bytes crate to version 1.11.1.

    Additionally, this update contains rebuilds of applications affected by security advisories:

    - bytes: [RUSTSEC-2026-0007](https://rustsec.org/advisories/RUSTSEC-2026-0007.html)
    - git2: [RUSTSEC-2026-0008](https://rustsec.org/advisories/RUSTSEC-2026-0008.html)
    - jsonwebtoken: [CVE-2026-25537](https://www.cve.org/CVERecord?id=CVE-2026-25537)
    - time: [RUSTSEC-2026-0009](https://rustsec.org/advisories/RUSTSEC-2026-0009.html)

    All applications that statically link libgit2 via the `git2` Rust bindings were also rebuilt against the     latest version of the `git2` / `libgit2-sys` crates to pull in fixes included in libgit2 between v1.8.1     and v1.9.2.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Fedora 45 : asciinema / atuin / bustle / envision / glycin / greetd / helix / etc (2026-fd61fd216d)

medium Nessus Plugin ID 298322

Version 1.1