The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-f400579a21 advisory.

    - Update the time crate to version 0.3.47.
    - Update the time-macros crate to version 0.2.27.
    - Update the time-core crate to version 0.1.8.
    - Update the num-conv crate to version 0.2.0.
    - Update the git2 crate to version 0.20.4.
    - Update the bytes crate to version 1.11.1.

    Additionally, this update contains rebuilds of applications affected by security advisories:

    - bytes: [RUSTSEC-2026-0007](https://rustsec.org/advisories/RUSTSEC-2026-0007.html)
    - git2: [RUSTSEC-2026-0008](https://rustsec.org/advisories/RUSTSEC-2026-0008.html)
    - jsonwebtoken: [CVE-2026-25537](https://www.cve.org/CVERecord?id=CVE-2026-25537)
    - time: [RUSTSEC-2026-0009](https://rustsec.org/advisories/RUSTSEC-2026-0009.html)

    All applications that statically link libgit2 via the `git2` Rust bindings were also rebuilt against the     latest version of the `git2` / `libgit2-sys` crates to pull in fixes included in libgit2 between v1.8.1     and v1.9.2.




Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Fedora 43 : asciinema / atuin / bustle / envision / glycin / greetd / helix / etc (2026-f400579a21)

medium Nessus Plugin ID 298446

Version 1.2