Detections
Analytics
openSUSE 16: stgit / stgit-bash-completion / stgit-emacs / stgit-fish-completion / etc (openSUSE-SU-2026:21185-1)
high Nessus Plugin ID 324883
Synopsis
The remote openSUSE host is missing a security update.Description
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21185-1 advisory.Changes in stgit:
- Update to version 2.6.0:
* chore: update changelog for 2.6.0
* fix(import): respect --name verbatim, ignoring stgit.namelength
* test(refresh): use test_when_finished for status.renames cleanup
* expect over unwrap for test
* bugfix: issue #615, add Copied variant to Status enum and move panic to a copied status, add integration test
* docs: Update copyright year
* chore: update gix to 0.83 (CVE-2026-40034, bsc#1266429)
* chore: update compatible transitive dependencies
* chore: update winnow to 1.0.3
* chore: update jiff to 0.2.24
* ci: drop dead CARGO_TARGET_*_STRIP env vars from package build
* ci: soft-pin cargo-deb to ^3.0
* ci: bump cargo-generate-rpm pin to ^0.20.0
* ci: bump GitHub Actions to Node 24 runtimes
* chore: update winnow to 1.0.1
* chore: update clap to 4.6.1
* chore: update gix to 0.81
* chore: bump MSRV to 1.85
* chore: update transitive deps
* chore: update winnow to 0.7.15
* chore: update thiserror to 2.0.18
* chore: update tempfile to 3.27.0
* chore: update tar to 0.4.45
* chore: update serde_json to 1.0.149
* chore: update jiff to 0.2.23
* chore: update indexmap to 2.14.0
* chore: update flate2 to 1.1.9
* chore: update ctrlc to 3.5.2
* chore: update clap to 4.5.61
* chore: update anyhow to 1.0.102
* chore: update anstyle to 1.0.14
- Update to version 2.5.5:
* fix(squash): keep author when squashed commits have same author
- Update to version 2.5.4:
* chore: update changelog for 2.5.4
* chore: update transitive dependencies
* chore: update clap to 4.5.43
* refactor: clippy fixes
* fix: gix 0.73 breaking changes
* chore: update gix to 0.73
* chore: update transitive dependencies
* chore: update serde_json to 1.0.142
* chore: update winnow to 0.7.12
* chore: update clap to 4.5.42
* refactor: clippy lints
* stgit.el: Use `with-eval-after-load' instead of a homemade version
* stgit.el: Use `advice-add' instead of `defadvice'
* stgit.el: Fix various checkdoc warnings
* stgit.el: Support Emacs versions < 31
* feat(bash): complete patches from chosen branch
* chore: update dependencies
* refactor: repair clippy lints
* chore: update clap to 4.5.40
* chore: update anstyle to 1.0.11
* chore: update winnow to 0.7.11
* chore: update anyhow to 1.0.98
* chore: update jiff to 0.2.15
* chore: update tempfile to 3.20.0
* chore: update curl to 0.4.48
* chore: update flate2 to 1.1.2
* chore: update ctrlc to 3.4.7
* chore(deps): bump winnow from 0.7.6 to 0.7.10
* chore(deps): bump clap from 4.5.36 to 4.5.39
* docs: Update copyright year
* chore: update transitive dependencies
* chore: update tempfile to 3.19.1
* chore: update jiff to 0.2.6
* chore: update winnow to 0.7.6
* chore: update gix to 0.71
* chore: update indexmap to 2.9.0
* chore: update is-terminal to 0.4.16
* chore: update ctrlc to 3.4.6
* chore: update bstr to 1.12.0
* chore: update clap to 4.5.36
* chore: update flate2 to 1.1.1
* chore: update serde to 1.0.219
* chore: update serde_json to 1.0.140
* chore: update thiserror to 2.0.12
* chore: update anyhow to 1.0.97
* refactor: repair clippy lint
* stgit.el: Move 'stgit-patch-status-face-alist' before first use
* stgit.el: Silence warnings of missing vc variables
* stgit.el: Replace ad-hoc `make-local-variable' with `defvar-local'
* stgit.el: Use defvar-local instead of make-local-variable
* stgit.el: Enable lexical-binding
* stgit.el: Allow empty descriptions
* stgit.el: Add --no-color flag to 'git log' and 'git show'
* stgit.el: Pass patch into `stgit-process-files'
* chore: update changelog for 2.5.3
* chore: update dependencies
* refactor(stgit.el): use space-based indentation consistently
* refactor: repair clippy lint
* chore(deps): bump tempfile from 3.16.0 to 3.17.0
* chore(deps): bump jiff from 0.2.0 to 0.2.1
* build: statically linked packages for riscv64
* chore: update changelog for 2.5.2
* chore: update jiff to 0.2.0
* chore: update winnow to 0.7.2
* fix: partial_ref_name
* chore: resolve winnow deprecations
* chore: update dependencies
* ci: disable test for windows build
* chore(deps): bump jiff from 0.1.24 to 0.1.29
* chore(deps): bump serde_json from 1.0.135 to 1.0.138
* chore(deps): bump is-terminal from 0.4.13 to 0.4.15
* chore(deps): bump indexmap from 2.7.0 to 2.7.1
* chore(deps): bump clap from 4.5.26 to 4.5.28
* stgit.el: Fix various compile warnings
* stgit.el: Replace depercated cl function calls with new style
* stgit.el: Fix some checkdoc warnings
* stgit.el: Fix emacs pre-pending Summary: to log-edit buffers
* chore: update changelog for 2.5.1
* chore: update release checklist
* ci: use ubuntu-24.04 image
* fix: assure branch creation respects fetch-specs of remotes. (#522)
* chore: update to latest `gix` for improved API (#522)
* chore: update transitive deps
* chore: update anstyle-wincon to 3.0.7
* chore: update bitflags to 2.8.0
* chore: update jiff to 0.1.24
* chore: update transitive deps
* chore: update syn to 2.0.96
* chore: update bitflags to 2.7.0
* chore: update clap to 4.5.26
* chore: update serde_json to 1.0.135
* chore: update thiserror to 2.0.11
* chore: update winnow to 0.6.24
* refactor: repair clippy lints for is_some_and
* test: repair regression with git v2.48
* chore(deps): bump jiff from 0.1.18 to 0.1.21
* chore(deps): bump bstr from 1.11.1 to 1.11.3
* chore(deps): bump tempfile from 3.14.0 to 3.15.0
* chore: update changelog for 2.5.0
* chore: update transitive deps
* chore: update windows-sys to 0.59.0
* chore: update serde to 1.0.217
* chore: update winnow to 0.6.21
* chore: update jiff to 0.1.18
* docs: explain stgit.autosign a bit better
* feat: new name subcommand
* feat: organize subcommands by group in help
* chore: fix warning
* feat: support calling stg rebase without arguments
* tests: add test for rebase without arguments
* chore: update dependencies
* chore: update serde_json to 1.0.134
* chore: update thiserror to 2.0.9
* chore: update anyhow to 1.0.95
* chore: update gix to 0.69
* chore: update changelog for 2.4.13
* chore: update transitive deps
* chore: update jiff to 0.1.15
* chore: update gix to 0.68
* chore: update flate2 to 1.0.35
* chore: update serde to 1.0.216
* chore: update thiserror to 2.0.7
* chore: update indexmap to 2.7.0
* chore: update clap to 4.5.23
* chore: update bstr to 1.11.1
* chore: update anyhow to 1.0.94
* refactor: repair clippy lints
* chore: update thiserror to 2.0.3
* chore: update allocator-api2 to 0.2.19
* chore: update url to 2.5.3
* chore: update cc to 1.1.37
* chore: update anstream to 0.6.18
* chore: update fastrand to 2.2.0
* chore: update libc to 0.2.162
* chore: update curl-sys to 0.4.78+curl-8.11.0
* chore: update tempfile to 3.14.0
* chore: update anyhow to 1.0.93
* chore: update gix to 0.67.0
* chore: update autocfg to 1.4.0
* chore: update unicode-bidi to 0.3.17
* chore: update unicode-ident to 1.0.13
* chore: update redox_syscall to 0.5.7
* chore: update colorchoice to 1.0.3
* chore: update anstyle-query to 1.1.2
* chore: update anstyle-parse to 0.2.6
* chore: update proc-macro2 to 1.0.89
* chore: update unicode-normalization to 0.1.24
* chore: update gix-quote to 0.4.13
* chore: update gix-bitmap to 0.2.12
* chore: update gix-config-value to 0.14.9
* chore: update memmap2 to 0.9.5
* chore: update gix-chunk to 0.4.9
* chore: update pkg-config to 0.3.31
* chore: update cc to 1.1.34
* chore: update anstream to 0.6.17
* chore: update rustix to 0.38.38
* chore: update once_cell to 1.20.2
* chore: update gix-validate to 0.9.1
* chore: update gix-utils to 0.1.13
* chore: update gix-sec to 0.10.9
* chore: update gix-date to 0.9.1
* chore: update gix-command to 0.3.10
* chore: update schannel to 0.1.26
* chore: update openssl-sys to 0.9.104
* chore: update libc to 0.2.161
* chore: update regex-automata to 0.4.8
* chore: update winnow to 0.6.20
* chore: update thiserror to 1.0.67
* chore: update tempfile to 3.13.0
* chore: update tar to 0.4.43
* chore: update serde_json to 1.0.132
* chore: update serde to 1.0.214
* chore: update jiff to 0.1.14
* chore: update indexmap to 2.6.0
* chore: update flate2 to 1.0.34
* chore: update encoding_rs to 0.8.35
* chore: update curl to 0.4.47
* chore: update clap to 4.5.20
* chore: update anyhow to 1.0.92
* chore: update anstyle to 1.0.10
- Update to 2.5.4
* stgit.el: Use with-eval-after-load instead of a homemade version
* stgit.el: Use advice-add instead of defadvice
* stgit.el: Fix various checkdoc warnings
* stgit.el: Support Emacs versions < 31
* stgit.el: Move 'stgit-patch-status-face-alist' before first use
* stgit.el: Silence warnings of missing vc variables
* stgit.el: Replace ad-hoc make-local-variable with defvar-local
* stgit.el: Use defvar-local instead of make-local-variable
* stgit.el: Enable lexical-binding
* stgit.el: Allow empty descriptions
* stgit.el: Add --no-color flag to 'git log' and 'git show'
* stgit.el: Pass patch into stgit-process-files
* chore: update gix to 0.73
* docs: Update copyright year
* feat(bash): complete patches from chosen branch
- Update to 2.5.3
* build: statically linked packages for riscv64
* chore: update dependencies
* refactor(stgit.el): use space-based indentation consistently
- Update to 2.5.2 2025-02-16
* fix(stgit.el): various compile warnings
* fix(stgit.el): Replace depercated cl function calls with new style
* fix(stgit.el): checkdoc warnings
* fix(stgit.el): emacs pre-pending Summary: to log-edit buffers
* chore: update jiff to 0.2.0
* chore: update winnow to 0.7.2
* chore: resolve winnow deprecations
* chore: update dependencies
- Update to 2.5.1 2025-01-18
* fix: assure branch creation respects fetch-specs of remotes (#522)
* ci: ubuntu-24.04 is now used to build release binaries
* chore: gix is updated to 0.70
- Update to 2.5.0 2025-01-01
* feat: new name subcommand
* feat: support calling stg rebase without arguments
* docs: explain stgit.autosign a bit better
* feat: organize subcommands by group in help
- Update to 2.4.13
* fix(squash): preserve consensus author
* chore: update gix to 0.68
Tenable has extracted the preceding description block directly from the SUSE security advisory.
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
Solution
Update the affected packages.See Also
Plugin Details
Severity: High
ID: 324883
File Name: openSUSE-2026-21185-1.nasl
Version: 1.1
Type: Local
Agent: unix
Family: SuSE Local Security Checks
Published: 7/2/2026
Updated: 7/2/2026
Supported Sensors: Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 57.88
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 5.3
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2026-40034
CVSS v3
Risk Factor: High
Base Score: 7.8
Temporal Score: 6.8
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS v4
Risk Factor: High
Base Score: 8.5
Threat Score: 5.9
Threat Vector: CVSS:4.0/E:U
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Vulnerability Information
CPE: cpe:/o:novell:opensuse:16.0, p-cpe:/a:novell:opensuse:stgit-fish-completion, p-cpe:/a:novell:opensuse:stgit, p-cpe:/a:novell:opensuse:stgit-emacs, p-cpe:/a:novell:opensuse:stgit-vim-plugin, p-cpe:/a:novell:opensuse:stgit-bash-completion, p-cpe:/a:novell:opensuse:stgit-zsh-completion
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Exploit Ease: No known exploits are available
Patch Publication Date: 6/30/2026
Vulnerability Publication Date: 5/5/2026
Reference Information
CVE: CVE-2026-40034