The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20610-1 advisory.

    This update for librsvg fixes the following issue:

    - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack     exhaustion (bsc#1257922).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-6388b28850 advisory.

    - Update the time crate to version 0.3.47.
    - Update the time-macros crate to version 0.2.27.
    - Update the time-core crate to version 0.1.8.
    - Update the num-conv crate to version 0.2.0.
    - Update the git2 crate to version 0.20.4.
    - Update the bytes crate to version 1.11.1.

    Additionally, this update contains rebuilds of applications affected by security advisories:

    - bytes: [RUSTSEC-2026-0007](https://rustsec.org/advisories/RUSTSEC-2026-0007.html)
    - git2: [RUSTSEC-2026-0008](https://rustsec.org/advisories/RUSTSEC-2026-0008.html)
    - jsonwebtoken: [CVE-2026-25537](https://www.cve.org/CVERecord?id=CVE-2026-25537)
    - time: [RUSTSEC-2026-0009](https://rustsec.org/advisories/RUSTSEC-2026-0009.html)

    All applications that statically link libgit2 via the `git2` Rust bindings were also rebuilt against the     latest version of the `git2` / `libgit2-sys` crates to pull in fixes included in libgit2 between v1.8.1     and v1.9.2.



Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:1750-1 advisory.

    This update for librsvg fixes the following issue:

    - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack     exhaustion       (bsc#1257922).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20245-1 advisory.

    - Update to version 1.4.1
    - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack     exhaustion (bsc#1257908).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-086a367966 advisory.

    Update `uv` and `python-uv-build` to 0.10.2. There are some minor breaking changes in `uv`; most users     should not have to change anything. See https://github.com/astral-sh/uv/blob/0.10.2/CHANGELOG.md for     details. There are no breaking changes to `python-uv-build`.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:0819-1 advisory.

    This update for virtiofsd fixes the following issue:

    - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack     exhaustion       (bsc#1257912).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:0816-1 advisory.

    This update for virtiofsd fixes the following issue:

    - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack     exhaustion       (bsc#1257912).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1ace5758de advisory.

    Updated to newest version fixing CVEs found in the previous one


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1510 advisory.

    time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is     provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion     is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC     2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario.
    A limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned     rather than exhausting the stack. (CVE-2026-25727)

    Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass     certificate chain verification when processing PKCS7 objects with multiple signers, except the final     signer.

    Customers of AWS services do not need to take action. Applications using AWS-LC should upgrade to AWS-LC     version 1.69.0. (CVE-2026-3336)

    Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to     potentially determine authentication tag validity via timing analysis.



    The impacted implementations are through the EVP CIPHER API: EVP_aes_128_ccm, EVP_aes_192_ccm, and     EVP_aes_256_ccm.



    Customers of AWS services do not need to take action. Applications using AWS-LC should upgrade to AWS-LC     version 1.69.0. (CVE-2026-3337)

    Improper signature validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass     signature verification when processing PKCS7 objects with Authenticated Attributes.



    Customers of AWS services do not need to take action. Applications using AWS-LC should upgrade to AWS-LC     version 1.69.0. (CVE-2026-3338)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
310091	openSUSE 16 Security Update : librsvg (openSUSE-SU-2026:20610-1)	Nessus	SuSE Local Security Checks	2026/4/24	2026/4/24	medium
298573	Fedora 42 : atuin / bustle / envision / glycin / greetd / helix / etc (2026-6388b28850)	Nessus	Fedora Local Security Checks	2026/2/10	2026/2/12	medium
313643	SUSE SLED15 / SLES15 Security Update : librsvg (SUSE-SU-2026:1750-1)	Nessus	SuSE Local Security Checks	2026/5/10	2026/5/10	medium
299653	openSUSE 16 Security Update : wicked2nm (openSUSE-SU-2026:20245-1)	Nessus	SuSE Local Security Checks	2026/2/20	2026/2/25	medium
299742	Fedora 42 : python-uv-build / rust-ambient-id / uv (2026-086a367966)	Nessus	Fedora Local Security Checks	2026/2/22	2026/2/25	medium
301286	SUSE SLED15 / SLES15 Security Update : virtiofsd (SUSE-SU-2026:0819-1)	Nessus	SuSE Local Security Checks	2026/3/6	2026/3/6	medium
301303	SUSE SLES15 / openSUSE 15 Security Update : virtiofsd (SUSE-SU-2026:0816-1)	Nessus	SuSE Local Security Checks	2026/3/6	2026/3/6	medium
301430	Fedora 44 : postgresql16-anonymizer (2026-1ace5758de)	Nessus	Fedora Local Security Checks	2026/3/7	2026/3/7	medium
304590	Amazon Linux 2023 : mount-s3 (ALAS2023-2026-1510)	Nessus	Amazon Linux Local Security Checks	2026/4/1	2026/4/1	high
304855	openSUSE 16 : Feature update for himmelblau (SUSE-SU-openSUSE-FU-2026:20453-1)	Nessus	SuSE Local Security Checks	2026/4/4	2026/4/4	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

high

medium