The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1a04e4e1ed advisory.

    Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-dd42661781 advisory.

    Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-66bd2898f2 advisory.

    Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d62d7fe77e advisory.

    Fix CVE-2026-31812: Bump tar-rs to .5.45 - Closes rhbz#2449672

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3c1918cbd5 advisory.

    Update to version 0.14.0

    ----

    Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788535576 advisory.

  - tar-rs is a tar archive reading/writing library for Rust. In versions 0.4.44 and below, when unpacking a     tar archive, the tar crate's unpack_dir function uses fs::metadata() to check whether a path that already     exists is a directory. Because fs::metadata() follows symbolic links, a crafted tarball containing a     symlink entry followed by a directory entry with the same name causes the crate to treat the symlink     target as a valid existing directory  and subsequently apply chmod to it. This allows an attacker to     modify the permissions of arbitrary directories outside the extraction root. This issue has been fixed in     version 0.4.45. (CVE-2026-33056)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-c6c01a71f2 advisory.

    Update `rust-astral-tokio-tar` to 0.6.0, fixing CVE-2026-32766. Update `rust-tar` to 0.4.45 to 0.4.45,     fixing CVE-2026-33056. Update `uv` and `python-uv-build` to [0.10.2](https://github.com/astral-     sh/uv/blob/0.10.12/CHANGELOG.md, rebuilding them with the latest `rust-astral-tokio-tar` and `rust-tar`.
    Rebuild `python-fastar` and `maturin` with the latest `rust-tar`.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-49156d1598 advisory.

    Automatic update for stgit-2.5.5-5.fc45.

    ##### **Changelog**

    ```
    * Sun Mar 22 2026 Benjamin A. Beasley <code@musicinmybrain.net> - 2.5.5-5
    - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
    - Fixes RHBZ#2449690
    - Updated the License expression and wrote it one-term-per-line

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
304444	Fedora 42 : rust-cargo-vendor-filterer (2026-1a04e4e1ed)	Nessus	Fedora Local Security Checks	2026/3/31	2026/3/31	medium
304455	Fedora 42 : rust-resctl-bench (2026-dd42661781)	Nessus	Fedora Local Security Checks	2026/3/31	2026/3/31	medium
304640	Fedora 42 : rust-scx_rusty (2026-66bd2898f2)	Nessus	Fedora Local Security Checks	2026/4/2	2026/4/2	medium
304653	Fedora 43 : bpfman (2026-d62d7fe77e)	Nessus	Fedora Local Security Checks	2026/4/2	2026/4/2	high
305027	Fedora 43 : rust-sccache (2026-3c1918cbd5)	Nessus	Fedora Local Security Checks	2026/4/5	2026/4/5	medium
360702	Rocky Linux 9.6 [TuxCare] Security Update: cargo / clippy / rust / rust-analyzer / rust-debugger-common / etc (ALMALINUX9.6:CLSA-2026:1788535576)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	medium
303259	Fedora 45 : maturin / python-fastar / python-uv-build / rust-astral-tokio-tar / etc (2026-c6c01a71f2)	Nessus	Fedora Local Security Checks	2026/3/21	2026/3/26	medium
303298	Fedora 45 : stgit (2026-49156d1598)	Nessus	Fedora Local Security Checks	2026/3/22	2026/3/25	medium

检测

插件搜索

medium

medium

medium

high

medium

medium

medium

medium