[SECURITY] Fedora 44 Update: chezmoi-2.73.0-1.fc44

Manage your dotfiles across multiple diverse machines, securely...

Fedora 44 : chezmoi (2026-8ba9889b7c)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8ba9889b7c advisory. Update to 2.73.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: gitleaks, mattermost, chezmoi, grype-fips, gotenberg, k9s, k9s-fips, wolfictl, filebrowser, grype-db, trufflehog-fips, kubescape, zarf, syft-fips, gptscript, mattermost-fips, grype, chainctl, nuclei, undock, cg, kots, syft, trufflehog...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: k9s, grype, gitleaks, wolfictl, chezmoi, nuclei, undock, filebrowser, trufflehog, kots, kubescape, zarf, syft, gptscript...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, kubevela, flux-image-automation-controller, pulumi-language-java, chezmoi, grafana-alloy, argo-events, melange, pulumi-language-dotnet, src-fingerprint, k9s, flux-kustomize-controller, bom, flux-source-controller, dagger, k8sgpt, argo-workflows,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, steampipe, kubevela, flux-image-automation-controller, pulumi-language-java, chezmoi, grafana-alloy, argo-events, melange, witness, pulumi-language-dotnet, gomplate, src-fingerprint, k9s, bom, flux-source-controller, dagger, snyk-cli,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, kubevela, flux-image-automation-controller, pulumi-language-java, chezmoi, grafana-alloy, argo-events, melange, pulumi-language-dotnet, src-fingerprint, k9s, flux-kustomize-controller, bom, flux-source-controller, dagger, k8sgpt, argo-workflows,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: step-ca, flyte, guac, rook, fluent-bit-plugin-loki, chezmoi, argo-events, tkn, sops, tekton-chains, harbor-registry, timestamp-authority, up, flux-kustomize-controller, flux-source-controller, k8sgpt, bank-vaults, argo-workflows, prometheus-operator, zot, ksops,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, chezmoi, ksops, sops, age, litestream...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: steampipe, crossplane-provider-aws-rds, src, terraform-provider-acme, melange, tekton-chains, crossplane-provider-azure-sql, helm, pulumi-language-dotnet, flux-kustomize-controller, gitlab-kas, gitlab-runner, ksops, vault-benchmark, crossplane-provider-family-aws,...

[SECURITY] Fedora 44 Update: chezmoi-2.72.0-1.fc44

Manage your dotfiles across multiple diverse machines, securely...

Fedora 44 : chezmoi (2026-4ca48be67c)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4ca48be67c advisory. Update to 2.72.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-emr, terraform-provider-acme, crossplane-provider-aws-redshiftserverless, crossplane-provider-aws-bedrockagent, crossplane-provider-aws-rds-fips, crossplane-provider-azure-sql, longhorn-cli-fips, juicefs, helm,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-emr, terraform-provider-acme, crossplane-provider-aws-redshiftserverless, crossplane-provider-aws-bedrockagent, crossplane-provider-aws-rds-fips, crossplane-provider-azure-sql, longhorn-cli-fips, juicefs, helm,...

Fedora 44 : chezmoi (2026-905e9afc79)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-905e9afc79 advisory. Update to 2.70.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

GHSA-XJ38-JXC5-RPPX vulnerabilities

Vulnerabilities for packages: kaf, kine, k8s-device-plugin, gitlab-pages, mattermost, coredns, chezmoi, nerdctl, runc, aws-flb-kinesis, aws-flb-cloudwatch, helm, snyk-cli, prometheus-operator, gitlab-kas, zot, kyverno, cloud-provider-aws, spire-server, flux, go, external-secrets-operator, aactl,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: ipfs-cluster, cert-manager-cmctl, grafana-operator, runc, aws-flb-cloudwatch, helm, weaviate, gitlab-kas, vault-benchmark, tofu-controller, buf, mesosphere-vsphere-csi, caddy, vendir, eksctl, go, aactl, scorecard, mailpit, gh, kubernetes-csi-driver-nfs, kubescape,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: kaf, kine, k8s-device-plugin, gitlab-pages, mattermost, coredns, chezmoi, nerdctl, runc, aws-flb-kinesis, aws-flb-cloudwatch, helm, snyk-cli, prometheus-operator, gitlab-kas, zot, kyverno, cloud-provider-aws, spire-server, flux, go, external-secrets-operator, aactl,...

GHSA-M4PR-4J3G-9V7V vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, runc, minio-operator, crossplane-provider-azure-sql, helm, grpcurl, argo-workflows, etcd, kubernetes-replicator, kuberlr, nri-apache, caddy, direnv, cri-tools, aactl, opensearch-k8s-operator, metrics-agent, jitsucom-bulker, git-sync,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, runc, minio-operator, crossplane-provider-azure-sql, helm, grpcurl, argo-workflows, etcd, kubernetes-replicator, kuberlr, nri-apache, caddy, direnv, cri-tools, aactl, opensearch-k8s-operator, metrics-agent, jitsucom-bulker, git-sync,...