[SECURITY] Fedora 45 Update: python-ovirt-engine-sdk4-4.6.2-17.fc45

This package contains the Python SDK for version 4 of the oVirt Engine API...

[SECURITY] Fedora 45 Update: python-lxml-6.1.1-7.fc45

lxml is a Pythonic, mature binding for the libxml2 and libxslt libraries. It provides safe and convenient access to these libraries using the ElementTree It extends the ElementTree API significantly to offer support for XPath, RelaxNG, XML Schema, XSLT, C14N and much more...

[SECURITY] Fedora 45 Update: python-igraph-1.0.0-6.fc45

This module extends Python with a Graph class which is capable of handling arbitrary directed and undirected graphs with thousands of nodes and millions of edges. Since the module makes use of the open source igraph library written in almost 100% pure C, it is blazing fast and outperforms most...

[SECURITY] Fedora 45 Update: python-html5-parser-0.4.12-14.fc45

A fast, standards compliant, C based, HTML 5 parser for python...

[SECURITY] Fedora 45 Update: python-firehose-0.5-40.fc45

"firehose" is a Python package intended for managing the results from code analysis tools e.g. compiler warnings, static analysis, linters, etc. It currently provides parsers for the output of gcc, clang-analyzer and cppcheck. These parsers convert the results into a common data model of Python...

[SECURITY] Fedora 45 Update: mapnik-4.3.1-2.fc45

Mapnik is a Free Toolkit for developing mapping applications. It's written in C++ and there are Python bindings to facilitate fast-paced agile development. It can comfortably be used for both desktop and web development, which was something I wanted from the beginning. Mapnik is about making...

[SECURITY] Fedora 45 Update: compizconfig-python-0.8.18-24.fc45

The Compiz Project brings 3D desktop visual effects that improve usability of the X Window System and provide increased productivity though plugins and themes contributed by the community giving a rich desktop experience. This package contains bindings to configure Compiz's plugins and the...

Linux Distros Unpatched Vulnerability : CVE-2026-94634

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of resources without limits or throttling, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python bindings. This...

Linux Distros Unpatched Vulnerability : CVE-2026-94654

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Loop with unreachable exit condition 'infinite loop' vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0. Users are...

Fedora 44 : python-cssselect2 / weasyprint (2026-309c4b78a1)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-309c4b78a1 advisory. Update to latest upstream version of WeasyPrint and python-cssselect2. This update fixes CVE-2026-55073 Server-Side Request Forgery Tenable has extracted the...

Fedora 44 : python-httpx2 (2026-a69588e2cd)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a69588e2cd advisory. Update httpcore2 and httpx2 to 2.13.1. This is a security fix for CVE-2026-84378, CVE-2026-84379, and CVE-2026-84380. Tenable has extracted the...

Linux Distros Unpatched Vulnerability : CVE-2026-66858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough ca...

Linux Distros Unpatched Vulnerability : CVE-2026-66055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift C++, Java, Go, netstd, Python and Delphi bindings. This issue affects Apache...

Fedora 43 : buildstream (2026-e14ea5695c)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e14ea5695c advisory. CVE-2026-82331 CWE-59: tar source plugin symlink escape while fetching a malicious tarball Python = 3.12, so the packaged /usr/bin/bst was already using...

Linux Distros Unpatched Vulnerability : CVE-2026-104851

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fsspec is a specification and Python implementation framework for filesystem interfaces. From 0.9.0 until 2026.6.0,...

SUSE SLED15 / SLES15 Security Update : python-anyio (SUSE-SU-2026:4416-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4416-1 advisory. - CVE-2026-63374: : TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing...

Linux Distros Unpatched Vulnerability : CVE-2026-85087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper certificate validation, Return of wrong status code vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0...

CVE-2026-104873

LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From 0.1.45 until 0.4.4, the langgraph-sdk resource-scoped authorization decorators @auth.on.threads, @auth.on.assistants, and @auth.on.crons ignore the...

CVE-2026-104873 LangGraph SDK custom auth silently ignores actions= on resource decorators

LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From 0.1.45 until 0.4.4, the langgraph-sdk resource-scoped authorization decorators @auth.on.threads, @auth.on.assistants, and @auth.on.crons ignore the...

CVE-2026-104873

The LangGraph Python SDK is vulnerable to an authorization bypass in versions 0.1.45 through 0.4.3 . The root cause is that resource-scoped authorization decorators (@auth.on.threads , @auth.on.assistants , and @auth.on.crons ) ignore the actions argument, registering handlers for every action on...