[SECURITY] Fedora 43 Update: rust-cargo-c-0.10.24-2.fc43

Helper program to build and install c-like libraries...

[SECURITY] Fedora 44 Update: rust-cargo-c-0.10.24-1.fc44

Helper program to build and install c-like libraries...

PT-2026-82742

A MongoDB C driver document-replacement code path omits the element-name/shape validation that the equivalent write paths apply, so a value supplied as a replacement is forwarded to the server without neutralization of query-language special elements. An application that passes untrusted,...

PT-2026-82744

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...

CVE-2026-81530: Insertion of Sensitive Information into Log File

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...

PT-2026-82741

A NoSQL/expression injection weakness exists in the LINQ-to-aggregation query translation layer of the MongoDB C Driver, in both aggregation expression and query filter translation. When application-supplied values are embedded in certain query constructs, special elements contained within those...

PT-2026-82743

Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description Improper neutralization of delimiters during connection-URL construction enables connection-option injection. This occurs when an application passes untrusted text into the driver's...

PT-2026-82738

Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description A weakness exists where the driver fails to sanitize special elements in caller-supplied database and collection name components during the composition of the target namespace for an...

net-p2p/c-lightning -- unknown vulnerability

Core Lightning team reports: This point release includes fixes for vulnerabilities responsibly reported by a number of sources. It also comes at a time when increasingly capable AI models are being used to identify potential vulnerabilities in open-source code, significantly increasing the volume...

CVE-2026-81527: Improper Neutralization of Special Elements in Data Query Logic

A NoSQL/expression injection weakness exists in the LINQ-to-aggregation query translation layer of the MongoDB C Driver, in both aggregation expression and query filter translation. When application-supplied values are embedded in certain query constructs, special elements contained within those...

CVE-2026-81529: Improper Neutralization of Argument Delimiters in a Command

Improper neutralization of delimiters in connection-URL construction allows connection-option injection in the MongoDB C Driver. When an application passes untrusted text into the driver's connection-URL builder and round-trips the builder back into a client configuration, the untrusted text is...

PT-2026-82736

Name of the Vulnerable Software and Affected Versions MongoDB C++ Driver affected versions not specified Description A weakness in the handling of caller-supplied namespace identifiers allows the embedding of special characters. If an application constructs a namespace identifier using untrusted...

CVE-2026-81522: Improper Encoding or Escaping of Output

A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embedded in those identifiers. An application that builds a namespace identifier from untrusted input without validating it may therefore have its operation directed at a different...

Fedora 43 : rust-anstyle-hyperlink / rust-anstyle-progress / rust-cargo / etc (2026-ce685f40fe)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ce685f40fe advisory. - Update cargo-c to version 0.10.24 plus dependency updates. - Initial packaging of the anstyle-hyperlink, anstyle-progress, and cargo-util-terminal crates...

c-ares-devel-1.34.8-1.1 on GA media (moderate)

c-ares-devel-1.34.8-1.1 on GA media Announcement ID: openSUSE-SU-2026:11593-1 Rating: moderate Cross-References: CVE-2026-33630 CVE-2026-69184 CVE-2026-69186 CVSS scores: CVE-2026-33630 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-33630 SUSE : 8.7...

Security update for xmlrpc-c (moderate)

openSUSE security update: security update for xmlrpc-c ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21633-1 Rating: moderate References: bsc1272769 Cross-References: CVE-2026-15928 CVSS scores: CVE-2026-15928 SUSE : 5.4...

PT-2026-82796

Name of the Vulnerable Software and Affected Versions cpp-httplib versions 0.33.0 through 0.50.0 Description The TLS-enabled WebSocket client contains a use-after-free flaw. In the shutdown and close function, the SSL object is freed and its pointer is cleared; however, the subsequent WebSocket...

CVE-2026-81524: Improper Control of Resource Identifiers

A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have...

CVE-2026-81528: Improper Neutralization of Special Elements in Data Query Logic

A MongoDB C driver document-replacement code path omits the element-name/shape validation that the equivalent write paths apply, so a value supplied as a replacement is forwarded to the server without neutralization of query-language special elements. An application that passes untrusted,...

PT-2026-86906

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.3 through 2.44 Description Converting crafted EUC JISX0213 input to UCS-4 or internal wide character encoding using functions such as iconv can cause the calling application to hang. This occurs because certain EUC...