Fedora 44 : python-orjson (2026-dd78d37ecf)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-dd78d37ecf advisory. Update PyO3 to 0.29, fixing RUSTSEC-2026-0194 and RUSTSEC-2026-0195. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 44 : python-libcst (2026-17c484fafa)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-17c484fafa advisory. Update to 1.8.6. Build with PyO3 fixes RUSTSEC-2026-0176, RUSTSEC-2026-0177. Tenable has extracted the preceding description block directly from the Fedora...

Fedora 44 : python-bcrypt (2026-65b6511854)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-65b6511854 advisory. Update PyO3 to 0.29; addresses RUSTSEC-2026-0176 and RUSTSEC-2026-0177 Tenable has extracted the preceding description block directly from the Fedora securit...

Fedora 43 : python-bcrypt (2026-31ec71cf0b)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-31ec71cf0b advisory. Update PyO3 to 0.29; addresses RUSTSEC-2026-0176 and RUSTSEC-2026-0177 Tenable has extracted the preceding description block directly from the Fedora securit...

Fedora 43 : python-tiktoken (2026-8abedbcc4f)

"The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8abedbcc4f advisory. Update to upstream release 0.13.0 Tenable, Inc. The descriptive text and package checks in this plugin were extracted from Fedora Security Advisory...

Fedora 44 : python-tiktoken (2026-e0bcb90c9f)

"The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e0bcb90c9f advisory. Update to upstream release 0.13.0 Tenable, Inc. The descriptive text and package checks in this plugin were extracted from Fedora Security Advisory...

Fedora 44 : breezy (2026-c872d91489)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c872d91489 advisory. Allow PyO3 0.29, which fixes RUSTSEC-2026-0194 and RUSTSEC-2026-0195. Update to 3.3.21, including upstream fixes for compatibility with dulwich 0.25 and late...

Fedora 44 : python-pendulum (2026-2559684e58)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2559684e58 advisory. Update to 3.2.0 final. Update PyO3 to 0.29, fixing RUSTSEC-2026-0176 and RUSTSEC-2026-0177. Tenable has extracted the preceding description block directly fr...

[SECURITY] Fedora 43 Update: python-rignore-0.7.6-7.fc43

rignore is a Python module that provides a high-performance, Rust-powered file system traversal functionality. It wraps the Rust ignore crate using PyO3, offering an efficient way to walk through directories while respecting various ignore rules...

Fedora 44 : python-fastar (2026-b1bcd1a48c)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b1bcd1a48c advisory. Update to PyO3 0.29, with fixes for RUSTSEC-2026-0176 and RUSTSEC-2026-0177. Tenable has extracted the preceding description block directly from the Fedora...

Fedora 43 : python-fastar (2026-0f558e63db)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0f558e63db advisory. Update to PyO3 0.29, with fixes for RUSTSEC-2026-0176 and RUSTSEC-2026-0177. Tenable has extracted the preceding description block directly from the Fedora...

Fedora 45 : python-safetensors / rust-safetensors (2026-9db41d0ada)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-9db41d0ada advisory. Update safetensors to 0.8.0 and build the Python extension using PyO3 0.29, which fixes RUSTSEC-2026-0176 and RUSTSEC-2026-0177. Tenable has extracted the...

Fedora 43 : python-rignore (2026-8a19b048cc)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8a19b048cc advisory. Update to PyO3 0.29, with fixes for RUSTSEC-2026-0176 and RUSTSEC-2026-0177. Tenable has extracted the preceding description block directly from the Fedora...

Fedora 44 : python-cramjam (2026-ed6d2b806a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ed6d2b806a advisory. Update to PyO3 0.29, with fixes for RUSTSEC-2026-0176 and RUSTSEC-2026-0177. Tenable has extracted the preceding description block directly from the Fedora...

Fedora 44 : python-rpds-py (2026-93da8dcc2c)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-93da8dcc2c advisory. Update to PyO3 0.29, with fixes for RUSTSEC-2026-0176 and RUSTSEC-2026-0177. Tenable has extracted the preceding description block directly from the Fedora...

abd-clam (>=0.21.8, <=0.25.3), abe_gpsw (>=0.8.0, <=2.0.0) +639 more potentially affected by unknown CVE via pyo3 (>=0.2.7, <=0.28.3)

pyo3 CARGO version =0.2.7, =0.21.8, =0.8.0, =0.12.0, =0.2.1, =0.3.0, =0.1.0, =0.1.2, =2.0.0-rc.1, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14 and more Source cves: unknown CVE Source advisory: OSV:GHSA-CHGR-C6PX-7XPP...

PyO3 has a missing `Sync` bound on `PyCFunction::new_closure` closures

PyCFunction::newclosure and the temporary newclosurebound complement in the 0.21–0.22 series required the supplied closure to be Send + 'static but not Sync. The resulting PyCFunction is a Python callable that can be invoked from any Python thread, which means the closure may be called concurrent...

abd-clam (>=0.21.8, <=0.25.3), abe_gpsw (>=0.8.0, <=2.0.0) +639 more potentially affected by unknown CVE via pyo3 (>=0.2.7, <=0.28.3)

pyo3 CARGO version =0.2.7, =0.21.8, =0.8.0, =0.12.0, =0.2.1, =0.3.0, =0.1.0, =0.1.2, =2.0.0-rc.1, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14 and more Source cves: unknown CVE Source advisory: OSV:GHSA-36HH-V3QG-5JQ4...

GHSA-36HH-V3QG-5JQ4 PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators

PyO3 0.24.0 added optimized implementations of Iterator::nth and DoubleEndedIterator::nthback for the BoundListIterator and BoundTupleIterator types. These implementations computed the target index using unchecked usize addition index + n before bounds-checking against the sequence length, then...

abd-clam (>=0.21.8, <=0.25.3), abe_gpsw (>=0.8.0, <=2.0.0) +639 more potentially affected by unknown CVE via pyo3 (>=0.2.7, <=0.28.3)

pyo3 CARGO version =0.2.7, =0.21.8, =0.8.0, =0.12.0, =0.2.1, =0.3.0, =0.1.0, =0.1.2, =2.0.0-rc.1, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0177...