Fedora 41 : rust-secret-service / uv (2025-c71f0af9b2)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-c71f0af9b2 advisory. Security fix for CVE-2025-58160: rebuilt uv and python-uv-build with rust-tracing-subscriber 0.3.20. Initial package for rust-secret-service in Fedora 43...

[SECURITY] Fedora 43 Update: ruff-0.11.5-7.fc43

An extremely fast Python linter and code formatter, written in Rust. Ruff aims to be orders of magnitude faster than alternative tools while integrating more functionality behind a single, common interface. Ruff can be used to replace Flake8 plus dozens of plugins, Black, isort, pydocstyle,...

[SECURITY] Fedora 43 Update: rustup-1.28.2-6.fc43

Manage multiple rust installations with ease...

[SECURITY] Fedora 43 Update: rust-monitord-exporter-0.4.1-5.fc43

monitord-exporter is a Prometheus exporter using monitord to export statistic to Prometheus collectors...

[SECURITY] Fedora 43 Update: rust-crypto-auditing-event-broker-0.2.3-5.fc43

Event broker for crypto-auditing project...

[SECURITY] Fedora 43 Update: rust-crypto-auditing-agent-0.2.3-5.fc43

Event collector agent for crypto-auditing project...

[SECURITY] Fedora 43 Update: rust-monitord-0.12.1-3.fc43

monitord is a library and daemon to gather statistics about systemd...

[SECURITY] Fedora 43 Update: rust-crypto-auditing-client-0.2.3-4.fc43

Event broker client for crypto-auditing project...

[SECURITY] Fedora 43 Update: rust-busd-0.3.1-4.fc43

A D-Bus bus broker implementation...

[SECURITY] Fedora 43 Update: maturin-1.8.7-2.fc43

Build and publish crates with pyo3, rust-cpython and cffi bindings as well as rust binaries as python packages...

[SECURITY] Fedora 43 Update: rust-tracing-subscriber-0.3.20-1.fc43

Utilities for implementing and composing tracing subscribers...

[SECURITY] Fedora 43 Update: rust-matchers-0.2.0-1.fc43

Regex matching on character and byte streams...

[SECURITY] Fedora 43 Update: rust-secret-service-5.1.0-1.fc43

Library to interface with Secret Service API...

[SECURITY] Fedora 43 Update: uv-0.8.11-2.fc43

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

CVE-2025-59058 httpsig-rs's HMAC verification is vulnerable to timing attack

httpsig-rs is a Rust implementation of IETF RFC 9421 http message signatures. Prior to version 0.0.19, the HMAC signature comparison is not timing-safe. This makes anyone who uses HS256 signature verification vulnerable to a timing attack that allows the attacker to forge a signature. Version...

CVE-2025-59058 httpsig-rs's HMAC verification is vulnerable to timing attack

httpsig-rs is a Rust implementation of IETF RFC 9421 http message signatures. Prior to version 0.0.19, the HMAC signature comparison is not timing-safe. This makes anyone who uses HS256 signature verification vulnerable to a timing attack that allows the attacker to forge a signature. Version...

[SECURITY] Fedora 41 Update: ruff-0.11.5-7.fc41

An extremely fast Python linter and code formatter, written in Rust. Ruff aims to be orders of magnitude faster than alternative tools while integrating more functionality behind a single, common interface. Ruff can be used to replace Flake8 plus dozens of plugins, Black, isort, pydocstyle,...

[SECURITY] Fedora 42 Update: ruff-0.11.5-7.fc42

An extremely fast Python linter and code formatter, written in Rust. Ruff aims to be orders of magnitude faster than alternative tools while integrating more functionality behind a single, common interface. Ruff can be used to replace Flake8 plus dozens of plugins, Black, isort, pydocstyle,...

[SECURITY] Fedora 42 Update: rust-secret-service-5.1.0-1.fc42

Library to interface with Secret Service API...

Fedora 43 : rust-monitord / rust-monitord-exporter (2025-7b8fe5b994)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-7b8fe5b994 advisory. Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. Tenable has extracted the preceding description block directly from the Fedora security advisory...