[SECURITY] Fedora 43 Update: rust-anstyle-hyperlink-1.0.2-1.fc43

ANSI escape code hyperlinks OSC 8...

[SECURITY] Fedora 44 Update: rust-cargo-util-schemas-0.14.1-1.fc44

Deserialization schemas for Cargo...

[SECURITY] Fedora 44 Update: rust-cargo-util-terminal-0.1.0-1.fc44

Cargo's terminal rendering...

[SECURITY] Fedora 44 Update: rust-rustfix-0.9.7-1.fc44

Automatically apply the suggestions made by rustc...

[SECURITY] Fedora 44 Update: rust-crates-io-0.41.0-1.fc44

Helpers for interacting with crates.io...

[SECURITY] Fedora 44 Update: rust-anstyle-hyperlink-1.0.2-1.fc44

ANSI escape code hyperlinks OSC 8...

[SECURITY] Fedora 44 Update: rust-cargo-0.98.0-1.fc44

Package manager for Rust...

[SECURITY] Fedora 44 Update: rust-cargo-c-0.10.24-1.fc44

Helper program to build and install c-like libraries...

[SECURITY] Fedora 44 Update: rust-anstyle-progress-0.1.4-1.fc44

ANSI escape code progress reporting OSC 9;4...

[SECURITY] Fedora 44 Update: rust-cargo-credential-libsecret-0.5.8-1.fc44

A Cargo credential process that stores tokens with GNOME libsecret...

[SECURITY] Fedora 44 Update: rust-cargo-util-0.2.30-1.fc44

Miscellaneous support code used by Cargo...

threat-finder v0.3.0

OffSeq Threat Finder threat-finder finds the vulnerable software actually running on a host — not what a manifest claims — and tells you which findings are network-reachable. It resolves each running service and, with --scope all, every installed OS package to an exact Package-URL and matches it...

PT-2026-82740

The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding it in the request it sends to the server. An actor able to influence that identifier in an application using the driver may cause write operations to be applied to an unintended...

SUSE SLES15 Security Update : snpguest (SUSE-SU-2026:3791-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3791-1 advisory. This update for snpguest fixes the following issues - Update openssl to v0.10.81 - CVE-2026-41677: openssl: out-of-bounds read in P...

CVE-2026-81526: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding it in the request it sends to the server. An actor able to influence that identifier in an application using the driver may cause write operations to be applied to an unintended...

Fedora 43 : rust-h2 (2026-c3233bfa3f)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c3233bfa3f advisory. Update to version 0.4.17. This includes a fix for a low-severity security vulnerability designated RUSTSEC-2026-0258 / GHSA-q83h-524g-xf6h. Tenable has...

Path traversal in apimock's file-serving fallback

The file-serving fallback joined a request-derived path onto the configured response directory and checked only that the result existed, never that it stayed inside that directory. A request containing a raw .. segment could read any file readable by the process, returned with HTTP 200. Read-only...

Double free in `Map::into_iter` and an uninitialized `Arc` in `SharedIncin::clear`

Two independent soundness problems, both reachable from safe Rust. Map::intoiter drops builder the caller-supplied hasher H and incin by hand, then commits the ownership transfer with mem::forgetself. H::drop is user code and may panic. If it does, mem::forgetself is skipped and the still-live Ma...

RUSTSEC-2026-0276 Path traversal in apimock's file-serving fallback

The file-serving fallback joined a request-derived path onto the configured response directory and checked only that the result existed, never that it stayed inside that directory. A request containing a raw .. segment could read any file readable by the process, returned with HTTP 200. Read-only...

RUSTSEC-2026-0277 Path traversal in apimock-server's file-serving fallback

The file-serving fallback joined a request-derived path onto the configured response directory and checked only that the result existed, never that it stayed inside that directory. A request containing a raw .. segment could read any file readable by the process, returned with HTTP 200. Read-only...