[SECURITY] Fedora 44 Update: rust-sequoia-chameleon-gnupg-0.13.1-11.fc44

Sequoia's reimplementation of the GnuPG interface...

[SECURITY] Fedora 44 Update: rust-pty-process-0.5.3-1.fc44

Spawn commands attached to a pty...

PT-2026-29156

Name of the Vulnerable Software and Affected Versions go-git versions prior to 5.17.1 Description The go-git library’s index decoder for Git index format version 4 does not properly validate the path name prefix length before applying it to the previously decoded path name. A specially crafted...

Fedora 44 : rust-pty-process / rust-sequoia-chameleon-gnupg (2026-29e1155702)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-29e1155702 advisory. Rebuild rust-sequoia-chameleon-gnupg with rust-tar 0.4.45 for CVE-2026-33056. Update rust-pty-process to 0.5.3, and adjust the dev-dependency in...

CVE-2026-34388

Fleet is open source device management software. Prior to 4.81.0, a denial-of-service vulnerability in Fleet's gRPC Launcher endpoint allows an authenticated host to crash the entire Fleet server process by sending an unexpected log type value. The server terminates immediately, disrupting all...

CVE-2026-33875

Gematik Authenticator securely authenticates users for login to digital health applications. Versions prior to 4.16.0 are vulnerable to authentication flow hijacking, potentially allowing attackers to authenticate with the identities of victim users who click on a malicious deep link. Update...

arkadiyt-projects: SSRF Filter Bypass via Unblocked NAT64 Local-Use IPv6 Prefix (64:ff9b:1::/48)

A vulnerability was discovered in the ssrffilter library version 1.3.0. The library failed to block the NAT64 local-use IPv6 prefix 64:ff9b:1::/48, allowing such addresses to be treated as public. This enabled SSRF requests through /fetch to targets encoded under that prefix when routable in the...

Exploit for CVE-2025-31337

CVE-2025-31337 Security Advisory CVE ID: CVE-2025-313...

[SECURITY] Fedora 44 Update: rust-reqsign-http-send-reqwest-4.0.0-1.fc44

Reqwest-based HTTP client implementation for reqsign...

[SECURITY] Fedora 44 Update: rust-rustls-native-certs-0.8.3-1.fc44

Rustls-native-certs allows rustls to use the platform native certificate store...

[SECURITY] Fedora 44 Update: rust-reqsign-file-read-tokio-3.0.0-1.fc44

Tokio-based file reader implementation for reqsign...

[SECURITY] Fedora 44 Update: rust-native-tls-0.2.18-1.fc44

A wrapper over a platform's native TLS implementation...

[SECURITY] Fedora 44 Update: rust-astral_async_http_range_reader-0.10.0-1.fc44

A library for streaming reading of files over HTTP using range requests...

[SECURITY] Fedora 44 Update: rust-reqsign-aws-v4-3.0.0-1.fc44

AWS SigV4 signing implementation for reqsign...

[SECURITY] Fedora 44 Update: rust-astral-reqwest-retry-0.9.1-1.fc44

Retry middleware for reqwest...

[SECURITY] Fedora 44 Update: rust-reqsign-azure-storage-3.0.0-1.fc44

Azure Storage signing implementation for reqsign...

[SECURITY] Fedora 44 Update: rust-reqsign-aliyun-oss-3.0.0-1.fc44

Aliyun OSS signing implementation for reqsign...

[SECURITY] Fedora 44 Update: rust-openssl-probe0.1-0.1.6-1.fc44

Tool for helping to find SSL certificate locations on the system for OpenSSL...

[SECURITY] Fedora 44 Update: python-uv-build-0.11.2-1.fc44

This package is a slimmed down version of uv containing only the build backend...

[SECURITY] Fedora 44 Update: perl-XML-Parser-2.51-1.fc44

This module provides ways to parse XML documents. It is built on top of XML::Parser::Expat, which is a lower level interface to James Clark's expat library. Each call to one of the parsing methods creates a new instance of XML::Parser::Expat which is then used to parse the document. Expat options...