9797 matches found
Fedora 43 : python-uv-build / rust-secret-service / uv (2025-5acdf83593)
The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-5acdf83593 advisory. Security fix for CVE-2025-58160: rebuilt uv and python-uv-build with rust-tracing-subscriber 0.3.20. Initial package for rust-secret-service in Fedora 43...
Five Minutes of DDoS Brings Down Tor: DDoS Attacks on the Tor Directory Protocol and Mitigations
The Tor network offers network anonymity to its users by routing their traffic through a sequence of relays. A group of nine directory authorities maintains information about all available relay nodes using a distributed directory protocol. We observe that the current protocol makes a steep...
PT-2025-37315
Name of the Vulnerable Software and Affected Versions: httpsig-rs versions prior to 0.0.19 Description: httpsig-rs is a Rust implementation of IETF RFC 9421 http message signatures. The HMAC signature comparison is not timing-safe in versions prior to 0.0.19, potentially allowing an attacker to...
Fedora 43 : rust-busd (2025-f4e467b889)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-f4e467b889 advisory. Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. Tenable has extracted the preceding description block directly from the Fedora security advisory...
better-config-loader (>=0.1.4 <=0.2.4), brainwires-skills (>=0.2.0 <=0.6.0) +61 more potentially affected by unknown CVE via serde_yml (>=0.0.10 <=0.0.9)
serdeyml CARGO version =0.0.10, =0.1.4, =0.2.0, =0.33.0, =0.14.0, =0.14.0, =0.3.0, =0.1.5, =0.9.0, =0.3.0, =0.8.0, =0.3.2, =0.1.0, =0.6.1 - fastconfig =1.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0068...
RUSTSEC-2025-0068 serde_yml crate is unsound and unmaintained
Using serdeyml::ser::Serializer.emitter can cause a segmentation fault, which is unsound. The GitHub project for serdeyml was archived after unsoundness issues were raised. If you rely on this crate, it is highly recommended switching to a maintained alternative. Recommended alternatives -...
[SECURITY] Fedora 41 Update: rust-monitord-exporter-0.4.1-2.fc41
monitord-exporter is a Prometheus exporter using monitord to export statistic to Prometheus collectors...
[SECURITY] Fedora 41 Update: rustup-1.28.2-6.fc41
Manage multiple rust installations with ease...
[SECURITY] Fedora 41 Update: rust-monitord-0.10.1-2.fc41
monitord is a library and daemon to gather statistics about systemd...
[SECURITY] Fedora 41 Update: rust-crypto-auditing-event-broker-0.2.3-3.fc41
Event broker for crypto-auditing project...
[SECURITY] Fedora 41 Update: rust-crypto-auditing-client-0.2.3-2.fc41
Event broker client for crypto-auditing project...
[SECURITY] Fedora 41 Update: rust-crypto-auditing-agent-0.2.3-3.fc41
Event collector agent for crypto-auditing project...
[SECURITY] Fedora 41 Update: maturin-1.8.7-2.fc41
Build and publish crates with pyo3, rust-cpython and cffi bindings as well as rust binaries as python packages...
[SECURITY] Fedora 41 Update: rust-busd-0.3.1-4.fc41
A D-Bus bus broker implementation...
[SECURITY] Fedora 42 Update: rustup-1.28.2-6.fc42
Manage multiple rust installations with ease...
[SECURITY] Fedora 42 Update: rust-monitord-0.12.1-3.fc42
monitord is a library and daemon to gather statistics about systemd...
[SECURITY] Fedora 42 Update: rust-crypto-auditing-client-0.2.3-4.fc42
Event broker client for crypto-auditing project...
[SECURITY] Fedora 42 Update: rust-monitord-exporter-0.4.1-5.fc42
monitord-exporter is a Prometheus exporter using monitord to export statistic to Prometheus collectors...