Alloy 安全漏洞

Alloy is a library in Rust open sourced by Alloy. A security vulnerability exists in Alloy versions prior to 0.8.26 and prior to 1.4.1, which stems from the mishandling of malformed input by alloydynabi::TypedData, which could lead to a denial-of-service attack...

Fedora: Security Advisory (FEDORA-2025-1ac08db27d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 43 Update: rust-protobuf-codegen-3.7.2-1.fc43

Code generator for rust-protobuf. Includes a library to invoke programmatically e. g. from build.rs and protoc-gen-rs binary...

[SECURITY] Fedora 43 Update: rust-protobuf-parse-3.7.2-1.fc43

Parse .proto files. Files are parsed into a protobuf::descriptor::FileDescriptorSet object using either: pure rust parser no dependencies protoc binary more reliable and compatible with Google's implementation...

[SECURITY] Fedora 43 Update: rust-protobuf-support-3.7.2-1.fc43

Code supporting protobuf implementation. None of code in this crate is public API...

[SECURITY] Fedora 43 Update: rust-maxminddb-0.26.0-1.fc43

Library for reading MaxMind DB format used by GeoIP2 and GeoLite2...

[SECURITY] Fedora 43 Update: mirrorlist-server-3.0.8-1.fc43

The mirrorlist-server uses the data created by MirrorManager2 https://github.com/fedora-infra/mirrormanager2 to answer client request for the "best" mirror. This implementation of the mirrorlist-server is written in Rust. The original version of the mirrorlist-server was part of the MirrorManager...

[SECURITY] Fedora 43 Update: rust-prometheus-0.14.0-1.fc43

Prometheus instrumentation library for Rust applications...

[SECURITY] Fedora 43 Update: rust-prometheus_exporter-0.8.5-5.fc43

Helper libary to export prometheus metrics using tiny-http...

[SECURITY] Fedora 43 Update: rust-monitord-exporter-0.4.1-6.fc43

monitord-exporter is a Prometheus exporter using monitord to export statistic to Prometheus collectors...

[SECURITY] Fedora 43 Update: rust-protobuf-3.7.2-1.fc43

Rust implementation of Google protocol buffers...

CVE-2025-11695

When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Securi...

Security update for rust-keylime

This update for rust-keylime fixes the following issues: CVE-2025-55159: slab: incorrect bounds check in getdisjointmut function can lead to undefined behavior or potential crash due to out-of-bounds access bsc1248006 CVE-2025-3416: openssl: Use-After-Free in Md::fetch and Cipher::fetch in...

MongoDB Rust Driver has certificate validation disabled when `tlsInsecure=False` appears in connection string

When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5...

GHSA-3P6W-GV5G-XJW9 MongoDB Rust Driver has certificate validation disabled when `tlsInsecure=False` appears in connection string

When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5...

EUVD-2025-34070

MongoDB Rust Driver has certificate validation disabled when tlsInsecure=False appears in connection string...

CVE-2025-11695

When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5...

CVE-2025-11695 Configuration may unexpectedly disable certificate validation

When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5...

CVE-2025-11695

CVE-2025-11695 affects the MongoDB Rust Driver prior to v3.2.5. The root cause is that using tlsInsecure=False in a connection string disables certificate validation, enabling potential man-in-the-middle attacks over the network. The vulnerability is characterized with HIGH severity (CVSS metrics...

CVE-2025-11695 Configuration may unexpectedly disable certificate validation

When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5...