[SECURITY] Fedora 44 Update: rust-cargo-0.98.0-1.fc44

Package manager for Rust...

[SECURITY] Fedora 44 Update: rust-anstyle-progress-0.1.4-1.fc44

ANSI escape code progress reporting OSC 9;4...

[SECURITY] Fedora 44 Update: rust-cargo-credential-libsecret-0.5.8-1.fc44

A Cargo credential process that stores tokens with GNOME libsecret...

[SECURITY] Fedora 44 Update: rust-cargo-c-0.10.24-1.fc44

Helper program to build and install c-like libraries...

[SECURITY] Fedora 44 Update: rust-anstyle-hyperlink-1.0.2-1.fc44

ANSI escape code hyperlinks OSC 8...

[SECURITY] Fedora 44 Update: rust-cargo-util-0.2.30-1.fc44

Miscellaneous support code used by Cargo...

threat-finder v0.3.0

OffSeq Threat Finder threat-finder finds the vulnerable software actually running on a host — not what a manifest claims — and tells you which findings are network-reachable. It resolves each running service and, with --scope all, every installed OS package to an exact Package-URL and matches it...

Fedora 43 : rust-h2 (2026-c3233bfa3f)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c3233bfa3f advisory. Update to version 0.4.17. This includes a fix for a low-severity security vulnerability designated RUSTSEC-2026-0258 / GHSA-q83h-524g-xf6h. Tenable has...

CVE-2026-81526: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding it in the request it sends to the server. An actor able to influence that identifier in an application using the driver may cause write operations to be applied to an unintended...

PT-2026-82740

The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding it in the request it sends to the server. An actor able to influence that identifier in an application using the driver may cause write operations to be applied to an unintended...

SUSE SLES15 Security Update : snpguest (SUSE-SU-2026:3791-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3791-1 advisory. This update for snpguest fixes the following issues - Update openssl to v0.10.81 - CVE-2026-41677: openssl: out-of-bounds read in P...

RUSTSEC-2026-0277 Path traversal in apimock-server's file-serving fallback

The file-serving fallback joined a request-derived path onto the configured response directory and checked only that the result existed, never that it stayed inside that directory. A request containing a raw .. segment could read any file readable by the process, returned with HTTP 200. Read-only...

RUSTSEC-2026-0276 Path traversal in apimock's file-serving fallback

The file-serving fallback joined a request-derived path onto the configured response directory and checked only that the result existed, never that it stayed inside that directory. A request containing a raw .. segment could read any file readable by the process, returned with HTTP 200. Read-only...

RUSTSEC-2026-0284 Double free in `Map::into_iter` and an uninitialized `Arc` in `SharedIncin::clear`

Two independent soundness problems, both reachable from safe Rust. Map::intoiter drops builder the caller-supplied hasher H and incin by hand, then commits the ownership transfer with mem::forgetself. H::drop is user code and may panic. If it does, mem::forgetself is skipped and the still-live Ma...

Path traversal in apimock's file-serving fallback

The file-serving fallback joined a request-derived path onto the configured response directory and checked only that the result existed, never that it stayed inside that directory. A request containing a raw .. segment could read any file readable by the process, returned with HTTP 200. Read-only...

Double free in `Map::into_iter` and an uninitialized `Arc` in `SharedIncin::clear`

Two independent soundness problems, both reachable from safe Rust. Map::intoiter drops builder the caller-supplied hasher H and incin by hand, then commits the ownership transfer with mem::forgetself. H::drop is user code and may panic. If it does, mem::forgetself is skipped and the still-live Ma...

mini-diarium v0.7.0

Mini Diarium A local-only journal with serious encryption. Free, open source, and never touches the internet. !Microsoft Storehttps://img.shields.io/badge/Microso...

Fedora 44 : rust-anstyle-hyperlink / rust-anstyle-progress / rust-cargo / etc (2026-77528477c2)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-77528477c2 advisory. - Update cargo-c to version 0.10.24 plus dependency updates. - Initial packaging of the anstyle-hyperlink, anstyle-progress, and cargo-util-terminal crates...

Security update for snpguest

This update for snpguest fixes the following issues Update openssl to v0.10.81 CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate bsc1270541. CVE-2026-41678: openssl: incorrect bounds assertion in aes key wrap in...

SUSE-SU-2026:3791-1 Security update for snpguest

This update for snpguest fixes the following issues - Update openssl to v0.10.81 - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate bsc1270541. - CVE-2026-41678: openssl: incorrect bounds assertion in aes key wrap in...