[SECURITY] Fedora 44 Update: rust-git-interactive-rebase-tool-2.4.1-17.fc44

Full-featured terminal-based sequence editor for Git interactive rebase...

[SECURITY] Fedora 44 Update: rust-git-delta-0.19.1-7.fc44

A syntax-highlighting pager for git...

Fedora 44 : rust-bat / rust-git-delta / rust-git-interactive-rebase-tool / etc (2026-74c4a6f82e)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-74c4a6f82e advisory. Rebuild applications that use libgit2 via the Rust bindings git2 / libgit2-sys crates with the latest version of the libgit2-sys crate. This ensures...

avml (>=0.4.1, <=0.6.1), azure_data_cosmos (0.1.0) +241 more potentially affected by unknown CVE via azure_core (0.1.1)

azurecore CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on azurecore and may be impacted: - avml =0.4.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0 and more Source cves: unknown CVE Source advisory:...

avml (>=0.7.0, <=0.8.0), azeventhubs (>=0.1.0, <=0.19.4) +335 more potentially affected by unknown CVE via azure_core (>=0.2.2, <=0.21.0)

azurecore CARGO version =0.2.2, =0.7.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.1.0, =0.2.0, =0.3.0, =0.3.0, =0.3.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.21.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0275...

network-monitor v0.7.5

Network Monitor A real-time network connection monitoring tool built with Rust and GTK4, displaying active connections with live I/O statistics in a modern graphical interface. Features Real-time monitoring : Continuously monitors active network connections I/O statistics : Shows live...

PT-2026-76454

These are all security issues fixed in the wasm-bindgen-0.2.100-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11512-1 cargo-audit-0.22.2~git0.281452c-2.1 on GA media

These are all security issues fixed in the cargo-audit-0.22.2git0.281452c-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11527-1 sccache-0.17.0~1-2.1 on GA media

These are all security issues fixed in the sccache-0.17.01-2.1 package on the GA media of openSUSE Tumbleweed...

Beyond Single-Vulnerability Evaluation: Closing the Engineering Decision Gap between C Retrofits and Native Safety

While decades of research have produced numerous retrofitted memory-safety protections for C, these mechanisms are almost exclusively evaluated in isolation, targeting specific vulnerability classes. This siloed evaluation paradigm leaves practitioners without a clear understanding of the...

OPENSUSE-SU-2026:11522-1 obs-service-cargo-7.2.2-2.1 on GA media

These are all security issues fixed in the obs-service-cargo-7.2.2-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11525-1 rustup-1.29.0~0-1.1 on GA media

These are all security issues fixed in the rustup-1.29.00-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11513-1 cargo-c-0.10.23-2.1 on GA media

These are all security issues fixed in the cargo-c-0.10.23-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11528-1 wasm-bindgen-0.2.100-2.1 on GA media

These are all security issues fixed in the wasm-bindgen-0.2.100-2.1 package on the GA media of openSUSE Tumbleweed...

keyhog v0.5.73-action

Website · Documentation · Architecture · Vyre GPU engine KeyHog: GPU-accelerated secret scanner for code, cloud, and CI KeyHog is an open-source secret scanner in Rust that finds and verifies leaked API keys, tokens, passwords, and credentials across source code, Git history, containers, cloud...

byterag-core (0.3.0), byterag-ffi (0.3.0) +7 more potentially affected by CVE-2026-10740 via s2n-quic (1.37.0)

s2n-quic CARGO version 1.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on s2n-quic and may be impacted: - byterag-core 0.3.0 - byterag-ffi 0.3.0 - cryprot-net 0.1.0 - dbx-core =0.2.0-beta, =0.2.0-beta, =0.10.0, =0.1.0, =0.1.0, =0.2.2, =0.3.0 Source...

cottage v0.6.7

cott age is a GitOps tool for teams to manage age-encrypted secrets in git repositories. It provides a simple workflow to encrypt/decrypt secrets, manage recipients, and keep secrets out of the repo while still allowing for easy sharing via VCS. cottage also generates redacted previews of encrypt...

AZL-96734 CVE-2026-49263 affecting package rust for versions less than 1.75.0-30

Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's WebAssembly backend accepts attacker-controlled raw WASM instruction bytes through the public csdisasm and csdisasmiter APIs. For a large but well-formed brtable instruction, the WASM decoder accumulates the immediate...

CVE-2026-72814

The actix-files crate actixfiles before version 0.6.10 contains an information exposure vulnerability. When a non-existing folder is passed as the servefrom argument to Files::new, the mount path defaults to an empty path; the service then joins the request path with this empty path and...

CVE-2026-72814

The actix-files crate actixfiles before version 0.6.10 contains an information exposure vulnerability. When a non-existing folder is passed as the servefrom argument to Files::new, the mount path defaults to an empty path; the service then joins the request path with this empty path and...