12399 matches found
[SECURITY] Fedora 43 Update: rust-regex-automata-0.4.13-1.fc43
Automata construction and matching using regular expressions...
[SECURITY] Fedora 43 Update: rust-reqsign-command-execute-tokio-2.0.1-1.fc43
Tokio-based command execution implementation for reqsign...
[SECURITY] Fedora 43 Update: rust-reqsign-file-read-tokio-2.0.1-1.fc43
Tokio-based file reader implementation for reqsign...
[SECURITY] Fedora 43 Update: rust-get-size-derive2-0.7.1-1.fc43
Derives the GetSize trait...
[SECURITY] Fedora 43 Update: rust-get-size2-0.7.1-1.fc43
Determine the size in bytes an object occupies inside RAM...
[SECURITY] Fedora 43 Update: python-pydantic-core-2.41.5-1.fc43
The pydantic-core project provides the core validation logic for pydantic written in Rust...
[SECURITY] Fedora 43 Update: ruff-0.14.3-1.fc43
An extremely fast Python linter and code formatter, written in Rust. Ruff aims to be orders of magnitude faster than alternative tools while integrating more functionality behind a single, common interface. Ruff can be used to replace Flake8 plus dozens of plugins, Black, isort, pydocstyle,...
[SECURITY] Fedora 43 Update: rust-regex-1.12.2-1.fc43
An implementation of regular expressions for Rust. This implementation uses finite automata and guarantees linear time matching on all inputs...
Fedora 43 : python-cloudpickle / python-pydantic / python-pydantic-core / etc (2025-312ac3e645)
The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-312ac3e645 advisory. Pydantic 2.12.4 This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build method of the AnyUrl and Dsn types. This...
Fedora: Security Advisory (FEDORA-2025-0753bddd6c)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-e67231423f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2025-46585
Name of the Vulnerable Software and Affected Versions rust-sudo-rs affected versions not specified Description A security update is available. The package rust-sudo-rs in Debian is affected by vulnerabilities. Recommendations At the moment, there is no information about a newer version that...
PT-2025-46559
Name of the Vulnerable Software and Affected Versions sudo affected versions not specified Description The rust rewrite of sudo contains a new issue allowing authentication bypass. This does not affect users utilizing nanos unikernels. Recommendations At the moment, there is no information about ...
Fedora 43 : bpfman (2025-e67231423f)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e67231423f advisory. This update fixes CVE-2025-0977 RUSTSEC-2025-0004, a use-after-free vulnerability in the Rust openssl crate's ssl::selectnextproto function. The openssl crat...
Fedora 42 : bpfman (2025-0753bddd6c)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-0753bddd6c advisory. This update fixes CVE-2025-0977 RUSTSEC-2025-0004, a use-after-free vulnerability in the Rust openssl crate's ssl::selectnextproto function. The openssl crat...
CVE-2025-64173: Authentication Bypass Using an Alternate Path or Channel
Apollo Router Core is a configurable graph router written in Rust to run a federated supergraph using Apollo Federation 2. In versions 1.61.11 below, as well as 2.0.0-alpha.0 through 2.8.1-rc.0, a vulnerability allowed for unauthenticated queries to access data that required additional access...
Youki security vulnerabilities
youki is a youki open source implementation of the OCI runtime specification in Rust. A security vulnerability exists in youki 0.5.6 and earlier versions, which stems from insufficient initial validation of source /dev/null and could lead to container escape...
EUVD-2025-37939
Youki is a container runtime written in Rust. In versions 0.5.6 and below, the initial validation of the source /dev/null is insufficient, allowing container escape when youki utilizes bind mounting the container's /dev/null as a file mask. This issue is fixed in version 0.5.7...
[SECURITY] Fedora 43 Update: uv-0.9.5-1.fc43
An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...