[SECURITY] Fedora 42 Update: rust-matchers-0.2.0-1.fc42

Regex matching on character and byte streams...

Linux Distros Unpatched Vulnerability : CVE-2018-25025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly extend the lifetime of a string, leading to memory corruption...

Linux Distros Unpatched Vulnerability : CVE-2019-15547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are format string issues in printw functions because C format arguments are...

Linux Distros Unpatched Vulnerability : CVE-2018-25026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can add the Send marker trait to an object that cannot be sent between threads safely,...

Fedora: Security Advisory (FEDORA-2025-874b407d96)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-0ebd4408bd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2019-15548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are instr and mvwinstr buffer overflows because interaction with C functions is...

Linux Distros Unpatched Vulnerability : CVE-2018-25024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly coerce an immutable reference into a mutable reference, leading to memor...

RUSTSEC-2025-0066 The `google-apis-rs` project is now unmaintained

Instead, please start using and migrate to the official Google Rust bindings...

The `google-apis-rs` project is now unmaintained

Instead, please start using and migrate to the official Google Rust bindings...

PT-2025-38586

Instead, please start using and migrate to the official Google Rust bindings...

keeshond_editor (>=0.1.0, <=0.13.0), keeshond_migrator (>=0.1.0, <=0.1.1) +2 more potentially affected by unknown CVE via toodee (>=0.2.4, <=0.3.0)

toodee CARGO version =0.2.4, =0.1.0, =0.1.0, =0.10.0, =0.13.0 Source cves: unknown CVE Source advisory: SNYK:RUST-TOODEE-12670801...

blockchain-base (0.1.0), blockcrypt (>=0.1.0, <=0.1.3) +112 more potentially affected by unknown CVE via crypto-hash (0.3.4)

crypto-hash CARGO version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on crypto-hash and may be impacted: - blockchain-base 0.1.0 - blockcrypt =0.1.0, =0.10.0, =0.10.0, =0.23.0, =0.5.1, =0.3.10, =0.1.0, =0.2.2, =0.6.0, =0.1.0, =0.1.3, =3.0.1,...

alexa (>=0.1.0, <=0.1.2), alipay-rs (>=0.2.0, <=0.4.6) +155 more potentially affected by unknown CVE via iron (>=0.1.21, <=0.6.1)

iron CARGO version =0.1.21, =0.1.0, =0.2.0, =0.3.2, =0.0.1, =0.0.1, =0.1.0, =0.0.1, =0.1.0, =0.1.2, =0.0.1, =0.0.1, =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0061...

RUSTSEC-2025-0061 iron crate is unmaintained

The iron crate is no longer actively maintained. If you rely on this crate, consider switching to a maintained alternative. Recommended alternatives See this comparison for popular alternatives...

accesskit_windows (>=0.5.0, <=0.10.4), accesskit_winit (>=0.2.0, <=0.8.1) +283 more potentially affected by unknown CVE via servo-fontconfig (>=0.4.0, <=0.5.1)

servo-fontconfig CARGO version =0.4.0, =0.5.0, =0.2.0, =0.5.0, =0.5.0, =0.1.0, =0.8.0, =0.8.0, =0.4.0, =0.6.0, =0.12.7, =0.19.3, =0.3.0, =0.3.5 - ash-tray 0.19.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0059...

RUSTSEC-2025-0059 servo-fontconfig crate is unmaintained

The servo-fontconfig crate is no longer actively maintained. If you rely on this crate, consider switching to a maintained alternative. Recommended alternatives - fontconfig-rs...

iron crate is unmaintained

The iron crate is no longer actively maintained. If you rely on this crate, consider switching to a maintained alternative. Recommended alternatives See this comparison for popular alternatives...

PT-2025-38471

The iron crate is no longer actively maintained. If you rely on this crate, consider switching to a maintained alternative. Recommended alternatives See this comparison for popular alternatives...

aa2nucaln (0.1.1), agent-stream-kit (>=0.9.0, <=0.14.0) +373 more potentially affected by unknown CVE via custom_derive (0.1.7)

customderive CARGO version 0.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on customderive and may be impacted: - aa2nucaln 0.1.1 - agent-stream-kit =0.9.0, =0.4.0, =0.1.1, =0.2.0, =0.1.0, =0.1.0, =3.1.3, =0.3.7, =0.1.0, =0.1.0, =0.1.2 and more Sour...