AZL-99828 CVE-2026-80255 affecting package rust 1.75.0-31

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

AZL-99855 CVE-2026-80231 affecting package rust 1.90.0-10

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...

AZL-99846 CVE-2026-80230 affecting package rust 1.90.0-10

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...

AZL-99819 CVE-2026-19931 affecting package rust 1.75.0-30

A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotiate authentication, when the initial request is done using empty credentials. This can make user B's request get sent over user A's previously authenticated connection...

AZL-99858 CVE-2026-18924 affecting package rust 1.90.0-10

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

AZL-99822 CVE-2026-13608 affecting package rust 1.75.0-30

A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle MITM attack can inject a premature or shortcut response that bypasses complete peer...

AZL-99861 CVE-2026-13608 affecting package rust 1.90.0-10

A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle MITM attack can inject a premature or shortcut response that bypasses complete peer...

CVE-2026-86250 h3 before 2.0.1-rc.18 Denial of Service via Unbounded Chunked Cookie

h3 versions before 2.0.1-rc.18 fail to validate the chunk count parsed from user-controlled cookie values in setChunkedCookie and deleteChunkedCookie functions. Attackers can send a crafted cookie header with an extremely large chunk count to trigger an On² cleanup loop that hangs the server...

chainsaw

Windows 포렌식 아티팩트 신속 검색 및 헌팅 Chainsaw는 이벤트 로그 및 MFT 파일과 같은 Windows 포렌식 아티팩트 내에서 위협을 신속하게 식별할 수 있는 강력한 '1차 대응first-response' 기능을 제공합니다. Chainsaw는 이벤트 로그에서 키워드를 검색하는 일반적이고 빠른 방법을 제공하며, Sigma 탐지 규칙에 대한 기본 제공 지원과 사용자 정의 Chainsaw 탐지 규칙을 통해 위협을 식별합니다. 기능 🎯 Sigma 탐지 규칙 및 사용자 정의 Chainsaw 탐지 규칙을 사용하여 위협 헌팅...

Fedora 46 : rust-lru / rust-lru0.16 (2026-a4ab790e17)

The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-a4ab790e17 advisory. Update lru crate to version 0.18.4 and add a compat package for version 0.16. This fixes an obscure potential use-after-free issue: Rebuild tracker: Tenable...

monty v0.0.22

Monty A minimal, secure Python interpreter written in Rust for use by AI. Experimental - This project is still in development, and not ready for prime time. A minimal, secure Python interpreter written in Rust for use by AI. Monty avoids the cost, latency, complexity and general faff of using a...

mboxshell v0.7.3

mboxShell Fast terminal viewer for MBOX files of any size. Open, search and export emails from Gmail Takeout backups 50 GB+ without loading them into memory. Leer en Espanol / Spanish Why this project exists When you export your email from Gmail using Google Takeout, you get one or more .mbox fil...

[SECURITY] Fedora 44 Update: rust-webbrowser-1.2.4-1.fc44

Open URLs in web browsers available on a platform...

[SECURITY] Fedora 43 Update: rust-webbrowser-1.2.4-1.fc43

Open URLs in web browsers available on a platform...

veneficus

@abraxasnull · [email protected] · abraxaslabs.tec...

Fedora 46 : rust-hickory-net / rust-hickory-proto / rust-hickory-resolver (2026-08a5c52d65)

The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-08a5c52d65 advisory. Update hickory-dns crates to version 0.26.2. This includes fixes for a large number of security relevant bugs. Release notes:...

Fedora 44 : rust-webbrowser (2026-0272e561a4)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0272e561a4 advisory. Update to version 1.2.4. This includes a fix for RUSTSEC-2026-0257. Tenable has extracted the preceding description block directly from the Fedora security...

RUSTSEC-2026-0292 Double free / use-after-free in `Chunk` and `InlineArray` removal methods when an element's `Drop` panics

Chunk::clear, dropleft, dropright and InlineArray::clear, truncate drop the removed elements before updating the metadata that records which slots hold live values — the left/right index pair for Chunk, the length field for InlineArray. If an element's Drop panics during the drop, that update is...

convex (>=0.1.0, <=0.9.0), cow_vec (>=2.0.0, <=2.1.0) +34 more potentially affected by unknown CVE via imbl-sized-chunks (0.1.3)

imbl-sized-chunks CARGO version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on imbl-sized-chunks and may be impacted: - convex =0.1.0, =2.0.0, =0.1.0-alpha.0, =0.4.0, =0.2.0, =0.1.0, =0.2.0, =0.1.0, =2.0.0, =0.1.0, =0.2.0, =1.0.0, =1.0.0, =1.9.0...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rust: cargo-1.98.0-1.hum1 aarch64, x8664 clippy-1.98.0-1.hum1 aarch64, x8664 rust-1.98.0-1.hum1 aarch64, x8664 rust-analyzer-1.98.0-1.hum1 aarch64, x8664 rust-debugger-common-1.98.0-1.hum1 noarch...