Fedora: Security Advisory (FEDORA-2025-c71f0af9b2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : rust-secret-service / uv (2025-c71f0af9b2)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-c71f0af9b2 advisory. Security fix for CVE-2025-58160: rebuilt uv and python-uv-build with rust-tracing-subscriber 0.3.20. Initial package for rust-secret-service in Fedora 43...

[SECURITY] Fedora 42 Update: uv-0.8.11-2.fc42

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

Fedora: Security Advisory (FEDORA-2025-d757bc292e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : rust-secret-service / uv (2025-d757bc292e)

The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-d757bc292e advisory. Security fix for CVE-2025-58160: rebuilt uv and python-uv-build with rust-tracing-subscriber 0.3.20. Initial package for rust-secret-service in Fedora 43...

Fedora 43 : python-uv-build / rust-secret-service / uv (2025-5acdf83593)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-5acdf83593 advisory. Security fix for CVE-2025-58160: rebuilt uv and python-uv-build with rust-tracing-subscriber 0.3.20. Initial package for rust-secret-service in Fedora 43...

Fedora 44 : uv (2025-18feebeaa7)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-18feebeaa7 advisory. Automatic update for uv-0.8.11-2.fc44. Changelog Tue Sep 2 2025 Benjamin A. Beasley - 0.8.11-2 - Rebuilt with rust-tracing-subscriber-0.3.20 - Fixes...

OPENSUSE-SU-2025:15514-1 python311-uv-0.8.14-2.1 on GA media

These are all security issues fixed in the python311-uv-0.8.14-2.1 package on the GA media of openSUSE Tumbleweed...

Fedora 44 : python-uv-build (2025-7091f415ef)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7091f415ef advisory. Automatic update for python-uv-build-0.8.11-2.fc44. Changelog Tue Sep 2 2025 Benjamin A. Beasley - 0.8.11-2 - Rebuilt with...

Fedora: Security Advisory (FEDORA-2025-c22dd590b8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-92fd810e1d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : rust-h2 / uv (2025-92fd810e1d)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-92fd810e1d advisory. - Update uv to version 0.8.8. - Update the h2 crate to version 0.4.12. The builds in this update also address CVE-2025-54368. Tenable has extracted the...

MAL-2025-13843 Malicious code in @zalastax/nolb-react-uv (npm)

The package @zalastax/nolb-react-uv was found to contain malicious code...

CVE-2025-55159 vulnerabilities

Vulnerabilities for packages: efs-utils, pixi, mdbook, shadowsocks-rust, linkerd2, buck2, uv, linkerd-extension-init, zola, linkerd2-proxy...

CVE-2025-55159 vulnerabilities

Vulnerabilities for packages: shadowsocks-rust, pixi, efs-utils, linkerd-extension-init, buck2, jujutsu, zola, uv, linkerd2, linkerd2-proxy, mdbook...

GHSA-QX2V-8332-M4FV vulnerabilities

Vulnerabilities for packages: shadowsocks-rust, pixi, efs-utils, linkerd-extension-init, buck2, jujutsu, zola, uv, linkerd2, linkerd2-proxy, mdbook...

Fedora 43 : python-uv-build / rust-h2 / uv (2025-8628ba80b1)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-8628ba80b1 advisory. - Update uv and python-uv-build to version 0.8.8. - Update the h2 crate to version 0.4.12. The builds in this update also address CVE-2025-54368. Tenable has...

OPENSUSE-SU-2025:15429-1 python311-uv-0.8.8-1.1 on GA media

These are all security issues fixed in the python311-uv-0.8.8-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2025-54368

uv is a Python package and project manager written in Rust. In versions 0.8.5 and earlier, remote ZIP archives were handled in a streamwise fashion, and file entries were not reconciled against the archive's central directory. An attacker could contrive a ZIP archive that would extract with...

CVE-2025-54368

uv is a Python package and project manager written in Rust. In versions 0.8.5 and earlier, remote ZIP archives were handled in a streamwise fashion, and file entries were not reconciled against the archive's central directory. An attacker could contrive a ZIP archive that would extract with...