Update the openssl crate to version 0.10.78 and the openssl-sys crate to version 0.9.114. Release notes: openssl 0.10.77 / openssl-sys 0.9.113: https://github.com/rust-openssl/rust- openssl/releases/tag/openssl-v0.10.77. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-fc9d4b5520 2026-05-02 02:10:24.452770+00:00 -------------------------------------------------------------------------------- Name : rust-openssl Product : Fedora 44 Version : 0.10.78 Release : 1.fc44 URL : https://crates.io/crates/openssl Summary : OpenSSL bindings Description : OpenSSL bindings. -------------------------------------------------------------------------------- Update Information: Update the openssl crate to version 0.10.78 and the openssl-sys crate to version 0.9.114. Release notes: openssl 0.10.77 / openssl-sys 0.9.113: https://github.com/rust-openssl/rust- openssl/releases/tag/openssl-v0.10.77 openssl 0.10.78 / openssl-sys 0.9.114: https://github.com/rust-openssl/rust- openssl/releases/tag/openssl-v0.10.78 This addresses the following security advisories: GHSA-pqf5-4pqq-29f5 / CVE-2026-41676: https://github.com/rust-openssl/rust- openssl/security/advisories/GHSA-pqf5-4pqq-29f5 GHSA-xmgf-hq76-4vx2 / CVE-2026-41677: https://github.com/rust-openssl/rust- openssl/security/advisories/GHSA-xmgf-hq76-4vx2 GHSA-8c75-8mhr-p7r9 / CVE-2026-41678: https://github.com/rust-openssl/rust- openssl/security/advisories/GHSA-8c75-8mhr-p7r9 GHSA-ghm9-cr32-g9qj / CVE-2026-41681: https://github.com/rust-openssl/rust- openssl/security/advisories/GHSA-ghm9-cr32-g9qj GHSA-hppc-g8h3-xhp3 (no CVE entry): https://github.com/rust-openssl/rust- openssl/security/advisories/GHSA-hppc-g8h3-xhp3 Affected applications still need to be rebuilt to pick up these fixes. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 23 2026 Fabio Valentini - 0.10.78-1 - Update toversion 0.10.78; Fixes RHBZ#2457691 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-fc9d4b5520' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Update to 9.18.41 (rhbz#2405786) Security fixes: DNSSEC validation fails if matching but invalid DNSKEY is found. (CVE-2025-8677) Address various spoofing attacks. (CVE-2025-40778) Cache-poisoning due to weak pseudo-random number generator. (CVE-2025-40780). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-10c407da27 2025-10-30 04:19:29.232276+00:00 -------------------------------------------------------------------------------- Name : bind Product : Fedora 41 Version : 9.18.41 Release : 1.fc41 URL : https://www.isc.org/bind/ Summary : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server Description : BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. -------------------------------------------------------------------------------- Update Information: Update to 9.18.41 (rhbz#2405786) Security fixes: DNSSEC validation fails if matching but invalid DNSKEY is found. (CVE-2025-8677) Address various spoofing attacks. (CVE-2025-40778) Cache-poisoning due to weak pseudo-random number generator. (CVE-2025-40780) New Features: Support for parsing HHIT and BRID records has been added. Removed Features: Deprecate the "tkey-domain" statement. Deprecate the "tkey-gssapi-credential" statement. Bug Fixes: Prevent spurious SERVFAILs for certain 0-TTL resource records. Missing DNSSEC information when CD bit is set in query. https://downloads.isc.org/isc/bind9/9.18.41/doc/arm/html/notes.html#notes-for- bind-9-18-41 -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 24 2025 Petr Men\u0161k - 32:9.18.41-1 - Update to 9.18.41 (rhbz#2405786, CVE-2025-8677 CVE-2025-40778CVE-2025-40780) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2405786 - bind-9.18.41 is available https://bugzilla.redhat.com/show_bug.cgi?id=2405786 [ 2 ] Bug #2405831 - CVE-2025-8677 CVE-2025-40778 CVE-2025-40780 bind: various flaws [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2405831 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-10c407da27' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . This advisory covers important security fixes for BIND in Fedora 41, addressing weaknesses and threats.. Fedora Updates, BIND Security, DNSSEC Fixes, Spoofing Attacks, Cache Poisoning. . Severity: Critical. LinuxSecurity.com Team
Update the openssl crate to version 0.10.72. Update the openssl-sys crate to version 0.9.107. This update addresses CVE-2025-3416 / RUSTSEC-2025-0022 (a possible use-after- free issue in two public functions). A survey of dependent packages in Fedora shows that none of them use the affected API, or do not use them in a way that. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-a13867ecbc 2025-04-17 19:46:50.126435+00:00 -------------------------------------------------------------------------------- Name : rust-openssl Product : Fedora 41 Version : 0.10.72 Release : 1.fc41 URL : https://crates.io/crates/openssl Summary : OpenSSL bindings Description : OpenSSL bindings. -------------------------------------------------------------------------------- Update Information: Update the openssl crate to version 0.10.72. Update the openssl-sys crate to version 0.9.107. This update addresses CVE-2025-3416 / RUSTSEC-2025-0022 (a possible use-after- free issue in two public functions). A survey of dependent packages in Fedora shows that none of them use the affected API, or do not use them in a way that triggers this issue. -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 8 2025 Fabio Valentini - 0.10.72-1 - Update to version 0.10.72; Fixes RHBZ#2357489 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-a13867ecbc' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Update the openssl crate to version 0.10.72. Update the openssl-sys crate to version 0.9.107. This update addresses CVE-2025-3416 / RUSTSEC-2025-0022 (a possible use-after- free issue in two public functions). A survey of dependent packages in Fedora shows that none of them use the affected API, or do not use them in a way that. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-472776e5dc 2025-04-17 19:32:14.984584+00:00 -------------------------------------------------------------------------------- Name : rust-openssl Product : Fedora 40 Version : 0.10.72 Release : 1.fc40 URL : https://crates.io/crates/openssl Summary : OpenSSL bindings Description : OpenSSL bindings. -------------------------------------------------------------------------------- Update Information: Update the openssl crate to version 0.10.72. Update the openssl-sys crate to version 0.9.107. This update addresses CVE-2025-3416 / RUSTSEC-2025-0022 (a possible use-after- free issue in two public functions). A survey of dependent packages in Fedora shows that none of them use the affected API, or do not use them in a way that triggers this issue. -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 8 2025 Fabio Valentini - 0.10.72-1 - Update to version 0.10.72; Fixes RHBZ#2357489 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-472776e5dc' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Update pyo3 to version 0.22.4. This version addresses a potential use-after-free RUSTSEC-2024-0378.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-23292e9f6d 2024-10-24 01:27:39.153261 -------------------------------------------------------------------------------- Name : rust-pyo3 Product : Fedora 40 Version : 0.22.4 Release : 1.fc40 URL : https://crates.io/crates/pyo3 Summary : Bindings to Python interpreter Description : Bindings to Python interpreter. -------------------------------------------------------------------------------- Update Information: Update pyo3 to version 0.22.4. This version addresses a potential use-after-free RUSTSEC-2024-0378. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 15 2024 Fabio Valentini - 0.22.4-1 - Update to version 0.22.4; Fixes RHBZ#2318282 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-23292e9f6d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.