Stay Secure with the Latest Linux Advisories

security advisorysecurity issuefedora

Fedora 43 rust-openssl-sys FFI Binding Update Poses High Security Risk

Update the openssl crate to version 0.10.78 and the openssl-sys crate to version 0.9.114. Release notes: openssl 0.10.77 / openssl-sys 0.9.113: https://github.com/rust-openssl/rust- openssl/releases/tag/openssl-v0.10.77. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-16a3cea414 2026-05-02 01:51:01.714148+00:00 -------------------------------------------------------------------------------- Name : rust-openssl-sys Product : Fedora 43 Version : 0.9.114 Release : 1.fc43 URL : https://crates.io/crates/openssl-sys Summary : FFI bindings to OpenSSL Description : FFI bindings to OpenSSL. -------------------------------------------------------------------------------- Update Information: Update the openssl crate to version 0.10.78 and the openssl-sys crate to version 0.9.114. Release notes: openssl 0.10.77 / openssl-sys 0.9.113: https://github.com/rust-openssl/rust- openssl/releases/tag/openssl-v0.10.77 openssl 0.10.78 / openssl-sys 0.9.114: https://github.com/rust-openssl/rust- openssl/releases/tag/openssl-v0.10.78 This addresses the following security advisories: GHSA-pqf5-4pqq-29f5 / CVE-2026-41676: https://github.com/rust-openssl/rust- openssl/security/advisories/GHSA-pqf5-4pqq-29f5 GHSA-xmgf-hq76-4vx2 / CVE-2026-41677: https://github.com/rust-openssl/rust- openssl/security/advisories/GHSA-xmgf-hq76-4vx2 GHSA-8c75-8mhr-p7r9 / CVE-2026-41678: https://github.com/rust-openssl/rust- openssl/security/advisories/GHSA-8c75-8mhr-p7r9 GHSA-ghm9-cr32-g9qj / CVE-2026-41681: https://github.com/rust-openssl/rust- openssl/security/advisories/GHSA-ghm9-cr32-g9qj GHSA-hppc-g8h3-xhp3 (no CVE entry): https://github.com/rust-openssl/rust- openssl/security/advisories/GHSA-hppc-g8h3-xhp3 Affected applications still need to be rebuilt to pick up these fixes. -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 23 2026 Fabio Valentini -0.9.114-1 - Update to version 0.9.114; Fixes RHBZ#2457692 * Mon Apr 13 2026 Fabio Valentini - 0.9.112-2 - Add upper bound to OpenSSL dependency since 4.0 is not supported yet -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-16a3cea414' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Update for Fedora addressing security issues in rust-openssl-sys and openssl crate with specific patch details.. Fedora 43 update, openssl-sys, security advisory, rust-openssl, crate update. . Severity: Important. LinuxSecurity.com Team

May 02, 2026 •Important Fedora