Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
89
security advisorysecurity issuefedoraFedora 43: rust-collection_literals Critical Security Flaw CVE-2025-62518
uv / python-uv-build 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md ruff 0.14.2 https://github.com/astral-sh/ruff/blob/0.14.2/CHANGELOG.md Pydantic 2.12.3. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-4154ea83d0 2025-11-05 02:09:57.817569+00:00 -------------------------------------------------------------------------------- Name : rust-collection_literals Product : Fedora 43 Version : 1.0.3 Release : 1.fc43 URL : https://crates.io/crates/collection_literals Summary : Easy-to-use macros for initializing any collection Description : Easy-to-use macros for initializing any collection. -------------------------------------------------------------------------------- Update Information: uv / python-uv-build 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md ruff 0.14.2 https://github.com/astral-sh/ruff/blob/0.14.2/CHANGELOG.md Pydantic 2.12.3 Blog post maturin 1.9.6 https://github.com/PyO3/maturin/blob/v1.9.6/Changelog.md python-typing-inspection 0.4.2 (2025-10-01) Add typing_objects.is_noextraitems() python-jiter 0.11.0 https://github.com/pydantic/jiter/releases/tag/v0.11.0 python-pydantic-extra-types 2.10.6 https://github.com/pydantic/pydantic-extra-types/releases/tag/v2.10.6 Typer 0.20.0 Features \u2728 Enable command suggestions on typo by default. Upgrades \u2b06\ufe0f Add (official) support for Python 3.14. Internal Assorted small enhancements. FastAPI 0.120.1 Upgrades \u2b06\ufe0f Bump Starlette to
Nov 05, 2025
•Critical
Fedora
89
security advisorysecurity issuefedoraFedora 42: rust-collection_literals Critical Buffer Overflow CVE-2025-62518
uv 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md Since uv was built with astral-tokio-tar 0.5.6, this is a security fix for CVE-2025-62518. ruff 0.14.2. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-a77c1f005b 2025-11-03 01:05:58.219415+00:00 -------------------------------------------------------------------------------- Name : rust-collection_literals Product : Fedora 42 Version : 1.0.3 Release : 1.fc42 URL : https://crates.io/crates/collection_literals Summary : Easy-to-use macros for initializing any collection Description : Easy-to-use macros for initializing any collection. -------------------------------------------------------------------------------- Update Information: uv 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md Since uv was built with astral-tokio-tar 0.5.6, this is a security fix for CVE-2025-62518. ruff 0.14.2 https://github.com/astral-sh/ruff/blob/0.14.2/CHANGELOG.md rust-astral-tokio-tar 0.5.6 Fixed a parser desynchronization vulnerability when reading tar archives that contain mismatched size information in PAX/ustar headers. This vulnerability is being tracked as GHSA-j5gw-2vrg-8fgx and CVE-2025-62518. Initial package for python-uv-build in Fedora 42 Initial packages for a number of new dependencies for ruff and uv Update rust-tikv-jemallocator and rust-tikv-jemalloc-sys to 0.6.1 Update openapi-python-client to 0.26.2 and patch it to allow ruff 0.14 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 1 2025 Benjamin A. Beasley - 1.0.3-1 - Update to version 1.0.3; Fixes RHBZ#2400587 - Upstream now provides a LICENSE file * Mon Sep 29 2025 Benjamin A. Beasley - 1.0.2-1 - Initial package (close RHBZ#2398064) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2360699 - ruff-0.14.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2360699 [ 2 ] Bug #2402441 - rust-reqsign-core-2.0.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2402441 [ 3 ] Bug #2402442 - rust-reqsign-command-execute-tokio-2.0.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2402442 [ 4 ] Bug #2402443 - rust-reqsign-http-send-reqwest-2.0.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2402443 [ 5 ] Bug #2402881 - python-uv-build-0.9.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2402881 [ 6 ] Bug #2402923 - uv-0.9.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2402923 [ 7 ] Bug #2405474 - CVE-2025-62518 rust-astral-tokio-tar: astral-tokio-tar Vulnerable to PAX Header Desynchronization [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2405474 [ 8 ] Bug #2405476 - CVE-2025-62518 uv: astral-tokio-tar Vulnerable to PAX Header Desynchronization [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2405476 [ 9 ] Bug #2406135 - ruff-0.14.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2406135 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-a77c1f005b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Nov 03, 2025
•Critical
Fedora
89
security advisoryFedorabugfixFedora 42: Update rust-icu_provider_macros 2025-04847cb65d Bugfixes
Update uv to 0.6.14, with various bugfixes and new features. Update rust-idna to 1.0.3 (fixing RUSTSEC-2024-0421), rust-url to 2.5.4, rust- adblock to 0.9.6, and rust-cookie_store to 0.21.1; adjust some reverse dependencies of rust-idna. Initial packages for many dependencies. Update rust-ron to 0.9.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-04847cb65d 2025-04-20 04:20:54.268638+00:00 -------------------------------------------------------------------------------- Name : rust-icu_provider_macros Product : Fedora 42 Version : 1.5.0 Release : 1.fc42 URL : https://crates.io/crates/icu_provider_macros Summary : Proc macros for ICU data providers Description : Proc macros for ICU data providers. -------------------------------------------------------------------------------- Update Information: Update uv to 0.6.14, with various bugfixes and new features. Update rust-idna to 1.0.3 (fixing RUSTSEC-2024-0421), rust-url to 2.5.4, rust- adblock to 0.9.6, and rust-cookie_store to 0.21.1; adjust some reverse dependencies of rust-idna. Initial packages for many dependencies. Update rust-ron to 0.9. Update rust-zip to 2.6.1, fixing GHSA-94vh-gphv-8pm8. -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 8 2025 Benjamin A. Beasley - 1.5.0-1 - Initial package (close RHBZ#2358105) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2277901 - rust-adblock-0.9.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2277901 [ 2 ] Bug #2291175 - rust-idna-1.0.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2291175 [ 3 ] Bug #2323618 - rust-url-2.5.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2323618 [ 4 ] Bug #2324926 - rust-cookie_store-0.21.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2324926 [ 5 ] Bug #2352783 - rust-zip-2.6.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2352783 [ 6 ] Bug #2358015 - Review Request: rust-write16 - UTF-16 analog of the Write trait https://bugzilla.redhat.com/show_bug.cgi?id=2358015 [ 7 ] Bug #2358018 - Review Request: rust-utf16_iter - Iterator by char over potentially-invalid UTF-16 in &[u16] https://bugzilla.redhat.com/show_bug.cgi?id=2358018 [ 8 ] Bug #2358020 - Review Request: rust-icu_locid - API for managing Unicode Language and Locale Identifiers https://bugzilla.redhat.com/show_bug.cgi?id=2358020 [ 9 ] Bug #2358105 - Review Request: rust-icu_provider_macros - Proc macros for ICU data providers https://bugzilla.redhat.com/show_bug.cgi?id=2358105 [ 10 ] Bug #2358290 - Review Request: rust-icu_provider - Trait and struct definitions for the ICU data provider https://bugzilla.redhat.com/show_bug.cgi?id=2358290 [ 11 ] Bug #2358292 - Review Request: rust-icu_locid_transform_data - Data for the icu_locid_transform crate https://bugzilla.redhat.com/show_bug.cgi?id=2358292 [ 12 ] Bug #2358507 - Review Request: rust-icu_locid_transform - API for Unicode Language and Locale Identifiers canonicalization https://bugzilla.redhat.com/show_bug.cgi?id=2358507 [ 13 ] Bug #2358521 - Review Request: rust-icu_properties_data - Data for the icu_properties crate https://bugzilla.redhat.com/show_bug.cgi?id=2358521 [ 14 ] Bug #2358522 - Review Request: rust-icu_normalizer_data - Data for the icu_normalizer crate https://bugzilla.redhat.com/show_bug.cgi?id=2358522 [ 15 ] Bug #2358527 - Review Request: rust-icu_properties - Definitions for Unicode properties https://bugzilla.redhat.com/show_bug.cgi?id=2358527 [ 16 ] Bug #2358606 - Review Request: rust-icu_normalizer - API for normalizing text into Unicode Normalization Forms https://bugzilla.redhat.com/show_bug.cgi?id=2358606 [ 17 ] Bug #2358642 - Review Request: rust-idna_adapter -Back end adapter for idna https://bugzilla.redhat.com/show_bug.cgi?id=2358642 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-04847cb65d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Apr 20, 2025
•Important
Fedora
100
security advisorymoderateupdateSUSE Linux: 2020:0121-1 Moderate: LibreOffice Macro Bypass Threat
An update that solves one vulnerability and has two fixes is now available. . SUSE Security Update: Security update for LibreOffice ______________________________________________________________________________ Announcement ID: SUSE-SU-2020:0121-1 Rating: moderate References: #1061210 #1144522 #1152684 Cross-References: CVE-2019-9853 Affected Products: SUSE Linux Enterprise Workstation Extension 15-SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update libreoffice to version 6.3.3 fixes the following issues: LibreOffice was updated to 6.3.3 (jsc#SLE-8705), bringing many bug and stability fixes. More information for the 6.3 release at: https://wiki.documentfoundation.org/ReleaseNotes/6.3 Security issue fixed: - CVE-2019-9853: Fixed an issue where by executing macros, the security settings could have been bypassed (bsc#1152684). Other issues addressed: - Dropped disable-kde4 switch, since it is no longer known by configure - Disabled gtk2 because it will be removed in future releases - librelogo is now a standalone sub-package (bsc#1144522). - Partial fixes for an issue where Table(s) from DOCX showed wrong position or color (bsc#1061210). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 15-SP1: zypper in -t patch SUSE-SLE-Product-WE-15-SP1-2020-121=1 - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1: zypper in -t patch SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2020-121=1 Package List: - SUSE LinuxEnterprise Workstation Extension 15-SP1 (noarch): libreoffice-branding-upstream-6.3.3.2-8.13.1 libreoffice-icon-themes-6.3.3.2-8.13.1 libreoffice-l10n-af-6.3.3.2-8.13.1 libreoffice-l10n-ar-6.3.3.2-8.13.1 libreoffice-l10n-as-6.3.3.2-8.13.1 libreoffice-l10n-bg-6.3.3.2-8.13.1 libreoffice-l10n-bn-6.3.3.2-8.13.1 libreoffice-l10n-br-6.3.3.2-8.13.1 libreoffice-l10n-ca-6.3.3.2-8.13.1 libreoffice-l10n-cs-6.3.3.2-8.13.1 libreoffice-l10n-cy-6.3.3.2-8.13.1 libreoffice-l10n-da-6.3.3.2-8.13.1 libreoffice-l10n-de-6.3.3.2-8.13.1 libreoffice-l10n-dz-6.3.3.2-8.13.1 libreoffice-l10n-el-6.3.3.2-8.13.1 libreoffice-l10n-en-6.3.3.2-8.13.1 libreoffice-l10n-eo-6.3.3.2-8.13.1 libreoffice-l10n-es-6.3.3.2-8.13.1 libreoffice-l10n-et-6.3.3.2-8.13.1 libreoffice-l10n-eu-6.3.3.2-8.13.1 libreoffice-l10n-fa-6.3.3.2-8.13.1 libreoffice-l10n-fi-6.3.3.2-8.13.1 libreoffice-l10n-fr-6.3.3.2-8.13.1 libreoffice-l10n-ga-6.3.3.2-8.13.1 libreoffice-l10n-gl-6.3.3.2-8.13.1 libreoffice-l10n-gu-6.3.3.2-8.13.1 libreoffice-l10n-he-6.3.3.2-8.13.1 libreoffice-l10n-hi-6.3.3.2-8.13.1 libreoffice-l10n-hr-6.3.3.2-8.13.1 libreoffice-l10n-hu-6.3.3.2-8.13.1 libreoffice-l10n-it-6.3.3.2-8.13.1 libreoffice-l10n-ja-6.3.3.2-8.13.1 libreoffice-l10n-kk-6.3.3.2-8.13.1 libreoffice-l10n-kn-6.3.3.2-8.13.1 libreoffice-l10n-ko-6.3.3.2-8.13.1 libreoffice-l10n-lt-6.3.3.2-8.13.1 libreoffice-l10n-lv-6.3.3.2-8.13.1 libreoffice-l10n-mai-6.3.3.2-8.13.1 libreoffice-l10n-ml-6.3.3.2-8.13.1 libreoffice-l10n-mr-6.3.3.2-8.13.1 libreoffice-l10n-nb-6.3.3.2-8.13.1 libreoffice-l10n-nl-6.3.3.2-8.13.1 libreoffice-l10n-nn-6.3.3.2-8.13.1 libreoffice-l10n-nr-6.3.3.2-8.13.1 libreoffice-l10n-nso-6.3.3.2-8.13.1 libreoffice-l10n-or-6.3.3.2-8.13.1 libreoffice-l10n-pa-6.3.3.2-8.13.1 libreoffice-l10n-pl-6.3.3.2-8.13.1 libreoffice-l10n-pt_BR-6.3.3.2-8.13.1 libreoffice-l10n-pt_PT-6.3.3.2-8.13.1 libreoffice-l10n-ro-6.3.3.2-8.13.1 libreoffice-l10n-ru-6.3.3.2-8.13.1 libreoffice-l10n-si-6.3.3.2-8.13.1 libreoffice-l10n-sk-6.3.3.2-8.13.1 libreoffice-l10n-sl-6.3.3.2-8.13.1 libreoffice-l10n-sr-6.3.3.2-8.13.1 libreoffice-l10n-ss-6.3.3.2-8.13.1 libreoffice-l10n-st-6.3.3.2-8.13.1 libreoffice-l10n-sv-6.3.3.2-8.13.1 libreoffice-l10n-ta-6.3.3.2-8.13.1 libreoffice-l10n-te-6.3.3.2-8.13.1 libreoffice-l10n-th-6.3.3.2-8.13.1 libreoffice-l10n-tn-6.3.3.2-8.13.1 libreoffice-l10n-tr-6.3.3.2-8.13.1 libreoffice-l10n-ts-6.3.3.2-8.13.1 libreoffice-l10n-uk-6.3.3.2-8.13.1 libreoffice-l10n-ve-6.3.3.2-8.13.1 libreoffice-l10n-xh-6.3.3.2-8.13.1 libreoffice-l10n-zh_CN-6.3.3.2-8.13.1 libreoffice-l10n-zh_TW-6.3.3.2-8.13.1 libreoffice-l10n-zu-6.3.3.2-8.13.1 - SUSE Linux Enterprise Workstation Extension 15-SP1 (x86_64): libreoffice-6.3.3.2-8.13.1 libreoffice-base-6.3.3.2-8.13.1 libreoffice-base-debuginfo-6.3.3.2-8.13.1 libreoffice-base-drivers-postgresql-6.3.3.2-8.13.1 libreoffice-base-drivers-postgresql-debuginfo-6.3.3.2-8.13.1 libreoffice-calc-6.3.3.2-8.13.1 libreoffice-calc-debuginfo-6.3.3.2-8.13.1 libreoffice-calc-extensions-6.3.3.2-8.13.1 libreoffice-debuginfo-6.3.3.2-8.13.1 libreoffice-debugsource-6.3.3.2-8.13.1 libreoffice-draw-6.3.3.2-8.13.1 libreoffice-draw-debuginfo-6.3.3.2-8.13.1 libreoffice-filters-optional-6.3.3.2-8.13.1 libreoffice-gnome-6.3.3.2-8.13.1 libreoffice-gnome-debuginfo-6.3.3.2-8.13.1 libreoffice-gtk3-6.3.3.2-8.13.1 libreoffice-gtk3-debuginfo-6.3.3.2-8.13.1 libreoffice-impress-6.3.3.2-8.13.1 libreoffice-impress-debuginfo-6.3.3.2-8.13.1 libreoffice-mailmerge-6.3.3.2-8.13.1 libreoffice-math-6.3.3.2-8.13.1 libreoffice-math-debuginfo-6.3.3.2-8.13.1 libreoffice-officebean-6.3.3.2-8.13.1 libreoffice-officebean-debuginfo-6.3.3.2-8.13.1 libreoffice-pyuno-6.3.3.2-8.13.1 libreoffice-pyuno-debuginfo-6.3.3.2-8.13.1 libreoffice-writer-6.3.3.2-8.13.1 libreoffice-writer-debuginfo-6.3.3.2-8.13.1 libreoffice-writer-extensions-6.3.3.2-8.13.1 libreofficekit-6.3.3.2-8.13.1 - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 (aarch64 x86_64): libreoffice-debuginfo-6.3.3.2-8.13.1 libreoffice-debugsource-6.3.3.2-8.13.1 libreoffice-sdk-6.3.3.2-8.13.1 libreoffice-sdk-debuginfo-6.3.3.2-8.13.1 libreoffice-sdk-doc-6.3.3.2-8.13.1 libreofficekit-devel-6.3.3.2-8.13.1 - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 (noarch): libreoffice-gdb-pretty-printers-6.3.3.2-8.13.1 libreoffice-glade-6.3.3.2-8.13.1 libreoffice-l10n-am-6.3.3.2-8.13.1 libreoffice-l10n-ast-6.3.3.2-8.13.1 libreoffice-l10n-be-6.3.3.2-8.13.1 libreoffice-l10n-bn_IN-6.3.3.2-8.13.1 libreoffice-l10n-bo-6.3.3.2-8.13.1 libreoffice-l10n-brx-6.3.3.2-8.13.1 libreoffice-l10n-bs-6.3.3.2-8.13.1 libreoffice-l10n-ca_valencia-6.3.3.2-8.13.1 libreoffice-l10n-dgo-6.3.3.2-8.13.1 libreoffice-l10n-en_GB-6.3.3.2-8.13.1 libreoffice-l10n-en_ZA-6.3.3.2-8.13.1 libreoffice-l10n-fy-6.3.3.2-8.13.1 libreoffice-l10n-gd-6.3.3.2-8.13.1 libreoffice-l10n-gug-6.3.3.2-8.13.1 libreoffice-l10n-hsb-6.3.3.2-8.13.1 libreoffice-l10n-id-6.3.3.2-8.13.1 libreoffice-l10n-is-6.3.3.2-8.13.1 libreoffice-l10n-ka-6.3.3.2-8.13.1 libreoffice-l10n-kab-6.3.3.2-8.13.1 libreoffice-l10n-km-6.3.3.2-8.13.1 libreoffice-l10n-kmr_Latn-6.3.3.2-8.13.1 libreoffice-l10n-kok-6.3.3.2-8.13.1 libreoffice-l10n-ks-6.3.3.2-8.13.1 libreoffice-l10n-lb-6.3.3.2-8.13.1 libreoffice-l10n-lo-6.3.3.2-8.13.1 libreoffice-l10n-mk-6.3.3.2-8.13.1 libreoffice-l10n-mn-6.3.3.2-8.13.1 libreoffice-l10n-mni-6.3.3.2-8.13.1 libreoffice-l10n-my-6.3.3.2-8.13.1 libreoffice-l10n-ne-6.3.3.2-8.13.1 libreoffice-l10n-oc-6.3.3.2-8.13.1 libreoffice-l10n-om-6.3.3.2-8.13.1 libreoffice-l10n-rw-6.3.3.2-8.13.1 libreoffice-l10n-sa_IN-6.3.3.2-8.13.1 libreoffice-l10n-sat-6.3.3.2-8.13.1 libreoffice-l10n-sd-6.3.3.2-8.13.1 libreoffice-l10n-sid-6.3.3.2-8.13.1 libreoffice-l10n-sq-6.3.3.2-8.13.1 libreoffice-l10n-sw_TZ-6.3.3.2-8.13.1 libreoffice-l10n-tg-6.3.3.2-8.13.1 libreoffice-l10n-tt-6.3.3.2-8.13.1 libreoffice-l10n-ug-6.3.3.2-8.13.1 libreoffice-l10n-uz-6.3.3.2-8.13.1 libreoffice-l10n-vec-6.3.3.2-8.13.1 libreoffice-l10n-vi-6.3.3.2-8.13.1 References: https://www.suse.com/security/cve/CVE-2019-9853.html https://bugzilla.suse.com/1061210 https://bugzilla.suse.com/1144522 https://bugzilla.suse.com/1152684 _______________________________________________ sle-security-updates mailing list
Jan 17, 2020
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!