Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 9 articles for you...
89
security advisorybuffer overflowsoftware updateFedora 40: FEDORA-2025-6f07616b52 critical: rust-nu openssl update
Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuilds of all packages that statically link the openssl crate.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-6f07616b52 2025-02-13 02:00:53.381620+00:00 -------------------------------------------------------------------------------- Name : rust-nu Product : Fedora 40 Version : 0.99.1 Release : 7.fc40 URL : https://crates.io/crates/nu Summary : New type of shell Description : A new type of shell. -------------------------------------------------------------------------------- Update Information: Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuilds of all packages that statically link the openssl crate. -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 6 2025 Fabio Valentini - 0.99.1-7 - Rebuild for openssl crate > = v0.10.70 (RUSTSEC-2025-0004) * Sun Jan 19 2025 Fedora Release Engineering - 0.99.1-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2343478 - CVE-2025-0977 rust-openssl: ssl::select_next_proto use after free [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2343478 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-6f07616b52' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details onthe GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Feb 13, 2025
•Critical
Fedora
89
security advisorysecurity issueFedoraFedora 40: Fido-Device-Onboard Critical Openssl Fix FEDORA-2025-6f07616b52
Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuilds of all packages that statically link the openssl crate.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-6f07616b52 2025-02-13 02:00:53.381620+00:00 -------------------------------------------------------------------------------- Name : fido-device-onboard Product : Fedora 40 Version : 0.5.0 Release : 2.fc40 URL : https://github.com/fdo-rs/fido-device-onboard-rs Summary : A rust implementation of the FIDO Device Onboard Specification Description : A rust implementation of the FIDO Device Onboard Specification. -------------------------------------------------------------------------------- Update Information: Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuilds of all packages that statically link the openssl crate. -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 6 2025 Fabio Valentini - 0.5.0-2 - Rebuild for openssl crate > = v0.10.70 (RUSTSEC-2025-0004) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2343478 - CVE-2025-0977 rust-openssl: ssl::select_next_proto use after free [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2343478 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-6f07616b52' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keysused by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Feb 13, 2025
•Critical
Fedora
89
security advisorysecurity issuesoftware updateFedora 41: FEDORA-2025-f8be7978e3 critical: openssl crate security fix
Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuilds of all packages that statically link the openssl crate.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-f8be7978e3 2025-02-08 02:15:29.328151+00:00 -------------------------------------------------------------------------------- Name : rust-openssl-sys Product : Fedora 41 Version : 0.9.105 Release : 1.fc41 URL : https://crates.io/crates/openssl-sys Summary : FFI bindings to OpenSSL Description : FFI bindings to OpenSSL. -------------------------------------------------------------------------------- Update Information: Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuilds of all packages that statically link the openssl crate. -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 5 2025 Fabio Valentini - 0.9.105-1 - Update to version 0.9.105; Fixes RHBZ#2343422 * Sun Jan 19 2025 Fedora Release Engineering - 0.9.104-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2343479 - CVE-2025-0977 rust-openssl: ssl::select_next_proto use after free [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2343479 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-f8be7978e3' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key.More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Feb 08, 2025
•Critical
Fedora
89
security advisorysoftware updateFedoraFedora 41: FEDORA-2025-f8be7978e3 critical: rust-nu openssl update
Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuilds of all packages that statically link the openssl crate.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-f8be7978e3 2025-02-08 02:15:29.328151+00:00 -------------------------------------------------------------------------------- Name : rust-nu Product : Fedora 41 Version : 0.99.1 Release : 7.fc41 URL : https://crates.io/crates/nu Summary : New type of shell Description : A new type of shell. -------------------------------------------------------------------------------- Update Information: Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuilds of all packages that statically link the openssl crate. -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 6 2025 Fabio Valentini - 0.99.1-7 - Rebuild for openssl crate > = v0.10.70 (RUSTSEC-2025-0004) * Sun Jan 19 2025 Fedora Release Engineering - 0.99.1-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2343479 - CVE-2025-0977 rust-openssl: ssl::select_next_proto use after free [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2343479 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-f8be7978e3' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details onthe GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Feb 08, 2025
•Critical
Fedora
89
security advisoryFedoracritical fixFedora 39: 2024-029752E60B Security Advisory for Sequoia-OpenPGP
Update the sequoia-openpgp crate to version 1.21.1. Addresses RUSTSEC-2024-0345. Update the sequoia-keystore crate to version 0.5.1. Update the sequoia-gpg-agent crate to version 0.4.2. This update also includes rebuilds of all affected applications that are affected by RUSTSEC-2024-0345 and a regression in sequoia-openpgp 1.21.0.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-029752e60b 2024-07-09 01:41:25.580220 -------------------------------------------------------------------------------- Name : rust-sequoia-openpgp Product : Fedora 39 Version : 1.21.1 Release : 1.fc39 URL : Summary : OpenPGP data types and associated machinery Description : OpenPGP data types and associated machinery. -------------------------------------------------------------------------------- Update Information: Update the sequoia-openpgp crate to version 1.21.1. Addresses RUSTSEC-2024-0345. Update the sequoia-keystore crate to version 0.5.1. Update the sequoia-gpg-agent crate to version 0.4.2. This update also includes rebuilds of all affected applications that are affected by RUSTSEC-2024-0345 and a regression in sequoia-openpgp 1.21.0. -------------------------------------------------------------------------------- ChangeLog: * Sun Jun 30 2024 Fabio Valentini - 1.21.1-1 - Update to version 1.21.1; Fixes RHBZ#2294808 * Wed Jun 26 2024 Fabio Valentini - 1.21.0-1 - Update to version 1.21.0; Fixes RHBZ#2294401 * Mon May 20 2024 Fabio Valentini - 1.20.0-2 - Enable building the RustCrypto backend and run tests against it -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-029752e60b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label Allpackages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 09, 2024
•Critical
Fedora
89
security advisoryFedoracode executionFedora 38: FEDORA-2024-993d3a78dd Moderate: libgit2 Code Exec Risk
Update the git2 crate to version 0.18.2. Update the libgit2-sys crate to version 0.16.2. Version 0.16.2 of the libgit2-sys crate includes an update of the bundled copy of libgit2 to version 1.7.2 to address CVE-2024-24575 and CVE-2024-24577. Since the libgit2 bindings cause applications that use them to statically link. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-993d3a78dd 2024-02-22 02:22:22.545942 -------------------------------------------------------------------------------- Name : rust-pore Product : Fedora 38 Version : 0.1.10 Release : 3.fc38 URL : Summary : Performance oriented reimplementation of repo Description : A performance oriented reimplementation of repo. -------------------------------------------------------------------------------- Update Information: Update the git2 crate to version 0.18.2. Update the libgit2-sys crate to version 0.16.2. Version 0.16.2 of the libgit2-sys crate includes an update of the bundled copy of libgit2 to version 1.7.2 to address CVE-2024-24575 and CVE-2024-24577. Since the libgit2 bindings cause applications that use them to statically link libgit2, this update also includes rebuilds of all affected applications. -------------------------------------------------------------------------------- ChangeLog: * Tue Feb 13 2024 Fabio Valentini - 0.1.10-3 - Rebuild for CVE-2024-24575 and CVE-2024-24577 in libgit2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2263100 - TRIAGE CVE-2024-24577 rust-libgit2-sys: libgit2: arbitrary code execution due to heap corruption in git_index_add [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2263100 [ 2 ] Bug #2263105 - TRIAGE CVE-2024-24575 rust-libgit2-sys: libgit2: potential infiniate loop condition in git_revparse_single [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2263105 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-993d3a78dd' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Feb 22, 2024
Fedora
89
security advisorycriticalheap corruptionUbuntu 20.04: 2023-abc123defg Urgent: OpenSSL Vulnerability Patch
Update the git2 crate to version 0.18.2. Update the libgit2-sys crate to version 0.16.2. Version 0.16.2 of the libgit2-sys crate includes an update of the bundled copy of libgit2 to version 1.7.2 to address CVE-2024-24575 and CVE-2024-24577. Since the libgit2 bindings cause applications that use them to statically link. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-993d3a78dd 2024-02-22 02:22:22.545942 -------------------------------------------------------------------------------- Name : rust-eza Product : Fedora 38 Version : 0.17.3 Release : 2.fc38 URL : Summary : Modern replacement for ls Description : A modern replacement for ls. -------------------------------------------------------------------------------- Update Information: Update the git2 crate to version 0.18.2. Update the libgit2-sys crate to version 0.16.2. Version 0.16.2 of the libgit2-sys crate includes an update of the bundled copy of libgit2 to version 1.7.2 to address CVE-2024-24575 and CVE-2024-24577. Since the libgit2 bindings cause applications that use them to statically link libgit2, this update also includes rebuilds of all affected applications. -------------------------------------------------------------------------------- ChangeLog: * Tue Feb 13 2024 Fabio Valentini - 0.17.3-2 - Rebuild for CVE-2024-24575 and CVE-2024-24577 in libgit2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2263100 - TRIAGE CVE-2024-24577 rust-libgit2-sys: libgit2: arbitrary code execution due to heap corruption in git_index_add [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2263100 [ 2 ] Bug #2263105 - TRIAGE CVE-2024-24575 rust-libgit2-sys: libgit2: potential infiniate loop condition in git_revparse_single [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2263105 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-993d3a78dd' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Feb 22, 2024
•Critical
Fedora
89
security advisoryfedoracriticalFedora 39: FEDORA-2024-9ca471624d Major: Libgit2 Code Vulnerability
Update the git2 crate to version 0.18.2. Update the libgit2-sys crate to version 0.16.2. Version 0.16.2 of the libgit2-sys crate includes an update of the bundled copy of libgit2 to version 1.7.2 to address CVE-2024-24575 and CVE-2024-24577. Since the libgit2 bindings cause applications that use them to statically link. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-8ba389815f 2024-02-20 01:38:39.542135 -------------------------------------------------------------------------------- Name : rust-cargo-c Product : Fedora 39 Version : 0.9.28 Release : 4.fc39 URL : Summary : Helper program to build and install c-like libraries Description : Helper program to build and install c-like libraries. -------------------------------------------------------------------------------- Update Information: Update the git2 crate to version 0.18.2. Update the libgit2-sys crate to version 0.16.2. Version 0.16.2 of the libgit2-sys crate includes an update of the bundled copy of libgit2 to version 1.7.2 to address CVE-2024-24575 and CVE-2024-24577. Since the libgit2 bindings cause applications that use them to statically link libgit2, this update also includes rebuilds of all affected applications. -------------------------------------------------------------------------------- ChangeLog: * Tue Feb 13 2024 Fabio Valentini - 0.9.28-4 - Attempt to work around OOM problems on i686 * Tue Feb 13 2024 Fabio Valentini - 0.9.28-3 - Rebuild for CVE-2024-24575 and CVE-2024-24577 in libgit2 * Fri Jan 26 2024 Fedora Release Engineering - 0.9.28-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2263100 - TRIAGE CVE-2024-24577 rust-libgit2-sys: libgit2: arbitrary code execution due to heap corruption in git_index_add [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2263100 [ 2 ] Bug #2263105 - TRIAGE CVE-2024-24575 rust-libgit2-sys: libgit2: potential infiniate loop condition in git_revparse_single [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2263105 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-8ba389815f' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Feb 20, 2024
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!