Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 2 articles for you...
89
security advisoryfedoraimportantFedora 41: Crucial Rootless Enhancement for xwayland-satellite Update
Update niri to version 25.08 and xwayland-satellite to version 0.7. Notably, niri now supports xwayland out-of-the-box without manual configuration, and reading keyboard layout from org.freedesktop.locale1. Release notes: https://github.com/niri-wm/niri/releases/tag/v25.08. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-2bcbe8b09c 2025-09-13 02:42:15.995376+00:00 -------------------------------------------------------------------------------- Name : xwayland-satellite Product : Fedora 41 Version : 0.7 Release : 1.fc41 URL : https://github.com/Supreeeme/xwayland-satellite Summary : Rootless Xwayland integration for Wayland compositors Description : xwayland-satellite grants rootless Xwayland integration to any Wayland compositor implementing xdg_wm_base and viewporter. This is particularly useful for compositors that (understandably) do not want to go through implementing support for rootless Xwayland themselves. -------------------------------------------------------------------------------- Update Information: Update niri to version 25.08 and xwayland-satellite to version 0.7. Notably, niri now supports xwayland out-of-the-box without manual configuration, and reading keyboard layout from org.freedesktop.locale1. Release notes: https://github.com/niri-wm/niri/releases/tag/v25.08 https://github.com/Supreeeme/xwayland-satellite/releases/tag/v0.7 -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 4 2025 Fabio Valentini - 0.7-1 - Update to version 0.7; Fixes RHBZ#2389095 * Fri Jul 25 2025 Fedora Release Engineering - 0.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2392002 - CVE-2025-58160 niri: Tracing log pollution [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2392002 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-2bcbe8b09c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Sep 13, 2025
•Critical
Fedora
89
security advisoryfedoraimportantFedora 41: uv Important Tracing Log Pollution Fix FEDORA-2025-c71f0af9b2
Security fix for CVE-2025-58160: rebuilt uv and python-uv-build with rust- tracing-subscriber 0.3.20. Initial package for rust-secret-service in Fedora 43 (previously a retired package).. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-c71f0af9b2 2025-09-13 02:42:15.995323+00:00 -------------------------------------------------------------------------------- Name : uv Product : Fedora 41 Version : 0.8.11 Release : 2.fc41 URL : https://github.com/astral-sh/uv Summary : An extremely fast Python package installer and resolver, written in Rust Description : An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: \u2022 \u2696\ufe0f Drop-in replacement for common pip, pip-tools, and virtualenv commands. \u2022 \u26a1\ufe0f 10-100x faster than pip and pip-tools (pip-compile and pip-sync). \u2022 \U0001f4be Disk-space efficient, with a global cache for dependency deduplication. \u2022 \U0001f40d Installable via curl, pip, pipx, etc. uv is a static binary that can be installed without Rust or Python. \u2022 \U0001f9ea Tested at-scale against the top 10,000 PyPI packages. \u2022 \U0001f5a5\ufe0f Support for macOS, Linux, and Windows. \u2022 \U0001f9f0 Advanced features such as dependency version overrides and alternative resolution strategies. \u2022 \u2049\ufe0f Best-in-class error messages with a conflict-tracking resolver. \u2022 \U0001f91d Support for a wide range of advanced pip features, including editable installs, Git dependencies, direct URL dependencies, local dependencies, constraints, source distributions, HTML and JSON indexes, and more. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2025-58160: rebuilt uv and python-uv-build with rust- tracing-subscriber 0.3.20. Initial package forrust-secret-service in Fedora 43 (previously a retired package). -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 2 2025 Benjamin A. Beasley - 0.8.11-2 - Rebuilt with rust-tracing-subscriber-0.3.20 - Fixes CVE-2025-58160: fixes RHBZ#2392055, fixes RHBZ#2392012, fixes RHBZ#2391975 * Sat Aug 16 2025 Benjamin A. Beasley - 0.8.11-1 - Update to 0.8.11 (close RHBZ#2388413) * Sat Aug 16 2025 Benjamin A. Beasley - 0.8.10-1 - Update to 0.8.10 * Fri Aug 15 2025 Python Maint - 0.8.9-2 - Rebuilt for Python 3.14.0rc2 bytecode * Wed Aug 13 2025 Benjamin A. Beasley - 0.8.9-1 - Update to 0.8.9 (close RHBZ#2387762) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2389401 - Review Request: rust-secret-service - Library to interface with Secret Service API https://bugzilla.redhat.com/show_bug.cgi?id=2389401 [ 2 ] Bug #2392012 - CVE-2025-58160 uv: Tracing log pollution [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2392012 [ 3 ] Bug #2392998 - rust-secret-service-5.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2392998 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-c71f0af9b2' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Update for Fedora 41 uv package resolving data logging contamination problem stemming from CVE-2025-58160.. Fedora 41, Python Package Manager, Security Fix. . Severity: Important. LinuxSecurity.com Team
Sep 13, 2025
•Important
Fedora
89
security advisoryfedoraimportantFedora 43: ruff Update for CVE-2025-58160 Important Tracing Log Pollution
Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-91981ea84d 2025-09-12 19:20:52.462083+00:00 -------------------------------------------------------------------------------- Name : ruff Product : Fedora 43 Version : 0.11.5 Release : 7.fc43 URL : https://github.com/astral-sh/ruff Summary : Extremely fast Python linter and code formatter Description : An extremely fast Python linter and code formatter, written in Rust. Ruff aims to be orders of magnitude faster than alternative tools while integrating more functionality behind a single, common interface. Ruff can be used to replace Flake8 (plus dozens of plugins), Black, isort, pydocstyle, pyupgrade, autoflake, and more, all while executing tens or hundreds of times faster than any individual tool. -------------------------------------------------------------------------------- Update Information: Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 2 2025 Fabio Valentini - 0.11.5-7 - Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2391973 - CVE-2025-58160 ruff: Tracing log pollution [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2391973 [ 2 ] Bug #2392006 - CVE-2025-58160 ruff: Tracing log pollution [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2392006 [ 3 ] Bug #2392045 - CVE-2025-58160 ruff: Tracing log pollution [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2392045 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-91981ea84d' at thecommand line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Sep 12, 2025
•Important
Fedora
89
security advisoryfedoracriticalFedora 43: Rustup Critical Tracing Log Pollution CVE-2025-58160
Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-597afa65a9 2025-09-12 19:20:52.461961+00:00 -------------------------------------------------------------------------------- Name : rustup Product : Fedora 43 Version : 1.28.2 Release : 6.fc43 URL : https://github.com/rust-lang/rustup Summary : Manage multiple rust installations with ease Description : Manage multiple rust installations with ease. -------------------------------------------------------------------------------- Update Information: Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 2 2025 Fabio Valentini - 1.28.2-6 - Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2392009 - CVE-2025-58160 rustup: Tracing log pollution [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2392009 [ 2 ] Bug #2392049 - CVE-2025-58160 rustup: Tracing log pollution [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2392049 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-597afa65a9' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list
Sep 12, 2025
•Critical
Fedora
89
security advisoryfedoracriticalFedora 43 bustle Critical Tracing Log Pollution Fix CVE-2025-58160
Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-4b143118b8 2025-09-12 19:20:52.461944+00:00 -------------------------------------------------------------------------------- Name : bustle Product : Fedora 43 Version : 0.12.0 Release : 3.fc43 URL : Summary : Visualize D-Bus activity Description : Bustle draws sequence diagrams of D-Bus activity, showing signal emissions, method calls and their corresponding returns, with timestamps for each individual event and the duration of each method call. This can help you check for unwanted D-Bus traffic, and pinpoint why your D-Bus-based application isn't performing as well as you like. It also provides statistics like signal frequencies and average method call times. -------------------------------------------------------------------------------- Update Information: Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 2 2025 Fabio Valentini - 0.12.0-3 - Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2391985 - CVE-2025-58160 bustle: Tracing log pollution [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2391985 [ 2 ] Bug #2392019 - CVE-2025-58160 bustle: Tracing log pollution [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2392019 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-4b143118b8' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages aresigned with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Sep 12, 2025
•Critical
Fedora
89
security advisoryfedoraimportantFedora 41: ruff Important Tracing Log Pollution Vuln 2025-5ba89a2c48
Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-5ba89a2c48 2025-09-12 02:30:53.358177+00:00 -------------------------------------------------------------------------------- Name : ruff Product : Fedora 41 Version : 0.11.5 Release : 7.fc41 URL : https://github.com/astral-sh/ruff Summary : Extremely fast Python linter and code formatter Description : An extremely fast Python linter and code formatter, written in Rust. Ruff aims to be orders of magnitude faster than alternative tools while integrating more functionality behind a single, common interface. Ruff can be used to replace Flake8 (plus dozens of plugins), Black, isort, pydocstyle, pyupgrade, autoflake, and more, all while executing tens or hundreds of times faster than any individual tool. -------------------------------------------------------------------------------- Update Information: Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 2 2025 Fabio Valentini - 0.11.5-7 - Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160 * Fri Aug 15 2025 Python Maint - 0.11.5-6 - Rebuilt for Python 3.14.0rc2 bytecode -------------------------------------------------------------------------------- References: [ 1 ] Bug #2391973 - CVE-2025-58160 ruff: Tracing log pollution [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2391973 [ 2 ] Bug #2392006 - CVE-2025-58160 ruff: Tracing log pollution [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2392006 [ 3 ] Bug #2392045 - CVE-2025-58160 ruff: Tracing log pollution [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2392045 -------------------------------------------------------------------------------- This update can be installed with the"dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-5ba89a2c48' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Sep 12, 2025
•Important
Fedora
89
security advisoryfedoracriticalFedora 42: Ruff Critical Update CVE-2025-58160 Tracing Log Pollution
Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-a8501d6717 2025-09-12 02:06:02.138626+00:00 -------------------------------------------------------------------------------- Name : ruff Product : Fedora 42 Version : 0.11.5 Release : 7.fc42 URL : https://github.com/astral-sh/ruff Summary : Extremely fast Python linter and code formatter Description : An extremely fast Python linter and code formatter, written in Rust. Ruff aims to be orders of magnitude faster than alternative tools while integrating more functionality behind a single, common interface. Ruff can be used to replace Flake8 (plus dozens of plugins), Black, isort, pydocstyle, pyupgrade, autoflake, and more, all while executing tens or hundreds of times faster than any individual tool. -------------------------------------------------------------------------------- Update Information: Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 2 2025 Fabio Valentini - 0.11.5-7 - Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160 * Fri Aug 15 2025 Python Maint - 0.11.5-6 - Rebuilt for Python 3.14.0rc2 bytecode -------------------------------------------------------------------------------- References: [ 1 ] Bug #2391973 - CVE-2025-58160 ruff: Tracing log pollution [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2391973 [ 2 ] Bug #2392006 - CVE-2025-58160 ruff: Tracing log pollution [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2392006 [ 3 ] Bug #2392045 - CVE-2025-58160 ruff: Tracing log pollution [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2392045 -------------------------------------------------------------------------------- This update can be installed with the"dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-a8501d6717' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Sep 12, 2025
•Critical
Fedora
89
security advisorysecurity issuefedoraFedora 42: Important Tracing Log Update for CVE-2025-58160 Security Fix
Security fix for CVE-2025-58160: rebuilt uv and python-uv-build with rust- tracing-subscriber 0.3.20. Initial package for rust-secret-service in Fedora 43 (previously a retired package).. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-d757bc292e 2025-09-12 02:06:02.138559+00:00 -------------------------------------------------------------------------------- Name : uv Product : Fedora 42 Version : 0.8.11 Release : 2.fc42 URL : https://github.com/astral-sh/uv Summary : An extremely fast Python package installer and resolver, written in Rust Description : An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: \u2022 \u2696\ufe0f Drop-in replacement for common pip, pip-tools, and virtualenv commands. \u2022 \u26a1\ufe0f 10-100x faster than pip and pip-tools (pip-compile and pip-sync). \u2022 \U0001f4be Disk-space efficient, with a global cache for dependency deduplication. \u2022 \U0001f40d Installable via curl, pip, pipx, etc. uv is a static binary that can be installed without Rust or Python. \u2022 \U0001f9ea Tested at-scale against the top 10,000 PyPI packages. \u2022 \U0001f5a5\ufe0f Support for macOS, Linux, and Windows. \u2022 \U0001f9f0 Advanced features such as dependency version overrides and alternative resolution strategies. \u2022 \u2049\ufe0f Best-in-class error messages with a conflict-tracking resolver. \u2022 \U0001f91d Support for a wide range of advanced pip features, including editable installs, Git dependencies, direct URL dependencies, local dependencies, constraints, source distributions, HTML and JSON indexes, and more. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2025-58160: rebuilt uv and python-uv-build with rust- tracing-subscriber 0.3.20. Initial package forrust-secret-service in Fedora 43 (previously a retired package). -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 2 2025 Benjamin A. Beasley - 0.8.11-2 - Rebuilt with rust-tracing-subscriber-0.3.20 - Fixes CVE-2025-58160: fixes RHBZ#2392055, fixes RHBZ#2392012, fixes RHBZ#2391975 * Sat Aug 16 2025 Benjamin A. Beasley - 0.8.11-1 - Update to 0.8.11 (close RHBZ#2388413) * Sat Aug 16 2025 Benjamin A. Beasley - 0.8.10-1 - Update to 0.8.10 * Fri Aug 15 2025 Python Maint - 0.8.9-2 - Rebuilt for Python 3.14.0rc2 bytecode * Wed Aug 13 2025 Benjamin A. Beasley - 0.8.9-1 - Update to 0.8.9 (close RHBZ#2387762) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2389401 - Review Request: rust-secret-service - Library to interface with Secret Service API https://bugzilla.redhat.com/show_bug.cgi?id=2389401 [ 2 ] Bug #2392055 - CVE-2025-58160 uv: Tracing log pollution [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2392055 [ 3 ] Bug #2392364 - F42FailsToInstall: rust-secret-service+rt-async-io-crypto-openssl-devel, rust-secret-service+rt-async-io-crypto-rust-devel, rust-secret-service+rt-tokio-crypto-openssl-devel, rust-secret-service+rt-tokio-crypto-rust-devel, rust-secret-service-devel https://bugzilla.redhat.com/show_bug.cgi?id=2392364 [ 4 ] Bug #2392998 - rust-secret-service-5.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2392998 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-d757bc292e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Fedora 42 introduces a security patch addressing CVE-2025-58160, enhancing system safety via improved tracing logging capabilities.. Fedora security updates, uv package installer, rust security fix. . Severity: Important. LinuxSecurity.com Team
Sep 12, 2025
•Important
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!