Alerts This Week
Warning Icon 1 626
Alerts This Week
Warning Icon 1 626

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
89

Fedora 43 python-ply Critical Unsafe Pickle Handling Fix 2026-516db080b7

Security fix for CVE-2025-56005. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-516db080b7 2026-03-29 00:48:39.566775+00:00 -------------------------------------------------------------------------------- Name : python-ply Product : Fedora 43 Version : 3.11 Release : 33.fc43 URL : http://www.dabeaz.com/ply/ Summary : Python Lex-Yacc Description : PLY is a straightforward lex/yacc implementation. Here is a list of its essential features: * It is implemented entirely in Python. * It uses LR-parsing which is reasonably efficient and well suited for larger grammars. * PLY provides most of the standard lex/yacc features including support for empty productions, precedence rules, error recovery, and support for ambiguous grammars. * PLY is straightforward to use and provides very extensive error checking. * PLY doesn't try to do anything more or less than provide the basic lex/yacc functionality. In other words, it's not a large parsing framework or a component of some larger system. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2025-56005 -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 25 2026 Charalampos Stratakis - 3.11-33 - Security fix for CVE-2025-56005 - Fixes: rhbz#2437981 * Sat Jan 17 2026 Fedora Release Engineering - 3.11-32 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Thu Dec 18 2025 Tom Callaway - 3.11-31 - fix build for Python 3.15 - use modern macros -------------------------------------------------------------------------------- References: [ 1 ] Bug #2437981 - CVE-2025-56005 python-ply: Unsafe pickle file handling in Ply [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2437981 -------------------------------------------------------------------------------- Thisupdate can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-516db080b7' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Critical security fix for unsafe pickle handling in python-ply for Fedora 43. Protect your applications now!. Fedora security patch, python-ply update, critical security fix. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Mar 29, 2026 Critical Fedora
89

Fedora 8: 2008-7619 Moderate: Unsafe Temp Directory Handling Fix

Update to R 2.7.2, also fixes security issue with unsafe temp directory handling in javareconf script.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-7619 2008-09-05 10:56:15 -------------------------------------------------------------------------------- Name : rpy Product : Fedora 8 Version : 1.0.3 Release : 3.fc8 URL : https://sourceforge.net/projects/rpy/ Summary : Python interface to the R language Description : RPy provides a robust Python interface to the R programming language. It can manage all kinds of R objects and can execute arbitrary R functions. All the errors from the R language are converted to Python exceptions. -------------------------------------------------------------------------------- Update Information: Update to R 2.7.2, also fixes security issue with unsafe temp directory handling in javareconf script. -------------------------------------------------------------------------------- ChangeLog: * Fri Aug 29 2008 Tom "spot" Callaway - 1.0.3-3 - rebuild against R-2.7.2 * Tue Jul 8 2008 Tom "spot" Callaway - 1.0.3-2 - rebuild against R 2.7.1 * Wed May 21 2008 José Matos - 1.0.3-1 - Update to 1.0.3 - Backport two patches from upstream (turn off debug and use the lapack version that R was compiled with) * Tue Apr 29 2008 Tom "spot" Callaway - 1.0.2-1 - update to 1.0.2 - R 2.7.0 * Wed Feb 13 2008 José Matos - 1.0.1-5 - BR texinfo -> texinfo-tex * Wed Feb 13 2008 José Matos - 1.0.1-4 - Rebuild for gcc 4.3 * Fri Feb 8 2008 Tom "spot" Callaway - 1.0.1-3 - rebuild for R 2.6.2 * Mon Feb 4 2008 José Matos - 1.0.1-2 - Sometimes _patch_'s guesses are not good enough. Redo patch to setup.py. * Sun Feb 3 2008 José Matos - 1.0.1-1 - New upstream release. * Mon Jan 7 2008 Tom "spot" Callaway - 1.0-0.7.RC3 - find the moved R headers in their new home (/usr/include/R) * Mon Jan 7 2008 Alex Lancaster - 1.0-0.6.RC3 - BuildRequires: R-devel rather than just R * MonNov 26 2007 Tom "spot" Callaway - 1.0-0.5.RC3 - really rebuild against R 2.6.1 - versioned buildrequires for R * Mon Nov 26 2007 Tom "spot" Callaway - 1.0-0.4.RC3 - rebuild against R 2.6.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #460658 - R: Insecure auxiliary /tmp file usage (symlink attack possible) https://bugzilla.redhat.com/show_bug.cgi?id=460658 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update rpy' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . R 2.7.2 update addresses a security vulnerability related to improper management of temporary directories in the javareconf script.. Fedora Update,rpy Update,Security Fix,Java Handling. . LinuxSecurity.com Team

Calendar 2 Sep 10, 2008 Fedora
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here