Aggregator

mirrorlist-server-3.0.8-1.fc41 rust-maxminddb-0.26.0-1.fc41 rust-prometheus-0.14.0-1.fc41 rust-prometheus_exporter-0.8.5-5.fc41 rust-protobuf-3.7.2-1.fc41 rust-protobuf-codegen-3.7.2-1.fc41 rust-protobuf-parse-3.7.2-1.fc41 rust-protobuf-support-3.7.2-1…

1 week 6 days ago
FEDORA-2025-2503abb88f Packages in this update:
  • mirrorlist-server-3.0.8-1.fc41
  • rust-maxminddb-0.26.0-1.fc41
  • rust-prometheus-0.14.0-1.fc41
  • rust-prometheus_exporter-0.8.5-5.fc41
  • rust-protobuf-3.7.2-1.fc41
  • rust-protobuf-codegen-3.7.2-1.fc41
  • rust-protobuf-parse-3.7.2-1.fc41
  • rust-protobuf-support-3.7.2-1.fc41
Update description:
  • Update mirrorlist-server to version 3.0.8.
  • Update the maxminddb crate to version 0.26.0.
  • Update the prometheus crate to version 0.14.0.
  • Update the protobuf and protobuf-codegen crates to version 3.7.2.
  • Initial packaging of the protobuf-parse and protobuf-support crates.

This includes fixes for CVE-2025-53605 (Uncontrolled Recursion Vulnerability in the protobuf crate).

mirrorlist-server-3.0.8-1.fc42 rust-maxminddb-0.26.0-1.fc42 rust-prometheus-0.14.0-1.fc42 rust-prometheus_exporter-0.8.5-5.fc42 rust-protobuf-3.7.2-1.fc42 rust-protobuf-codegen-3.7.2-1.fc42 rust-protobuf-parse-3.7.2-1.fc42 rust-protobuf-support-3.7.2-1…

1 week 6 days ago
FEDORA-2025-1ac08db27d Packages in this update:
  • mirrorlist-server-3.0.8-1.fc42
  • rust-maxminddb-0.26.0-1.fc42
  • rust-prometheus-0.14.0-1.fc42
  • rust-prometheus_exporter-0.8.5-5.fc42
  • rust-protobuf-3.7.2-1.fc42
  • rust-protobuf-codegen-3.7.2-1.fc42
  • rust-protobuf-parse-3.7.2-1.fc42
  • rust-protobuf-support-3.7.2-1.fc42
Update description:
  • Update mirrorlist-server to version 3.0.8.
  • Update the maxminddb crate to version 0.26.0.
  • Update the prometheus crate to version 0.14.0.
  • Update the protobuf and protobuf-codegen crates to version 3.7.2.
  • Initial packaging of the protobuf-parse and protobuf-support crates.

This includes fixes for CVE-2025-53605 (Uncontrolled Recursion Vulnerability in the protobuf crate).

mirrorlist-server-3.0.8-1.fc43 rust-maxminddb-0.26.0-1.fc43 rust-prometheus-0.14.0-1.fc43 rust-prometheus_exporter-0.8.5-5.fc43 rust-protobuf-3.7.2-1.fc43 rust-protobuf-codegen-3.7.2-1.fc43 rust-protobuf-parse-3.7.2-1.fc43 rust-protobuf-support-3.7.2-1…

1 week 6 days ago
FEDORA-2025-9e77f6ddcb Packages in this update:
  • mirrorlist-server-3.0.8-1.fc43
  • rust-maxminddb-0.26.0-1.fc43
  • rust-prometheus-0.14.0-1.fc43
  • rust-prometheus_exporter-0.8.5-5.fc43
  • rust-protobuf-3.7.2-1.fc43
  • rust-protobuf-codegen-3.7.2-1.fc43
  • rust-protobuf-parse-3.7.2-1.fc43
  • rust-protobuf-support-3.7.2-1.fc43
Update description:
  • Update mirrorlist-server to version 3.0.8.
  • Update the maxminddb crate to version 0.26.0.
  • Update the prometheus crate to version 0.14.0.
  • Update the protobuf and protobuf-codegen crates to version 3.7.2.
  • Initial packaging of the protobuf-parse and protobuf-support crates.

This includes fixes for CVE-2025-53605 (Uncontrolled Recursion Vulnerability in the protobuf crate).

mirrorlist-server-3.0.8-1.fc44 rust-maxminddb-0.26.0-1.fc44 rust-protobuf-3.7.2-1.fc44 rust-protobuf-codegen-3.7.2-1.fc44 rust-protobuf-parse-3.7.2-1.fc44 rust-protobuf-support-3.7.2-1.fc44

1 week 6 days ago
FEDORA-2025-41d833fe83 Packages in this update:
  • mirrorlist-server-3.0.8-1.fc44
  • rust-maxminddb-0.26.0-1.fc44
  • rust-protobuf-3.7.2-1.fc44
  • rust-protobuf-codegen-3.7.2-1.fc44
  • rust-protobuf-parse-3.7.2-1.fc44
  • rust-protobuf-support-3.7.2-1.fc44
Update description:
  • Update mirrorlist-server to version 3.0.8.
  • Update the maxminddb crate to version 0.26.0.
  • Update the protobuf and protobuf-codegen crates to version 3.7.2.
  • Initial packaging of the protobuf-parse and protobuf-support crates.

This includes fixes for CVE-2025-53605 (Uncontrolled Recursion Vulnerability in the protobuf crate).

USN-7786-1: OpenSSL vulnerabilities

2 weeks ago
Stanislav Fort discovered that OpenSSL incorrectly handled memory when trying to decrypt CMS messages encrypted with password-based encryption. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2025-9230) Stanislav Fort discovered that OpenSSL had a timing side-channel in SM2 signature computations on ARM platforms. A remote attacker could possibly use this issue to recover private data. This issue only affected Ubuntu 25.04. (CVE-2025-9231) Stanislav Fort discovered that OpenSSL incorrectly handled memory during HTTP requests when "no_proxy" environment variable is set. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 25.04. (CVE-2025-9232)