Fedora Security Advisories

sngrep-1.9.0-4.fc45

1 day 16 hours ago
FEDORA-2026-39f14c4384 Packages in this update:
  • sngrep-1.9.0-4.fc45
Update description:

Backport fixes for two memory-safety issues reported upstream (irontec/sngrep#589):

  • CVE-2026-121943: off-by-one length guard in the SIP parser accepts a 10240-byte payload that fills the stack buffer with no NUL terminator, so regexec()/strdup() read past its end (OOB read).
  • CVE-2026-121944: an NFLOG TLV with length < 4 never advances the parse offset, making the capture thread spin forever (DoS).

Submitted upstream as irontec/sngrep#591 and #592.

rust-zstd-0.13.4-1.el10_3 rust-zstd-safe-7.4.0-1.el10_3 rust-zstd-sys-2.0.17-1.el10_3

1 day 19 hours ago
FEDORA-EPEL-2026-353cc882e0 Packages in this update:
  • rust-zstd-0.13.4-1.el10_3
  • rust-zstd-safe-7.4.0-1.el10_3
  • rust-zstd-sys-2.0.17-1.el10_3
Update description:
  • Update the zstd crate to version 0.13.4.
  • Update the zstd-safe crate to version 7.4.0.
  • Update the zstd-sys crate to version 2.0.17.

This addresses multiple unsoundness and security issues in the zstd-safe and zstd-sys crates (assigned RUSTSEC-2026-0391, RUSTSEC-2026-0392, RUSTSEC-2026-0393, RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399, RUSTSEC-2026-0400, RUSTSEC-2026-0401, RUSTSEC-2026-0402, RUSTSEC-2026-0403, RUSTSEC-2026-0404, RUSTSEC-2026-0405, RUSTSEC-2026-0406).

Rebuilds of affected applications will be tracked and performed separately.

rust-crypto-bigint-0.7.10-1.el9 rust-ctutils-0.4.8-1.el9 rust-elliptic-curve-0.14.3-1.el9 rust-num-bigint-0.5.1-1.el9 rust-num-bigint0.4-0.4.8-1.el9 rust-num-modular-0.7.0-1.el9 rust-num-modular0.6-0.6.5-1.el9 rust-num-prime-0.5.0-3.el9 rust-zmij-1.0.23…

2 days 9 hours ago
FEDORA-EPEL-2026-4c3a95074e Packages in this update:
  • rust-crypto-bigint-0.7.10-1.el9
  • rust-ctutils-0.4.8-1.el9
  • rust-elliptic-curve-0.14.3-1.el9
  • rust-num-bigint0.4-0.4.8-1.el9
  • rust-num-bigint-0.5.1-1.el9
  • rust-num-modular0.6-0.6.5-1.el9
  • rust-num-modular-0.7.0-1.el9
  • rust-num-prime-0.5.0-3.el9
  • rust-zmij-1.0.23-1.el9
Update description:
  • Update the crypto-bigint crate to version 0.7.10.
  • Update the ctutils crate to version 0.4.8.
  • Update the elliptic-curve crate to version 0.14.3.
  • Update the num-bigint crate to version 0.5.1 and add a compat package for version 0.4.
  • Update the num-modular crate to version 0.7.0 and add a compat package for version 0.6.
  • Update the zmij crate to version 1.0.23.

This update includes improvements to constant-time implementations in the crypto-bigint crate (assigned RUSTSEC-2026-0387).

Update to version 0.4.7.

rust-crypto-bigint-0.7.10-1.el10_4 rust-ctutils-0.4.8-1.el10_4 rust-elliptic-curve-0.14.3-1.el10_4 rust-num-bigint-0.5.1-1.el10_4 rust-num-bigint0.4-0.4.8-1.el10_4 rust-num-modular-0.7.0-1.el10_4 rust-num-modular0.6-0.6.5-1.el10_4 rust-num-prime-0.5.0-3…

2 days 9 hours ago
FEDORA-EPEL-2026-9de0336e50 Packages in this update:
  • rust-crypto-bigint-0.7.10-1.el10_4
  • rust-ctutils-0.4.8-1.el10_4
  • rust-elliptic-curve-0.14.3-1.el10_4
  • rust-num-bigint0.4-0.4.8-1.el10_4
  • rust-num-bigint-0.5.1-1.el10_4
  • rust-num-modular0.6-0.6.5-1.el10_4
  • rust-num-modular-0.7.0-1.el10_4
  • rust-num-prime-0.5.0-3.el10_4
  • rust-zmij-1.0.23-1.el10_4
Update description:
  • Update the crypto-bigint crate to version 0.7.10.
  • Update the ctutils crate to version 0.4.8.
  • Update the elliptic-curve crate to version 0.14.3.
  • Update the num-bigint crate to version 0.5.1 and add a compat package for version 0.4.
  • Update the num-modular crate to version 0.7.0 and add a compat package for version 0.6.
  • Update the zmij crate to version 1.0.23.

This update includes improvements to constant-time implementations in the crypto-bigint crate (assigned RUSTSEC-2026-0387).

Update to version 0.4.7.

rust-crypto-bigint-0.7.10-1.fc43 rust-ctutils-0.4.8-1.fc43 rust-elliptic-curve-0.14.3-1.fc43 rust-num-bigint-0.5.1-1.fc43 rust-num-bigint0.4-0.4.8-1.fc43 rust-num-modular-0.7.0-1.fc43 rust-num-modular0.6-0.6.5-1.fc43 rust-num-prime-0.5.0-3.fc43 rust-zmij…

2 days 9 hours ago
FEDORA-2026-49adf7234d Packages in this update:
  • rust-crypto-bigint-0.7.10-1.fc43
  • rust-ctutils-0.4.8-1.fc43
  • rust-elliptic-curve-0.14.3-1.fc43
  • rust-num-bigint0.4-0.4.8-1.fc43
  • rust-num-bigint-0.5.1-1.fc43
  • rust-num-modular0.6-0.6.5-1.fc43
  • rust-num-modular-0.7.0-1.fc43
  • rust-num-prime-0.5.0-3.fc43
  • rust-zmij-1.0.23-1.fc43
Update description:
  • Update the crypto-bigint crate to version 0.7.10.
  • Update the ctutils crate to version 0.4.8.
  • Update the elliptic-curve crate to version 0.14.3.
  • Update the num-bigint crate to version 0.5.1 and add a compat package for version 0.4.
  • Update the num-modular crate to version 0.7.0 and add a compat package for version 0.6.
  • Update the zmij crate to version 1.0.23.

This update includes improvements to constant-time implementations in the crypto-bigint crate (assigned RUSTSEC-2026-0387).

Update to version 0.4.7.

rust-crypto-bigint-0.7.10-1.fc44 rust-ctutils-0.4.8-1.fc44 rust-elliptic-curve-0.14.3-1.fc44 rust-num-bigint-0.5.1-1.fc44 rust-num-bigint0.4-0.4.8-1.fc44 rust-num-modular-0.7.0-1.fc44 rust-num-modular0.6-0.6.5-1.fc44 rust-num-prime-0.5.0-3.fc44 rust-zmij…

2 days 9 hours ago
FEDORA-2026-666aa95b1b Packages in this update:
  • rust-crypto-bigint-0.7.10-1.fc44
  • rust-ctutils-0.4.8-1.fc44
  • rust-elliptic-curve-0.14.3-1.fc44
  • rust-num-bigint0.4-0.4.8-1.fc44
  • rust-num-bigint-0.5.1-1.fc44
  • rust-num-modular0.6-0.6.5-1.fc44
  • rust-num-modular-0.7.0-1.fc44
  • rust-num-prime-0.5.0-3.fc44
  • rust-zmij-1.0.23-1.fc44
Update description:
  • Update the crypto-bigint crate to version 0.7.10.
  • Update the ctutils crate to version 0.4.8.
  • Update the elliptic-curve crate to version 0.14.3.
  • Update the num-bigint crate to version 0.5.1 and add a compat package for version 0.4.
  • Update the num-modular crate to version 0.7.0 and add a compat package for version 0.6.
  • Update the zmij crate to version 1.0.23.

This update includes improvements to constant-time implementations in the crypto-bigint crate (assigned RUSTSEC-2026-0387).

Update to version 0.4.7.

rust-crypto-bigint-0.7.10-1.fc45 rust-ctutils-0.4.8-1.fc45 rust-elliptic-curve-0.14.3-1.fc45 rust-num-bigint-0.5.1-1.fc45 rust-num-bigint0.4-0.4.8-1.fc45 rust-num-modular-0.7.0-1.fc45 rust-num-modular0.6-0.6.5-1.fc45 rust-num-prime-0.5.0-3.fc45 rust-zmij…

2 days 9 hours ago
FEDORA-2026-45268841b3 Packages in this update:
  • rust-crypto-bigint-0.7.10-1.fc45
  • rust-ctutils-0.4.8-1.fc45
  • rust-elliptic-curve-0.14.3-1.fc45
  • rust-num-bigint0.4-0.4.8-1.fc45
  • rust-num-bigint-0.5.1-1.fc45
  • rust-num-modular0.6-0.6.5-1.fc45
  • rust-num-modular-0.7.0-1.fc45
  • rust-num-prime-0.5.0-3.fc45
  • rust-zmij-1.0.23-1.fc45
Update description:
  • Update the crypto-bigint crate to version 0.7.10.
  • Update the ctutils crate to version 0.4.8.
  • Update the elliptic-curve crate to version 0.14.3.
  • Update the num-bigint crate to version 0.5.1 and add a compat package for version 0.4.
  • Update the num-modular crate to version 0.7.0 and add a compat package for version 0.6.
  • Update the zmij crate to version 1.0.23.

This update includes improvements to constant-time implementations in the crypto-bigint crate (assigned RUSTSEC-2026-0387).

Update to version 0.4.7.

rust-zstd-0.14.3-1.el9 rust-zstd-safe-8.2.0-1.el9 rust-zstd-safe7-7.4.0-1.el9 rust-zstd-sys-2.1.2-1.el9 rust-zstd0.13-0.13.4-1.el9

2 days 9 hours ago
FEDORA-EPEL-2026-d6713a3bf8 Packages in this update:
  • rust-zstd0.13-0.13.4-1.el9
  • rust-zstd-0.14.3-1.el9
  • rust-zstd-safe7-7.4.0-1.el9
  • rust-zstd-safe-8.2.0-1.el9
  • rust-zstd-sys-2.1.2-1.el9
Update description:
  • Update the zstd crate to version 0.14.3 and add a compat package for version 0.13.
  • Update the zstd-safe crate to version 8.2.0 and add a compat package for version 7.
  • Update the zstd-sys crate to version 2.1.2.

This addresses multiple unsoundness and security issues in the zstd-safe and zstd-sys crates (assigned RUSTSEC-2026-0391, RUSTSEC-2026-0392, RUSTSEC-2026-0393, RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399, RUSTSEC-2026-0400, RUSTSEC-2026-0401, RUSTSEC-2026-0402, RUSTSEC-2026-0403, RUSTSEC-2026-0404, RUSTSEC-2026-0405, RUSTSEC-2026-0406).

Rebuilds of affected applications will be tracked and performed separately.

rust-zstd-0.14.3-1.el10_4 rust-zstd-safe-8.2.0-1.el10_4 rust-zstd-safe7-7.4.0-1.el10_4 rust-zstd-sys-2.1.2-1.el10_4 rust-zstd0.13-0.13.4-1.el10_4

2 days 9 hours ago
FEDORA-EPEL-2026-545bd16420 Packages in this update:
  • rust-zstd0.13-0.13.4-1.el10_4
  • rust-zstd-0.14.3-1.el10_4
  • rust-zstd-safe7-7.4.0-1.el10_4
  • rust-zstd-safe-8.2.0-1.el10_4
  • rust-zstd-sys-2.1.2-1.el10_4
Update description:
  • Update the zstd crate to version 0.14.3 and add a compat package for version 0.13.
  • Update the zstd-safe crate to version 8.2.0 and add a compat package for version 7.
  • Update the zstd-sys crate to version 2.1.2.

This addresses multiple unsoundness and security issues in the zstd-safe and zstd-sys crates (assigned RUSTSEC-2026-0391, RUSTSEC-2026-0392, RUSTSEC-2026-0393, RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399, RUSTSEC-2026-0400, RUSTSEC-2026-0401, RUSTSEC-2026-0402, RUSTSEC-2026-0403, RUSTSEC-2026-0404, RUSTSEC-2026-0405, RUSTSEC-2026-0406).

Rebuilds of affected applications will be tracked and performed separately.

rust-zstd-0.14.3-1.fc43 rust-zstd-safe-8.2.0-1.fc43 rust-zstd-safe7-7.4.0-1.fc43 rust-zstd-sys-2.1.2-1.fc43 rust-zstd0.13-0.13.4-1.fc43

2 days 9 hours ago
FEDORA-2026-965f6f4669 Packages in this update:
  • rust-zstd0.13-0.13.4-1.fc43
  • rust-zstd-0.14.3-1.fc43
  • rust-zstd-safe7-7.4.0-1.fc43
  • rust-zstd-safe-8.2.0-1.fc43
  • rust-zstd-sys-2.1.2-1.fc43
Update description:
  • Update the zstd crate to version 0.14.3 and add a compat package for version 0.13.
  • Update the zstd-safe crate to version 8.2.0 and add a compat package for version 7.
  • Update the zstd-sys crate to version 2.1.2.

This addresses multiple unsoundness and security issues in the zstd-safe and zstd-sys crates (assigned RUSTSEC-2026-0391, RUSTSEC-2026-0392, RUSTSEC-2026-0393, RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399, RUSTSEC-2026-0400, RUSTSEC-2026-0401, RUSTSEC-2026-0402, RUSTSEC-2026-0403, RUSTSEC-2026-0404, RUSTSEC-2026-0405, RUSTSEC-2026-0406).

Rebuilds of affected applications will be tracked and performed separately.

rust-zstd-0.14.3-1.fc44 rust-zstd-safe-8.2.0-1.fc44 rust-zstd-safe7-7.4.0-1.fc44 rust-zstd-sys-2.1.2-1.fc44 rust-zstd0.13-0.13.4-1.fc44

2 days 9 hours ago
FEDORA-2026-ab4ba75e47 Packages in this update:
  • rust-zstd0.13-0.13.4-1.fc44
  • rust-zstd-0.14.3-1.fc44
  • rust-zstd-safe7-7.4.0-1.fc44
  • rust-zstd-safe-8.2.0-1.fc44
  • rust-zstd-sys-2.1.2-1.fc44
Update description:
  • Update the zstd crate to version 0.14.3 and add a compat package for version 0.13.
  • Update the zstd-safe crate to version 8.2.0 and add a compat package for version 7.
  • Update the zstd-sys crate to version 2.1.2.

This addresses multiple unsoundness and security issues in the zstd-safe and zstd-sys crates (assigned RUSTSEC-2026-0391, RUSTSEC-2026-0392, RUSTSEC-2026-0393, RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399, RUSTSEC-2026-0400, RUSTSEC-2026-0401, RUSTSEC-2026-0402, RUSTSEC-2026-0403, RUSTSEC-2026-0404, RUSTSEC-2026-0405, RUSTSEC-2026-0406).

Rebuilds of affected applications will be tracked and performed separately.

rust-zstd-0.14.3-1.fc45 rust-zstd-safe-8.2.0-1.fc45 rust-zstd-safe7-7.4.0-1.fc45 rust-zstd-sys-2.1.2-1.fc45 rust-zstd0.13-0.13.4-1.fc45

2 days 9 hours ago
FEDORA-2026-852d99c4f2 Packages in this update:
  • rust-zstd0.13-0.13.4-1.fc45
  • rust-zstd-0.14.3-1.fc45
  • rust-zstd-safe7-7.4.0-1.fc45
  • rust-zstd-safe-8.2.0-1.fc45
  • rust-zstd-sys-2.1.2-1.fc45
Update description:
  • Update the zstd crate to version 0.14.3 and add a compat package for version 0.13.
  • Update the zstd-safe crate to version 8.2.0 and add a compat package for version 7.
  • Update the zstd-sys crate to version 2.1.2.

This addresses multiple unsoundness and security issues in the zstd-safe and zstd-sys crates (assigned RUSTSEC-2026-0391, RUSTSEC-2026-0392, RUSTSEC-2026-0393, RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399, RUSTSEC-2026-0400, RUSTSEC-2026-0401, RUSTSEC-2026-0402, RUSTSEC-2026-0403, RUSTSEC-2026-0404, RUSTSEC-2026-0405, RUSTSEC-2026-0406).

Rebuilds of affected applications will be tracked and performed separately.

Checked
42 minutes 42 seconds ago