FEDORA-2026-f400579a21 — security update for asciinema, atuin, & 81 more

stable

asciinema-3.0.0-5.fc43, atuin-18.6.1-10.fc43, & 81 more

FEDORA-2026-f400579a21 created by decathorpe 3 weeks ago for Fedora 43

Update the time crate to version 0.3.47.
Update the time-macros crate to version 0.2.27.
Update the time-core crate to version 0.1.8.
Update the num-conv crate to version 0.2.0.
Update the git2 crate to version 0.20.4.
Update the bytes crate to version 1.11.1.

Additionally, this update contains rebuilds of applications affected by security advisories:

All applications that statically link libgit2 via the git2 Rust bindings were also rebuilt against the latest version of the git2 / libgit2-sys crates to pull in fixes included in libgit2 between v1.8.1 and v1.9.2.

Reboot Required

After installing this update it is required that you reboot your system to ensure the changes supplied by this update are applied properly.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2026-f400579a21

This update's test gating status has been changed to 'waiting'.

3 weeks ago

This update's test gating status has been changed to 'passed'.

3 weeks ago

This update has been submitted for testing by bodhi.

3 weeks ago

imabug provided feedback 3 weeks ago

karma

This update has been pushed to testing.

3 weeks ago

bojan commented & provided feedback 3 weeks ago

karma

Works.

This update can be pushed to stable now if the maintainer wishes

3 weeks ago

geraldosimiao provided feedback 3 weeks ago

karma

This update has been submitted for stable by bodhi.

3 weeks ago

besser82 commented & provided feedback 3 weeks ago

karma

Works great! LGTM! =)

decathorpe edited this update.

3 weeks ago

decathorpe edited this update.

3 weeks ago

This update has been pushed to stable.

3 weeks ago

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

3 weeks ago

in testing

3 weeks ago

in stable

3 weeks ago

modified

3 weeks ago

approved

3 weeks ago

Builds

asciinema-3.0.0-5.fc43

atuin-18.6.1-10.fc43

bustle-0.13.0-4.fc43

envision-3.2.0-7.fc43

glycin-2.0.5-4.fc43

greetd-0.10.3-6.fc43

helix-25.07.1-7.fc43

keylime-agent-rust-0.2.8-10.fc43

maturin-1.9.6-4.fc43

mirrorlist-server-3.0.8-3.fc43

ntpd-rs-1.6.2-3.fc43

rust-add-determinism-0.6.0-3.fc43

rust-afterburn-5.10.0-3.fc43

rust-ambient-id-0.0.8-1.fc43

rust-app-store-connect-0.5.0-6.fc43

rust-bat-0.25.0-9.fc43

rust-below-0.9.0-6.fc43

rust-btrd-0.5.3-12.fc43

rust-busd-0.3.1-6.fc43

rust-bytes-1.11.1-1.fc43

rust-cargo-c-0.10.18-3.fc43

rust-cargo-deny-0.18.9-4.fc43

rust-coreos-installer-0.25.0-4.fc43

rust-crypto-auditing-agent-0.2.4-3.fc43

rust-crypto-auditing-client-0.2.4-2.fc43

rust-crypto-auditing-event-broker-0.2.4-2.fc43

rust-crypto-auditing-log-parser-0.2.4-2.fc43

rust-dua-cli-2.32.2-3.fc43

rust-eif_build-0.2.1-6.fc43

rust-git2-0.20.4-1.fc43

rust-git-delta-0.18.2-13.fc43

rust-git-interactive-rebase-tool-2.4.1-15.fc43

rust-gst-plugin-dav1d-0.14.0-3.fc43

rust-gst-plugin-reqwest-0.14.3-3.fc43

rust-heatseeker-1.7.3-4.fc43

rust-ingredients-0.2.2-2.fc43

rust-jsonwebtoken-9.3.1-4.fc43

rust-lsd-1.2.0-3.fc43

rust-monitord-0.12.1-6.fc43

rust-monitord-exporter-0.4.1-8.fc43

rust-muvm-0.4.1-5.fc43

rust-nu-0.99.1-16.fc43

rust-num-conv-0.2.0-1.fc43

rust-onefetch-2.26.1-7.fc43

rust-oo7-cli-0.4.3-4.fc43

rust-pleaser-0.5.6-6.fc43

rust-pore-0.1.17-11.fc43

rust-pretty-git-prompt-0.2.2-9.fc43

rust-procs-0.14.10-7.fc43

rust-rbspy-0.34.1-4.fc43

rust-rbw-1.13.2-5.fc43

rust-rd-agent-2.2.5-14.fc43

rust-rd-hashd-2.2.5-10.fc43

rust-redlib-0.35.1-10.fc43

rust-resctl-bench-2.2.5-10.fc43

rust-resctl-demo-2.2.5-9.fc43

rust-routinator-0.14.2-4.fc43

rust-sccache-0.13.0-3.fc43

rust-scx_layered-0.0.6-7.fc43

rust-scx_rustland-0.0.3-7.fc43

rust-scx_rusty-0.5.4-7.fc43

rust-sequoia-chameleon-gnupg-0.13.1-9.fc43

rust-sequoia-keystore-server-0.2.0-6.fc43

rust-sequoia-octopus-librnp-1.11.1-5.fc43

rust-sequoia-sq-1.3.1-10.fc43

rust-sevctl-0.6.2-6.fc43

rust-shadow-rs-0.8.1-14.fc43

rust-sigul-pesign-bridge-0.5.0-3.fc43

rust-snpguest-0.9.2-4.fc43

rust-speakersafetyd-1.0.2-6.fc43

rust-tealdeer-1.7.2-4.fc43

rust-time-0.3.47-2.fc43

rust-time-core-0.1.8-1.fc43

rust-time-macros-0.2.27-1.fc43

rust-tokei-14.0.0-4.fc43

rustup-1.28.2-8.fc43

rust-weezl-0.1.12-3.fc43

rust-wiremix-0.7.0-3.fc43

rust-ybaas-0.0.19-6.fc43

sad-0.4.32-4.fc43

tbtools-0.7.0-2.fc43

tuigreet-0.9.1-7.fc43

uv-0.9.30-2.fc43

BZ#2437470 CVE-2026-25537 rust-jsonwebtoken: jsonwebtoken has Type Confusion that leads to potential authorization bypass [fedora-43]

BZ#2437472 CVE-2026-25537 uv: jsonwebtoken has Type Confusion that leads to potential authorization bypass [fedora-43]

BZ#2438104 CVE-2026-25727 atuin: time affected by a stack exhaustion denial of service attack [fedora-43]

BZ#2438135 CVE-2026-25727 keylime-agent-rust: time affected by a stack exhaustion denial of service attack [fedora-43]

BZ#2438138 CVE-2026-25727 maturin: time affected by a stack exhaustion denial of service attack [fedora-43]

BZ#2438149 CVE-2026-25727 rustup: time affected by a stack exhaustion denial of service attack [fedora-43]

BZ#2438158 CVE-2026-25727 tbtools: time affected by a stack exhaustion denial of service attack [fedora-43]

BZ#2438164 CVE-2026-25727 tuigreet: time affected by a stack exhaustion denial of service attack [fedora-43]

BZ#2438165 CVE-2026-25727 uv: time affected by a stack exhaustion denial of service attack [fedora-43]

asciinema-3.0.0-5.fc43

atuin-18.6.1-10.fc43

bustle-0.13.0-4.fc43

envision-3.2.0-7.fc43

glycin-2.0.5-4.fc43

greetd-0.10.3-6.fc43

helix-25.07.1-7.fc43

keylime-agent-rust-0.2.8-10.fc43

maturin-1.9.6-4.fc43

mirrorlist-server-3.0.8-3.fc43

ntpd-rs-1.6.2-3.fc43

rust-add-determinism-0.6.0-3.fc43

rust-afterburn-5.10.0-3.fc43

rust-ambient-id-0.0.8-1.fc43

rust-app-store-connect-0.5.0-6.fc43

rust-bat-0.25.0-9.fc43

rust-below-0.9.0-6.fc43

rust-btrd-0.5.3-12.fc43

rust-busd-0.3.1-6.fc43

rust-bytes-1.11.1-1.fc43

rust-cargo-c-0.10.18-3.fc43

rust-cargo-deny-0.18.9-4.fc43

rust-coreos-installer-0.25.0-4.fc43

rust-crypto-auditing-agent-0.2.4-3.fc43

rust-crypto-auditing-client-0.2.4-2.fc43

rust-crypto-auditing-event-broker-0.2.4-2.fc43

rust-crypto-auditing-log-parser-0.2.4-2.fc43

rust-dua-cli-2.32.2-3.fc43

rust-eif_build-0.2.1-6.fc43

rust-git2-0.20.4-1.fc43

rust-git-delta-0.18.2-13.fc43

rust-git-interactive-rebase-tool-2.4.1-15.fc43

rust-gst-plugin-dav1d-0.14.0-3.fc43

rust-gst-plugin-reqwest-0.14.3-3.fc43

rust-heatseeker-1.7.3-4.fc43

rust-ingredients-0.2.2-2.fc43

rust-jsonwebtoken-9.3.1-4.fc43

rust-lsd-1.2.0-3.fc43

rust-monitord-0.12.1-6.fc43

rust-monitord-exporter-0.4.1-8.fc43

rust-muvm-0.4.1-5.fc43

rust-nu-0.99.1-16.fc43

rust-num-conv-0.2.0-1.fc43

rust-onefetch-2.26.1-7.fc43

rust-oo7-cli-0.4.3-4.fc43

rust-pleaser-0.5.6-6.fc43

rust-pore-0.1.17-11.fc43

rust-pretty-git-prompt-0.2.2-9.fc43

rust-procs-0.14.10-7.fc43

rust-rbspy-0.34.1-4.fc43

rust-rbw-1.13.2-5.fc43

rust-rd-agent-2.2.5-14.fc43

rust-rd-hashd-2.2.5-10.fc43

rust-redlib-0.35.1-10.fc43

rust-resctl-bench-2.2.5-10.fc43

rust-resctl-demo-2.2.5-9.fc43

rust-routinator-0.14.2-4.fc43

rust-sccache-0.13.0-3.fc43

rust-scx_layered-0.0.6-7.fc43

rust-scx_rustland-0.0.3-7.fc43

rust-scx_rusty-0.5.4-7.fc43

rust-sequoia-chameleon-gnupg-0.13.1-9.fc43

rust-sequoia-keystore-server-0.2.0-6.fc43

rust-sequoia-octopus-librnp-1.11.1-5.fc43

rust-sequoia-sq-1.3.1-10.fc43

rust-sevctl-0.6.2-6.fc43

rust-shadow-rs-0.8.1-14.fc43

rust-sigul-pesign-bridge-0.5.0-3.fc43

rust-snpguest-0.9.2-4.fc43

rust-speakersafetyd-1.0.2-6.fc43

rust-tealdeer-1.7.2-4.fc43

rust-time-0.3.47-2.fc43

rust-time-core-0.1.8-1.fc43

rust-time-macros-0.2.27-1.fc43

rust-tokei-14.0.0-4.fc43

rustup-1.28.2-8.fc43

rust-weezl-0.1.12-3.fc43

rust-wiremix-0.7.0-3.fc43

rust-ybaas-0.0.19-6.fc43

sad-0.4.32-4.fc43

tbtools-0.7.0-2.fc43

tuigreet-0.9.1-7.fc43

uv-0.9.30-2.fc43

Automated Test Results

passed

Test Cases


0	0	Test Case asciinema record terminal