Aggregator

FEDORA-2026-166c0d454e Packages in this update:

• ignition-2.28.0-2.fc43

Update description:

Rebuild against the patched Go toolchain (golang 1.26.10) to pick up the fix for CVE-2026-111943. Go's crypto/x509 now rejects certificate chains that use any of eight compromised eMudhra intermediate CA public keys. There are no source changes to ignition itself -- this rebuild simply links the fixed standard library into the binary.

Update to Ignition 2.28.0, including Butane OpenShift 5.0 support. See https://github.com/coreos/ignition/issues/2336.

FEDORA-2026-52c27f8c5d Packages in this update:

• ignition-2.28.0-2.fc44

Update description:

Rebuild against the patched Go toolchain (golang 1.26.10) to pick up the fix for CVE-2026-111943. Go's crypto/x509 now rejects certificate chains that use any of eight compromised eMudhra intermediate CA public keys. There are no source changes to ignition itself -- this rebuild simply links the fixed standard library into the binary.

Update to Ignition 2.28.0, including Butane OpenShift 5.0 support. See https://github.com/coreos/ignition/issues/2336.

FEDORA-EPEL-2026-30104d9cce Packages in this update:

• perl-Plack-1.0057-1.el10_3

Update description:

HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length.

FEDORA-EPEL-2026-6ce61360cf Packages in this update:

• perl-Plack-1.0057-1.el9

Update description:

HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length.

FEDORA-EPEL-2026-f0dd8602fe Packages in this update:

• perl-Plack-1.0057-1.el10_4

Update description:

HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length.

FEDORA-EPEL-2026-873a64c858 Packages in this update:

• perl-Plack-1.0057-1.el10_2

Update description:

HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length.

FEDORA-EPEL-2026-45aa299208 Packages in this update:

• webkitgtk-2.54.2-3.el10_3

Update description:

Update WebKitGTK to version 2.54.2.

This brings a plethora of fixes for security issues since the last build (2.48.3) that was available for EPEL 10 (including ~300 issues with assigned CVEs), published in the following WebKit security advisories:

• https://webkitgtk.org/security/WSA-2026-0001.html
• https://webkitgtk.org/security/WSA-2026-0002.html
• https://webkitgtk.org/security/WSA-2026-0003.html
• https://webkitgtk.org/security/WSA-2026-0004.html
• https://webkitgtk.org/security/WSA-2026-0005.html
• https://webkitgtk.org/security/WSA-2026-0006.html

Release notes for versions since 2.48.3 leading up to 2.54.2:

• https://webkitgtk.org/2025/07/30/webkitgtk2.48.4-released.html
• https://webkitgtk.org/2025/08/01/webkitgtk2.48.5-released.html
• https://webkitgtk.org/2025/09/03/webkitgtk2.48.6-released.html
• https://webkitgtk.org/2025/09/24/webkitgtk2.48.7-released.html
• https://webkitgtk.org/2025/09/17/webkitgtk2.50.0-released.html
• https://webkitgtk.org/2025/10/10/webkitgtk2.50.1-released.html
• https://webkitgtk.org/2025/11/19/webkitgtk2.50.2-released.html
• https://webkitgtk.org/2025/12/04/webkitgtk2.50.3-released.html
• https://webkitgtk.org/2025/12/16/webkitgtk2.50.4-released.html
• https://webkitgtk.org/2026/02/09/webkitgtk2.50.5-released.html
• https://webkitgtk.org/2026/03/12/webkitgtk2.50.6-released.html
• https://webkitgtk.org/2026/03/18/webkitgtk2.52.0-released.html
• https://webkitgtk.org/2026/03/27/webkitgtk2.52.1-released.html
• https://webkitgtk.org/2026/04/13/webkitgtk2.52.2-released.html
• https://webkitgtk.org/2026/04/16/webkitgtk2.52.3-released.html
• https://webkitgtk.org/2026/06/02/webkitgtk2.52.4-released.html
• https://webkitgtk.org/2026/07/09/webkitgtk2.52.5-released.html
• https://webkitgtk.org/2026/08/19/webkitgtk2.52.6-released.html
• https://webkitgtk.org/2026/09/16/webkitgtk2.54.0-released.html
• https://webkitgtk.org/2026/10/02/webkitgtk2.54.1-released.html
• https://webkitgtk.org/2026/10/23/webkitgtk2.54.2-released.html

FEDORA-EPEL-2026-e4ed02098a Packages in this update:

• webkitgtk-2.54.2-3.el10_4

Update description:

Update WebKitGTK to version 2.54.2.

This brings a plethora of fixes for security issues since the last build (2.48.3) that was available for EPEL 10 (including ~300 issues with assigned CVEs), published in the following WebKit security advisories:

• https://webkitgtk.org/security/WSA-2026-0001.html
• https://webkitgtk.org/security/WSA-2026-0002.html
• https://webkitgtk.org/security/WSA-2026-0003.html
• https://webkitgtk.org/security/WSA-2026-0004.html
• https://webkitgtk.org/security/WSA-2026-0005.html
• https://webkitgtk.org/security/WSA-2026-0006.html

Release notes for versions since 2.48.3 leading up to 2.54.2:

• https://webkitgtk.org/2025/07/30/webkitgtk2.48.4-released.html
• https://webkitgtk.org/2025/08/01/webkitgtk2.48.5-released.html
• https://webkitgtk.org/2025/09/03/webkitgtk2.48.6-released.html
• https://webkitgtk.org/2025/09/24/webkitgtk2.48.7-released.html
• https://webkitgtk.org/2025/09/17/webkitgtk2.50.0-released.html
• https://webkitgtk.org/2025/10/10/webkitgtk2.50.1-released.html
• https://webkitgtk.org/2025/11/19/webkitgtk2.50.2-released.html
• https://webkitgtk.org/2025/12/04/webkitgtk2.50.3-released.html
• https://webkitgtk.org/2025/12/16/webkitgtk2.50.4-released.html
• https://webkitgtk.org/2026/02/09/webkitgtk2.50.5-released.html
• https://webkitgtk.org/2026/03/12/webkitgtk2.50.6-released.html
• https://webkitgtk.org/2026/03/18/webkitgtk2.52.0-released.html
• https://webkitgtk.org/2026/03/27/webkitgtk2.52.1-released.html
• https://webkitgtk.org/2026/04/13/webkitgtk2.52.2-released.html
• https://webkitgtk.org/2026/04/16/webkitgtk2.52.3-released.html
• https://webkitgtk.org/2026/06/02/webkitgtk2.52.4-released.html
• https://webkitgtk.org/2026/07/09/webkitgtk2.52.5-released.html
• https://webkitgtk.org/2026/08/19/webkitgtk2.52.6-released.html
• https://webkitgtk.org/2026/09/16/webkitgtk2.54.0-released.html
• https://webkitgtk.org/2026/10/02/webkitgtk2.54.1-released.html
• https://webkitgtk.org/2026/10/23/webkitgtk2.54.2-released.html

FEDORA-EPEL-2026-ebeb3a9d77 Packages in this update:

• hatch-1.15.1-8.el10_4

Update description:

Backport updated Python distributions from Hatch 1.18.2

The latest managed CPython interpreters for Python 3.11 and later should now distrust the compromised eMudhra/emSign intermediate CA certificates, as described in the release notes for uv 0.13.5. Both hatch and uv use python-build-standalone for their managed Python interpreters.

FEDORA-2026-055ec4753d Packages in this update:

• zvbi-0.2.46-1.fc44

Update description:

Update to 0.2.46

Fixes CVE-2026-110654

FEDORA-EPEL-2026-c9e133d04a Packages in this update:

• zvbi-0.2.46-1.el10_3

Update description:

Update to 0.2.46

Fixes CVE-2026-110654

FEDORA-2026-eb3f957b9e Packages in this update:

• zvbi-0.2.46-1.fc45

Update description:

Update to 0.2.46

Fixes CVE-2026-110654

FEDORA-EPEL-2026-f52de6b5f1 Packages in this update:

• zvbi-0.2.46-1.el10_4

Update description:

Update to 0.2.46

Fixes CVE-2026-110654

FEDORA-2026-887bf17d25 Packages in this update:

• zvbi-0.2.46-1.fc43

Update description:

Update to 0.2.46

Fixes CVE-2026-110654

FEDORA-2026-0451d4f86a Packages in this update:

• tailscale-1.102.5-1.fc43

Update description:

update to 1.102.5

update to 1.98.10, fix several cves

FEDORA-2026-068cc0ad52 Packages in this update:

• tailscale-1.102.5-1.fc45

Update description:

update to 1.102.5

FEDORA-2026-c8bfae6071 Packages in this update:

• tailscale-1.102.5-1.fc44

Update description:

update to 1.102.5

update to 1.98.10, fix several cves

FEDORA-2026-756e4efa06 Packages in this update:

• tailscale-1.102.5-1.fc46

Update description:

Automatic update for tailscale-1.102.5-1.fc46.

Changelog * Wed Oct 28 2026 Jonathan Wright <jonathan@almalinux.org> - 1.102.5-1 - update to 1.102.5 * Wed Oct 28 2026 Jonathan Wright <jonathan@almalinux.org> - 1.98.10-1 - update to 1.98.10 - Fixes TS-2026-009 rhbz#2549876 * Fri Jul 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 1.98.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild

FEDORA-EPEL-2026-665bf9c3b3 Packages in this update:

• proftpd-1.3.9e-2.el10_4

Update description:

Current upstream release with multiple security fixes. See changelog for details.

FEDORA-2026-768558f4ba Packages in this update:

• proftpd-1.3.9e-2.fc45

Update description:

Current upstream release with multiple security fixes. See changelog for details.