Aggregator

FEDORA-2026-74c4a6f82e Packages in this update:

• rust-bat-0.26.1-3.fc44
• rust-git-delta-0.19.1-7.fc44
• rust-git-interactive-rebase-tool-2.4.1-17.fc44
• rust-lsd-1.2.0-8.fc44
• rust-pretty-git-prompt-0.2.2-11.fc44
• rust-tokei-14.0.0-7.fc44

Update description:

Rebuild applications that use libgit2 via the Rust bindings (git2 / libgit2-sys crates) with the latest version of the libgit2-sys crate.

This ensures applications now link against the libgit2 library provided by the system, which now includes fixes for various security issues compared to the statically linked version of libgit2 that was previously bundled in the libgit2-sys crate (CVE-2026-5917, CVE-2026-53586, CVE-2026-53587, CVE-2026-53585, CVE-2026-53584, CVE-2026-53583, and others).

FEDORA-EPEL-2026-14b2a305fb Packages in this update:

• rust-bat-0.26.1-3.el10_3
• rust-git-delta-0.19.1-7.el10_3
• rust-lsd-1.2.0-8.el10_3
• rust-tokei-14.0.0-7.el10_3

Update description:

Rebuild applications that use libgit2 via the Rust bindings (git2 / libgit2-sys crates) with the latest version of the libgit2-sys crate.

This ensures applications now link against the libgit2 library provided by the system, which now includes fixes for various security issues compared to the statically linked version of libgit2 that was previously bundled in the libgit2-sys crate (CVE-2026-5917, CVE-2026-53586, CVE-2026-53587, CVE-2026-53585, CVE-2026-53584, CVE-2026-53583, and others).

FEDORA-2026-44f6d8f2e7 Packages in this update:

• AusweisApp2-2.5.5-1.fc43

Update description:

Update to the latest upstream release:

• https://github.com/Governikus/AusweisApp/releases/tag/2.5.5

FEDORA-2026-2fff59246b Packages in this update:

• AusweisApp2-2.5.5-1.fc44

Update description:

Update to the latest upstream release:

• https://github.com/Governikus/AusweisApp/releases/tag/2.5.5

Version:next-20260814 (linux-next) Released:2026-08-14

FEDORA-EPEL-2026-da74b047d6 Packages in this update:

• libgit2_1.9-1.9.7-1.el10_3

Update description:

Update to version 1.9.7.

Release notes: https://github.com/libgit2/libgit2/releases/tag/v1.9.7

FEDORA-EPEL-2026-a5f4b4222e Packages in this update:

• libgit2_1.9-1.9.7-1.el9

Update description:

Update to version 1.9.7.

Release notes: https://github.com/libgit2/libgit2/releases/tag/v1.9.7

FEDORA-EPEL-2026-7671e4d4a3 Packages in this update:

• libgit2_1.9-1.9.7-1.el10_2

Update description:

Update to version 1.9.7.

Release notes: https://github.com/libgit2/libgit2/releases/tag/v1.9.7

FEDORA-2026-86684eb696 Packages in this update:

• libgit2-1.9.7-1.fc44

Update description:

Update to version 1.9.7.

Release notes: https://github.com/libgit2/libgit2/releases/tag/v1.9.7

FEDORA-2026-60e31281d5 Packages in this update:

• libgit2-1.9.7-1.fc43

Update description:

Update to version 1.9.7.

Release notes: https://github.com/libgit2/libgit2/releases/tag/v1.9.7

FEDORA-2026-f3ca65c0c9 Packages in this update:

• libsoup3-3.6.6-4.fc43

Update description:

Fix for several CVEs

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. (CVE-2025-27558) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - NVME drivers; - Ext4 file system; - SMB network file system; - IPv4 networking; - Network traffic control; - TCP network protocol; - Locking primitives; - IPv6 networking; - Multipath TCP; - Netfilter; - SCTP protocol; - SMC sockets; (CVE-2026-31414, CVE-2026-31448, CVE-2026-31705, CVE-2026-43198, CVE-2026-43378, CVE-2026-43499, CVE-2026-46266, CVE-2026-46331, CVE-2026-52924, CVE-2026-52989, CVE-2026-53086, CVE-2026-53176, CVE-2026-53212, CVE-2026-53215, CVE-2026-53225, CVE-2026-53228, CVE-2026-53359)

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. (CVE-2025-27558) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Cryptographic API; - GPU drivers; - InfiniBand drivers; - Media drivers; - NVIDIA Tegra memory controller driver; - Network drivers; - STMicroelectronics network drivers; - NVME drivers; - Ext4 file system; - IPv4 networking; - Network traffic control; - TCP network protocol; - Locking primitives; - B.A.T.M.A.N. meshing protocol; - Ceph Core library; - IPv6 networking; - Multipath TCP; - Netfilter; - SCTP protocol; - SMC sockets; (CVE-2021-47354, CVE-2021-47378, CVE-2024-38612, CVE-2026-31405, CVE-2026-31414, CVE-2026-31448, CVE-2026-31649, CVE-2026-31657, CVE-2026-31668, CVE-2026-43198, CVE-2026-43493, CVE-2026-43499, CVE-2026-46266, CVE-2026-46331, CVE-2026-52924, CVE-2026-52931, CVE-2026-52955, CVE-2026-52982, CVE-2026-52986, CVE-2026-53002, CVE-2026-53006, CVE-2026-53045, CVE-2026-53088, CVE-2026-53176, CVE-2026-53225, CVE-2026-53228, CVE-2026-53359)

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43503) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - InfiniBand drivers; - SCSI subsystem; - Thermal drivers; - USB over IP driver; - Network file system (NFS) server daemon; - SMB network file system; - Tracing infrastructure; - B.A.T.M.A.N. meshing protocol; - Ethernet bridge; - Ceph Core library; - DCCP (Datagram Congestion Control Protocol); - IPv4 networking; - IPv6 networking; - Netfilter; - RxRPC session sockets; - X.25 network layer; (CVE-2021-47202, CVE-2024-56643, CVE-2026-23272, CVE-2026-23455, CVE-2026-31402, CVE-2026-31607, CVE-2026-31637, CVE-2026-31659, CVE-2026-31682, CVE-2026-31685, CVE-2026-43011, CVE-2026-43037, CVE-2026-43038, CVE-2026-43383, CVE-2026-43407, CVE-2026-43414, CVE-2026-45988, CVE-2026-46043, CVE-2026-46119, CVE-2026-46243)

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43503) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SCSI subsystem; - Thermal drivers; - USB over IP driver; - File systems infrastructure; - Ext4 file system; - Network file system (NFS) server daemon; - SMB network file system; - Tracing infrastructure; - B.A.T.M.A.N. meshing protocol; - Ceph Core library; - DCCP (Datagram Congestion Control Protocol); - IPv4 networking; - IPv6 networking; - Netfilter; - RxRPC session sockets; - X.25 network layer; (CVE-2021-47117, CVE-2021-47202, CVE-2023-52646, CVE-2024-56643, CVE-2026-23455, CVE-2026-31402, CVE-2026-31607, CVE-2026-31637, CVE-2026-31659, CVE-2026-31685, CVE-2026-43011, CVE-2026-43037, CVE-2026-43038, CVE-2026-43383, CVE-2026-43407, CVE-2026-43414, CVE-2026-45988, CVE-2026-46119, CVE-2026-46243)

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43284) It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43503) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - InfiniBand drivers; - SCSI subsystem; - Thermal drivers; - USB over IP driver; - Network file system (NFS) server daemon; - SMB network file system; - Tracing infrastructure; - B.A.T.M.A.N. meshing protocol; - Ethernet bridge; - Ceph Core library; - DCCP (Datagram Congestion Control Protocol); - IPv4 networking; - IPv6 networking; - Netfilter; - RxRPC session sockets; - X.25 network layer; (CVE-2021-47202, CVE-2024-56643, CVE-2026-23272, CVE-2026-23455, CVE-2026-31402, CVE-2026-31607, CVE-2026-31637, CVE-2026-31659, CVE-2026-31682, CVE-2026-31685, CVE-2026-43011, CVE-2026-43037, CVE-2026-43038, CVE-2026-43383, CVE-2026-43407, CVE-2026-43414, CVE-2026-45988, CVE-2026-46043, CVE-2026-46119, CVE-2026-46243)