Aggregator

• gegl04-0.4.70-5.fc43

This update fixes an overflow in parsing RGBE/HDR image files.

• gegl04-0.4.70-5.fc45

This update fixes an overflow in parsing RGBE/HDR image files.

• gegl04-0.4.70-5.fc44

This update fixes an overflow in parsing RGBE/HDR image files.

• perl-Net-OAuth-0.33-1.fc44

Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify. This update fixes the issue.

• perl-Net-OAuth-0.33-1.fc43

Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify. This update fixes the issue.

• perl-Net-OAuth-0.33-2.fc45

Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify. This update fixes the issue.

• perl-XML-Bare-0.53-45.fc44

XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes. This packages fixes this issue.

Fixes CVE-2026-57074 and CVE-2026-13401.

• perl-XML-Bare-0.53-44.fc43

XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes. This packages fixes this issue.

Fixes CVE-2026-57074 and CVE-2026-13401.

• perl-XML-Bare-0.53-47.fc45

XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes. This packages fixes this issue.

Fixes CVE-2026-57074 and CVE-2026-13401.

• perl-XML-Bare-0.53-40.el9

XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes. This packages fixes this issue.

Fixes CVE-2026-57074 and CVE-2026-13401.

• emacs-30.2-11.fc43

Fix CVE-2026-79992: Local shell command injection through the user field in emacs tramp

• kernel-7.2.2-300.fc45

The 7.2.2 stable kernel update contains a single fix for CVE-2026-80590

• kernel-7.1.12-200.fc44

The 7.1.12 stable kernel update contains a single fix for CVE-2026-80590.

The 7.1.11 stable kernel updates contain a number of important fixes across the tree. We are now specifying all kernel updates as security because upstream will assign CVEs, but we will not know what those are until a bit after this update ships.

• kernel-7.1.12-100.fc43

The 7.1.12 stable kernel update contains a single fix for CVE-2026-80590.

The 7.1.11 stable kernel updates contain a number of important fixes across the tree. We are now specifying all kernel updates as security because upstream will assign CVEs, but we will not know what those are until a bit after this update ships.

• emacs-30.2-29.fc44

Fix CVE-2026-79992: Local shell command injection through the user field in emacs tramp