Aggregator

FEDORA-2026-d5c7f91202 Packages in this update:

• gnatcoll-25.0.0-6.fc43

Update description:

Patched the vulnerabilities GNATCOLL-CORE-0162 and GNATCOLL-CORE-0164 in a way that avoids interface changes.

FEDORA-2026-fe1549bec3 Packages in this update:

• sblim-cmpi-base-1.6.4-31.fc43

Update description:

Use mktemp for temporary files in provider registration script (CVE-2026-73585)

FEDORA-2026-67f78e732b Packages in this update:

• nodejs-undici-7.29.0-3.fc43

Update description:

Update to version 7.29.0.

Contains fix for CVE-2026-18149.

FEDORA-2026-90bb0fcd50 Packages in this update:

• nodejs-undici-7.29.0-3.fc44

Update description:

Update to version 7.29.0.

Contains fix for CVE-2026-18149.

FEDORA-2026-25a6102ac6 Packages in this update:

• nodejs-undici-7.29.0-3.fc45

Update description:

Update to version 7.29.0.

Contains fix for CVE-2026-18149.

FEDORA-2026-313e66c007 Packages in this update:

• bcm283x-firmware-20260907-1.b76effd.fc45
• uboot-tools-2026.10-0.4.rc4.fc45

Update description:

Update to the latest U-Boot 2026.10 RC4 fixes Display fixes from sleep for some generations of Raspberry Pi

FEDORA-2026-6841033933 Packages in this update:

• curl-8.15.0-10.fc43

Update description:

• fix HTTP/2 stream-dependency tree UAF (CVE-2026-10536)
• fix stale proxy password leak (CVE-2026-9079)
• fix wrong reuse for different services (CVE-2026-8458)

FEDORA-2026-7510dd645d Packages in this update:

• sblim-cmpi-base-1.6.4-33.fc44

Update description:

Use mktemp for temporary files in provider registration script (CVE-2026-73585)

FEDORA-2026-700fe12346 Packages in this update:

• sblim-cmpi-base-1.6.4-34.fc45

Update description:

Use mktemp for temporary files in provider registration script (CVE-2026-73585)

FEDORA-EPEL-2026-9b91575037 Packages in this update:

• GitPython-3.1.62-1.el10_3

Update description:

Update to 3.1.62 (close RHBZ#2529282)

• Fixes GHSA-hmq2-w58f-27jc

FEDORA-2026-f26b509a1a Packages in this update:

• curl-8.18.0-10.fc44

Update description:

• Fix HTTP/2 stream-dependency tree UAF (CVE-2026-10536)
• Fix Native CA trust persist (CVE-2026-11564)
• Fix stale proxy password leak (CVE-2026-9079)
• Fix wrong reuse for different services (CVE-2026-8458)

FEDORA-EPEL-2026-dda9087701 Packages in this update:

• GitPython-3.1.62-1.el10_4

Update description:

Update to 3.1.62 (close RHBZ#2529282)

• Fixes GHSA-hmq2-w58f-27jc

FEDORA-2026-c74ff43396 Packages in this update:

• GitPython-3.1.62-1.fc43

Update description:

Update to 3.1.62 (close RHBZ#2529282)

• Fixes GHSA-hmq2-w58f-27jc

FEDORA-2026-6613125727 Packages in this update:

• python-django6-6.1.1-2.fc44

Update description:

Update python-django6 (providing python3-django) to the latest 6.1.1 release

FEDORA-2026-522a9411e7 Packages in this update:

• python-django6-6.1.1-2.fc45

Update description:

Update python-django6 (providing python3-django) to the latest 6.1.1 release

Version:next-20260908 (linux-next) Released:2026-09-08

It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-56366, CVE-2026-56368, CVE-2026-56371, CVE-2026-56373) It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-56370) It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service or expose sensitive information. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-56378) It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-56379) It was discovered that ImageMagick incorrectly handled memory allocation in certain operations. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-61465) It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 22.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-61857) It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61870) It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-61866) It was discovered that ImageMagick incorrectly handled certain images on 32-bit systems. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-62946)

USN-8670-1 fixed a vulnerability in curl. This update provides the corresponding update for Ubuntu 26.04 LTS. Original advisory details: Joshua Rogers discovered that curl incorrectly handled reusing connections when client certificate settings changed. This could result in the wrong client certificates being used, contrary to expectations.

USN-8679-1 fixed a vulnerability in Vim. This update provides the corresponding update for Ubuntu 26.04 LTS. Original advisory details: It was discovered that Vim incorrectly handled certain tags files. An attacker could possibly use this issue to execute arbitrary code.