zchunk-1.5.5-1.el10_3
FEDORA-EPEL-2026-6ad88225ba
Packages in this update:
- zchunk-1.5.5-1.el10_3
Update to 1.5.5, fixing a number of bugs around memory usage and correctness
Aggregator
zchunk-1.5.5-1.fc44
FEDORA-2026-77992c6a89
Packages in this update:
- zchunk-1.5.5-1.fc44
Update to 1.5.5, fixing a number of bugs around memory usage and correctness
zchunk-1.5.5-1.fc45
FEDORA-2026-edde89c556
Packages in this update:
- zchunk-1.5.5-1.fc45
Update to 1.5.5, fixing a number of bugs around memory usage and correctness
zchunk-1.5.5-1.el10_4
FEDORA-EPEL-2026-5696076e16
Packages in this update:
- zchunk-1.5.5-1.el10_4
Update to 1.5.5, fixing a number of bugs around memory usage and correctness
zchunk-1.5.5-1.fc43
FEDORA-2026-b630871014
Packages in this update:
- zchunk-1.5.5-1.fc43
Update to 1.5.5, fixing a number of bugs around memory usage and correctness
zchunk-1.5.5-1.el9
FEDORA-EPEL-2026-8533ea2b97
Packages in this update:
- zchunk-1.5.5-1.el9
Update to 1.5.5, fixing a number of bugs around memory usage and correctness
zchunk-1.5.5-1.el8
FEDORA-EPEL-2026-3694804ffd
Packages in this update:
- zchunk-1.5.5-1.el8
Update to 1.5.5, fixing a number of bugs around memory usage and correctness
selenium-manager-4.34.0-6.fc43
FEDORA-2026-7f0feca48a
Packages in this update:
- selenium-manager-4.34.0-6.fc43
Rebuilt with latest rustls/rustls-webpki
- rustls 0.23.46 addresses RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, and RUSTSEC-2026-0349
- rustls-webpki 0.103.16 addresses RUSTSEC-2026-0382
selenium-manager-4.34.0-7.fc44
FEDORA-2026-fee6dea04b
Packages in this update:
- selenium-manager-4.34.0-7.fc44
Rebuilt with latest rustls/rustls-webpki
- rustls 0.23.46 addresses RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, and RUSTSEC-2026-0349
- rustls-webpki 0.103.16 addresses RUSTSEC-2026-0382
python3.12-3.12.16-1.fc43
FEDORA-2026-4e3279af04
Packages in this update:
- python3.12-3.12.16-1.fc43
New version of the Python interpeter
python3.12-3.12.16-1.fc45
FEDORA-2026-5f99243da4
Packages in this update:
- python3.12-3.12.16-1.fc45
New version of the Python interpeter
python3.12-3.12.16-1.fc44
FEDORA-2026-e102eccf7f
Packages in this update:
- python3.12-3.12.16-1.fc44
New version of the Python interpreter
USN-8956-1: Brotli vulnerability
It was discovered that Brotli incorrectly handled certain compressed
streams. A remote attacker could possibly use this issue to cause a
denial of service or execute arbitrary code.
USN-8955-1: nginx vulnerabilities
It was discovered that nginx incorrectly handled certain configurations
using the alias directive together with rewrite rules. A remote attacker
could possibly use this issue to cause nginx to crash, resulting in a
denial of service, or execute arbitrary code.
(CVE-2026-15176)
It was discovered that nginx incorrectly handled map directives using
regex matching under certain circumstances. A remote attacker could
possibly use this issue to cause nginx to crash, resulting in a denial
of service, or execute arbitrary code.
(CVE-2026-93479)
It was discovered that nginx incorrectly handled HTTP/3 requests when
proxy_request_buffering was enabled. This issue only affected
Ubuntu 26.04 LTS and Ubuntu 26.10. A remote attacker could possibly use
this issue to inject data into proxied requests.
(CVE-2026-95101)
It was discovered that nginx incorrectly handled asynchronous file I/O
in certain configurations with Server Side Includes pages. A remote
attacker could possibly use this issue to cause nginx to crash,
resulting in a denial of service, or execute arbitrary code.
(CVE-2026-97205)
It was discovered that nginx incorrectly handled SSL session ticket keys
when configured with a shared session cache but without explicit ticket
key rotation. This issue only affected Ubuntu 24.04 LTS, Ubuntu 26.04 LTS,
and Ubuntu 26.10. A remote attacker
could possibly use this issue to forge client SSL sessions and bypass
client certificate verification.
(CVE-2026-97629)
6.18.59: longterm
Version:6.18.59 (longterm)
Released:2026-10-26
Source:linux-6.18.59.tar.xz
PGP Signature:linux-6.18.59.tar.sign
Patch:full (incremental)
ChangeLog:ChangeLog-6.18.59
7.2.13: stable
Version:7.2.13 (stable)
Released:2026-10-26
Source:linux-7.2.13.tar.xz
PGP Signature:linux-7.2.13.tar.sign
Patch:full (incremental)
ChangeLog:ChangeLog-7.2.13
mingw-harfbuzz-14.6.0-1.fc44
FEDORA-2026-cb54091d9d
Packages in this update:
- mingw-harfbuzz-14.6.0-1.fc44
Update to 14.6.0 and backport fix for CVE-2026-113679.
unbound-1.26.2-1.fc43
FEDORA-2026-ab4f7ff50a
Packages in this update:
- unbound-1.26.2-1.fc43
Security fixes from the upstream changelog:
- Fix CVE-2026-97206, DoQ path-migration can lead to use-after-free on multi-threaded deployments. Thanks to Kunta Chu and Jianjun Chen from Tsinghua University for the report.
- Fix CVE-2026-50106, Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent. Thanks to Qifan Zhang from Palo Alto Networks for the report.
- Fix CVE-2026-96405, Aggregate DNS name chained pointer decompression work leads to degradation of service. Thanks to Yuheng Zhang (Tsinghua University and Jingxian Technology Co., Ltd.), Jianjun Chen (Tsinghua University), Zihan Wang (Z.AI Co., Ltd.) and Kaiwen Shen (CloudItera) for the report.
- Fix CVE-2026-109125, Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold'. Thanks to TaoFei Guo (Peking University), and Yang Luo and JianJun Chen (Tsinghua University) for the report.
- Fix CVE-2026-35501, Bypass of a configured island trust anchor underneath an insecure parent from an attacker-controlled NSEC record. Thanks to Qifan Zhang from Palo Alto Networks for the report.
selenium-manager-4.45.0-3.fc45
FEDORA-2026-ccd3011907
Packages in this update:
- selenium-manager-4.45.0-3.fc45
Rebuilt with latest rustls/rustls-webpki
- rustls 0.23.46 addresses RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, and RUSTSEC-2026-0349
- rustls-webpki 0.103.16 addresses RUSTSEC-2026-0382
unbound-1.26.2-1.fc44
FEDORA-2026-9142230324
Packages in this update:
- unbound-1.26.2-1.fc44
Security fixes from the upstream changelog:
- Fix CVE-2026-97206, DoQ path-migration can lead to use-after-free on multi-threaded deployments. Thanks to Kunta Chu and Jianjun Chen from Tsinghua University for the report.
- Fix CVE-2026-50106, Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent. Thanks to Qifan Zhang from Palo Alto Networks for the report.
- Fix CVE-2026-96405, Aggregate DNS name chained pointer decompression work leads to degradation of service. Thanks to Yuheng Zhang (Tsinghua University and Jingxian Technology Co., Ltd.), Jianjun Chen (Tsinghua University), Zihan Wang (Z.AI Co., Ltd.) and Kaiwen Shen (CloudItera) for the report.
- Fix CVE-2026-109125, Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold'. Thanks to TaoFei Guo (Peking University), and Yang Luo and JianJun Chen (Tsinghua University) for the report.
- Fix CVE-2026-35501, Bypass of a configured island trust anchor underneath an insecure parent from an attacker-controlled NSEC record. Thanks to Qifan Zhang from Palo Alto Networks for the report.