Aggregator

FEDORA-2026-f98eff99c4 Packages in this update:

• xorg-x11-server-Xwayland-24.1.12-1.fc44

Update description:

Update to xwayland 24.1.12, security fixes for ZDI-CAN-30136, ZDI-CAN-30159, ZDI-CAN-30160, ZDI-CAN-30161, ZDI-CAN-30163, ZDI-CAN-30164, ZDI-CAN-30165, ZDI-CAN-30168

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystem: - Packet sockets; (CVE-2026-31504)

Version:next-20260601 (linux-next) Released:2026-06-01

USN-8209-1 fixed vulnerabilities in Little CMS. This update contains the fixes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that Little CMS incorrectly handled certain malformed ICC profiles. An attacker could use this issue to cause Little CMS to crash, resulting in a denial of service, or possibly execute arbitrary code.

Version:7.0.11 (stable) Released:2026-06-01 Source:linux-7.0.11.tar.xz PGP Signature:linux-7.0.11.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-7.0.11

Version:6.18.34 (longterm) Released:2026-06-01 Source:linux-6.18.34.tar.xz PGP Signature:linux-6.18.34.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.18.34

Version:6.12.92 (longterm) Released:2026-06-01 Source:linux-6.12.92.tar.xz PGP Signature:linux-6.12.92.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.12.92

Version:6.6.142 (longterm) Released:2026-06-01 Source:linux-6.6.142.tar.xz PGP Signature:linux-6.6.142.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.6.142

Version:6.1.175 (longterm) Released:2026-06-01 Source:linux-6.1.175.tar.xz PGP Signature:linux-6.1.175.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.1.175

Version:5.15.209 (longterm) Released:2026-06-01 Source:linux-5.15.209.tar.xz PGP Signature:linux-5.15.209.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-5.15.209

Version:5.10.258 (longterm) Released:2026-06-01 Source:linux-5.10.258.tar.xz PGP Signature:linux-5.10.258.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-5.10.258

FEDORA-EPEL-2026-6c0b7937b4 Packages in this update:

• exim-4.99.4-1.el8

Update description:

This is an update fixing a pre-authentication information disclosure (CVE-2026-48840).

FEDORA-EPEL-2026-c313127dd3 Packages in this update:

• exim-4.99.4-1.el9

Update description:

This is an update fixing a pre-authentication information disclosure (CVE-2026-48840).

FEDORA-EPEL-2026-c53d2746cf Packages in this update:

• exim-4.99.4-1.el10_3

Update description:

This is an update fixing a pre-authentication information disclosure (CVE-2026-48840).

It was discovered that sslh did not properly handle symbolic links when writing its PID file. A local attacker could possibly use this issue to overwrite arbitrary files.

It was discovered that NNCP did not properly sanitize file paths in packet data during file requesting and file saving operations. A remote attacker could possibly use this issue to read or write arbitrary files outside of the intended directory.

It was discovered that haveged incorrectly handled credential checks on its control socket. A local attacker could possibly use this issue to execute privileged commands.

USN-8055-1 fixed a vulnerability in Evolution Data Server. This update provides the corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that Evolution Data Server incorrectly handled removing local cache files. An attacker could possibly use this issue to cause Evolution Data Server to remove arbitrary files.

It was discovered that Qt Declarative did not properly validate the width and height attributes of image tags in the Text component of Qt Quick. An attacker could possibly use this issue to cause Qt Declarative to use excessive resources, leading to a denial of service.

FEDORA-2026-71b1e9b455 Packages in this update:

• exim-4.99.4-1.fc43

Update description:

This is an update fixing a pre-authentication information disclosure (CVE-2026-48840).