Aggregator

Multiple security issues were discovered in .NET and this update includes new upstream .NET versions to fix these issues. .NET 8 has been updated to 8.0.32 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. .NET 10 has been updated to 10.0.13 in Ubuntu 24.04 LTS, Ubuntu 26.04 LTS and Ubuntu 26.10. .NET 11 has been updated to 11.0.0~rc2 in Ubuntu 26.10. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

It was discovered that Protocol Buffers did not properly handle negative varint lengths or enforce recursion limits when parsing input in the PHP library. An attacker could possibly use this issue to cause applications using Protocol Buffers to crash or consume resources, resulting in a denial of service.

FEDORA-2026-77dc014196 Packages in this update:

• dolphin-26.08.2-2.fc46

Update description:

Automatic update for dolphin-26.08.2-2.fc46.

Changelog * Fri Oct 16 2026 Than Ngo <than@redhat.com> - 26.08.2-2 - Fix rhbz#2553643 - CVE-2026-110236 dolphin: dolphin: Arbitrary command execution via crafted folder name

USN-8708-1 fixed a vulnerability in sudo-rs. This update provides the corresponding fix for Ubuntu 26.10. Original advisory details: It was discovered that sudo-rs incorrectly handled time-of-check vs time- of-use conditions in sudoedit. A local attacker with permission to edit specific files using sudoedit could use this issue to place files in arbitrary directories, and possibly escalate their privileges. This issue only affected systems configured to grant fine-grained sudoedit file editing permissions, which is not the default configuration.

Version:next-20261020 (linux-next) Released:2026-10-20

It was discovered that Squid incorrectly handled certain HTTP Transfer- Encoding headers. An attacker could possibly use this issue to perform HTTP request smuggling attacks, bypass security mechanisms, or poison web caches. (CVE-2026-61642) It was discovered that Squid incorrectly handled certain cache digest replies, which could lead to a buffer overflow. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2026-50012) It was discovered that Squid incorrectly handled parsing certain FTP directory listings. A remote attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2026-47729) It was discovered that Squid incorrectly handled certain ICP traffic. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2026-32748, CVE-2026-33526) It was discovered that Squid incorrectly handled certain ICP requests. A remote attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2026-33515)

FEDORA-2026-13d6a67e0d Packages in this update:

• libical-3.0.20-6.fc43

Update description:

Add a patch for CVE-2026-111269: Denial of Service via out-of-bounds read in icalvalue_decode_ical_string()

FEDORA-2026-feebb9861c Packages in this update:

• libical-3.0.20-9.fc44

Update description:

Add a patch for CVE-2026-111269: Denial of Service via out-of-bounds read in icalvalue_decode_ical_string()

FEDORA-2026-05c27bbf4d Packages in this update:

• rust-sccache-0.17.0-5.fc46
• rust-typed-path-0.13.0-1.fc46
• rust-zip-8.6.0-12.fc46

Update description:

Update typed-path to version 0.13.0.

Rebuild sccache with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, and RUSTSEC-2026-0349.

FEDORA-EPEL-2026-9b6d85f62d Packages in this update:

• libmodplug-0.8.9.0-14.el9

Update description:

Fix CVE-2026-75904, CVE-2026-108577, CVE-2026-111270, CVE-2026-111271 and additional hardening

FEDORA-EPEL-2026-8d3dae5e65 Packages in this update:

• libmodplug-0.8.9.0-26.el10_4

Update description:

Fix CVE-2026-75904, CVE-2026-108577, CVE-2026-111270, CVE-2026-111271 and additional hardening

FEDORA-2026-6c58236667 Packages in this update:

• libmodplug-0.8.9.0-31.fc46

Update description:

Automatic update for libmodplug-0.8.9.0-31.fc46.

Changelog * Tue Oct 20 2026 Karel Volný <kvolny@redhat.com> - 1:0.8.9.0-31 - Fix CVE-2026-75904, OOB read in pat_smplooped() (rhbz#2521959) - Fix CVE-2026-108577, unbounded alloc in abc_add_gchord() (rhbz#2550240) - Bound abc_add_drum() accompaniment, fix divide by zero and OOB read - Fix CVE-2026-111270, OOB write in ReadDSM() (rhbz#2554073) - Backport upstream AMS loader hardening, 1bef4e1..63133e8 - Fix CVE-2026-111271, OOB read in ReadAMS2() (rhbz#2554079)

It was discovered that the Perl XS::Parse::Keyword module did not correctly handle certain inputs. If a user or automated system were tricked into receiving specially crafted input, an attacker could cause a denial of service.

FEDORA-2026-b7618e98ac Packages in this update:

• linux-firmware-20261019-1.fc45

Update description:

Update to 20261019:

• rockchip: add PCIe3 PHY firmware for snps-pcie3
• Update ADSP firmware for Qualcomm qcs615 platform.
• Revert "amdgpu: update GC 11.0.0 firmware"
• amdgpu: a LOT of updates for various ASICs
• amdgpu: DMCUB updates for various ASICs
• rtw89: init board_elm.bin with stuffs for board ID 1
• rtw89: 8922d: update fw 0.35.119.3 with format suffix -1
• rtw89: 8922d: update fw 0.35.115.2
• wfx: update to firmware 3.18
• nvidia: Update and add missing firmware files for Tegra SoCs
• qcom:Update qdsp6sw firmware for shikra platform
• aic: Add AIC8800D80 Bluetooth and Wi-Fi firmware
• qcom: update HPASS firmware for nord platform
• amdgpu: DMCUB updates for various ASICs
• amdgpu: update gc 11.0.1 and 11.0.4 firmware
• qcom: update LPAICP firmware for shikra platform
• ath12k: WCN7850 hw2.0: update board-2.bin
• panthor: Add initial firmware for Architecture 14.8 Arm Mali GPU
• qcom: update ADSP firmware for glymur platform
• cirrus: cs35l41: Add firmware and tuning for Lenovo Thinkbook laptops
• cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
• cirrus: cs42l45: Add CS42L49 SDCA codec firmware for Dell laptops
• qcom: fix qcs8300 gpdspr.jsn symlink target
• qcom: update ADSP firmware for x1e80100 platform
• Update firmware for Intel Solar/Magnetar/Blazar*/Scorpius/ScorpiusGfp core
• cirrus: cs35l57 cs35l63: Add firmware for some Dell laptops
• WHENCE: add SPDX license references for non-standard license texts
• WHENCE: add initial SPDX identifiers
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for a Dell laptop
• cirrus: cs35l41: Add support for Lenovo Yoga Slim 7 Carbon 14ACN6
• Add ISH firmware files for Intel Nova Lake-H/S platforms
• qcom: add ADSP firmware for eliza platform
• qcom: update ADSP firmware for hawi platform
• QCA: Add QCA2066 Bluetooth firmware hpnv21g.30c
• QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
• Revert "qcom: update ADSP firmware for qcs615 platform"
• qcom: Add gpu firmwares for Hawi and Maili chipsets
• qcom: update Rubik Pi 3 ADSP firmware
• cirrus: cs35l56: Correct firmware instances for 103c8c52 and 103c8c53
• contrib: post the MR comment to the project of the merge request
• qcom: vpu: add Gen2 firmware binary for Hawi/Maili
• Update AMD cpu microcode
• iwlwifi: add Bz/Sc FW for core24.80-41 release
• iwlwifi: Update Bz/Fm firmware for core24.80-41 release
• iwlwifi: Add Hr/Gf firmware for core24.80-41 release
• iwlwifi: update ty/So/Ma firmwares for core24.80-41 release
• iwlwifi: Add cc/Qu/QuZ firmwares for core24.80-41 release
• mwifiex: add IW416 firmware
• ath12k: WCN7850 hw2.0: update board-2.bin
• ath12k: QCC2072 hw1.0: update board-2.bin
• ci: add Qualcomm firmware version diff MR comment job
• qcom: sdx61: add missing firmware version
• qcom: sdx35: add missing firmware version
• qcom: aic100: add missing firmware versions
• qcom: qdu100: add missing firmware versions
• qcom: sdm845: add missing modem firmware version
• qcom: x1e80100: add missing Dell XPS 13 9345 DSP versions
• qcom: add missing Adreno ZAP shader versions
• qca: separate the WCN685x uart firmware revisions
• qca: group the QCA61x4 USB firmware files
• qca: drop duplicate version lines
• qca: fix the version of the QCA6698 Bluetooth firmware
• qca: fix the version of the WCN785x USB firmware
• qcom: fix the version of the a660 GMU firmware
• qcom: fix the version of the Eliza SQE microcode
• qcom: fix the version of the QCS615 ZAP shader
• qcom/shikra: link WiFi firmware from the ath10k subdir
• Revert "amdgpu: update GC 11.0.0 firmware"
• Revert "amdgpu: update GC 11.0.0 firmware"
• amdgpu: DMCUB updates for various ASICs
• intel: Update ibt-00a0-01a1-pci.ddc for BE211 - Whale Peak2 (WhP2)
• ath11k: WCN6855 hw2.0: update board-2.bin
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
• qcom: add CDSP firmware for hawi platform
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
• cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops
• QCA: Update Bluetooth firmware for QCC2072 UART interface: 1.1.0-00340 to 1.1.0-00355

FEDORA-2026-bd021461a8 Packages in this update:

• linux-firmware-20261019-1.fc43

Update description:

Update to 20261019:

• rockchip: add PCIe3 PHY firmware for snps-pcie3
• Update ADSP firmware for Qualcomm qcs615 platform.
• Revert "amdgpu: update GC 11.0.0 firmware"
• amdgpu: a LOT of updates for various ASICs
• amdgpu: DMCUB updates for various ASICs
• rtw89: init board_elm.bin with stuffs for board ID 1
• rtw89: 8922d: update fw 0.35.119.3 with format suffix -1
• rtw89: 8922d: update fw 0.35.115.2
• wfx: update to firmware 3.18
• nvidia: Update and add missing firmware files for Tegra SoCs
• qcom:Update qdsp6sw firmware for shikra platform
• aic: Add AIC8800D80 Bluetooth and Wi-Fi firmware
• qcom: update HPASS firmware for nord platform
• amdgpu: DMCUB updates for various ASICs
• amdgpu: update gc 11.0.1 and 11.0.4 firmware
• qcom: update LPAICP firmware for shikra platform
• ath12k: WCN7850 hw2.0: update board-2.bin
• panthor: Add initial firmware for Architecture 14.8 Arm Mali GPU
• qcom: update ADSP firmware for glymur platform
• cirrus: cs35l41: Add firmware and tuning for Lenovo Thinkbook laptops
• cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
• cirrus: cs42l45: Add CS42L49 SDCA codec firmware for Dell laptops
• qcom: fix qcs8300 gpdspr.jsn symlink target
• qcom: update ADSP firmware for x1e80100 platform
• Update firmware for Intel Solar/Magnetar/Blazar*/Scorpius/ScorpiusGfp core
• cirrus: cs35l57 cs35l63: Add firmware for some Dell laptops
• WHENCE: add SPDX license references for non-standard license texts
• WHENCE: add initial SPDX identifiers
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for a Dell laptop
• cirrus: cs35l41: Add support for Lenovo Yoga Slim 7 Carbon 14ACN6
• Add ISH firmware files for Intel Nova Lake-H/S platforms
• qcom: add ADSP firmware for eliza platform
• qcom: update ADSP firmware for hawi platform
• QCA: Add QCA2066 Bluetooth firmware hpnv21g.30c
• QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
• Revert "qcom: update ADSP firmware for qcs615 platform"
• qcom: Add gpu firmwares for Hawi and Maili chipsets
• qcom: update Rubik Pi 3 ADSP firmware
• cirrus: cs35l56: Correct firmware instances for 103c8c52 and 103c8c53
• contrib: post the MR comment to the project of the merge request
• qcom: vpu: add Gen2 firmware binary for Hawi/Maili
• Update AMD cpu microcode
• iwlwifi: add Bz/Sc FW for core24.80-41 release
• iwlwifi: Update Bz/Fm firmware for core24.80-41 release
• iwlwifi: Add Hr/Gf firmware for core24.80-41 release
• iwlwifi: update ty/So/Ma firmwares for core24.80-41 release
• iwlwifi: Add cc/Qu/QuZ firmwares for core24.80-41 release
• mwifiex: add IW416 firmware
• ath12k: WCN7850 hw2.0: update board-2.bin
• ath12k: QCC2072 hw1.0: update board-2.bin
• ci: add Qualcomm firmware version diff MR comment job
• qcom: sdx61: add missing firmware version
• qcom: sdx35: add missing firmware version
• qcom: aic100: add missing firmware versions
• qcom: qdu100: add missing firmware versions
• qcom: sdm845: add missing modem firmware version
• qcom: x1e80100: add missing Dell XPS 13 9345 DSP versions
• qcom: add missing Adreno ZAP shader versions
• qca: separate the WCN685x uart firmware revisions
• qca: group the QCA61x4 USB firmware files
• qca: drop duplicate version lines
• qca: fix the version of the QCA6698 Bluetooth firmware
• qca: fix the version of the WCN785x USB firmware
• qcom: fix the version of the a660 GMU firmware
• qcom: fix the version of the Eliza SQE microcode
• qcom: fix the version of the QCS615 ZAP shader
• qcom/shikra: link WiFi firmware from the ath10k subdir
• Revert "amdgpu: update GC 11.0.0 firmware"
• Revert "amdgpu: update GC 11.0.0 firmware"
• amdgpu: DMCUB updates for various ASICs
• intel: Update ibt-00a0-01a1-pci.ddc for BE211 - Whale Peak2 (WhP2)
• ath11k: WCN6855 hw2.0: update board-2.bin
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
• qcom: add CDSP firmware for hawi platform
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
• cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops
• QCA: Update Bluetooth firmware for QCC2072 UART interface: 1.1.0-00340 to 1.1.0-00355

FEDORA-2026-546bad4cdb Packages in this update:

• linux-firmware-20261019-1.fc44

Update description:

Update to 20261019:

• rockchip: add PCIe3 PHY firmware for snps-pcie3
• Update ADSP firmware for Qualcomm qcs615 platform.
• Revert "amdgpu: update GC 11.0.0 firmware"
• amdgpu: a LOT of updates for various ASICs
• amdgpu: DMCUB updates for various ASICs
• rtw89: init board_elm.bin with stuffs for board ID 1
• rtw89: 8922d: update fw 0.35.119.3 with format suffix -1
• rtw89: 8922d: update fw 0.35.115.2
• wfx: update to firmware 3.18
• nvidia: Update and add missing firmware files for Tegra SoCs
• qcom:Update qdsp6sw firmware for shikra platform
• aic: Add AIC8800D80 Bluetooth and Wi-Fi firmware
• qcom: update HPASS firmware for nord platform
• amdgpu: DMCUB updates for various ASICs
• amdgpu: update gc 11.0.1 and 11.0.4 firmware
• qcom: update LPAICP firmware for shikra platform
• ath12k: WCN7850 hw2.0: update board-2.bin
• panthor: Add initial firmware for Architecture 14.8 Arm Mali GPU
• qcom: update ADSP firmware for glymur platform
• cirrus: cs35l41: Add firmware and tuning for Lenovo Thinkbook laptops
• cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
• cirrus: cs42l45: Add CS42L49 SDCA codec firmware for Dell laptops
• qcom: fix qcs8300 gpdspr.jsn symlink target
• qcom: update ADSP firmware for x1e80100 platform
• Update firmware for Intel Solar/Magnetar/Blazar*/Scorpius/ScorpiusGfp core
• cirrus: cs35l57 cs35l63: Add firmware for some Dell laptops
• WHENCE: add SPDX license references for non-standard license texts
• WHENCE: add initial SPDX identifiers
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for a Dell laptop
• cirrus: cs35l41: Add support for Lenovo Yoga Slim 7 Carbon 14ACN6
• Add ISH firmware files for Intel Nova Lake-H/S platforms
• qcom: add ADSP firmware for eliza platform
• qcom: update ADSP firmware for hawi platform
• QCA: Add QCA2066 Bluetooth firmware hpnv21g.30c
• QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
• Revert "qcom: update ADSP firmware for qcs615 platform"
• qcom: Add gpu firmwares for Hawi and Maili chipsets
• qcom: update Rubik Pi 3 ADSP firmware
• cirrus: cs35l56: Correct firmware instances for 103c8c52 and 103c8c53
• contrib: post the MR comment to the project of the merge request
• qcom: vpu: add Gen2 firmware binary for Hawi/Maili
• Update AMD cpu microcode
• iwlwifi: add Bz/Sc FW for core24.80-41 release
• iwlwifi: Update Bz/Fm firmware for core24.80-41 release
• iwlwifi: Add Hr/Gf firmware for core24.80-41 release
• iwlwifi: update ty/So/Ma firmwares for core24.80-41 release
• iwlwifi: Add cc/Qu/QuZ firmwares for core24.80-41 release
• mwifiex: add IW416 firmware
• ath12k: WCN7850 hw2.0: update board-2.bin
• ath12k: QCC2072 hw1.0: update board-2.bin
• ci: add Qualcomm firmware version diff MR comment job
• qcom: sdx61: add missing firmware version
• qcom: sdx35: add missing firmware version
• qcom: aic100: add missing firmware versions
• qcom: qdu100: add missing firmware versions
• qcom: sdm845: add missing modem firmware version
• qcom: x1e80100: add missing Dell XPS 13 9345 DSP versions
• qcom: add missing Adreno ZAP shader versions
• qca: separate the WCN685x uart firmware revisions
• qca: group the QCA61x4 USB firmware files
• qca: drop duplicate version lines
• qca: fix the version of the QCA6698 Bluetooth firmware
• qca: fix the version of the WCN785x USB firmware
• qcom: fix the version of the a660 GMU firmware
• qcom: fix the version of the Eliza SQE microcode
• qcom: fix the version of the QCS615 ZAP shader
• qcom/shikra: link WiFi firmware from the ath10k subdir
• Revert "amdgpu: update GC 11.0.0 firmware"
• Revert "amdgpu: update GC 11.0.0 firmware"
• amdgpu: DMCUB updates for various ASICs
• intel: Update ibt-00a0-01a1-pci.ddc for BE211 - Whale Peak2 (WhP2)
• ath11k: WCN6855 hw2.0: update board-2.bin
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
• qcom: add CDSP firmware for hawi platform
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
• cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops
• QCA: Update Bluetooth firmware for QCC2072 UART interface: 1.1.0-00340 to 1.1.0-00355

FEDORA-2026-7e84de33a8 Packages in this update:

• containerd-2.4.2-1.fc45

Update description:

• Update to release v2.4.2
• Resolves: rhbz#2535733
• Resolves CVE-2026-41178: rhbz#2515054

FEDORA-2026-2887458a9f Packages in this update:

• containerd-2.4.2-1.fc46

Update description:

Automatic update for containerd-2.4.2-1.fc46.

Changelog * Thu Oct 15 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 2.4.2-1 - Update to release v2.4.2 - Resolves: rhbz#2535733 - Resolves CVE-2026-41178: rhbz#2515054

FEDORA-2026-839be67202 Packages in this update:

• xen-4.21.2-4.fc44

Update description:

x86/AMD: ineffectual Zenbleed workaround [XSA-515, CVE-2026-79608] x86: XPTI may break on huge-memory systems [XSA-516, CVE-2026-79609] grant-table: double version change race [XSA-517, CVE-2026-79610] VMX: VMentry failure with branch tracing and blocked states [XSA-518, CVE-2026-79611] Arm: multiple issues with GNTTABOP_cache_flush [XSA-519, CVE-2026-102699, CVE-2026-102702] gnttab: cache-flush handling may cause page reference leak [XSA-520, CVE-2026-102700]