Aggregator

FEDORA-2026-63393c230f Packages in this update:

• erlang-26.2.5.21-6.fc44

Update description:

Fix for CVE-2026-55953

FEDORA-2026-e2b994d140 Packages in this update:

• erlang-26.2.5.21-6.fc43

Update description:

Fix for CVE-2026-55953

FEDORA-2026-72d10c874d Packages in this update:

• libevent-2.1.13-1.fc44

Update description: Update to 2.1.13.

The following security vulnerabilites are fixed in this update:

• GHSA-fj29-64w6-73h6 CVE-2026-63383 https://github.com/libevent/libevent/security/advisories/GHSA-fj29-64w6-73h6
• GHSA-45c6-qx49-89m8 CVE-2026-63384 https://github.com/libevent/libevent/security/advisories/GHSA-45c6-qx49-89m8
• GHSA-cvq5-vrvr-j338 CVE-2026-63388 https://github.com/libevent/libevent/security/advisories/GHSA-cvq5-vrvr-j338
• GHSA-58rx-7448-jw47 CVE-2026-63387 https://github.com/libevent/libevent/security/advisories/GHSA-58rx-7448-jw47
• GHSA-2gmv-p5m7-98p6 CVE-2026-63379 https://github.com/libevent/libevent/security/advisories/GHSA-2gmv-p5m7-98p6
• GHSA-c2pj-cg4r-88c8 CVE-2026-63381 https://github.com/libevent/libevent/security/advisories/GHSA-c2pj-cg4r-88c8
• GHSA-q39v-w2g7-gr8j CVE-2026-63382 https://github.com/libevent/libevent/security/advisories/GHSA-q39v-w2g7-gr8j
• GHSA-jcwh-pvf2-73p2 CVE-2026-63385 https://github.com/libevent/libevent/security/advisories/GHSA-jcwh-pvf2-73p2

FEDORA-2026-0a83f1b852 Packages in this update:

• libevent-2.1.13-1.fc45

Update description: Update to 2.1.13.

The following security vulnerabilites are fixed in this update:

• GHSA-fj29-64w6-73h6 CVE-2026-63383 https://github.com/libevent/libevent/security/advisories/GHSA-fj29-64w6-73h6
• GHSA-45c6-qx49-89m8 CVE-2026-63384 https://github.com/libevent/libevent/security/advisories/GHSA-45c6-qx49-89m8
• GHSA-cvq5-vrvr-j338 CVE-2026-63388 https://github.com/libevent/libevent/security/advisories/GHSA-cvq5-vrvr-j338
• GHSA-58rx-7448-jw47 CVE-2026-63387 https://github.com/libevent/libevent/security/advisories/GHSA-58rx-7448-jw47
• GHSA-2gmv-p5m7-98p6 CVE-2026-63379 https://github.com/libevent/libevent/security/advisories/GHSA-2gmv-p5m7-98p6
• GHSA-c2pj-cg4r-88c8 CVE-2026-63381 https://github.com/libevent/libevent/security/advisories/GHSA-c2pj-cg4r-88c8
• GHSA-q39v-w2g7-gr8j CVE-2026-63382 https://github.com/libevent/libevent/security/advisories/GHSA-q39v-w2g7-gr8j
• GHSA-jcwh-pvf2-73p2 CVE-2026-63385 https://github.com/libevent/libevent/security/advisories/GHSA-jcwh-pvf2-73p2

It was discovered that PHP incorrectly handled Apache map decoding in SOAP servers with a typemap configured. A remote attacker could use this issue to cause a NULL pointer dereference, resulting in a denial of service. (CVE-2026-7262) It was discovered that PHP incorrectly handled signed integer overflow in the metaphone() function. An attacker could use this issue to cause an out-of-bounds read, resulting in a denial of service. (CVE-2026-7568) It was discovered that PHP incorrectly handled circular symbolic links in phar archives. An attacker could use this issue to cause unbounded recursion, resulting in a denial of service. (CVE-2026-7260) It was discovered that PHP incorrectly escaped backslashes in the pgsql extension when standard_conforming_strings is enabled. An attacker could use this issue to perform SQL injection via a backslash breakout. (CVE-2026-17543)

FEDORA-2026-5812baee0f Packages in this update:

• freeipa-4.13.4-1.2.fc43

Update description:

FreeIPA 4.13.4 security release

Upstream release notes: https://www.freeipa.org/release-notes/4-13-4.html

FEDORA-2026-39b07f6dbb Packages in this update:

• gegl04-0.4.72-1.fc43

Update description:

This update contains a new upstream release with bugfixes and improvements, notably it fixes an overflow in parsing RGBE/HDR image files.

For more information, please consult the upstream changelog.

FEDORA-EPEL-2026-ffca0f924a Packages in this update:

• openvpn-2.7.7-1.el10_3

Update description:

Update to upstream 2.7.7 release

FEDORA-EPEL-2026-7f69be3a02 Packages in this update:

• openvpn-2.7.7-1.el10_4

Update description:

Update to upstream 2.7.7 release

FEDORA-2026-725faae162 Packages in this update:

• openvpn-2.7.7-1.fc44

Update description:

Update to upstream 2.7.7 release

FEDORA-2026-17203fb331 Packages in this update:

• openvpn-2.7.7-1.fc45

Update description:

Update to upstream 2.7.7 release

FEDORA-2026-5cce49502a Packages in this update:

• libcupsfilters-2.2.1-3.fc46

Update description:

Automatic update for libcupsfilters-2.2.1-3.fc46.

Changelog * Fri Sep 4 2026 Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.1-3 - fix multiple copies not working for raster drivers (rhbz#2312145)

Michał Majchrowicz and Marcin Wyczechowski discovered that Gzip's gzexe utility created temporary files in an insecure manner when mktemp was unavailable. A local attacker could possibly use this issue to overwrite arbitrary files. (CVE-2026-41991) Elias Hasas, Michał Majchrowicz and Marcin Wyczechowski discovered that Gzip incorrectly handled certain compressed files. An attacker could possibly use this issue to obtain sensitive information or cause Gzip to crash, resulting in a denial of service. (CVE-2026-41992)

FEDORA-2026-1c8697a163 Packages in this update:

• freeipa-4.13.4-1.2.fc44

Update description:

FreeIPA 4.13.4 security release

Upstream release notes: https://www.freeipa.org/release-notes/4-13-4.html

FEDORA-2026-b314830fc3 Packages in this update:

• freeipa-4.13.4-1.2.fc45

Update description:

FreeIPA 4.13.4 security release

Upstream release notes: https://www.freeipa.org/release-notes/4-13-4.html

It was discovered that Minetest did not properly sanitize the Lua sandbox environment when using LuaJIT. A malicious mod could escape the sandbox to execute arbitrary code and gain full file system access on the server. An attacker could use this issue to compromise the server.

FEDORA-2026-81cd7d0f41 Packages in this update:

• perl-Authen-SASL-2.2100-1.fc45

Update description:

2.2100 - CVE-2026-86219: Replay attack in Authen::SASL::Perl::DIGEST_MD5 Thanks to TIMLEGGE (@timlegge) and the CPANSec team for the AI-assisted detection and fix!

FEDORA-2026-53e2875c88 Packages in this update:

• perl-Authen-SASL-2.2100-1.fc44

Update description:

2.2100 - CVE-2026-86219: Replay attack in Authen::SASL::Perl::DIGEST_MD5 Thanks to TIMLEGGE (@timlegge) and the CPANSec team for the AI-assisted detection and fix!

FEDORA-2026-dff163317a Packages in this update:

• sblim-sfcb-1.4.9-38.fc43

Update description:

Fix CVE-2026-73583 and CVE-2026-73584

It was discovered that MiniUPnPd contained an integer underflow vulnerability in SOAPAction header parsing. A remote attacker could use this issue to cause a denial of service or information disclosure by sending a malformed SOAPAction header with a single quote.