Aggregator

It was discovered that libpng did not properly handle memory when processing certain PNG files. An attacker could possibly use this issue to cause libpng to crash, resulting in a denial of service, or disclose sensitive information. (CVE-2025-64505) Joshua Inscoe discovered that libpng did not properly handle memory when processing certain PNG files. An attacker could possibly use this issue to cause libpng to crash, resulting in a denial of service, disclose sensitive information, or execute arbitrary code. (CVE-2026-25646)

It was discovered that GeoPandas incorrectly handled certain input. An attacker could possibly use this issue to perform SQL injection attacks.

FEDORA-EPEL-2026-108ee839c4 Packages in this update:

• wordpress-6.9.3-1.el10_2

Update description:

Upstream announcements:

• WordPress 6.9.2 Release
• WordPress 6.9.3 and 7.0 beta 4

FEDORA-2026-d8dab3284b Packages in this update:

• wordpress-6.9.3-1.fc43

Update description:

Upstream announcements:

• WordPress 6.9.2 Release
• WordPress 6.9.3 and 7.0 beta 4

FEDORA-EPEL-2026-f5c7dc5bca Packages in this update:

• wordpress-6.9.3-1.el10_1

Update description:

Upstream announcements:

• WordPress 6.9.2 Release
• WordPress 6.9.3 and 7.0 beta 4

FEDORA-EPEL-2026-299b865866 Packages in this update:

• wordpress-6.9.3-1.el10_3

Update description:

Upstream announcements:

• WordPress 6.9.2 Release
• WordPress 6.9.3 and 7.0 beta 4

FEDORA-2026-e53e7de687 Packages in this update:

• wordpress-6.9.3-1.fc44

Update description:

Upstream announcements:

• WordPress 6.9.2 Release
• WordPress 6.9.3 and 7.0 beta 4

FEDORA-2026-30aaa038c8 Packages in this update:

• wordpress-6.9.3-1.fc42

Update description:

Upstream announcements:

• WordPress 6.9.2 Release
• WordPress 6.9.3 and 7.0 beta 4

FEDORA-EPEL-2026-79019fe4ae Packages in this update:

• wordpress-6.9.3-1.el9

Update description:

Upstream announcements:

• WordPress 6.9.2 Release
• WordPress 6.9.3 and 7.0 beta 4

FEDORA-2026-62f9125c65 Packages in this update:

• aqualung-2.0-6.fc44
• mac-12.50-1.fc44

Update description:

Latest Monkey's Audio Codec release. Changelog: https://monkeysaudio.com/versionhistory.html . Fixes CVE-2025-61043.

Version:next-20260310 (linux-next) Released:2026-03-10

Michael Randrianantenaina discovered that GIMP incorrectly handled certain malformed ICO files. An attacker could possibly use this to cause a denial of service or execute arbitrary code. (CVE-2025-5473) Seungho Kim discovered that GIMP incorrectly handled certain memory operations when running the despeckle plugin. An attacker could possibly use this to cause a denial of service or execute arbitrary code. (CVE-2025-6035)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - MMC subsystem; (CVE-2022-49267, CVE-2025-21780)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SMB network file system; (CVE-2025-22037, CVE-2025-37899)

FEDORA-2026-beac8e1f11 Packages in this update:

• dnf5-5.2.18.0-2.fc42

Update description:

This release fixes CVE-2026-3836 (a crash in dnf5daemon-server when receiving an unknown locale from a D-Bus client.

FEDORA-2026-4e264a94a4 Packages in this update:

• dnf5-5.2.18.0-2.fc43

Update description:

This release fixes CVE-2026-3836 (a crash in dnf5daemon-server when receiving an unknown locale from a D-Bus client.

FEDORA-2026-6072c6888a Packages in this update:

• dnf5-5.4.0.0-2.fc44

Update description:

This release fixes CVE-2026-3836 (a crash in dnf5daemon-server when receiving an unknown locale from a D-Bus client.

Update to upstream release 5.4.0.0. Full changelog.

FEDORA-2026-f136c4b06c Packages in this update:

• wireshark-4.6.4-1.fc44

Update description:

New version 6.4.6