Aggregator

FEDORA-2026-78521f021a Packages in this update:

• ca-certificates-2026.2.92_v9.0.319-1.fc45

Update description:

Update ca-certificates to ca-certificates-2026.2.92_v9.0.319-1.fc45

FEDORA-2026-0500e01d86 Packages in this update:

• ca-certificates-2026.2.92_v9.0.319-1.fc43

Update description:

Update ca-certificates to ca-certificates-2026.2.92_v9.0.319-1.fc43

FEDORA-2026-56e14eb520 Packages in this update:

• ca-certificates-2026.2.92_v9.0.319-1.fc44

Update description:

Update ca-certificates to ca-certificates-2026.2.92_v9.0.319-1.fc44

FEDORA-EPEL-2026-43ebefbea2 Packages in this update:

• trafficserver-9.2.16-1.el9

Update description:

Changes with Apache Traffic Server 9.2.16 #13157 - Fix build with newer Apple clang #13285 - Fix Fedora 44 CI on 9.2.x #13692 - 9.2.x: latest clang-analyzer fixes #13716 - 9.2.x: fix(http): stale skip_bytes in cache-write consumer after 100 Continue with transform #13866 - 9.2.x release 10-19

FEDORA-EPEL-2026-0775100001 Packages in this update:

• trafficserver-9.2.16-1.el8

Update description:

Changes with Apache Traffic Server 9.2.16 #13157 - Fix build with newer Apple clang #13285 - Fix Fedora 44 CI on 9.2.x #13692 - 9.2.x: latest clang-analyzer fixes #13716 - 9.2.x: fix(http): stale skip_bytes in cache-write consumer after 100 Continue with transform #13866 - 9.2.x release 10-19

USN-8944-1 updated ca-certificates. This update provides the corresponding changes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS by removing the "emSign ECC Root CA - G3" and "Comodo AAA Services root" CA certificates. Original advisory details: This update removes the "emSign ECC Root CA - G3" CA certificate due to intermediate CA certificates being compromised. In addition, in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS, the ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.90 version of the Mozilla certificate authority bundle.

FEDORA-2026-1ffbf97eba Packages in this update:

• rust-rustls-webpki-0.103.16-1.fc43
• rust-webpki-root-certs-1.0.10-1.fc43
• rust-webpki-roots-1.0.10-1.fc43

Update description:

• Update the rustls-webpki crate to version 0.103.16.
• Update the webpki-roots and webpki-root-certs crates to version 1.0.10.

This addresses security advisories RUSTSEC-2026-0382, RUSTSEC-2026-0381, and RUSTSEC-2026-0383 - also known as CVE-2026-111943 (i.e. the eMudhra Intermediate CA Compromise).

Rebuilds of affected packages are tracked in rust/backlog#46.

FEDORA-EPEL-2026-18ba500adb Packages in this update:

• rust-rustls-webpki-0.103.16-1.el9
• rust-webpki-root-certs-1.0.10-1.el9
• rust-webpki-roots-1.0.10-1.el9

Update description:

• Update the rustls-webpki crate to version 0.103.16.
• Update the webpki-roots and webpki-root-certs crates to version 1.0.10.

This addresses security advisories RUSTSEC-2026-0382, RUSTSEC-2026-0381, and RUSTSEC-2026-0383 - also known as CVE-2026-111943 (i.e. the eMudhra Intermediate CA Compromise).

Rebuilds of affected packages are tracked in rust/backlog#46.

FEDORA-EPEL-2026-93a23666b1 Packages in this update:

• rust-rustls-webpki-0.103.16-1.el10_2
• rust-webpki-roots-1.0.10-1.el10_2

Update description:

• Update the rustls-webpki crate to version 0.103.16.
• Update the webpki-roots and webpki-root-certs crates to version 1.0.10.

This addresses security advisories RUSTSEC-2026-0382, RUSTSEC-2026-0381, and RUSTSEC-2026-0383 - also known as CVE-2026-111943 (i.e. the eMudhra Intermediate CA Compromise).

Rebuilds of affected packages are tracked in rust/backlog#46.

FEDORA-2026-8eeffa4c43 Packages in this update:

• rust-rustls-webpki-0.103.16-1.fc44
• rust-webpki-root-certs-1.0.10-1.fc44
• rust-webpki-roots-1.0.10-1.fc44

Update description:

• Update the rustls-webpki crate to version 0.103.16.
• Update the webpki-roots and webpki-root-certs crates to version 1.0.10.

This addresses security advisories RUSTSEC-2026-0382, RUSTSEC-2026-0381, and RUSTSEC-2026-0383 - also known as CVE-2026-111943 (i.e. the eMudhra Intermediate CA Compromise).

Rebuilds of affected packages are tracked in rust/backlog#46.

FEDORA-2026-ec2ce9d2ef Packages in this update:

• rust-rustls-webpki-0.103.16-1.fc45
• rust-webpki-root-certs-1.0.10-1.fc45
• rust-webpki-roots-1.0.10-1.fc45

Update description:

• Update the rustls-webpki crate to version 0.103.16.
• Update the webpki-roots and webpki-root-certs crates to version 1.0.10.

This addresses security advisories RUSTSEC-2026-0382, RUSTSEC-2026-0381, and RUSTSEC-2026-0383 - also known as CVE-2026-111943 (i.e. the eMudhra Intermediate CA Compromise).

Rebuilds of affected packages are tracked in rust/backlog#46.

FEDORA-EPEL-2026-d3ec7f00e2 Packages in this update:

• rust-rustls-webpki-0.103.16-1.el10_3
• rust-webpki-root-certs-1.0.10-1.el10_3
• rust-webpki-roots-1.0.10-1.el10_3

Update description:

• Update the rustls-webpki crate to version 0.103.16.
• Update the webpki-roots and webpki-root-certs crates to version 1.0.10.

This addresses security advisories RUSTSEC-2026-0382, RUSTSEC-2026-0381, and RUSTSEC-2026-0383 - also known as CVE-2026-111943 (i.e. the eMudhra Intermediate CA Compromise).

Rebuilds of affected packages are tracked in rust/backlog#46.

FEDORA-EPEL-2026-2d8a0ed237 Packages in this update:

• rust-rustls-webpki-0.103.16-1.el10_4
• rust-webpki-root-certs-1.0.10-1.el10_4
• rust-webpki-roots-1.0.10-1.el10_4

Update description:

• Update the rustls-webpki crate to version 0.103.16.
• Update the webpki-roots and webpki-root-certs crates to version 1.0.10.

This addresses security advisories RUSTSEC-2026-0382, RUSTSEC-2026-0381, and RUSTSEC-2026-0383 - also known as CVE-2026-111943 (i.e. the eMudhra Intermediate CA Compromise).

Rebuilds of affected packages are tracked in rust/backlog#46.

FEDORA-2026-8e6e09deb9 Packages in this update:

• rust-cargo-semver-checks-0.51.0-5.fc44
• rust-trustfall-rustdoc-adapter57-57.1.3-2.fc44
• rust-trustfall-rustdoc-adapter60-60.0.3-2.fc44
• rust-trustfall-rustdoc-adapter-61.0.3-1.fc44

Update description:

Rebuild cargo-semver-checks with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, and RUSTSEC-2026-0349 and with faster-hex 0.10.1 for RUSTSEC-2026-0306. Update trustfall-rustdoc-adapter to 61.0.3/60.0.3/57.1.3.

It was discovered that XZ Utils incorrectly handled certain memory allocation failures when reinitializing decoders for specific compressed file formats. An attacker could possibly use this issue to trigger an invalid memory write, resulting in a denial of service or arbitrary code execution.

This update removes the "emSign ECC Root CA - G3" CA certificate due to intermediate CA certificates being compromised. In addition, in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS, the ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.90 version of the Mozilla certificate authority bundle.

FEDORA-2026-85f07f4f1b Packages in this update:

• dolphin-26.08.1-2.fc44

Update description:

• CVE-2026-110236 Arbitrary command execution via crafted folder name

FEDORA-2026-2add2065d0 Packages in this update:

• dolphin-26.04.3-2.fc43

Update description:

• CVE-2026-110236 Arbitrary command execution via crafted folder name

FEDORA-2026-b022206824 Packages in this update:

• dolphin-26.08.1-2.fc45

Update description:

• CVE-2026-110236 Arbitrary command execution via crafted folder name

Multiple security issues were discovered in .NET and this update includes new upstream .NET versions to fix these issues. .NET 8 has been updated to 8.0.32 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. .NET 10 has been updated to 10.0.13 in Ubuntu 24.04 LTS, Ubuntu 26.04 LTS and Ubuntu 26.10. .NET 11 has been updated to 11.0.0~rc2 in Ubuntu 26.10. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.