Aggregator

FEDORA-2026-3a8a4802f0 Packages in this update:

• glib-networking-2.90.1-1.fc45

Update description:

Upstream release consisting mostly of CVE fixes, one of which is high severity (CVE-2026-103963)

USN-8956-1 fixed a vulnerability in Brotli. This update provides the corresponding fixes for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that Brotli incorrectly handled certain compressed streams. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code.

FEDORA-2026-bfd4fcb0d6 Packages in this update:

• sofia-sip-1.13.18-2.fc44

Update description:

Patch for out-of-bounds read in msg_multipart_parse().

FEDORA-2026-93bd58baf7 Packages in this update:

• sofia-sip-1.13.18-2.fc45

Update description:

Patch for out-of-bounds read in msg_multipart_parse().

FEDORA-2026-22482dbc27 Packages in this update:

• sofia-sip-1.13.18-2.fc43

Update description:

Patch for out-of-bounds read in msg_multipart_parse().

FEDORA-EPEL-2026-79badfe46e Packages in this update:

• sofia-sip-1.13.17-2.el9

Update description:

Patch for out-of-bounds read in msg_multipart_parse().

FEDORA-2026-4157a13c05 Packages in this update:

• sofia-sip-1.13.18-2.fc46

Update description:

Automatic update for sofia-sip-1.13.18-2.fc46.

Changelog * Tue Oct 27 2026 Tomi Lähteenmäki <lihis@lihis.net> - 1.13.18-2 - Patch for oversized MIME boundary (fedora#2554363)

FEDORA-EPEL-2026-264057b632 Packages in this update:

• python-nh3-0.2.21-2.el10_3
• rust-ammonia-4.1.8-1.el10_3

Update description:

Update ammonia to version 4.1.8 and rebuild python-nh3 to address several security vulnerabilities.

FEDORA-EPEL-2026-9722adf177 Packages in this update:

• python-nh3-0.2.21-2.el10_4
• rust-ammonia-4.1.8-1.el10_4

Update description:

Update ammonia to version 4.1.8 and rebuild python-nh3 to address several security vulnerabilities.

FEDORA-2026-d470ba3df9 Packages in this update:

• python-lxml-html-clean-0.4.6-1.fc44

Update description:

Fixes three high severity ReDOS flaws.

FEDORA-2026-768edcd81d Packages in this update:

• python-lxml-html-clean-0.4.6-1.fc43

Update description:

Fixes three high severity ReDOS flaws.

FEDORA-2026-7c58252e69 Packages in this update:

• python-lxml-html-clean-0.4.6-1.fc45

Update description:

Fixes three high severity ReDOS flaws.

FEDORA-2026-183d3c32a6 Packages in this update:

• markdownlint-cli2-0.24.0-1.fc43

Update description:

Update

FEDORA-2026-6215800886 Packages in this update:

• markdownlint-cli2-0.24.0-1.fc44

Update description:

Update

FEDORA-2026-8f8cd892e5 Packages in this update:

• markdownlint-cli2-0.24.0-1.fc45

Update description:

Update

Ali Mashally discovered that authd did not properly validate user identities when matching accounts from identity providers. An attacker could possibly use this issue to gain access to another user's local account and files, resulting in unauthorized access to sensitive information.

FEDORA-2026-36bc6490a3 Packages in this update:

• jackson-bom-2.21.8-1.fc46
• jackson-core-2.21.8-1.fc46
• jackson-databind-2.21.8-1.fc46
• jackson-modules-base-2.21.8-1.fc46

Update description:

Fix CVE-2026-89407 CVE-2026-89425 CVE-2026-68497 CVE-2026-83557 CVE-2026-19032 CVE-2026-91777 across aligned packages

FEDORA-2026-4f056db42e Packages in this update:

• python3.15-3.15.2-1.fc44

Update description:

• Update to Python 3.15.2
• CVE 2026-114583: tar filter allows writing outside destination via empty-named symlink
• CVE 2026-115557: Distrust compromised intermediate certificates in ssl module

Python 3.15.1 bugfix release.

FEDORA-2026-5e4931d206 Packages in this update:

• python3.15-3.15.2-1.fc43

Update description:

• Update to Python 3.15.2
• CVE 2026-114583: tar filter allows writing outside destination via empty-named symlink
• CVE 2026-115557: Distrust compromised intermediate certificates in ssl module

Python 3.15.1 bugfix release.

Version:next-20261027 (linux-next) Released:2026-10-27