Aggregator

FEDORA-2026-04e2968a8a Packages in this update:

• perl-Plack-1.0055-1.fc45
• perl-Plack-Middleware-ReverseProxy-0.17-1.fc45

Update description:

A number of security issues were found in the Plack stack: SECURITY Fix memory leak of every request env in Plack::Middleware::Recursive (CVE-2026-110333) Plack::Request::Upload->basename never returns '', '.' or '..' (CVE-2026-110332) Plack::App::URLMap matches SERVER_PORT literally when stripping it from Host (CVE-2026-110335) BUG FIXES Plack::Middleware::ErrorDocument restores the env after a subrequest, so outer middleware such as AccessLog sees the original request (CVE-2026-110334) DOCUMENTATION Document that Plack::Handler::FCGI and Apache2 keep dot segments in PATH_INFO and warn against relying on front-server path-based access control (CVE-2026-110336)

FEDORA-2026-1f56c920d8 Packages in this update:

• perl-Plack-1.0055-1.fc43
• perl-Plack-Middleware-ReverseProxy-0.17-1.fc43

Update description:

A number of security issues were found in the Plack stack: SECURITY Fix memory leak of every request env in Plack::Middleware::Recursive (CVE-2026-110333) Plack::Request::Upload->basename never returns '', '.' or '..' (CVE-2026-110332) Plack::App::URLMap matches SERVER_PORT literally when stripping it from Host (CVE-2026-110335) BUG FIXES Plack::Middleware::ErrorDocument restores the env after a subrequest, so outer middleware such as AccessLog sees the original request (CVE-2026-110334) DOCUMENTATION Document that Plack::Handler::FCGI and Apache2 keep dot segments in PATH_INFO and warn against relying on front-server path-based access control (CVE-2026-110336)

FEDORA-EPEL-2026-0048d611d2 Packages in this update:

• libinstpatch-1.1.6-12.el8

Update description:

Apply a proposed fix for CVE-2026-111136

FEDORA-EPEL-2026-06f144fbdf Packages in this update:

• nix-2.31.6-1.el10_2

Update description:

Update to 2.31.6 which addresses:

• CVE-2026-110450 (High, https://github.com/NixOS/nix/security/advisories/GHSA-jwvx-xq5j-gc56) and other Moderate issues:
• see https://discourse.nixos.org/t/security-advisory-for-nix-and-lix-october-2026/80547

bugfixes:

• nix.fish and nix-daemon.fish should live in fish/vendor_conf.d
• switch back to editline from readline to fix repl history (#2536840)

FEDORA-EPEL-2026-2d07165e38 Packages in this update:

• rust-faster-hex-0.10.1-1.el10_3

Update description:

Update to version 0.10.1.

This includes a fix for a potential buffer overflow (assigned RUSTSEC-2026-0306). Rebuilds of affected applications are tracked in rust/backlog#45.

FEDORA-2026-d93099258e Packages in this update:

• rust-faster-hex-0.10.1-1.fc45

Update description:

Update to version 0.10.1.

This includes a fix for a potential buffer overflow (assigned RUSTSEC-2026-0306). Rebuilds of affected applications are tracked in rust/backlog#45.

FEDORA-EPEL-2026-a362246ace Packages in this update:

• rust-faster-hex-0.10.1-1.el10_4

Update description:

Update to version 0.10.1.

This includes a fix for a potential buffer overflow (assigned RUSTSEC-2026-0306). Rebuilds of affected applications are tracked in rust/backlog#45.

FEDORA-EPEL-2026-297c68a424 Packages in this update:

• rust-faster-hex-0.10.1-1.el9

Update description:

Update to version 0.10.1.

This includes a fix for a potential buffer overflow (assigned RUSTSEC-2026-0306). Rebuilds of affected applications are tracked in rust/backlog#45.

FEDORA-2026-d61f581c33 Packages in this update:

• rust-faster-hex-0.10.1-1.fc44

Update description:

Update to version 0.10.1.

This includes a fix for a potential buffer overflow (assigned RUSTSEC-2026-0306). Rebuilds of affected applications are tracked in rust/backlog#45.

FEDORA-EPEL-2026-b448f4c4e6 Packages in this update:

• rust-faster-hex-0.10.1-1.el10_2

Update description:

Update to version 0.10.1.

This includes a fix for a potential buffer overflow (assigned RUSTSEC-2026-0306). Rebuilds of affected applications are tracked in rust/backlog#45.

FEDORA-2026-120aeecae1 Packages in this update:

• rust-faster-hex-0.10.1-1.fc43

Update description:

Update to version 0.10.1.

This includes a fix for a potential buffer overflow (assigned RUSTSEC-2026-0306). Rebuilds of affected applications are tracked in rust/backlog#45.

FEDORA-EPEL-2026-51b9011519 Packages in this update:

• nix-2.31.6-1.el10_3

Update description:

Update to 2.31.6 which addresses:

• CVE-2026-110450 (High, https://github.com/NixOS/nix/security/advisories/GHSA-jwvx-xq5j-gc56) and other Moderate issues:
• see https://discourse.nixos.org/t/security-advisory-for-nix-and-lix-october-2026/80547

bugfixes:

• nix.fish and nix-daemon.fish should live in fish/vendor_conf.d
• switch back to editline from readline to fix repl history (#2536840)

FEDORA-EPEL-2026-ef61f6c526 Packages in this update:

• libindi-2.2.5-1.el10_4

Update description:

Update to 2.2.5 and fix CVE-2026-71979.

FEDORA-2026-f614e26c1d Packages in this update:

• libindi-2.2.5-1.fc44

Update description:

Update to 2.2.5 and fix CVE-2026-71979.

FEDORA-2026-50d453a849 Packages in this update:

• libindi-2.2.5-1.fc45

Update description:

Update to 2.2.5 and fix CVE-2026-71979.

FEDORA-2026-e2b59173e7 Packages in this update:

• libindi-2.2.5-1.fc46

Update description:

Automatic update for libindi-2.2.5-1.fc46.

Changelog * Sat Oct 17 2026 Mattia Verga <mattia.verga@proton.me> - 2.2.5-1 - Update to 2.2.5 (Fedora#2544910) - Fix CVE-2026-71979 (Fedora#2528498)

FEDORA-EPEL-2026-ffed74cdfb Packages in this update:

• nix-2.31.6-1.el10_4

Update description:

Update to 2.31.6 which addresses:

• CVE-2026-110450 (High, https://github.com/NixOS/nix/security/advisories/GHSA-jwvx-xq5j-gc56) and other Moderate issues:
• see https://discourse.nixos.org/t/security-advisory-for-nix-and-lix-october-2026/80547

bugfixes:

• nix.fish and nix-daemon.fish should live in fish/vendor_conf.d
• switch back to editline from readline to fix repl history (#2536840)