Aggregator

mysql8.0-8.0.46-1.fc42

Fedora Security Advisories
1 week 5 days ago
FEDORA-2026-b78d5204fe Packages in this update:
  • mysql8.0-8.0.46-1.fc42
Update description:

MySQL 8.0.46

Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-46.html Known issue: s390x-specific issue - zlib with DFLTCC compressed pages with low KEY_BLOCK_SIZE values can cause ER_TOO_BIG_ROWSIZE errors in tables near the column count and their size limits. EOL notice: As of April 2026, with version 8.0.46, MySQL 8.0 reached End of Life (EoL).

USN-8269-1: Avahi vulnerabilities

Ubuntu Security Advisories
1 week 5 days ago
It is discovered that Avahi incorrectly handled crafted input. A remote attacker could possibly use this issue to crash the program, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-24401) Guillaume Meunier discovered that Avahi incorrectly handled crafted input. An attacker could possibly use this issue to crash the program, resulting in a denial of service. (CVE-2026-34933)

proftpd-1.3.6e-10.el8

Fedora Security Advisories
1 week 5 days ago
FEDORA-EPEL-2026-f4f7a26f7a Packages in this update:
  • proftpd-1.3.6e-10.el8
Update description:

This update contains an updated mod_wrap2_sql that addresses a potential SQL injection issue when connected to from a client with a maliciously-constructed reverse DNS record (CVE-2026-44331). Note that mod_wrap2_sql is not enabled by default and the issue can only happen if UseReverseDNS is enabled, which is also off by default.

proftpd-1.3.8d-3.el9

Fedora Security Advisories
1 week 5 days ago
FEDORA-EPEL-2026-ddf8b5eac2 Packages in this update:
  • proftpd-1.3.8d-3.el9
Update description:

This update contains an updated mod_wrap2_sql that addresses a potential SQL injection issue when connected to from a client with a maliciously-constructed reverse DNS record (CVE-2026-44331). Note that mod_wrap2_sql is not enabled by default and the issue can only happen if UseReverseDNS is enabled, which is also off by default.

proftpd-1.3.9a-2.el10_3

Fedora Security Advisories
1 week 5 days ago
FEDORA-EPEL-2026-fda27c1b84 Packages in this update:
  • proftpd-1.3.9a-2.el10_3
Update description:

This update contains an updated mod_wrap2_sql that addresses a potential SQL injection issue when connected to from a client with a maliciously-constructed reverse DNS record (CVE-2026-44331). Note that mod_wrap2_sql is not enabled by default and the issue can only happen if UseReverseDNS is enabled, which is also off by default.

proftpd-1.3.9a-2.el10_2

Fedora Security Advisories
1 week 5 days ago
FEDORA-EPEL-2026-9f8a61c142 Packages in this update:
  • proftpd-1.3.9a-2.el10_2
Update description:

This update contains an updated mod_wrap2_sql that addresses a potential SQL injection issue when connected to from a client with a maliciously-constructed reverse DNS record (CVE-2026-44331). Note that mod_wrap2_sql is not enabled by default and the issue can only happen if UseReverseDNS is enabled, which is also off by default.

proftpd-1.3.9a-2.el10_1

Fedora Security Advisories
1 week 5 days ago
FEDORA-EPEL-2026-c8e9680bd3 Packages in this update:
  • proftpd-1.3.9a-2.el10_1
Update description:

This update contains an updated mod_wrap2_sql that addresses a potential SQL injection issue when connected to from a client with a maliciously-constructed reverse DNS record (CVE-2026-44331). Note that mod_wrap2_sql is not enabled by default and the issue can only happen if UseReverseDNS is enabled, which is also off by default.

proftpd-1.3.9a-2.fc44

Fedora Security Advisories
1 week 5 days ago
FEDORA-2026-871243b391 Packages in this update:
  • proftpd-1.3.9a-2.fc44
Update description:

This update contains an updated mod_wrap2_sql that addresses a potential SQL injection issue when connected to from a client with a maliciously-constructed reverse DNS record (CVE-2026-44331). Note that mod_wrap2_sql is not enabled by default and the issue can only happen if UseReverseDNS is enabled, which is also off by default.

proftpd-1.3.9a-2.fc43

Fedora Security Advisories
1 week 5 days ago
FEDORA-2026-4ddb108952 Packages in this update:
  • proftpd-1.3.9a-2.fc43
Update description:

This update contains an updated mod_wrap2_sql that addresses a potential SQL injection issue when connected to from a client with a maliciously-constructed reverse DNS record (CVE-2026-44331). Note that mod_wrap2_sql is not enabled by default and the issue can only happen if UseReverseDNS is enabled, which is also off by default.

proftpd-1.3.9a-2.fc45

Fedora Security Advisories
1 week 5 days ago
FEDORA-2026-c8173d7dcd Packages in this update:
  • proftpd-1.3.9a-2.fc45
Update description:

Automatic update for proftpd-1.3.9a-2.fc45.

Changelog * Mon May 11 2026 Paul Howarth <paul@city-fan.org> - 1.3.9a-2 - Additional escaping for avoidance of SQL injection issues with %{note:...} and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in 1.3.9a - Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)