Aggregator

ceph-20.2.4-1.fc44

Fedora Security Advisories
1 week 5 days ago
FEDORA-2026-7de7d03796 Packages in this update:
  • ceph-20.2.4-1.fc44
Update description: Ceph 20.2.4 GA

ceph-19.2.6-1.fc43

Fedora Security Advisories
1 week 5 days ago
FEDORA-2026-ebffec502b Packages in this update:
  • ceph-19.2.6-1.fc43
Update description: Ceph 19.2.6 GA

USN-8563-4: nginx regression

Ubuntu Security Advisories
1 week 5 days ago
USN-8563-3 fixed a vulnerability in nginx. The fix introduced a regression in certain environments. This update reverts the fix for CVE-2026-42533 pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered that nginx incorrectly handled certain map directives using regex matching and capture variables. A remote attacker could use this issue to cause nginx to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-42533) It was discovered that nginx had a use-after-free vulnerability in the ngx_http_ssi_module module when configured with Server-Side Includes, proxy_pass, and proxy buffering disabled directives. An attacker able to intercept traffic and control responses from an upstream server could possibly use this issue to cause nginx to crash, resulting in a denial of service. (CVE-2026-56434) It was discovered that nginx incorrectly handled certain requests in the ngx_http_slice_module module. A remote attacker could possibly use this issue to obtain sensitive information or cause nginx to crash, resulting in a denial of service. (CVE-2026-60005)

USN-8650-1: Cap'n Proto vulnerabilities

Ubuntu Security Advisories
1 week 5 days ago
Chanho Kim and Jihyeok Han discovered that Cap'n Proto incorrectly handled negative Content-Length values or excessively large chunk sizes when processing HTTP messages. An attacker could possibly use these issues to cause HTTP messages to be interpreted inconsistently, resulting in HTTP request or response smuggling. (CVE-2026-32239, CVE-2026-32240)