Aggregator

FEDORA-2026-5ebb12f543 Packages in this update:

• python-nh3-0.3.6-1.fc44

Update description:

Update to 0.3.6; this includes an update to PyO3 0.29, which fixes RUSTSEC-2026-0176 and RUSTSEC-2026-0177.

It was discovered that Roundcube Webmail was prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document. An attacker could use this issue to execute arbitrary web script in the context of an affected user's session.

FEDORA-2026-d7dfd8e9ba Packages in this update:

• golang-github-openprinting-ipp-usb-0.9.34-1.fc43

Update description:

0.9.34 - security fixes for CVE-2026-27145

FEDORA-2026-93da8dcc2c Packages in this update:

• python-rpds-py-0.29.0-4.fc44

Update description:

Update to PyO3 0.29, with fixes for RUSTSEC-2026-0176 and RUSTSEC-2026-0177.

FEDORA-2026-5b642da12e Packages in this update:

• helm-4.2.2-1.fc44

Update description:

Update to 4.2.2

FEDORA-EPEL-2026-a087e5a86b Packages in this update:

• python-cramjam-2.11.0-8.el10_3

Update description:

Update to PyO3 0.29, with fixes for RUSTSEC-2026-0176 and RUSTSEC-2026-0177.

FEDORA-2026-75b3256794 Packages in this update:

• python-pillow-jxl-plugin-1.3.7-2.fc43

Update description:

Update to 1.3.7, and update PyO3 to 0.29, with fixes for RUSTSEC-2026-0176 and RUSTSEC-2026-0177.

FEDORA-2026-97d351d54e Packages in this update:

• betterleaks-1.6.0-1.fc43

Update description:

Update to 1.6.0

FEDORA-2026-6f573784e6 Packages in this update:

• betterleaks-1.6.0-1.fc44

Update description:

Update to 1.6.0

FEDORA-EPEL-2026-6e8fb57b18 Packages in this update:

• betterleaks-1.6.0-1.el10_3

Update description:

Update to 1.6.0

FEDORA-EPEL-2026-85e4f2d067 Packages in this update:

• betterleaks-1.6.0-1.el10_2

Update description:

Update to 1.6.0

FEDORA-EPEL-2026-1719298063 Packages in this update:

• betterleaks-1.6.0-1.el9

Update description:

Update to 1.6.0

Haruto Kimura discovered that NSS had incorrecty handled parsing PKCS#11 URI escape sequences. An attacker could possibly use this issue to cause NSS to crash, resulting in a denial of service, or obtain sensitive information.

It was discovered that SQLite incorrectly handled certain memory operations in the FTS5 full-text search extension. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code.

It was discovered that libheif incorrectly handled certain crafted HEIF files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-47178) It was discovered that libheif incorrectly validated offsets when decoding certain crafted HEIF files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-49271)

Version:next-20260629 (linux-next) Released:2026-06-29

FEDORA-2026-07ef57edc0 Packages in this update:

• python-cramjam-2.11.0-12.fc43

Update description:

Update to PyO3 0.29, with fixes for RUSTSEC-2026-0176 and RUSTSEC-2026-0177.

FEDORA-2026-ed6d2b806a Packages in this update:

• python-cramjam-2.11.0-12.fc44

Update description:

Update to PyO3 0.29, with fixes for RUSTSEC-2026-0176 and RUSTSEC-2026-0177.

FEDORA-2026-8c2e409ea5 Packages in this update:

• python-pillow-jxl-plugin-1.3.7-2.fc44

Update description:

Update to 1.3.7, and update PyO3 to 0.29, with fixes for RUSTSEC-2026-0176 and RUSTSEC-2026-0177.

FEDORA-2026-8a19b048cc Packages in this update:

• python-rignore-0.7.6-7.fc43

Update description:

Update to PyO3 0.29, with fixes for RUSTSEC-2026-0176 and RUSTSEC-2026-0177.