Aggregator

incron-0.5.12-31.el9

Fedora Security Advisories
2 hours 40 minutes ago
FEDORA-EPEL-2026-13e46770aa Packages in this update:
  • incron-0.5.12-31.el9
Update description:

Fix to disallow non root users from passing their own config file.

incron-0.5.12-31.el8

Fedora Security Advisories
2 hours 40 minutes ago
FEDORA-EPEL-2026-28046962ee Packages in this update:
  • incron-0.5.12-31.el8
Update description:

Fix to disallow non root users from passing their own config file.

incron-0.5.12-31.fc46

Fedora Security Advisories
3 hours 9 minutes ago
FEDORA-2026-3f54d4b3cd Packages in this update:
  • incron-0.5.12-31.fc46
Update description:

Automatic update for incron-0.5.12-31.fc46.

Changelog * Tue Nov 10 2026 Kevin Fenzi <kevin@scrye.com> - 0.5.12-31 - Add Patch to stop non root users using their own config. Fixes rhbz#2568586

et-6.2.11-5.fc45

Fedora Security Advisories
6 hours 6 minutes ago
FEDORA-2026-67db247b7f Packages in this update:
  • et-6.2.11-5.fc45
Update description:

Security fixes from et 7.1.x, backported to 6.2.11, and telemetry disabled.

Security fixes (backported from et 7.1.0 and 7.1.1, one commit per upstream fix; see https://github.com/MisterTea/EternalTerminal/issues/923):

  • Pre-authentication denial of service: stuck or silent peers, slow reconnects and accept() resource exhaustion could block or crash etserver for every user
  • etserver and the router no longer abort on malformed packets or registrations
  • Router session ownership is taken from the kernel's peer credentials, and both ends of the Unix HTM control socket are authenticated
  • etserver no longer does root file operations or connections on Unix socket paths chosen by the client

Telemetry disabled (CVE-2023-23558):

et is now built with telemetry disabled on all architectures. This removes the bundled sentry-native and its fixed paths in /tmp, and drops the libcurl dependency. The default /etc/et.cfg now says telemetry = false. An existing et.cfg that still says telemetry = true is harmless: the setting does nothing in this build.

Packaging: the bundled() Provides and License: now match the bundled libraries actually shipped.

Note: this update stays on 6.2.11, which keeps the 6.x command-line options. et 7.x changes several short options to match OpenSSH, so it is only in Rawhide.

et-6.2.11-5.fc44

Fedora Security Advisories
6 hours 7 minutes ago
FEDORA-2026-8272c43689 Packages in this update:
  • et-6.2.11-5.fc44
Update description:

Security fixes from et 7.1.x, backported to 6.2.11, and telemetry disabled.

Security fixes (backported from et 7.1.0 and 7.1.1, one commit per upstream fix; see https://github.com/MisterTea/EternalTerminal/issues/923):

  • Pre-authentication denial of service: stuck or silent peers, slow reconnects and accept() resource exhaustion could block or crash etserver for every user
  • etserver and the router no longer abort on malformed packets or registrations
  • Router session ownership is taken from the kernel's peer credentials, and both ends of the Unix HTM control socket are authenticated
  • etserver no longer does root file operations or connections on Unix socket paths chosen by the client

Telemetry disabled (CVE-2023-23558):

et is now built with telemetry disabled on all architectures. This removes the bundled sentry-native and its fixed paths in /tmp, and drops the libcurl dependency. The default /etc/et.cfg now says telemetry = false. An existing et.cfg that still says telemetry = true is harmless: the setting does nothing in this build.

Packaging: the bundled() Provides and License: now match the bundled libraries actually shipped.

Note: this update stays on 6.2.11, which keeps the 6.x command-line options. et 7.x changes several short options to match OpenSSH, so it is only in Rawhide.

et-6.2.11-5.fc43

Fedora Security Advisories
6 hours 8 minutes ago
FEDORA-2026-666b7444a4 Packages in this update:
  • et-6.2.11-5.fc43
Update description:

Security fixes from et 7.1.x, backported to 6.2.11, and telemetry disabled.

Security fixes (backported from et 7.1.0 and 7.1.1, one commit per upstream fix; see https://github.com/MisterTea/EternalTerminal/issues/923):

  • Pre-authentication denial of service: stuck or silent peers, slow reconnects and accept() resource exhaustion could block or crash etserver for every user
  • etserver and the router no longer abort on malformed packets or registrations
  • Router session ownership is taken from the kernel's peer credentials, and both ends of the Unix HTM control socket are authenticated
  • etserver no longer does root file operations or connections on Unix socket paths chosen by the client

Telemetry disabled (CVE-2023-23558):

et is now built with telemetry disabled on all architectures. This removes the bundled sentry-native and its fixed paths in /tmp, and drops the libcurl dependency. The default /etc/et.cfg now says telemetry = false. An existing et.cfg that still says telemetry = true is harmless: the setting does nothing in this build.

Packaging: the bundled() Provides and License: now match the bundled libraries actually shipped.

Note: this update stays on 6.2.11, which keeps the 6.x command-line options. et 7.x changes several short options to match OpenSSH, so it is only in Rawhide.

et-6.2.11-5.el9 simpleini-4.25-1.el9

Fedora Security Advisories
6 hours 11 minutes ago
FEDORA-EPEL-2026-b1d6daf614 Packages in this update:
  • et-6.2.11-5.el9
  • simpleini-4.25-1.el9
Update description:

Update et from 6.2.8 to 6.2.11, with security fixes from 7.1.x backported, and add simpleini, which et now builds against.

Security fixes (backported from et 7.1.0 and 7.1.1, one commit per upstream fix; see https://github.com/MisterTea/EternalTerminal/issues/923):

  • Pre-authentication denial of service: stuck or silent peers, slow reconnects and accept() resource exhaustion could block or crash etserver for every user
  • etserver and the router no longer abort on malformed packets or registrations
  • Router session ownership is taken from the kernel's peer credentials, and both ends of the Unix HTM control socket are authenticated
  • etserver no longer does root file operations or connections on Unix socket paths chosen by the client

Telemetry disabled (CVE-2023-23558):

et is now built with telemetry disabled on all architectures. This removes the bundled sentry-native and its fixed paths in /tmp, and drops the libcurl dependency. The default /etc/et.cfg now says telemetry = false. An existing et.cfg that still says telemetry = true is harmless: the setting does nothing in this build.

Other changes since 6.2.8 include a 30 s socket timeout, fixes for jumphost user names, and reverse tunnels bound to localhost. Full list: https://github.com/MisterTea/EternalTerminal/compare/et-v6.2.8...et-v6.2.11

Note: et 6.2.11 keeps the 6.x command-line options. The 7.x series changes several short options to match OpenSSH, so it is not being pushed to EPEL 9.

xen-4.21.2-6.fc44

Fedora Security Advisories
8 hours 30 minutes ago
FEDORA-2026-d9acb64367 Packages in this update:
  • xen-4.21.2-6.fc44
Update description:

AMD IOMMU Out-of-Bounds Device Table Read [XSA-524, CVE-2024-21963] x86: Transient Scheduler Attacks (update) [XSA-525, CVE-2024-36350, CVE-2024-36357, CVE-2026-0004]

proftpd-1.3.6e-12.el8

Fedora Security Advisories
10 hours 6 minutes ago
FEDORA-EPEL-2026-f318914cc8 Packages in this update:
  • proftpd-1.3.6e-12.el8
Update description:

This update addresses a number of security issues, none of which affect modules enabled by default.

USN-9062-1: SNMPTT vulnerability

Ubuntu Security Advisories
10 hours 20 minutes ago
It was discovered that SNMPTT did not properly sanitize trap data passed to commands run through the EXEC, PREEXEC, and unknown_trap_exec options. A remote attacker could possibly use this issue to execute arbitrary shell commands.