Aggregator

• cifs-utils-7.9-2.fc45

Fix for CVE-2026-104715.

• cifs-utils-7.9-2.fc44

Fix for CVE-2026-104715.

• cifs-utils-7.7-2.fc43

Fix for CVE-2026-104715.

• jfrog-cli-2.127.0-1.el10_2

Update to 2.127.0.

• jfrog-cli-2.127.0-1.el10_3

Update to 2.127.0.

• jfrog-cli-2.127.0-1.el10_4

Update to 2.127.0.

• jfrog-cli-2.127.0-1.fc45

Update to 2.127.0.

• jfrog-cli-2.127.0-1.el9

Update to 2.127.0.

• jfrog-cli-2.127.0-1.fc44

Update to 2.127.0.

• bind-9.18.51^git20261003.d0a87358-11.fc46
• bind-dyndb-ldap-11.11-18.fc46

Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git branch bind-9.18.

• CVE-2026-75029 Discard repeated SOA, CNAME, and DNAME records when parsing DNS messages
• CVE-2026-19666 DNS64 with break-dnssec could cause an assertion failure
• CVE-2026-19662 Prevent resolver crash with cached DNSSEC proofs
• CVE-2026-19941 Prevent forged DNSSEC-validated NXDOMAIN responses
• CVE-2026-78301 Out-of-zone records in a zone database could be served as authoritative
• CVE-2026-81563 Following HTTPS/SVCB aliases could leak resolver cache memory
• CVE-2026-80274 Crash on wildcard answers carrying both NSEC and NSEC3 proofs
• CVE-2026-19033 Require a TSIG on every message of incoming zone transfers
• CVE-2026-81736 Cached HTTPS/SVCB aliases could exhaust resolver CPU
• CVE-2026-19667 Reject negative cache records that do not fit in a dns_rdata_t

• bind-9.18.51^git20261003.d0a87358-11.fc45
• bind-dyndb-ldap-11.11-18.fc45

Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git branch bind-9.18.

• CVE-2026-75029 Discard repeated SOA, CNAME, and DNAME records when parsing DNS messages
• CVE-2026-19666 DNS64 with break-dnssec could cause an assertion failure
• CVE-2026-19662 Prevent resolver crash with cached DNSSEC proofs
• CVE-2026-19941 Prevent forged DNSSEC-validated NXDOMAIN responses
• CVE-2026-78301 Out-of-zone records in a zone database could be served as authoritative
• CVE-2026-81563 Following HTTPS/SVCB aliases could leak resolver cache memory
• CVE-2026-80274 Crash on wildcard answers carrying both NSEC and NSEC3 proofs
• CVE-2026-19033 Require a TSIG on every message of incoming zone transfers
• CVE-2026-81736 Cached HTTPS/SVCB aliases could exhaust resolver CPU
• CVE-2026-19667 Reject negative cache records that do not fit in a dns_rdata_t

• dotnet8.0-8.0.132-1.fc43

Update to .NET SDK 8.0.132 and Runtime 8.0.32

Fixes: CVE-2026-105016,CVE-2026-58280,CVE-2026-66822,CVE-2026-69651,CVE-2026-70007,CVE-2026-70035,CVE-2026-70159,CVE-2026-70162,CVE-2026-70174,CVE-2026-70175,CVE-2026-70179,CVE-2026-70181,CVE-2026-70183,CVE-2026-70186,CVE-2026-70188,CVE-2026-70196,CVE-2026-70197,CVE-2026-83520,CVE-2026-84008,CVE-2026-85363,CVE-2026-85790,CVE-2026-87697,CVE-2026-88092,CVE-2026-92707,CVE-2026-96222,CVE-2026-96224,CVE-2026-96225,CVE-2026-96229,CVE-2026-96230,CVE-2026-96231,CVE-2026-96232,CVE-2026-96233,CVE-2026-96234,CVE-2026-96235,CVE-2026-96236,CVE-2026-96237,CVE-2026-96238,CVE-2026-96958,CVE-2026-96959,CVE-2026-96960

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.32/8.0.132.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.32/8.0.32.md

• dotnet8.0-8.0.132-1.fc44

Update to .NET SDK 8.0.132 and Runtime 8.0.32

Fixes: CVE-2026-105016,CVE-2026-58280,CVE-2026-66822,CVE-2026-69651,CVE-2026-70007,CVE-2026-70035,CVE-2026-70159,CVE-2026-70162,CVE-2026-70174,CVE-2026-70175,CVE-2026-70179,CVE-2026-70181,CVE-2026-70183,CVE-2026-70186,CVE-2026-70188,CVE-2026-70196,CVE-2026-70197,CVE-2026-83520,CVE-2026-84008,CVE-2026-85363,CVE-2026-85790,CVE-2026-87697,CVE-2026-88092,CVE-2026-92707,CVE-2026-96222,CVE-2026-96224,CVE-2026-96225,CVE-2026-96229,CVE-2026-96230,CVE-2026-96231,CVE-2026-96232,CVE-2026-96233,CVE-2026-96234,CVE-2026-96235,CVE-2026-96236,CVE-2026-96237,CVE-2026-96238,CVE-2026-96958,CVE-2026-96959,CVE-2026-96960

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.32/8.0.132.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.32/8.0.32.md

• ghostscript-10.05.1-7.fc43

CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter

CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free bypass via Type 5 shading OOB write and procedure-stream use-after-free

CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data

• ghostscript-10.06.0-3.fc44

CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter

CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free bypass via Type 5 shading OOB write and procedure-stream use-after-free

CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data

• ghostscript-10.07.1-3.fc45

CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter

CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free bypass via Type 5 shading OOB write and procedure-stream use-after-free

CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data

• bind-9.18.51^git20261003.d0a87358-2.fc44
• bind-dyndb-ldap-11.11-17.fc44

Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git branch bind-9.18.

• CVE-2026-75029 Discard repeated SOA, CNAME, and DNAME records when parsing DNS messages
• CVE-2026-19666 DNS64 with break-dnssec could cause an assertion failure
• CVE-2026-19662 Prevent resolver crash with cached DNSSEC proofs
• CVE-2026-19941 Prevent forged DNSSEC-validated NXDOMAIN responses
• CVE-2026-78301 Out-of-zone records in a zone database could be served as authoritative
• CVE-2026-81563 Following HTTPS/SVCB aliases could leak resolver cache memory
• CVE-2026-80274 Crash on wildcard answers carrying both NSEC and NSEC3 proofs
• CVE-2026-19033 Require a TSIG on every message of incoming zone transfers
• CVE-2026-81736 Cached HTTPS/SVCB aliases could exhaust resolver CPU
• CVE-2026-19667 Reject negative cache records that do not fit in a dns_rdata_t

• bind-9.18.51^git20261003.d0a87358-2.fc43
• bind-dyndb-ldap-11.11-15.fc43

Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git branch bind-9.18.

• CVE-2026-75029 Discard repeated SOA, CNAME, and DNAME records when parsing DNS messages
• CVE-2026-19666 DNS64 with break-dnssec could cause an assertion failure
• CVE-2026-19662 Prevent resolver crash with cached DNSSEC proofs
• CVE-2026-19941 Prevent forged DNSSEC-validated NXDOMAIN responses
• CVE-2026-78301 Out-of-zone records in a zone database could be served as authoritative
• CVE-2026-81563 Following HTTPS/SVCB aliases could leak resolver cache memory
• CVE-2026-80274 Crash on wildcard answers carrying both NSEC and NSEC3 proofs
• CVE-2026-19033 Require a TSIG on every message of incoming zone transfers
• CVE-2026-81736 Cached HTTPS/SVCB aliases could exhaust resolver CPU
• CVE-2026-19667 Reject negative cache records that do not fit in a dns_rdata_t

• perl-Badger-0.16-2.fc43
• perl-CLI-Simple-2.2.5-1.fc43
• perl-CSS-Inliner-4027-1.fc43
• perl-Encoding-FixLatin-1.04-2.fc43
• perl-HTML-Query-0.09-2.fc43
• perl-Markdown-Render-2.0.4-1.fc43
• perl-Text-Markdown-Discount-0.18-2.fc43
• rt-5.0.10-1.fc43

Update to rt 5.0.10

Fixes CVE-2025-61873 CVE-2026-41075 CVE-2026-41076 CVE-2026-6841 CVE-2026-44231 CVE-2026-44229 CVE-2026-44230