Aggregator

USN-9008-1: libnfs vulnerability

Ubuntu Security Advisories
3 hours 56 minutes ago
It was discovered that libnfs did not properly enforce the maximum size bound during ZDR decoding, resulting in an out-of-bounds write. An attacker could possibly use this issue to cause libnfs to crash, resulting in a denial of service, or execute arbitrary code.

USN-9007-1: FreeRDP vulnerabilities

Ubuntu Security Advisories
4 hours 4 minutes ago
It was discovered that FreeRDP contained multiple security issues. An attacker could possibly use these issues to obtain sensitive information, cause FreeRDP to crash, resulting in a denial of service, or execute arbitrary code.

USN-9001-2: ca-certificates update

Ubuntu Security Advisories
5 hours 23 minutes ago
USN-9001-1 fixed a vulnerability in ca-certificates, ca-certificates-java. This update provides the corresponding fix for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that the ca-certificates JKS integration was not working properly, resulting in CA certificates removed from the system bundle not being removed from the JKS keystore. This update corrects the feature and resyncs the keystore with the system CA certificates list.

python-httplib2-0.32.1-1.fc46

Fedora Security Advisories
15 hours 4 minutes ago
FEDORA-2026-c0681b6157 Packages in this update:
  • python-httplib2-0.32.1-1.fc46
Update description:

Automatic update for python-httplib2-0.32.1-1.fc46.

Changelog * Sun Nov 8 2026 Kevin Fenzi <kevin@scrye.com> - 0.32.1-1 - Update to 0.32.1. Fixes rhbz#2391904 - Drop cacert.txt doc file to avoid confusion ( rhbz#2563344 )

python-pymdown-extensions-12.3-1.fc46

Fedora Security Advisories
1 day 8 hours ago
FEDORA-2026-de1da3cf3b Packages in this update:
  • python-pymdown-extensions-12.3-1.fc46
Update description:

Automatic update for python-pymdown-extensions-12.3-1.fc46.

Changelog * Sun Nov 8 2026 Mattia Verga <mattia.verga@proton.me> - 12.3-1 - Update to 12.3 (Fedora#2383999) - Fix CVE-2026-61632 (Fedora#2512418) - Fix CVE-2026-67422 (Fedora#2512405)

maturin-1.16.0-1.el10_4 ruff-0.17.4-2.el10_4 rust-astral_async_zip-0.0.22-2.el10_4 rust-coreutils-0.7.0-13.el10_4 rust-lzma-rust2-0.25.0-1.el10_4 rust-mailparse-0.18.0-1.el10_4 rust-pyo3-introspection-0.30.1-1.el10_4 rust-python-pkginfo-0.7.0-1.el10_4…

Fedora Security Advisories
1 day 9 hours ago
FEDORA-EPEL-2026-14d0b10244 Packages in this update:
  • maturin-1.16.0-1.el10_4
  • ruff-0.17.4-2.el10_4
  • rust-astral_async_zip-0.0.22-2.el10_4
  • rust-coreutils-0.7.0-13.el10_4
  • rust-lzma-rust2-0.25.0-1.el10_4
  • rust-mailparse-0.18.0-1.el10_4
  • rust-pyo3-introspection-0.30.1-1.el10_4
  • rust-python-pkginfo-0.7.0-1.el10_4
  • rust-serde_json-1.0.154-1.el10_4
  • rust-zip-9.4.1-1.el10_4
Update description:

Update ruff to 0.17.4. Update pyo3-introspection to version 0.30.1. Update maturin to 1.16.0.

Update the zip crate to version 9, fixing RUSTSEC-2026-0367, RUSTSEC-2026-0368, and RUSTSEC-2026-0369. Rebuild various applications with the updated zip crate.

Update the serde_json crate to version 1.0.154: support preserve_order in no_std builds and report invalid UTF-8 at the first bad byte.

Update various other Rust crates, including updating lzma-rust2 to 0.25.0, python-pkginfo to 0.7.0, and mailparse to 0.18.0.

perl-Catalyst-Plugin-Authentication-0.10029-1.fc45

Fedora Security Advisories
1 day 10 hours ago
FEDORA-2026-345313f259 Packages in this update:
  • perl-Catalyst-Plugin-Authentication-0.10029-1.fc45
Update description:

Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier. This package updates the module to version 0.10029 that uses secure comparison for the legacy verifying.

perl-Catalyst-Plugin-Authentication-0.10029-1.fc44

Fedora Security Advisories
1 day 10 hours ago
FEDORA-2026-a6a25dc737 Packages in this update:
  • perl-Catalyst-Plugin-Authentication-0.10029-1.fc44
Update description:

Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier. This package updates the module to version 0.10029 that uses secure comparison for the legacy verifying.