Aggregator

FEDORA-EPEL-2026-a80cc1ccf4 Packages in this update:

• openbao-2.5.5-1.el10_2

Update description:

Update to upstream 2.5.5. Also fixes CVE-2026-55770, CVE-2026-55774, CVE-2026-55775, and CVE-2026-55776.

FEDORA-EPEL-2026-33e6f5bc0f Packages in this update:

• openbao-2.5.5-1.el10_3

Update description:

Update to upstream 2.5.5. Also fixes CVE-2026-55770, CVE-2026-55774, CVE-2026-55775, and CVE-2026-55776.

FEDORA-2026-da7e499416 Packages in this update:

• openbao-2.5.5-1.fc43

Update description:

Update to upstream 2.5.5. Also fixes CVE-2026-55770, CVE-2026-55774, CVE-2026-55775, and CVE-2026-55776.

FEDORA-EPEL-2026-68c29512d7 Packages in this update:

• openbao-2.5.5-1.el9

Update description:

Update to upstream 2.5.5. Also fixes CVE-2026-55770, CVE-2026-55774, CVE-2026-55775, and CVE-2026-55776.

FEDORA-EPEL-2026-c797cdf471 Packages in this update:

• openbao-2.5.5-1.el8

Update description:

Update to upstream 2.5.5. Also fixes CVE-2026-55770, CVE-2026-55774, CVE-2026-55775, and CVE-2026-55776.

FEDORA-2026-84ff0044db Packages in this update:

• openbao-2.5.5-1.fc44

Update description:

Update to upstream 2.5.5. Also fixes CVE-2026-55770, CVE-2026-55774, CVE-2026-55775, and CVE-2026-55776.

FEDORA-EPEL-2026-1402b5bee1 Packages in this update:

• python-postorius-1.3.8-9.el9

Update description:

Backport unreleased fix for cross-side scripting via unescaped HTML

FEDORA-2026-ef34f94241 Packages in this update:

• python-postorius-1.3.13-1.fc44

Update description:

Update to 1.3.13 (minor packaging changes); backport unreleased fix for cross-side scripting via unescaped HTML

FEDORA-2026-c2b475c5f1 Packages in this update:

• python-postorius-1.3.13-1.fc43

Update description:

Update to 1.3.13 (minor packaging changes); backport unreleased fix for cross-side scripting via unescaped HTML

It was discovered that kitty incorrectly handled certain image data. An attacker able to write to the terminal's input could possibly use this issue to cause kitty to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-33633) It was discovered that kitty incorrectly handled certain graphics commands. An attacker able to write escape sequences to a kitty terminal could possibly use this issue to cause kitty to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-33642)

FEDORA-2026-b67348bd21 Packages in this update:

• maradns-3.5.0037-1.fc45

Update description:

Automatic update for maradns-3.5.0037-1.fc45.

Changelog * Mon Jun 15 2026 Tomasz Torcz <ttorcz@fedoraproject.org> - 3.5.0037-1 - update to 3.5.0037, fixing DNS-over-TCP bug (rhbz#2488786)

FEDORA-2026-79d9e34e36 Packages in this update:

• liferea-1.16.12-1.fc44

Update description:

Update to 1.16.12

Update to 1.16.11

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privileges, or possibly escape a container.

FEDORA-2026-458669c813 Packages in this update:

• python-jupyter-server-2.19.0-2.fc44

Update description:

New version of jupyter-server fixing various security vulnerabilities.

FEDORA-2026-9536c7cb79 Packages in this update:

• python-jupyter-server-2.19.0-2.fc43

Update description:

New version of jupyter-server fixing various security vulnerabilities.

It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Packet sockets; (CVE-2026-31504, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078, CVE-2026-46028)

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystem: - Packet sockets; (CVE-2026-31504)

FEDORA-2026-4084e20f7e Packages in this update:

• krita-6.0.2.1-1.fc45

Update description:

Automatic update for krita-6.0.2.1-1.fc45.

Changelog * Wed Jun 17 2026 Than Ngo <than@redhat.com> - 6.0.2.1-1 - Fix rhbz#2481429, Update to 6.0.2.1 - Fix rhbz#2476570, CVE-2026-42144: integer overflow in PNM size check bypasses memory guard