Backport fix for CVE-2026-112398
Backport fix for CVE-2026-112393.
Backport fix for CVE-2026-112892.
Backport fix for CVE-2026-112398
Backport fix for CVE-2026-112393.
Backport updated Python distributions from Hatch 1.18.2
The latest managed CPython interpreters for Python 3.11 and later should now distrust the compromised eMudhra/emSign intermediate CA certificates, as described in the release notes for uv 0.13.5. Both hatch and uv use python-build-standalone for their managed Python interpreters.
Rebuild against the patched Go toolchain (golang 1.26.10) to pick up the fix for CVE-2026-111943. Go's crypto/x509 now rejects certificate chains that use any of eight compromised eMudhra intermediate CA public keys. There are no source changes to ignition itself -- this rebuild simply links the fixed standard library into the binary.
Update to Ignition 2.28.0, including Butane OpenShift 5.0 support. See https://github.com/coreos/ignition/issues/2336.
Rebuild against the patched Go toolchain (golang 1.26.10) to pick up the fix for CVE-2026-111943. Go's crypto/x509 now rejects certificate chains that use any of eight compromised eMudhra intermediate CA public keys. There are no source changes to ignition itself -- this rebuild simply links the fixed standard library into the binary.
Update to Ignition 2.28.0, including Butane OpenShift 5.0 support. See https://github.com/coreos/ignition/issues/2336.
HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length.
HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length.
HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length.
HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length.
Update WebKitGTK to version 2.54.2.
This brings a plethora of fixes for security issues since the last build (2.48.3) that was available for EPEL 10 (including ~300 issues with assigned CVEs), published in the following WebKit security advisories:
Release notes for versions since 2.48.3 leading up to 2.54.2:
Update WebKitGTK to version 2.54.2.
This brings a plethora of fixes for security issues since the last build (2.48.3) that was available for EPEL 10 (including ~300 issues with assigned CVEs), published in the following WebKit security advisories:
Release notes for versions since 2.48.3 leading up to 2.54.2:
Backport updated Python distributions from Hatch 1.18.2
The latest managed CPython interpreters for Python 3.11 and later should now distrust the compromised eMudhra/emSign intermediate CA certificates, as described in the release notes for uv 0.13.5. Both hatch and uv use python-build-standalone for their managed Python interpreters.
Update to 0.2.46
Fixes CVE-2026-110654
Update to 0.2.46
Fixes CVE-2026-110654
Update to 0.2.46
Fixes CVE-2026-110654
Update to 0.2.46
Fixes CVE-2026-110654
Update to 0.2.46
Fixes CVE-2026-110654
update to 1.102.5
update to 1.98.10, fix several cves
update to 1.102.5
update to 1.102.5
update to 1.98.10, fix several cves