Aggregator

FEDORA-2026-c248414214 Packages in this update:

• pgadmin4-9.16-1.fc44

Update description:

Update to pgadmin-9.16.

FEDORA-2026-5938be3b09 Packages in this update:

• pgadmin4-9.16-1.fc43

Update description:

Update to pgadmin-9.16.

FEDORA-2026-3b027683d8 Packages in this update:

• python-mistune-3.2.1-1.fc44

Update description:

Security fix for CVE-2026-44898 by updating to 3.2.1.

FEDORA-2026-c52d83db89 Packages in this update:

• python-mistune-3.2.1-1.fc43

Update description:

Security fix for CVE-2026-44898 by updating to 3.2.1.

FEDORA-2026-03f87de373 Packages in this update:

• yt-dlp-2026.06.09-1.fc43

Update description:

• Update to 2026.06.09. Fixes rhbz#2487407.
• Mitigates CVE-2026-50019, CVE-2026-50023, CVE-2026-50574

FEDORA-2026-bb702c613b Packages in this update:

• yt-dlp-2026.06.09-1.fc44

Update description:

• Update to 2026.06.09. Fixes rhbz#2487407.
• Mitigates CVE-2026-50019, CVE-2026-50023, CVE-2026-50574

FEDORA-EPEL-2026-20c6017771 Packages in this update:

• haveged-1.9.23-2.el8

Update description:

Update to 1.9.23-2: - Add SELinux policy module to allow semaphore creation in /dev/shm - Add rpminspect.yaml to waive pre-existing annocheck false positive

Security fixes in 1.9.23-1: - Use O_EXCL with sem_open to prevent semaphore pre-planting attacks - Fix OOB memory access in safein()/safeout() on socket errors - Reject command socket connections from different user namespaces - Use O_NOFOLLOW for PID file to prevent symlink attacks - Open random device with O_CLOEXEC, restrict semaphore to 0600 - Fix stale semaphore recovery after SIGKILL - Fix compilation when NO_COMMAND_MODE is defined

Update to 1.9.23 — security hardening: - Use O_EXCL with sem_open to prevent semaphore pre-planting attacks - Fix OOB memory access in safein()/safeout() on socket errors - Reject command socket connections from different user namespaces - Use O_NOFOLLOW for PID file to prevent symlink attacks - Open random device with O_CLOEXEC, restrict semaphore to 0600 - Fix stale semaphore recovery after SIGKILL - Fix compilation when NO_COMMAND_MODE is defined

FEDORA-EPEL-2026-94647282a7 Packages in this update:

• haveged-1.9.23-2.el10_3

Update description:

Update to 1.9.23-2: - Add SELinux policy module to allow semaphore creation in /dev/shm - Add rpminspect.yaml to waive pre-existing annocheck false positive

Security fixes in 1.9.23-1: - Use O_EXCL with sem_open to prevent semaphore pre-planting attacks - Fix OOB memory access in safein()/safeout() on socket errors - Reject command socket connections from different user namespaces - Use O_NOFOLLOW for PID file to prevent symlink attacks - Open random device with O_CLOEXEC, restrict semaphore to 0600 - Fix stale semaphore recovery after SIGKILL - Fix compilation when NO_COMMAND_MODE is defined

Update to 1.9.23 — security hardening: - Use O_EXCL with sem_open to prevent semaphore pre-planting attacks - Fix OOB memory access in safein()/safeout() on socket errors - Reject command socket connections from different user namespaces - Use O_NOFOLLOW for PID file to prevent symlink attacks - Open random device with O_CLOEXEC, restrict semaphore to 0600 - Fix stale semaphore recovery after SIGKILL - Fix compilation when NO_COMMAND_MODE is defined

FEDORA-EPEL-2026-0a509be2eb Packages in this update:

• haveged-1.9.23-2.el10_2

Update description:

Update to 1.9.23-2: - Add SELinux policy module to allow semaphore creation in /dev/shm - Add rpminspect.yaml to waive pre-existing annocheck false positive

Security fixes in 1.9.23-1: - Use O_EXCL with sem_open to prevent semaphore pre-planting attacks - Fix OOB memory access in safein()/safeout() on socket errors - Reject command socket connections from different user namespaces - Use O_NOFOLLOW for PID file to prevent symlink attacks - Open random device with O_CLOEXEC, restrict semaphore to 0600 - Fix stale semaphore recovery after SIGKILL - Fix compilation when NO_COMMAND_MODE is defined

Update to 1.9.23 — security hardening: - Use O_EXCL with sem_open to prevent semaphore pre-planting attacks - Fix OOB memory access in safein()/safeout() on socket errors - Reject command socket connections from different user namespaces - Use O_NOFOLLOW for PID file to prevent symlink attacks - Open random device with O_CLOEXEC, restrict semaphore to 0600 - Fix stale semaphore recovery after SIGKILL - Fix compilation when NO_COMMAND_MODE is defined

FEDORA-EPEL-2026-ca98e0cf9b Packages in this update:

• haveged-1.9.23-2.el9

Update description:

Update to 1.9.23-2: - Add SELinux policy module to allow semaphore creation in /dev/shm - Add rpminspect.yaml to waive pre-existing annocheck false positive

Security fixes in 1.9.23-1: - Use O_EXCL with sem_open to prevent semaphore pre-planting attacks - Fix OOB memory access in safein()/safeout() on socket errors - Reject command socket connections from different user namespaces - Use O_NOFOLLOW for PID file to prevent symlink attacks - Open random device with O_CLOEXEC, restrict semaphore to 0600 - Fix stale semaphore recovery after SIGKILL - Fix compilation when NO_COMMAND_MODE is defined

Update to 1.9.23 — security hardening: - Use O_EXCL with sem_open to prevent semaphore pre-planting attacks - Fix OOB memory access in safein()/safeout() on socket errors - Reject command socket connections from different user namespaces - Use O_NOFOLLOW for PID file to prevent symlink attacks - Open random device with O_CLOEXEC, restrict semaphore to 0600 - Fix stale semaphore recovery after SIGKILL - Fix compilation when NO_COMMAND_MODE is defined

FEDORA-2026-f59528a390 Packages in this update:

• haveged-1.9.23-2.fc43

Update description:

Update to 1.9.23-2: - Add SELinux policy module to allow semaphore creation in /dev/shm - Add rpminspect.yaml to waive pre-existing annocheck false positive

Security fixes in 1.9.23-1: - Use O_EXCL with sem_open to prevent semaphore pre-planting attacks - Fix OOB memory access in safein()/safeout() on socket errors - Reject command socket connections from different user namespaces - Use O_NOFOLLOW for PID file to prevent symlink attacks - Open random device with O_CLOEXEC, restrict semaphore to 0600 - Fix stale semaphore recovery after SIGKILL - Fix compilation when NO_COMMAND_MODE is defined

Update to 1.9.23 — security hardening: - Use O_EXCL with sem_open to prevent semaphore pre-planting attacks - Fix OOB memory access in safein()/safeout() on socket errors - Reject command socket connections from different user namespaces - Use O_NOFOLLOW for PID file to prevent symlink attacks - Open random device with O_CLOEXEC, restrict semaphore to 0600 - Fix stale semaphore recovery after SIGKILL - Fix compilation when NO_COMMAND_MODE is defined

FEDORA-2026-7fc612a04e Packages in this update:

• haveged-1.9.23-3.fc44

Update description:

Update to 1.9.23-2: - Add SELinux policy module to allow semaphore creation in /dev/shm - Add rpminspect.yaml to waive pre-existing annocheck false positive

Security fixes in 1.9.23-1: - Use O_EXCL with sem_open to prevent semaphore pre-planting attacks - Fix OOB memory access in safein()/safeout() on socket errors - Reject command socket connections from different user namespaces - Use O_NOFOLLOW for PID file to prevent symlink attacks - Open random device with O_CLOEXEC, restrict semaphore to 0600 - Fix stale semaphore recovery after SIGKILL - Fix compilation when NO_COMMAND_MODE is defined

FEDORA-2026-2c31df81dc Packages in this update:

• pacemaker-3.0.2-3.fc44

Update description: * Wed Jun 17 2026 Klaus Wenninger <klaus.wenninger@aon.at> - 3.0.2-3 - fix CVE-2026-10649: Fix integer overflows in remote message code

FEDORA-EPEL-2026-8718e36cc0 Packages in this update:

• tinyproxy-1.11.2-8.el10_3

Update description:

Backport upstream fixes for CVE-2026-54387 and CVE-2026-54388.

FEDORA-EPEL-2026-7a8fdd2831 Packages in this update:

• tinyproxy-1.11.2-8.el10_2

Update description:

Backport upstream fixes for CVE-2026-54387 and CVE-2026-54388.

FEDORA-EPEL-2026-00b57a4454 Packages in this update:

• tinyproxy-1.11.2-8.el8

Update description:

Backport upstream fixes for CVE-2026-54387 and CVE-2026-54388.

FEDORA-EPEL-2026-e8f116233b Packages in this update:

• tinyproxy-1.11.2-8.el9

Update description:

Backport upstream fixes for CVE-2026-54387 and CVE-2026-54388.

FEDORA-2026-efbe094630 Packages in this update:

• tinyproxy-1.11.2-8.fc44

Update description:

Backport upstream fixes for CVE-2026-54387 and CVE-2026-54388.

FEDORA-2026-77f1ca9c8f Packages in this update:

• tinyproxy-1.11.2-8.fc43

Update description:

Backport upstream fixes for CVE-2026-54387 and CVE-2026-54388.

FEDORA-2026-182b5d52c9 Packages in this update:

• python-mistune-3.2.1-1.fc45

Update description:

Automatic update for python-mistune-3.2.1-1.fc45.

Changelog * Thu Jun 18 2026 Miro Hrončok <miro@hroncok.cz> - 3.2.1-1 - Update to 3.2.1 - Security fix for CVE-2026-44898 - Fixes: rhbz#2424578 - Fixes: rhbz#2489782