Aggregator

librabbitmq-0.18.1-1.fc44

2 hours 39 minutes ago
FEDORA-2026-5cb9d320c3 Packages in this update:
  • librabbitmq-0.18.1-1.fc44
Update description: Version 0.18.1 - 2026-10-12 Security
  • Fix heap buffer over-read in amqp_read_message when a content header frame with a non-basic class id is received; AMQP_STATUS_BAD_AMQP_DATA is now returned (found by OSS-Fuzz)
Added
  • Add fuzz_read_message OSS-Fuzz fuzzer target for socket message reading

librabbitmq-0.18.1-1.fc43

2 hours 39 minutes ago
FEDORA-2026-291af8cc7a Packages in this update:
  • librabbitmq-0.18.1-1.fc43
Update description: Version 0.18.1 - 2026-10-12 Security
  • Fix heap buffer over-read in amqp_read_message when a content header frame with a non-basic class id is received; AMQP_STATUS_BAD_AMQP_DATA is now returned (found by OSS-Fuzz)
Added
  • Add fuzz_read_message OSS-Fuzz fuzzer target for socket message reading

librabbitmq-0.18.1-1.fc45

2 hours 39 minutes ago
FEDORA-2026-ba337bb099 Packages in this update:
  • librabbitmq-0.18.1-1.fc45
Update description: Version 0.18.1 - 2026-10-12 Security
  • Fix heap buffer over-read in amqp_read_message when a content header frame with a non-basic class id is received; AMQP_STATUS_BAD_AMQP_DATA is now returned (found by OSS-Fuzz)
Added
  • Add fuzz_read_message OSS-Fuzz fuzzer target for socket message reading

USN-8915-1: FFmpeg vulnerabilities

9 hours 9 minutes ago
Momoko Shiraishi discovered that FFmpeg did not correctly handle certain memory operations. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-30754) It was discovered that FFmpeg did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-38344) It was discovered that FFmpeg did not correctly handle certain arithmetic operations. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-38346, CVE-2026-38348, CVE-2026-38349) It was discovered that FFmpeg did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-38347) It was discovered that FFmpeg did not correctly handle certain arithmetic operations. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-38350) Joshua Rogers discovered that FFmpeg did not correctly handle certain memory operations. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-75147)

chromium-155.0.8059.39-1.el10_3

16 hours 11 minutes ago
FEDORA-EPEL-2026-e556a969dd Packages in this update:
  • chromium-155.0.8059.39-1.el10_3
Update description:

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

chromium-155.0.8059.39-1.el10_4

16 hours 11 minutes ago
FEDORA-EPEL-2026-4f0eafd918 Packages in this update:
  • chromium-155.0.8059.39-1.el10_4
Update description:

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

chromium-155.0.8059.39-1.fc43

16 hours 11 minutes ago
FEDORA-2026-f4734755e7 Packages in this update:
  • chromium-155.0.8059.39-1.fc43
Update description:

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

chromium-155.0.8059.39-1.fc44

16 hours 11 minutes ago
FEDORA-2026-d94b4ed6e7 Packages in this update:
  • chromium-155.0.8059.39-1.fc44
Update description:

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

chromium-155.0.8059.39-1.el9

16 hours 11 minutes ago
FEDORA-EPEL-2026-36c9d3c26d Packages in this update:
  • chromium-155.0.8059.39-1.el9
Update description:

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

chromium-155.0.8059.39-1.el10_2

16 hours 11 minutes ago
FEDORA-EPEL-2026-0f504f9d83 Packages in this update:
  • chromium-155.0.8059.39-1.el10_2
Update description:

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

chromium-155.0.8059.39-1.fc45

16 hours 11 minutes ago
FEDORA-2026-87586557c0 Packages in this update:
  • chromium-155.0.8059.39-1.fc45
Update description:

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

USN-8914-1: Google Guest Agent, Google OS Config Agent vulnerability

16 hours 59 minutes ago
It was discovered that the Go x/net/idna package, vendored in Google Guest Agent and Google OS Config Agent, incorrectly accepted Punycode-encoded labels that decoded to ASCII-only labels when processing internationalized domain names. A remote attacker could possibly use this issue to bypass hostname-based access controls and escalate privileges.

USN-8913-1: libx11 vulnerabilities

19 hours 30 minutes ago
Adam Bedard discovered that libx11 incorrectly handled certain XKB keyboard map replies. If a user were tricked into connecting to a malicious X server, a remote attacker could possibly use this issue to cause libx11 to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-88806) It was discovered that libx11 incorrectly handled certain X Input Method (XIM) messages. If a user were tricked into connecting to a malicious X server, a remote attacker could possibly use these issues to cause libx11 to crash, resulting in a denial of service. (CVE-2026-94283, CVE-2026-94284) It was discovered that libx11 incorrectly handled converting certain multibyte text. An attacker could possibly use this issue to cause libx11 to crash, resulting in a denial of service. (CVE-2026-94285)

curl-8.18.0-14.fc44

20 hours 37 minutes ago
FEDORA-2026-a06b828d65 Packages in this update:
  • curl-8.18.0-14.fc44
Update description:
  • Fix incomplete mTLS config matching in conn reuse (CVE-2026-8932)
  • Fix OpenLDAP SASL authentication bypass (CVE-2026-13608)
  • Fix OpenSSL pinning bypass (CVE-2026-80230)