Aggregator
blender-5.2.4-1.fc44
FEDORA-2026-490a0000af
Packages in this update:
- blender-5.2.4-1.fc44
Update to upstream 5.2.4 LTS
mimedefang-3.7.3-1.fc44
FEDORA-2026-33df41eb7a
Packages in this update:
- mimedefang-3.7.3-1.fc44
- fix build on CPAN
- CVE-2026-120211 - PID file symlink following (privileged file overwrite).
- CVE-2026-120304 - anonymize_uri() regular expression denial of service.
- CVE-2026-120305 - md_spf_verify()/md_authres() regular expression denial of service.
- Header injection hardening: header names and values that the filter returns are now validated before they are passed to the MTA. Invalid header names are logged and dropped.
- MTA-STS (RFC 8461): policy fetches now allow HTTPS only, follow no redirects and stop at 64 KB and the domain is validated before it is used in the policy URL.
- re_match_in_7zip_directory: correctly parses listings of solid archives, skips directory entries and no longer hangs on archives with encrypted headers.
- re_match_in_rar_directory: the file list is now read up to the closing separator.
- Mail::MIMEDefang::Async: faster parsing of the SpamAssassin X-Spam-Status header.
- Mail::MIMEDefang::Net: improve ipv6 checks.
mimedefang-3.7.3-1.el10_3
FEDORA-EPEL-2026-c7924505e9
Packages in this update:
- mimedefang-3.7.3-1.el10_3
- fix build on CPAN
- CVE-2026-120211 - PID file symlink following (privileged file overwrite).
- CVE-2026-120304 - anonymize_uri() regular expression denial of service.
- CVE-2026-120305 - md_spf_verify()/md_authres() regular expression denial of service.
- Header injection hardening: header names and values that the filter returns are now validated before they are passed to the MTA. Invalid header names are logged and dropped.
- MTA-STS (RFC 8461): policy fetches now allow HTTPS only, follow no redirects and stop at 64 KB and the domain is validated before it is used in the policy URL.
- re_match_in_7zip_directory: correctly parses listings of solid archives, skips directory entries and no longer hangs on archives with encrypted headers.
- re_match_in_rar_directory: the file list is now read up to the closing separator.
- Mail::MIMEDefang::Async: faster parsing of the SpamAssassin X-Spam-Status header.
- Mail::MIMEDefang::Net: improve ipv6 checks.
mimedefang-3.7.3-1.fc45
FEDORA-2026-f5d90a5819
Packages in this update:
- mimedefang-3.7.3-1.fc45
- fix build on CPAN
- CVE-2026-120211 - PID file symlink following (privileged file overwrite).
- CVE-2026-120304 - anonymize_uri() regular expression denial of service.
- CVE-2026-120305 - md_spf_verify()/md_authres() regular expression denial of service.
- Header injection hardening: header names and values that the filter returns are now validated before they are passed to the MTA. Invalid header names are logged and dropped.
- MTA-STS (RFC 8461): policy fetches now allow HTTPS only, follow no redirects and stop at 64 KB and the domain is validated before it is used in the policy URL.
- re_match_in_7zip_directory: correctly parses listings of solid archives, skips directory entries and no longer hangs on archives with encrypted headers.
- re_match_in_rar_directory: the file list is now read up to the closing separator.
- Mail::MIMEDefang::Async: faster parsing of the SpamAssassin X-Spam-Status header.
- Mail::MIMEDefang::Net: improve ipv6 checks.
mimedefang-3.7.3-1.fc43
FEDORA-2026-542ebc61eb
Packages in this update:
- mimedefang-3.7.3-1.fc43
- fix build on CPAN
- CVE-2026-120211 - PID file symlink following (privileged file overwrite).
- CVE-2026-120304 - anonymize_uri() regular expression denial of service.
- CVE-2026-120305 - md_spf_verify()/md_authres() regular expression denial of service.
- Header injection hardening: header names and values that the filter returns are now validated before they are passed to the MTA. Invalid header names are logged and dropped.
- MTA-STS (RFC 8461): policy fetches now allow HTTPS only, follow no redirects and stop at 64 KB and the domain is validated before it is used in the policy URL.
- re_match_in_7zip_directory: correctly parses listings of solid archives, skips directory entries and no longer hangs on archives with encrypted headers.
- re_match_in_rar_directory: the file list is now read up to the closing separator.
- Mail::MIMEDefang::Async: faster parsing of the SpamAssassin X-Spam-Status header.
- Mail::MIMEDefang::Net: improve ipv6 checks.
mimedefang-3.7.3-1.el9
FEDORA-EPEL-2026-dfd6652507
Packages in this update:
- mimedefang-3.7.3-1.el9
- fix build on CPAN
- CVE-2026-120211 - PID file symlink following (privileged file overwrite).
- CVE-2026-120304 - anonymize_uri() regular expression denial of service.
- CVE-2026-120305 - md_spf_verify()/md_authres() regular expression denial of service.
- Header injection hardening: header names and values that the filter returns are now validated before they are passed to the MTA. Invalid header names are logged and dropped.
- MTA-STS (RFC 8461): policy fetches now allow HTTPS only, follow no redirects and stop at 64 KB and the domain is validated before it is used in the policy URL.
- re_match_in_7zip_directory: correctly parses listings of solid archives, skips directory entries and no longer hangs on archives with encrypted headers.
- re_match_in_rar_directory: the file list is now read up to the closing separator.
- Mail::MIMEDefang::Async: faster parsing of the SpamAssassin X-Spam-Status header.
- Mail::MIMEDefang::Net: improve ipv6 checks.
mimedefang-3.7.3-1.el10_4
FEDORA-EPEL-2026-686bfc01ab
Packages in this update:
- mimedefang-3.7.3-1.el10_4
- fix build on CPAN
- CVE-2026-120211 - PID file symlink following (privileged file overwrite).
- CVE-2026-120304 - anonymize_uri() regular expression denial of service.
- CVE-2026-120305 - md_spf_verify()/md_authres() regular expression denial of service.
- Header injection hardening: header names and values that the filter returns are now validated before they are passed to the MTA. Invalid header names are logged and dropped.
- MTA-STS (RFC 8461): policy fetches now allow HTTPS only, follow no redirects and stop at 64 KB and the domain is validated before it is used in the policy URL.
- re_match_in_7zip_directory: correctly parses listings of solid archives, skips directory entries and no longer hangs on archives with encrypted headers.
- re_match_in_rar_directory: the file list is now read up to the closing separator.
- Mail::MIMEDefang::Async: faster parsing of the SpamAssassin X-Spam-Status header.
- Mail::MIMEDefang::Net: improve ipv6 checks.
mimedefang-3.7.3-1.el8
FEDORA-EPEL-2026-731d033269
Packages in this update:
- mimedefang-3.7.3-1.el8
- fix build on CPAN
- CVE-2026-120211 - PID file symlink following (privileged file overwrite).
- CVE-2026-120304 - anonymize_uri() regular expression denial of service.
- CVE-2026-120305 - md_spf_verify()/md_authres() regular expression denial of service.
- Header injection hardening: header names and values that the filter returns are now validated before they are passed to the MTA. Invalid header names are logged and dropped.
- MTA-STS (RFC 8461): policy fetches now allow HTTPS only, follow no redirects and stop at 64 KB and the domain is validated before it is used in the policy URL.
- re_match_in_7zip_directory: correctly parses listings of solid archives, skips directory entries and no longer hangs on archives with encrypted headers.
- re_match_in_rar_directory: the file list is now read up to the closing separator.
- Mail::MIMEDefang::Async: faster parsing of the SpamAssassin X-Spam-Status header.
- Mail::MIMEDefang::Net: improve ipv6 checks.
radsecproxy-1.11.5-1.el10_3
FEDORA-EPEL-2026-cf9252f955
Packages in this update:
- radsecproxy-1.11.5-1.el10_3
- Fix vendor attribute rewrite checks (GHSA-mf4w-p52g-j253)
- Fix dynamic lookup config merge for TLS-PSK (GHSA-4pv5-j49w-wfpp)
- Fix some configuration values from dynamic lookup command ignored
- Fix config file issues with string quotation at end of file
- Fix startup fails when using address-sanitizer
radsecproxy-1.11.5-1.fc44
FEDORA-2026-834e6395e9
Packages in this update:
- radsecproxy-1.11.5-1.fc44
- Fix vendor attribute rewrite checks (GHSA-mf4w-p52g-j253)
- Fix dynamic lookup config merge for TLS-PSK (GHSA-4pv5-j49w-wfpp)
- Fix some configuration values from dynamic lookup command ignored
- Fix config file issues with string quotation at end of file
- Fix startup fails when using address-sanitizer
radsecproxy-1.11.5-1.fc45
FEDORA-2026-76e466bc35
Packages in this update:
- radsecproxy-1.11.5-1.fc45
- Fix vendor attribute rewrite checks (GHSA-mf4w-p52g-j253)
- Fix dynamic lookup config merge for TLS-PSK (GHSA-4pv5-j49w-wfpp)
- Fix some configuration values from dynamic lookup command ignored
- Fix config file issues with string quotation at end of file
- Fix startup fails when using address-sanitizer
radsecproxy-1.11.5-1.el10_4
FEDORA-EPEL-2026-625404d6fc
Packages in this update:
- radsecproxy-1.11.5-1.el10_4
- Fix vendor attribute rewrite checks (GHSA-mf4w-p52g-j253)
- Fix dynamic lookup config merge for TLS-PSK (GHSA-4pv5-j49w-wfpp)
- Fix some configuration values from dynamic lookup command ignored
- Fix config file issues with string quotation at end of file
- Fix startup fails when using address-sanitizer
radsecproxy-1.11.5-1.el8
FEDORA-EPEL-2026-c8ef788daf
Packages in this update:
- radsecproxy-1.11.5-1.el8
- Fix vendor attribute rewrite checks (GHSA-mf4w-p52g-j253)
- Fix dynamic lookup config merge for TLS-PSK (GHSA-4pv5-j49w-wfpp)
- Fix some configuration values from dynamic lookup command ignored
- Fix config file issues with string quotation at end of file
- Fix startup fails when using address-sanitizer
radsecproxy-1.11.5-1.el9
FEDORA-EPEL-2026-d04f0672e4
Packages in this update:
- radsecproxy-1.11.5-1.el9
- Fix vendor attribute rewrite checks (GHSA-mf4w-p52g-j253)
- Fix dynamic lookup config merge for TLS-PSK (GHSA-4pv5-j49w-wfpp)
- Fix some configuration values from dynamic lookup command ignored
- Fix config file issues with string quotation at end of file
- Fix startup fails when using address-sanitizer
radsecproxy-1.11.5-1.fc43
FEDORA-2026-12efa4b1c0
Packages in this update:
- radsecproxy-1.11.5-1.fc43
- Fix vendor attribute rewrite checks (GHSA-mf4w-p52g-j253)
- Fix dynamic lookup config merge for TLS-PSK (GHSA-4pv5-j49w-wfpp)
- Fix some configuration values from dynamic lookup command ignored
- Fix config file issues with string quotation at end of file
- Fix startup fails when using address-sanitizer
DSA-6630-1 pdns-recursor - security update
xfsprogs-6.15.0-3.fc43.1
FEDORA-2026-93f96bf059
Packages in this update:
- xfsprogs-6.15.0-3.fc43.1
xfs_admin lacks user-controlled input validation for its parameters, this can lead to OS command injection or, depending on how xfs_admin is being executed, to a local privilege escalation.
xfsprogs-7.1.1-1.fc44.1
FEDORA-2026-b0a3ad0770
Packages in this update:
- xfsprogs-7.1.1-1.fc44.1
xfs_admin lacks user-controlled input validation for its parameters, this can lead to OS command injection or, depending on how xfs_admin is being executed, to a local privilege escalation.
mingw-poppler-26.01.0-3.fc45
FEDORA-2026-780d56d297
Packages in this update:
- mingw-poppler-26.01.0-3.fc45
Apply fixes for CVE-2026-102621, CVE-2026-102620, CVE-2026-107705, CVE-2026-93653