Aggregator

It was discovered that urllib3 did not correctly strip sensitive HTTP headers during cross-origin redirects. An attacker could possibly use this issue to leak sensitive information.

It was discovered that ImageMagick did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service. This issue affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-33535) Kamil Frankowicz discovered that ImageMagick did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-33536) It was discovered that ImageMagick did not correctly handle certain integer arithmetic. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-34238) Jake Lamberson discovered that ImageMagick did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-40310) Junmin Zhu discovered that ImageMagick did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service. This issue affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-40311) It was discovered that ImageMagick did not correctly handle opening certain MSL files. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly cause a denial of service. This issue affected Ubuntu 26.04 LTS. (CVE-2026-40312) It was discovered that ImageMagick did not correctly handle certain memory operations. An attacker could possibly use this issue to execute arbitrary code. (CVE-2026-56361)

Version:next-20260923 (linux-next) Released:2026-09-23

FEDORA-EPEL-2026-bc4e39e819 Packages in this update:

• openbao-2.6.3-1.el10_2

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-EPEL-2026-fcd0d6efe7 Packages in this update:

• openbao-2.6.3-1.el10_4

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-2026-ea3b447e05 Packages in this update:

• openbao-2.6.3-1.fc45

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-EPEL-2026-4301c99549 Packages in this update:

• openbao-2.6.3-1.el9

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-EPEL-2026-498661c28b Packages in this update:

• openbao-2.6.3-1.el8

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-2026-b4dd4dc37c Packages in this update:

• openbao-2.6.3-1.fc43

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-2026-3688145aba Packages in this update:

• openbao-2.6.3-1.fc44

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-EPEL-2026-982c090cff Packages in this update:

• openbao-2.6.3-1.el10_3

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-2026-84fde70eed Packages in this update:

• erlang-26.2.5.21-8.fc44

Update description:

Backported fixes for CVE-2026-65634, CVE-2026-68956, CVE-2026-89422

FEDORA-2026-d47f327121 Packages in this update:

• erlang-26.2.5.21-8.fc43

Update description:

Backported fixes for CVE-2026-65634, CVE-2026-68956, CVE-2026-89422

USN-8287-1 fixed a vulnerability in XDG Desktop Portal. Unfortunately the fix for CVE-2026-40354 was incomplete and introduced a regression when trashing files. This update fixes the problem and provides the corresponding update for Ubuntu 26.04 LTS. We apologize for the inconvenience. Original advisory details: It was discovered that XDG Desktop Portal incorrectly handled trashing files. A local attacker could possibly use this issue to delete arbitrary files on the host file system via a symlink attack.

Kazuma Matsumoto and Isabel Mill discovered that libgit2 incorrectly handled certain repository URLs when using the SSH transport. A remote attacker could possibly use this issue to execute arbitrary commands.

It was discovered that SQL parse contained multiple algorithmic complexity flaws when parsing SQL statements with deeply nested parentheses, comments, or dollar-quoted string literals. An attacker could use this issue to cause SQL parse to consume excessive CPU resources, resulting in a denial of service.

FEDORA-2026-8604c8d63b Packages in this update:

• emacs-31.1-4.fc45

Update description:

Prevent arbitrary code execution in flymake.

It was discovered that Open-iSNS contained a double-free vulnerability when decoding malformed iSNS attributes. An unauthenticated attacker could possibly use this to cause a denial of service.

FEDORA-2026-0a7abaa716 Packages in this update:

• asterisk-23.5.0-5.fc45

Update description:

Fix for CVE-2026-84975

FEDORA-2026-9ff25022c1 Packages in this update:

• cockpit-368-1.fc43

Update description:

Automatic update for cockpit-368-1.fc43.