Aggregator

FEDORA-2026-2290b9a9ad Packages in this update:

• restic-0.19.0-1.fc44

Update description:

Update to 0.19.0

FEDORA-EPEL-2026-445878b522 Packages in this update:

• restic-0.19.0-1.el10_2

Update description:

Update to 0.19.0

FEDORA-EPEL-2026-dd9886a057 Packages in this update:

• restic-0.19.0-1.el9

Update description:

Update to 0.19.0

FEDORA-EPEL-2026-9a0e292bed Packages in this update:

• restic-0.19.0-1.el10_3

Update description:

Update to 0.19.0

FEDORA-2026-e6094447f0 Packages in this update:

• restic-0.19.0-1.fc43

Update description:

Update to 0.19.0

FEDORA-EPEL-2026-57ae132e32 Packages in this update:

• singularity-ce-4.4.2-1.el8

Update description:

Upgrade to 4.4.2 upstream version.

FEDORA-EPEL-2026-d9f99fbd40 Packages in this update:

• singularity-ce-4.4.2-1.el9

Update description:

Upgrade to 4.4.2 upstream version.

FEDORA-2026-ef76680eea Packages in this update:

• junit5-5.14.4-1.fc45
• ongres-scram-3.3-1.fc45
• ongres-stringprep-2.4-1.fc45
• postgresql-jdbc-42.7.11-1.fc45

Update description:

postgresql-jdbc update and CVE fix.

FEDORA-EPEL-2026-15e8597d17 Packages in this update:

• singularity-ce-4.4.2-1.el10_3

Update description:

Upgrade to 4.4.2 upstream version.

FEDORA-EPEL-2026-82e8b5fef4 Packages in this update:

• singularity-ce-4.4.2-1.el10_2

Update description:

Upgrade to 4.4.2 upstream version.

FEDORA-2026-5358fb95a0 Packages in this update:

• singularity-ce-4.4.2-1.fc43

Update description:

Upgrade to 4.4.2 upstream version.

FEDORA-2026-63ae478575 Packages in this update:

• singularity-ce-4.4.2-1.fc44

Update description:

Upgrade to 4.4.2 upstream version.

FEDORA-2026-d32912dc74 Packages in this update:

• singularity-ce-4.4.2-1.fc45

Update description:

Automatic update for singularity-ce-4.4.2-1.fc45.

Changelog * Wed Jun 10 2026 David Trudgian <dtrudg@sylabs.io> - 4.4.2-1 - Upgrade to 4.4.2 upstream version. - Fix rhbz#2453093 - Fix rhbz#2458933 - Fix CVE-2026-47215

FEDORA-EPEL-2026-dc3d293a5d Packages in this update:

• perl-GD-2.86-1.el9

Update description:

This update fixes a command injection issue resulting from the use of the 2-argument form of open (CVE-2026-11526).

FEDORA-EPEL-2026-fe2027915d Packages in this update:

• perl-GD-2.86-1.el8

Update description:

This update fixes a command injection issue resulting from the use of the 2-argument form of open (CVE-2026-11526).

FEDORA-EPEL-2026-64e6156b8f Packages in this update:

• perl-GD-2.86-1.el10_3

Update description:

This update fixes a command injection issue resulting from the use of the 2-argument form of open (CVE-2026-11526).

FEDORA-EPEL-2026-d41d0279ec Packages in this update:

• perl-GD-2.86-1.el10_2

Update description:

This update fixes a command injection issue resulting from the use of the 2-argument form of open (CVE-2026-11526).

FEDORA-2026-263adf0222 Packages in this update:

• perl-GD-2.86-1.fc44

Update description:

This update fixes a command injection issue resulting from the use of the 2-argument form of open (CVE-2026-11526).

FEDORA-2026-63831abaee Packages in this update:

• perl-GD-2.86-1.fc43

Update description:

This update fixes a command injection issue resulting from the use of the 2-argument form of open (CVE-2026-11526).

It was discovered that Tomcat did not properly limit the size of WebDAV LOCK and PROPFIND request bodies. A remote attacker could use this issue to cause Tomcat to consume excessive memory, resulting in a denial of service. (CVE-2026-41284) It was discovered that Tomcat incorrectly validated HTTP/2 header fields. A remote attacker could use this issue to cause Tomcat to crash or possibly execute arbitrary code. (CVE-2026-41293) It was discovered that Tomcat did not properly clear HTTP authentication headers during WebSocket connection upgrades and redirects. A remote attacker could use this issue to obtain sensitive credentials. (CVE-2026-42498) It was discovered that Tomcat incorrectly handled digest authentication. A remote attacker could possibly use this issue to bypass authentication restrictions. (CVE-2026-43512) It was discovered that Tomcat incorrectly handled case sensitivity in LockOutRealm. A remote attacker could possibly use this issue to bypass account lockout protections and obtain sensitive information. (CVE-2026-43513) It was discovered that Tomcat incorrectly handled authorization when multiple method constraints defined the same HTTP method. A remote attacker could possibly use this issue to bypass authorization restrictions. (CVE-2026-43515)