Aggregator

Version:7.2.15 (EOL) (stable) Released:2026-11-01 Source:linux-7.2.15.tar.xz PGP Signature:linux-7.2.15.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-7.2.15

FEDORA-2026-f6acaf8756 Packages in this update:

• perl-Net-IDN-Encode-2.600-1.fc45

Update description:

Version 2.600 of Net::IDN::Encode fixes multiple CVEs: * CVE-2026-74766, a heap use-after-free in the XS decode_punycode * CVE-2026-74765, an integer overflow and out-of-bounds read in the XS encode_punycode * CVE-2026-87078, memory leaks when the XS functions reject input * CVE-2026-87079, quadratic decoding of large labels * CVE-2026-87080, the pure-Perl decoder accepting a truncated label * CVE-2026-87081, quadratic encoding of overlong labels in to_ascii * CVE-2026-87082, the XS encode_punycode looping for ever on malformed UTF-8 input

FEDORA-2026-effb380a7c Packages in this update:

• perl-Net-IDN-Encode-2.600-1.fc44

Update description:

Version 2.600 of Net::IDN::Encode fixes multiple CVEs: * CVE-2026-74766, a heap use-after-free in the XS decode_punycode * CVE-2026-74765, an integer overflow and out-of-bounds read in the XS encode_punycode * CVE-2026-87078, memory leaks when the XS functions reject input * CVE-2026-87079, quadratic decoding of large labels * CVE-2026-87080, the pure-Perl decoder accepting a truncated label * CVE-2026-87081, quadratic encoding of overlong labels in to_ascii * CVE-2026-87082, the XS encode_punycode looping for ever on malformed UTF-8 input

FEDORA-2026-3cb8ce0117 Packages in this update:

• perl-Net-IDN-Encode-2.600-1.fc43

Update description:

Version 2.600 of Net::IDN::Encode fixes multiple CVEs: * CVE-2026-74766, a heap use-after-free in the XS decode_punycode * CVE-2026-74765, an integer overflow and out-of-bounds read in the XS encode_punycode * CVE-2026-87078, memory leaks when the XS functions reject input * CVE-2026-87079, quadratic decoding of large labels * CVE-2026-87080, the pure-Perl decoder accepting a truncated label * CVE-2026-87081, quadratic encoding of overlong labels in to_ascii * CVE-2026-87082, the XS encode_punycode looping for ever on malformed UTF-8 input

FEDORA-2026-bd36d053a1 Packages in this update:

• perl-Starlet-0.33-1.fc44

Update description:

Starlet 0.33 fixes several security issues in the Starlet code: * prevent excessive CPU use when parsing malformed chunk-size lines * bound read allocations for large Content-Length values * stream chunk data to the body buffer and limit chunk-size lines to 4096 bytes

FEDORA-2026-7d9cd72397 Packages in this update:

• perl-Starlet-0.33-1.fc45

Update description:

Starlet 0.33 fixes several security issues in the Starlet code: * prevent excessive CPU use when parsing malformed chunk-size lines * bound read allocations for large Content-Length values * stream chunk data to the body buffer and limit chunk-size lines to 4096 bytes

FEDORA-2026-092670ec3e Packages in this update:

• perl-Starlet-0.33-1.fc43

Update description:

Starlet 0.33 fixes several security issues in the Starlet code: * prevent excessive CPU use when parsing malformed chunk-size lines * bound read allocations for large Content-Length values * stream chunk data to the body buffer and limit chunk-size lines to 4096 bytes

FEDORA-EPEL-2026-559c31a5c6 Packages in this update:

• perl-Spreadsheet-XLSX-0.20-1.el10_3

Update description: Spreadsheet::XLSX 0.20

• Security: limit ZIP entry counts and uncompressed sizes; read members incrementally and reject inconsistent size metadata.
• Security: validate number format IDs and escape regex lookups to prevent regex injection from crafted styles.
• Security: reject out-of-range date values to prevent excessive CPU usage.
• Security: validate cell references against XLSX worksheet limits before indexing cell arrays, preventing excessive allocation from invalid rows.
• Improve Readme.

Spreadsheet::XLSX 0.19

• Security: replace string eval of number-format conditions with strict numeric comparisons; invalid conditions use the fallback format section. Prevents arbitrary Perl code execution when parsing crafted XLSX files.
• Add regression tests for numeric conditions and malicious XLSX formats.

FEDORA-EPEL-2026-df61aac489 Packages in this update:

• perl-Spreadsheet-XLSX-0.20-1.el10_4

Update description: Spreadsheet::XLSX 0.20

• Security: limit ZIP entry counts and uncompressed sizes; read members incrementally and reject inconsistent size metadata.
• Security: validate number format IDs and escape regex lookups to prevent regex injection from crafted styles.
• Security: reject out-of-range date values to prevent excessive CPU usage.
• Security: validate cell references against XLSX worksheet limits before indexing cell arrays, preventing excessive allocation from invalid rows.
• Improve Readme.

Spreadsheet::XLSX 0.19

• Security: replace string eval of number-format conditions with strict numeric comparisons; invalid conditions use the fallback format section. Prevents arbitrary Perl code execution when parsing crafted XLSX files.
• Add regression tests for numeric conditions and malicious XLSX formats.

FEDORA-EPEL-2026-f8a8512ba9 Packages in this update:

• perl-Spreadsheet-XLSX-0.20-1.el9

Update description: Spreadsheet::XLSX 0.20

• Security: limit ZIP entry counts and uncompressed sizes; read members incrementally and reject inconsistent size metadata.
• Security: validate number format IDs and escape regex lookups to prevent regex injection from crafted styles.
• Security: reject out-of-range date values to prevent excessive CPU usage.
• Security: validate cell references against XLSX worksheet limits before indexing cell arrays, preventing excessive allocation from invalid rows.
• Improve Readme.

Spreadsheet::XLSX 0.19

• Security: replace string eval of number-format conditions with strict numeric comparisons; invalid conditions use the fallback format section. Prevents arbitrary Perl code execution when parsing crafted XLSX files.
• Add regression tests for numeric conditions and malicious XLSX formats.

FEDORA-2026-31c16b65d1 Packages in this update:

• perl-Spreadsheet-XLSX-0.20-1.fc45

Update description: Spreadsheet::XLSX 0.20

• Security: limit ZIP entry counts and uncompressed sizes; read members incrementally and reject inconsistent size metadata.
• Security: validate number format IDs and escape regex lookups to prevent regex injection from crafted styles.
• Security: reject out-of-range date values to prevent excessive CPU usage.
• Security: validate cell references against XLSX worksheet limits before indexing cell arrays, preventing excessive allocation from invalid rows.
• Improve Readme.

Spreadsheet::XLSX 0.19

• Security: replace string eval of number-format conditions with strict numeric comparisons; invalid conditions use the fallback format section. Prevents arbitrary Perl code execution when parsing crafted XLSX files.
• Add regression tests for numeric conditions and malicious XLSX formats.

FEDORA-EPEL-2026-c5b953f3f4 Packages in this update:

• perl-Spreadsheet-XLSX-0.20-1.el8

Update description: Spreadsheet::XLSX 0.20

• Security: limit ZIP entry counts and uncompressed sizes; read members incrementally and reject inconsistent size metadata.
• Security: validate number format IDs and escape regex lookups to prevent regex injection from crafted styles.
• Security: reject out-of-range date values to prevent excessive CPU usage.
• Security: validate cell references against XLSX worksheet limits before indexing cell arrays, preventing excessive allocation from invalid rows.
• Improve Readme.

Spreadsheet::XLSX 0.19

• Security: replace string eval of number-format conditions with strict numeric comparisons; invalid conditions use the fallback format section. Prevents arbitrary Perl code execution when parsing crafted XLSX files.
• Add regression tests for numeric conditions and malicious XLSX formats.

FEDORA-2026-e5d1978e9d Packages in this update:

• perl-Spreadsheet-XLSX-0.20-1.fc44

Update description: Spreadsheet::XLSX 0.20

• Security: limit ZIP entry counts and uncompressed sizes; read members incrementally and reject inconsistent size metadata.
• Security: validate number format IDs and escape regex lookups to prevent regex injection from crafted styles.
• Security: reject out-of-range date values to prevent excessive CPU usage.
• Security: validate cell references against XLSX worksheet limits before indexing cell arrays, preventing excessive allocation from invalid rows.
• Improve Readme.

Spreadsheet::XLSX 0.19

• Security: replace string eval of number-format conditions with strict numeric comparisons; invalid conditions use the fallback format section. Prevents arbitrary Perl code execution when parsing crafted XLSX files.
• Add regression tests for numeric conditions and malicious XLSX formats.

FEDORA-2026-0942a5b9ea Packages in this update:

• perl-Spreadsheet-XLSX-0.20-1.fc43

Update description: Spreadsheet::XLSX 0.20

• Security: limit ZIP entry counts and uncompressed sizes; read members incrementally and reject inconsistent size metadata.
• Security: validate number format IDs and escape regex lookups to prevent regex injection from crafted styles.
• Security: reject out-of-range date values to prevent excessive CPU usage.
• Security: validate cell references against XLSX worksheet limits before indexing cell arrays, preventing excessive allocation from invalid rows.
• Improve Readme.

Spreadsheet::XLSX 0.19

• Security: replace string eval of number-format conditions with strict numeric comparisons; invalid conditions use the fallback format section. Prevents arbitrary Perl code execution when parsing crafted XLSX files.
• Add regression tests for numeric conditions and malicious XLSX formats.

FEDORA-EPEL-2026-d0dc9bdb00 Packages in this update:

• perl-Spreadsheet-XLSX-0.20-1.el10_2

Update description: Spreadsheet::XLSX 0.20

• Security: limit ZIP entry counts and uncompressed sizes; read members incrementally and reject inconsistent size metadata.
• Security: validate number format IDs and escape regex lookups to prevent regex injection from crafted styles.
• Security: reject out-of-range date values to prevent excessive CPU usage.
• Security: validate cell references against XLSX worksheet limits before indexing cell arrays, preventing excessive allocation from invalid rows.
• Improve Readme.

Spreadsheet::XLSX 0.19

• Security: replace string eval of number-format conditions with strict numeric comparisons; invalid conditions use the fallback format section. Prevents arbitrary Perl code execution when parsing crafted XLSX files.
• Add regression tests for numeric conditions and malicious XLSX formats.

FEDORA-EPEL-2026-2e3b1a3de6 Packages in this update:

• suricata-8.0.7-1.el10_2

Update description:

upstream bugfix/security release

FEDORA-EPEL-2026-cee3c65794 Packages in this update:

• suricata-8.0.7-1.el10_3

Update description:

upstream security/bugfix release

FEDORA-EPEL-2026-5620c71326 Packages in this update:

• suricata-8.0.7-1.el10_4

Update description:

upstream security/bugfix release

FEDORA-2026-5546835eb2 Packages in this update:

• suricata-8.0.8-1.fc44

Update description:

upstream security/bugfix release

FEDORA-2026-2caff2e30b Packages in this update:

• mingw-qt5-qtdeclarative-5.15.18-4.fc44

Update description:

Backport fix for CVE-2025-12385.