Aggregator | Linuxlookup

nix-2.24.15-2.el10_3

Fedora Security Advisories

1 hour 17 minutes ago

FEDORA-EPEL-2026-4a26bbd7c2 Packages in this update:

nix-2.24.15-2.el10_3

Update description:

backport fix for nix-daemon critical GHSA-g3g9-5vj6-r3gj (CVE-2026-39860)

https://github.com/NixOS/nix/security/advisories/GHSA-g3g9-5vj6-r3gj

python-cryptography-46.0.7-1.fc43

Fedora Security Advisories

2 hours 12 minutes ago

FEDORA-2026-95233f8a79 Packages in this update:

python-cryptography-46.0.7-1.fc43

Update description: Changelog * Wed Apr 8 2026 Jeremy Cline <jeremycline@microsoft.com> - 46.0.7-1 - Update to 46.0.7 - SECURITY ISSUE: Fixed an issue where non-contiguous buffers could be passed to APIs that accept Python buffers, which could lead to buffer overflow. CVE-2026-39892

python-cryptography-46.0.7-1.fc44

Fedora Security Advisories

2 hours 12 minutes ago

FEDORA-2026-aa318887d6 Packages in this update:

python-cryptography-46.0.7-1.fc44

Update description: Changelog * Wed Apr 8 2026 Jeremy Cline <jeremycline@microsoft.com> - 46.0.7-1 - Update to 46.0.7 - SECURITY ISSUE: Fixed an issue where non-contiguous buffers could be passed to APIs that accept Python buffers, which could lead to buffer overflow. CVE-2026-39892

python-tomli-2.4.1-1.fc44

Fedora Security Advisories

2 hours 45 minutes ago

FEDORA-2026-42d4c822e4 Packages in this update:

python-tomli-2.4.1-1.fc44

Update description:

Update to 2.4.1. Limit number of parts of a TOML key to address quadratic time complexity

mingw-LibRaw-0.21.5-2.fc43

Fedora Security Advisories

3 hours 36 minutes ago

FEDORA-2026-066dcb4c72 Packages in this update:

mingw-LibRaw-0.21.5-2.fc43

Update description:

Backport fixes for CVE-2026-20889 CVE-2026-21413 CVE-2026-24450 CVE-2026-24660

Update to libraw-0.21.5.

mingw-LibRaw-0.21.5-2.fc42

Fedora Security Advisories

3 hours 36 minutes ago

FEDORA-2026-2114a370b6 Packages in this update:

mingw-LibRaw-0.21.5-2.fc42

Update description:

Backport fixes for CVE-2026-20889 CVE-2026-21413 CVE-2026-24450 CVE-2026-24660

Update to libraw-0.21.5.

usd-26.03-3.fc44

Fedora Security Advisories

3 hours 51 minutes ago

FEDORA-2026-502486fc61 Packages in this update:

usd-26.03-3.fc44

Update description:

Backport several OpenEXRCore security fixes

Fixes CVE-2026-34378 / GHSA-v76p-4qvv-vh4g; closes RHBZ#2455493
Fixes CVE-2026-34380 / GHSA-q3v8-hw4m-59w5; closes RHBZ#2455534
Fixes CVE-2026-34588 / GHSA-588r-cr5c-w6hf; closes RHBZ#2455505
Fixes CVE-2026-34589 / GHSA-p8xc-w3q4-h64x; closes RHBZ#2455501
Fixes CVE-2026-34379 / GHSA-w88v-vqhq-5p24; closes RHBZ#2455497

Backport fix for CVE-2026-34544 in OpenEXRCore

USN-8157-1: Squid vulnerabilities

Ubuntu Security Advisories

4 hours 3 minutes ago

It was discovered that Squid incorrectly handled certain ICP traffic. In environments where ICP support is enabled, a remote attacker could use this issue to cause Squid to crash, resulting in a denial of service, or obtain small amounts of sensitive information.

USN-8156-1: GDK-PixBuf vulnerability

Ubuntu Security Advisories

4 hours 12 minutes ago

It was discovered that GDK-PixBuf incorrectly handled certain JPEG files. An attacker could use this issue to cause GDK-PixBuf to crash, resulting in a denial of service, or possibly execute arbitrary code.

USN-8155-1: OpenSSL vulnerabilities

Ubuntu Security Advisories

4 hours 44 minutes ago

Viktor Dukhovni discovered that OpenSSL incorrectly negotiated the expected preferred key exchange group when used as a TLS 1.3 server. This could result in a less preferred key exchange being used, contrary to expectations. This issue only affected Ubuntu 25.10. (CVE-2026-2673) Igor Morgenstern discovered that OpenSSL incorrectly handled certain memory operations when used as a DANE client. A remote attacker could use this issue to cause OpenSSL to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-28387) Igor Morgenstern discovered that OpenSSL incorrectly handled certain memory operations when processing a delta CRL. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. (CVE-2026-28388) Nathan Sportsman, Daniel Rhea, and Jaeho Nam discovered that OpenSSL incorrectly handled certain memory operations when processing a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. (CVE-2026-28389) Muhammad Daffa, Joshua Rogers, and Chanho Kim discovered that OpenSSL incorrectly handled processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. (CVE-2026-28390) Quoc Tran discovered that OpenSSL incorrectly handled hexadecimal conversion on 32-bit platforms. A remote attacker could use this issue to cause OpenSSL to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-31789) Simo Sorce discovered that OpenSSL incorrectly handled failures in RSA KEM RSASVE Encapsulation. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-31790)

usd-26.03-3.fc45

Fedora Security Advisories

4 hours 53 minutes ago

FEDORA-2026-c0f8cde7ad Packages in this update:

usd-26.03-3.fc45

Update description:

Automatic update for usd-26.03-3.fc45.

Changelog * Wed Apr 8 2026 Benjamin A. Beasley <code@musicinmybrain.net> - 26.03-3 - Backport several OpenEXRCore security fixes - Fixes CVE-2026-34378 / GHSA-v76p-4qvv-vh4g; closes RHBZ#2455493 - Fixes CVE-2026-34380 / GHSA-q3v8-hw4m-59w5; closes RHBZ#2455534 - Fixes CVE-2026-34588 / GHSA-588r-cr5c-w6hf; closes RHBZ#2455505 - Fixes CVE-2026-34589 / GHSA-p8xc-w3q4-h64x; closes RHBZ#2455501 - Fixes CVE-2026-34379 / GHSA-w88v-vqhq-5p24; closes RHBZ#2455497