Aggregator

python-asyncssh-2.24.0-1.fc44

Fedora Security Advisories
1 hour 30 minutes ago
FEDORA-2026-1f248487e4 Packages in this update:
  • python-asyncssh-2.24.0-1.fc44
Update description:

update to version 2.24.0 Fix CVE-2026-54590: Unauthorized file modification via authorized-keys directory escape Fix CVE-2026-54591: Arbitrary file write via path traversal in SCP client

mbedtls-3.6.7-1.el10_3

Fedora Security Advisories
15 hours 9 minutes ago
FEDORA-EPEL-2026-c02be502f7 Packages in this update:
  • mbedtls-3.6.7-1.el10_3
Update description:
  • Update to 3.6.7
  • Fixes CVE-2026-25832, CVE-2026-35336, CVE-2026-49300, CVE-2026-50579, CVE-2026-50580, CVE-2026-50581, CVE-2026-50583, CVE-2026-50584, CVE-2026-50585, CVE-2026-50586, CVE-2026-50587, CVE-2026-50588, CVE-2026-50640, CVE-2026-50713, CVE-2026-54435, CVE-2026-54441

Release notes: https://github.com/Mbed-TLS/mbedtls/releases#release-mbedtls-3.6.7

mbedtls-3.6.7-1.el10_2

Fedora Security Advisories
15 hours 10 minutes ago
FEDORA-EPEL-2026-590e30b5b5 Packages in this update:
  • mbedtls-3.6.7-1.el10_2
Update description:
  • Update to 3.6.7
  • Fixes CVE-2026-25832, CVE-2026-35336, CVE-2026-49300, CVE-2026-50579, CVE-2026-50580, CVE-2026-50581, CVE-2026-50583, CVE-2026-50584, CVE-2026-50585, CVE-2026-50586, CVE-2026-50587, CVE-2026-50588, CVE-2026-50640, CVE-2026-50713, CVE-2026-54435, CVE-2026-54441

Release notes: https://github.com/Mbed-TLS/mbedtls/releases#release-mbedtls-3.6.7

mbedtls-3.6.7-1.fc44

Fedora Security Advisories
15 hours 10 minutes ago
FEDORA-2026-8d954936a5 Packages in this update:
  • mbedtls-3.6.7-1.fc44
Update description:
  • Update to 3.6.7
  • Fixes CVE-2026-25832, CVE-2026-35336, CVE-2026-49300, CVE-2026-50579, CVE-2026-50580, CVE-2026-50581, CVE-2026-50583, CVE-2026-50584, CVE-2026-50585, CVE-2026-50586, CVE-2026-50587, CVE-2026-50588, CVE-2026-50640, CVE-2026-50713, CVE-2026-54435, CVE-2026-54441

Release notes: https://github.com/Mbed-TLS/mbedtls/releases#release-mbedtls-3.6.7

mbedtls-3.6.7-1.fc43

Fedora Security Advisories
15 hours 10 minutes ago
FEDORA-2026-0bb141710c Packages in this update:
  • mbedtls-3.6.7-1.fc43
Update description:
  • Update to 3.6.7
  • Fixes CVE-2026-25832, CVE-2026-35336, CVE-2026-49300, CVE-2026-50579, CVE-2026-50580, CVE-2026-50581, CVE-2026-50583, CVE-2026-50584, CVE-2026-50585, CVE-2026-50586, CVE-2026-50587, CVE-2026-50588, CVE-2026-50640, CVE-2026-50713, CVE-2026-54435, CVE-2026-54441

Release notes: https://github.com/Mbed-TLS/mbedtls/releases#release-mbedtls-3.6.7

erlang-26.2.5.21-4.fc43

Fedora Security Advisories
1 day 6 hours ago
FEDORA-2026-965be97ac0 Packages in this update:
  • erlang-26.2.5.21-4.fc43
Update description:

Backport fixes for CVE-2026-48858 (ftp SSRF), CVE-2026-49759 (SCTP DoS), CVE-2026-48860 (dist-over-TLS auth bypass), CVE-2026-54886 (ssh SFTP DoS), CVE-2026-54891 (TLS handshake data injection), and CVE-2026-55952 (TLS 1.3 session ticket DoS). These are fixed upstream in OTP 27.x (rawhide/f45); backported here to the OTP 26.x line.

erlang-26.2.5.21-4.fc44

Fedora Security Advisories
1 day 6 hours ago
FEDORA-2026-dcf80dc1ff Packages in this update:
  • erlang-26.2.5.21-4.fc44
Update description:

Backport fixes for CVE-2026-48858 (ftp SSRF), CVE-2026-49759 (SCTP DoS), CVE-2026-48860 (dist-over-TLS auth bypass), CVE-2026-54886 (ssh SFTP DoS), CVE-2026-54891 (TLS handshake data injection), and CVE-2026-55952 (TLS 1.3 session ticket DoS). These are fixed upstream in OTP 27.x (rawhide/f45); backported here to the OTP 26.x line.

c-ares-1.34.8-1.fc43

Fedora Security Advisories
1 day 8 hours ago
FEDORA-2026-d70d93fcd7 Packages in this update:
  • c-ares-1.34.8-1.fc43
Update description:

1.34.7 accidentally broke the API compatibility, this is fixed in 1.34.8.

  • update to 1.34.7
  • fixes CVE-2026-33630 (GHSA-6wfj-rwm7-3542) and GHSA-pjmc-gx33-gc76 and GHSA-jv8r-gqr9-68wj