Aggregator

FEDORA-2026-65aea3d269 Packages in this update:

• perl-CGI-Session-4.49-1.fc45

Update description:

Automatic update for perl-CGI-Session-4.49-1.fc45.

Changelog * Tue Aug 18 2026 Jitka Plesnikova <jplesnik@redhat.com> - 4.49-1 - 4.49 bump (rhbz#2510691) - Fix CVE-2026-56016 (rhbz#2495886)

FEDORA-2026-f073efe2f3 Packages in this update:

• proftpd-1.3.9d-1.fc44

Update description:

Current upstream maintenance release, with a handful of potentially security-related bugfixes.

FEDORA-2026-0abbe10cdc Packages in this update:

• proftpd-1.3.9d-1.fc43

Update description:

Current upstream maintenance release, with a handful of potentially security-related bugfixes.

FEDORA-EPEL-2026-e41f65b848 Packages in this update:

• proftpd-1.3.9d-1.el10_2

Update description:

Current upstream maintenance release, with a handful of potentially security-related bugfixes.

FEDORA-EPEL-2026-27142c109a Packages in this update:

• proftpd-1.3.9d-1.el10_3

Update description:

Current upstream maintenance release, with a handful of potentially security-related bugfixes.

FEDORA-2026-f47e713a34 Packages in this update:

• perl-CGI-Session-4.49-1.fc46

Update description:

Automatic update for perl-CGI-Session-4.49-1.fc46.

Changelog * Tue Aug 18 2026 Jitka Plesnikova <jplesnik@redhat.com> - 4.49-1 - 4.49 bump (rhbz#2510691) - Fix CVE-2026-56016 (rhbz#2495886)

It was discovered that c3p0 was vulnerable to remote code execution via maliciously crafted serialized objects and JNDI references. An attacker could use this to execute arbitrary code, bypass security restrictions, or cause a denial of service.

FEDORA-EPEL-2026-31590148a4 Packages in this update:

• python-tablib-3.0.0-2.el8

Update description:

Resolves https://nvd.nist.gov/vuln/detail/CVE-2026-9318

FEDORA-2026-adc1870e77 Packages in this update:

• wireshark-4.6.8-1.fc43

Update description:

New version of wireshark. It includes multiple CVE fixes that do not have the CVE numbers yet.

FEDORA-2026-5034844482 Packages in this update:

• wireshark-4.6.8-1.fc44

Update description:

New version of wireshark. It includes multiple CVE fixes that do not have the CVE numbers yet.

FEDORA-2026-9d65f38b15 Packages in this update:

• perl-DBI-1.652-1.fc43

Update description:

1.652 - Fix CVE-2026-73194 and CVE-2026-73193

FEDORA-2026-57dcf299cc Packages in this update:

• perl-DBI-1.652-1.fc44

Update description:

1.652 - Fix CVE-2026-73194 and CVE-2026-73193

FEDORA-EPEL-2026-70d981126c Packages in this update:

• gpsd-epel-3.26.1-3.el10_2.1

Update description:

fix command injection in gpsprof (CVE-2026-58459)

FEDORA-2026-fc9fdfd3fd Packages in this update:

• lyx-2.5.2-1.fc43

Update description:

2.5.2 https://www.lyx.org/announce/2_5_2.txt

FEDORA-2026-ef5c3f9941 Packages in this update:

• lyx-2.5.2-1.fc44

Update description:

2.5.2 https://www.lyx.org/announce/2_5_2.txt

FEDORA-2026-81ad01b22a Packages in this update:

• python-tablib-3.10.0-1.fc43

Update description:

Resolves: https://nvd.nist.gov/vuln/detail/CVE-2026-9318

FEDORA-2026-eaa6ecd43e Packages in this update:

• python-tablib-3.10.0-1.fc44

Update description:

Resolves: https://nvd.nist.gov/vuln/detail/CVE-2026-9318

FEDORA-2026-a0344d94aa Packages in this update:

• python-tablib-3.10.0-1.fc45

Update description:

Automatic update for python-tablib-3.10.0-1.fc45.

Changelog * Mon Aug 17 2026 Steve Traylen <steve.traylen@cern.ch> - 3.10.0-1 - Update to v3.10.0 CVE-2026-9318 - Resolves: rhbz#2514472

It was discovered that Engrampa incorrectly handled symbolic links when extracting certain archives. An attacker could possibly use this issue to write arbitrary files and execute arbitrary code.