Fedora Security Advisories

Changelog * Mon Aug 31 2026 Ondrej Holy <oholy@redhat.com> - 2.11.7-16 - Backport several CVE fixes (CVE-2026-22852, CVE-2026-22854, CVE-2026-22855, CVE-2026-22856, CVE-2026-22858, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531, CVE-2026-23532, CVE-2026-23533, CVE-2026-23534, CVE-2026-23732, CVE-2026-23883, CVE-2026-23884, CVE-2026-23948, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676, CVE-2026-24679, CVE-2026-24681, CVE-2026-24683, CVE-2026-24684, CVE-2026-25952, CVE-2026-26955, CVE-2026-26965, CVE-2026-26986, CVE-2026-27951, CVE-2026-29775, CVE-2026-31806, CVE-2026-31883, CVE-2026-31884, CVE-2026-31885, CVE-2026-33983, CVE-2026-33984, CVE-2026-33985, CVE-2026-45700, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299 and CVE-2026-68580) Resolves: rhbz#2430919, rhbz#2430908, rhbz#2430898, rhbz#2430914, rhbz#2430903 Resolves: rhbz#2430924, rhbz#2430933, rhbz#2429808, rhbz#2429823, rhbz#2429794 Resolves: rhbz#2443146, rhbz#2442975, rhbz#2429799, rhbz#2429814, rhbz#2429821 Resolves: rhbz#2438309, rhbz#2438321, rhbz#2438308, rhbz#2438328, rhbz#2438324 Resolves: rhbz#2438302, rhbz#2438310, rhbz#2438300, rhbz#2447394, rhbz#2453243 Resolves: rhbz#2453240, rhbz#2442837, rhbz#2442810, rhbz#2447426, rhbz#2447422 Resolves: rhbz#2447413, rhbz#2447416, rhbz#2453247, rhbz#2442857, rhbz#2491683 Resolves: rhbz#2510295, rhbz#2510643, rhbz#2503646, rhbz#2510448

perl-Net-DNS-1.56-1.el10_3

9 hours 18 minutes ago

FEDORA-EPEL-2026-9d8de529df Packages in this update:

perl-Net-DNS-1.56-1.el10_3

Update description:

Security fixes (main reason to update) - Remote code injection via EDNS EXTENDED ERROR (rt.cpan #179945) - 1.56 - DoS via long DNS compression chains (rt.cpan #179946) - 1.56 - UNIX.pm no longer relies on shell for uname (rt.cpan #176900) -1.55

Notable bug fixes across the range - TCP AXFR corruption from 1-byte 0x30 treated as EOF (#177003) - IPv4 loopback disabled in IPv6-only config — Fedora41 (#158714) - Multiple "uninitialized value" fixes in UDP/TCP paths (#158706, #157700) - Nameserver: SOA missing in NODATA response (#157669)

perl-Net-DNS-1.56-1.el10_4

Fedora Security Advisories

9 hours 29 minutes ago

FEDORA-EPEL-2026-8249fe4a72 Packages in this update:

perl-Net-DNS-1.56-1.el10_4

Update description:

1.56 bump

Security fixes (main reason to update) - Remote code injection via EDNS EXTENDED ERROR (rt.cpan #179945) — 1.56 - DoS via long DNS compression chains (rt.cpan #179946) — 1.56 - UNIX.pm no longer relies on shell for uname (rt.cpan #176900) — 1.55

Notable bug fixes across the range

TCP AXFR corruption from 1-byte 0x30 treated as EOF (#177003)
IPv4 loopback disabled in IPv6-only config — Fedora41 (#158714)
Multiple "uninitialized value" fixes in UDP/TCP paths (#158706, #157700)
Nameserver: SOA missing in NODATA response (#157669)
Resolver base selection bug on non-Unix platforms (#168433)

rust-ppmd-rust-1.4.1-1.el9

Fedora Security Advisories

10 hours 51 minutes ago

FEDORA-EPEL-2026-e594769023 Packages in this update:

rust-ppmd-rust-1.4.1-1.el9

Update description:

Update to version 1.4.1; Fixes RHBZ#2526655

Security fix for GHSA-rqc2-j9v2-j22v, an out-of-bounds read in the PPMd8 decoder.

perl-Net-DNS-1.56-1.fc43

Fedora Security Advisories

11 hours 47 minutes ago

FEDORA-2026-1237afef8a Packages in this update:

perl-Net-DNS-1.56-1.fc43

Update description:

Update to Net-DNS 1.56 (from 1.53).

Security fixes: - CVE-worthy: Remote code injection via EDNS EXTENDED ERROR (rt.cpan #179945) - Denial of Service via long DNS compression chains (rt.cpan #179946) - Resolver/UNIX.pm no longer relies on shell for uname (rt.cpan #176900)

Bug fixes: - Fix TCP read loop treating 1-byte recv() of "0" (0x30) as EOF, which corrupted AXFRs (rt.cpan #177003) - Fix unhelpful TAINT error (rt.cpan #178183) - Fix unreachable-code warning under Apache/mod_perl (rt.cpan #179692/#176900) - Documentation fix for Net::DNS::RR::RRSIG::verify() (rt.cpan #180088).

Other: - Resync with IANA DNS parameters and DNSSEC algorithm registries - New DNSKEY adt() accessor; DELEG parser backported to SVCB

perl-Net-DNS-1.56-1.fc44

Fedora Security Advisories

11 hours 47 minutes ago

FEDORA-2026-a0607111e6 Packages in this update:

perl-Net-DNS-1.56-1.fc44

Update description:

Update to Net-DNS 1.56 (from 1.53).

Security fixes: - CVE-worthy: Remote code injection via EDNS EXTENDED ERROR (rt.cpan #179945) - Denial of Service via long DNS compression chains (rt.cpan #179946) - Resolver/UNIX.pm no longer relies on shell for uname (rt.cpan #176900)

Bug fixes: - Fix TCP read loop treating 1-byte recv() of "0" (0x30) as EOF, which corrupted AXFRs (rt.cpan #177003) - Fix unhelpful TAINT error (rt.cpan #178183) - Fix unreachable-code warning under Apache/mod_perl (rt.cpan #179692/#176900) - Documentation fix for Net::DNS::RR::RRSIG::verify() (rt.cpan #180088).

Other: - Resync with IANA DNS parameters and DNSSEC algorithm registries - New DNSKEY adt() accessor; DELEG parser backported to SVCB