Fedora Security Advisories

xen-4.21.2-5.fc44

Fedora Security Advisories
31 minutes 26 seconds ago
FEDORA-2026-0d1924f837 Packages in this update:
  • xen-4.21.2-5.fc44
Update description:

arbitrary read/write via grant copy [XSA-523, CVE-2026-102703, CVE-2026-102704]

bind-9.18.51^git20261102.973d8646-3.fc44

Fedora Security Advisories
3 hours 9 minutes ago
FEDORA-2026-cf9d4ec5e6 Packages in this update:
  • bind-9.18.51^git20261102.973d8646-3.fc44
Update description: Security Fixes:
  • CVE-2026-94300 Fix remote termination of named under concurrent GSS-TSIG traffic (rhbz#2558420)
  • CVE-2026-97313 Fix a bug when resuming from a query initiated by RPZ (rhbz#2558427)
  • CVE-2026-96888 Possible crash with redirect and qname-minimization strict (rhbz#2558424)
  • CVE-2026-19630 Crafted DNS messages could exhaust CPU while being parsed (rhbz#2558488)

bind-9.18.51^git20261102.973d8646-1.fc45

Fedora Security Advisories
3 hours 9 minutes ago
FEDORA-2026-7198802985 Packages in this update:
  • bind-9.18.51^git20261102.973d8646-1.fc45
Update description: Security Fixes:
  • CVE-2026-94300 Fix remote termination of named under concurrent GSS-TSIG traffic (rhbz#2558420)
  • CVE-2026-97313 Fix a bug when resuming from a query initiated by RPZ (rhbz#2558427)
  • CVE-2026-96888 Possible crash with redirect and qname-minimization strict (rhbz#2558424)
  • CVE-2026-19630 Crafted DNS messages could exhaust CPU while being parsed (rhbz#2558488)

sngrep-1.9.0-4.fc43

Fedora Security Advisories
5 hours 39 minutes ago
FEDORA-2026-f194aee07b Packages in this update:
  • sngrep-1.9.0-4.fc43
Update description:

Backport fixes for two memory-safety issues reported upstream (irontec/sngrep#589):

  • CVE-2026-121943: off-by-one length guard in the SIP parser accepts a 10240-byte payload that fills the stack buffer with no NUL terminator, so regexec()/strdup() read past its end (OOB read).
  • CVE-2026-121944: an NFLOG TLV with length < 4 never advances the parse offset, making the capture thread spin forever (DoS).

Submitted upstream as irontec/sngrep#591 and #592.

sngrep-1.9.0-4.fc44

Fedora Security Advisories
5 hours 39 minutes ago
FEDORA-2026-1e72c25706 Packages in this update:
  • sngrep-1.9.0-4.fc44
Update description:

Backport fixes for two memory-safety issues reported upstream (irontec/sngrep#589):

  • CVE-2026-121943: off-by-one length guard in the SIP parser accepts a 10240-byte payload that fills the stack buffer with no NUL terminator, so regexec()/strdup() read past its end (OOB read).
  • CVE-2026-121944: an NFLOG TLV with length < 4 never advances the parse offset, making the capture thread spin forever (DoS).

Submitted upstream as irontec/sngrep#591 and #592.

sngrep-1.9.0-4.fc45

Fedora Security Advisories
5 hours 39 minutes ago
FEDORA-2026-39f14c4384 Packages in this update:
  • sngrep-1.9.0-4.fc45
Update description:

Backport fixes for two memory-safety issues reported upstream (irontec/sngrep#589):

  • CVE-2026-121943: off-by-one length guard in the SIP parser accepts a 10240-byte payload that fills the stack buffer with no NUL terminator, so regexec()/strdup() read past its end (OOB read).
  • CVE-2026-121944: an NFLOG TLV with length < 4 never advances the parse offset, making the capture thread spin forever (DoS).

Submitted upstream as irontec/sngrep#591 and #592.

rust-zstd-0.13.4-1.el10_3 rust-zstd-safe-7.4.0-1.el10_3 rust-zstd-sys-2.0.17-1.el10_3

Fedora Security Advisories
9 hours 5 minutes ago
FEDORA-EPEL-2026-353cc882e0 Packages in this update:
  • rust-zstd-0.13.4-1.el10_3
  • rust-zstd-safe-7.4.0-1.el10_3
  • rust-zstd-sys-2.0.17-1.el10_3
Update description:
  • Update the zstd crate to version 0.13.4.
  • Update the zstd-safe crate to version 7.4.0.
  • Update the zstd-sys crate to version 2.0.17.

This addresses multiple unsoundness and security issues in the zstd-safe and zstd-sys crates (assigned RUSTSEC-2026-0391, RUSTSEC-2026-0392, RUSTSEC-2026-0393, RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399, RUSTSEC-2026-0400, RUSTSEC-2026-0401, RUSTSEC-2026-0402, RUSTSEC-2026-0403, RUSTSEC-2026-0404, RUSTSEC-2026-0405, RUSTSEC-2026-0406).

Rebuilds of affected applications will be tracked and performed separately.

rust-crypto-bigint-0.7.10-1.el9 rust-ctutils-0.4.8-1.el9 rust-elliptic-curve-0.14.3-1.el9 rust-num-bigint-0.5.1-1.el9 rust-num-bigint0.4-0.4.8-1.el9 rust-num-modular-0.7.0-1.el9 rust-num-modular0.6-0.6.5-1.el9 rust-num-prime-0.5.0-3.el9 rust-zmij-1.0.23…

Fedora Security Advisories
23 hours 4 minutes ago
FEDORA-EPEL-2026-4c3a95074e Packages in this update:
  • rust-crypto-bigint-0.7.10-1.el9
  • rust-ctutils-0.4.8-1.el9
  • rust-elliptic-curve-0.14.3-1.el9
  • rust-num-bigint0.4-0.4.8-1.el9
  • rust-num-bigint-0.5.1-1.el9
  • rust-num-modular0.6-0.6.5-1.el9
  • rust-num-modular-0.7.0-1.el9
  • rust-num-prime-0.5.0-3.el9
  • rust-zmij-1.0.23-1.el9
Update description:
  • Update the crypto-bigint crate to version 0.7.10.
  • Update the ctutils crate to version 0.4.8.
  • Update the elliptic-curve crate to version 0.14.3.
  • Update the num-bigint crate to version 0.5.1 and add a compat package for version 0.4.
  • Update the num-modular crate to version 0.7.0 and add a compat package for version 0.6.
  • Update the zmij crate to version 1.0.23.

This update includes improvements to constant-time implementations in the crypto-bigint crate (assigned RUSTSEC-2026-0387).

Update to version 0.4.7.

rust-crypto-bigint-0.7.10-1.el10_4 rust-ctutils-0.4.8-1.el10_4 rust-elliptic-curve-0.14.3-1.el10_4 rust-num-bigint-0.5.1-1.el10_4 rust-num-bigint0.4-0.4.8-1.el10_4 rust-num-modular-0.7.0-1.el10_4 rust-num-modular0.6-0.6.5-1.el10_4 rust-num-prime-0.5.0-3…

Fedora Security Advisories
23 hours 5 minutes ago
FEDORA-EPEL-2026-9de0336e50 Packages in this update:
  • rust-crypto-bigint-0.7.10-1.el10_4
  • rust-ctutils-0.4.8-1.el10_4
  • rust-elliptic-curve-0.14.3-1.el10_4
  • rust-num-bigint0.4-0.4.8-1.el10_4
  • rust-num-bigint-0.5.1-1.el10_4
  • rust-num-modular0.6-0.6.5-1.el10_4
  • rust-num-modular-0.7.0-1.el10_4
  • rust-num-prime-0.5.0-3.el10_4
  • rust-zmij-1.0.23-1.el10_4
Update description:
  • Update the crypto-bigint crate to version 0.7.10.
  • Update the ctutils crate to version 0.4.8.
  • Update the elliptic-curve crate to version 0.14.3.
  • Update the num-bigint crate to version 0.5.1 and add a compat package for version 0.4.
  • Update the num-modular crate to version 0.7.0 and add a compat package for version 0.6.
  • Update the zmij crate to version 1.0.23.

This update includes improvements to constant-time implementations in the crypto-bigint crate (assigned RUSTSEC-2026-0387).

Update to version 0.4.7.

rust-crypto-bigint-0.7.10-1.fc43 rust-ctutils-0.4.8-1.fc43 rust-elliptic-curve-0.14.3-1.fc43 rust-num-bigint-0.5.1-1.fc43 rust-num-bigint0.4-0.4.8-1.fc43 rust-num-modular-0.7.0-1.fc43 rust-num-modular0.6-0.6.5-1.fc43 rust-num-prime-0.5.0-3.fc43 rust-zmij…

Fedora Security Advisories
23 hours 5 minutes ago
FEDORA-2026-49adf7234d Packages in this update:
  • rust-crypto-bigint-0.7.10-1.fc43
  • rust-ctutils-0.4.8-1.fc43
  • rust-elliptic-curve-0.14.3-1.fc43
  • rust-num-bigint0.4-0.4.8-1.fc43
  • rust-num-bigint-0.5.1-1.fc43
  • rust-num-modular0.6-0.6.5-1.fc43
  • rust-num-modular-0.7.0-1.fc43
  • rust-num-prime-0.5.0-3.fc43
  • rust-zmij-1.0.23-1.fc43
Update description:
  • Update the crypto-bigint crate to version 0.7.10.
  • Update the ctutils crate to version 0.4.8.
  • Update the elliptic-curve crate to version 0.14.3.
  • Update the num-bigint crate to version 0.5.1 and add a compat package for version 0.4.
  • Update the num-modular crate to version 0.7.0 and add a compat package for version 0.6.
  • Update the zmij crate to version 1.0.23.

This update includes improvements to constant-time implementations in the crypto-bigint crate (assigned RUSTSEC-2026-0387).

Update to version 0.4.7.

rust-crypto-bigint-0.7.10-1.fc44 rust-ctutils-0.4.8-1.fc44 rust-elliptic-curve-0.14.3-1.fc44 rust-num-bigint-0.5.1-1.fc44 rust-num-bigint0.4-0.4.8-1.fc44 rust-num-modular-0.7.0-1.fc44 rust-num-modular0.6-0.6.5-1.fc44 rust-num-prime-0.5.0-3.fc44 rust-zmij…

Fedora Security Advisories
23 hours 6 minutes ago
FEDORA-2026-666aa95b1b Packages in this update:
  • rust-crypto-bigint-0.7.10-1.fc44
  • rust-ctutils-0.4.8-1.fc44
  • rust-elliptic-curve-0.14.3-1.fc44
  • rust-num-bigint0.4-0.4.8-1.fc44
  • rust-num-bigint-0.5.1-1.fc44
  • rust-num-modular0.6-0.6.5-1.fc44
  • rust-num-modular-0.7.0-1.fc44
  • rust-num-prime-0.5.0-3.fc44
  • rust-zmij-1.0.23-1.fc44
Update description:
  • Update the crypto-bigint crate to version 0.7.10.
  • Update the ctutils crate to version 0.4.8.
  • Update the elliptic-curve crate to version 0.14.3.
  • Update the num-bigint crate to version 0.5.1 and add a compat package for version 0.4.
  • Update the num-modular crate to version 0.7.0 and add a compat package for version 0.6.
  • Update the zmij crate to version 1.0.23.

This update includes improvements to constant-time implementations in the crypto-bigint crate (assigned RUSTSEC-2026-0387).

Update to version 0.4.7.

Checked
31 minutes 7 seconds ago
URL
https://bodhi.fedoraproject.org/rss/updates/?type=security