Fedora Security Advisories

bind9-next-9.21.26-1.fc43

Fedora Security Advisories
39 minutes 44 seconds ago
FEDORA-2026-d47a436e71 Packages in this update:
  • bind9-next-9.21.26-1.fc43
Update description: Update to 9.21.26 (rhbz#2489832) Security Fixes:
  • Prevent excessive CPU use validating crafted DNSSEC responses. (CVE-2026-19668)
  • Require a TSIG on every message of incoming zone transfers. (CVE-2026-19033)
  • Prevent a DNSSEC downgrade of secure delegations via unrelated NSEC3 records. (CVE-2026-77119)
  • Prevent forged DNSSEC-validated NXDOMAIN responses. (CVE-2026-19941)
  • DNS64 with break-dnssec could cause an assertion failure. (CVE-2026-19666)
  • Reject oversized negative cache records. (CVE-2026-19667)
  • Prevent resolver crash with cached DNSSEC proofs. (CVE-2026-19662)
  • Discard repeated SOA, CNAME, and DNAME records when parsing DNS messages. (CVE-2026-75029)
  • Fix an unauthenticated crash on HTTPS using SIG(0). (CVE-2026-77692)
  • Cached HTTPS/SVCB aliases could exhaust resolver CPU. (CVE-2026-81736)
  • Prevent TKEY queries from terminating named without global options. (CVE-2026-76163)
  • Out-of-zone records in a zone database could be served as authoritative. (CVE-2026-78301)
  • Fix crash on wildcard answers carrying both NSEC and NSEC3 proofs. (CVE-2026-80274)
  • Following HTTPS/SVCB aliases could leak resolver cache memory. (CVE-2026-81563)
Feature Changes:
  • Reject oversized and malformed DNSKEY records up front.
  • Reject out-of-zone records in zone transfers and zone files.
Removed Features:
  • Remove the RFC 1918 reverse-lookup leakage warning.

bind9-next-9.21.26-1.fc44

Fedora Security Advisories
40 minutes 10 seconds ago
FEDORA-2026-87d221ec8c Packages in this update:
  • bind9-next-9.21.26-1.fc44
Update description: Update to 9.21.26 (rhbz#2489832) Security Fixes:
  • Prevent excessive CPU use validating crafted DNSSEC responses. (CVE-2026-19668)
  • Require a TSIG on every message of incoming zone transfers. (CVE-2026-19033)
  • Prevent a DNSSEC downgrade of secure delegations via unrelated NSEC3 records. (CVE-2026-77119)
  • Prevent forged DNSSEC-validated NXDOMAIN responses. (CVE-2026-19941)
  • DNS64 with break-dnssec could cause an assertion failure. (CVE-2026-19666)
  • Reject oversized negative cache records. (CVE-2026-19667)
  • Prevent resolver crash with cached DNSSEC proofs. (CVE-2026-19662)
  • Discard repeated SOA, CNAME, and DNAME records when parsing DNS messages. (CVE-2026-75029)
  • Fix an unauthenticated crash on HTTPS using SIG(0). (CVE-2026-77692)
  • Cached HTTPS/SVCB aliases could exhaust resolver CPU. (CVE-2026-81736)
  • Prevent TKEY queries from terminating named without global options. (CVE-2026-76163)
  • Out-of-zone records in a zone database could be served as authoritative. (CVE-2026-78301)
  • Fix crash on wildcard answers carrying both NSEC and NSEC3 proofs. (CVE-2026-80274)
  • Following HTTPS/SVCB aliases could leak resolver cache memory. (CVE-2026-81563)
Feature Changes:
  • Reject oversized and malformed DNSKEY records up front.
  • Reject out-of-zone records in zone transfers and zone files.
Removed Features:
  • Remove the RFC 1918 reverse-lookup leakage warning.

bind9-next-9.21.26-1.fc45

Fedora Security Advisories
40 minutes 31 seconds ago
FEDORA-2026-57cc6eadd3 Packages in this update:
  • bind9-next-9.21.26-1.fc45
Update description: Update to 9.21.26 (rhbz#2489832) Security Fixes:
  • Prevent excessive CPU use validating crafted DNSSEC responses. (CVE-2026-19668)
  • Require a TSIG on every message of incoming zone transfers. (CVE-2026-19033)
  • Prevent a DNSSEC downgrade of secure delegations via unrelated NSEC3 records. (CVE-2026-77119)
  • Prevent forged DNSSEC-validated NXDOMAIN responses. (CVE-2026-19941)
  • DNS64 with break-dnssec could cause an assertion failure. (CVE-2026-19666)
  • Reject oversized negative cache records. (CVE-2026-19667)
  • Prevent resolver crash with cached DNSSEC proofs. (CVE-2026-19662)
  • Discard repeated SOA, CNAME, and DNAME records when parsing DNS messages. (CVE-2026-75029)
  • Fix an unauthenticated crash on HTTPS using SIG(0). (CVE-2026-77692)
  • Cached HTTPS/SVCB aliases could exhaust resolver CPU. (CVE-2026-81736)
  • Prevent TKEY queries from terminating named without global options. (CVE-2026-76163)
  • Out-of-zone records in a zone database could be served as authoritative. (CVE-2026-78301)
  • Fix crash on wildcard answers carrying both NSEC and NSEC3 proofs. (CVE-2026-80274)
  • Following HTTPS/SVCB aliases could leak resolver cache memory. (CVE-2026-81563)
Feature Changes:
  • Reject oversized and malformed DNSKEY records up front.
  • Reject out-of-zone records in zone transfers and zone files.
Removed Features:
  • Remove the RFC 1918 reverse-lookup leakage warning.

erlang-26.2.5.21-10.fc44

Fedora Security Advisories
59 minutes 29 seconds ago
FEDORA-2026-0cc9a54ffe Packages in this update:
  • erlang-26.2.5.21-10.fc44
Update description:

Backport fixes for CVE-2026-75538 (Erlang/OTP TCP driver: remote DoS via signed length overflow) and CVE-2026-73270 (Erlang/OTP inets httpd: information disclosure via case-insensitive path bypass).

maradns-3.5.0039-1.fc44

Fedora Security Advisories
1 hour 21 minutes ago
FEDORA-2026-eb61896ed1 Packages in this update:
  • maradns-3.5.0039-1.fc44
Update description:

update to 3.5.0039 MaraDNS 3.5.0039 has been released. In addition to revamping how the cryptographic secure pseudo random number generator is seeded to be more secure and no longer generate Valgrind warnings, adding better IPv6 support to the askmara tool, updating the compile process to be more future-proof (by freezing things at C99), etc. it fixes two minor security problems: * It was possible to perform a denial of service to disable Deadwood’s DNS-over-TCP feature. (DNS-over-UDP was not affected and DNS-over-TCP is disabled by default) * RFC8482 replies made public 19 bytes of memory in the heap in Deadwood. There does not appear to be any vulnerable private data leaked.

libzip-1.12.1-1.fc45

Fedora Security Advisories
2 hours 22 minutes ago
FEDORA-2026-3523480992 Packages in this update:
  • libzip-1.12.1-1.fc45
Update description: Version 1.12.1 - 2026-10-14
  • Protect against denial of service attack (advisory GHSA-m3wq-j48p-jxwh, actually fixed in 1.12).
  • Fix compile issues.
  • Fix adding and replacing files in torrentzip archives.
  • Fix error handling in zip_source_filep_create().

gnome-shell-extension-gsconnect-73-1.fc45

Fedora Security Advisories
16 hours 7 minutes ago
FEDORA-2026-508badc038 Packages in this update:
  • gnome-shell-extension-gsconnect-73-1.fc45
Update description:

Voici les notes de la release, telles que publiées par daniellandau le 2026-09-23 :

Release GSConnect v73

What's Changed
  • Security: fix authenticated path traversal (arbitrary file write) in Share and Notification plugins by @jessedegans in #2163
  • Vipinus fix/clipboard handler safety net by @daniellandau in #2177
  • Improve CLI support for non-GNOME environment by @JingMatrix in #2157
  • Follow XDG Base Directory Specification for .mozilla (fixes #2121) by @Renarde-dev in #2156
  • Add TOTP copy button to messages that look like they have a TOTP code and fix undefined in notification by @xethlyx in #2111
  • Fix DesktopAppInfo loading by @ferdnyc in #2178
  • Fix two issues with the phone number conversion methods, and add tests by @ferdnyc in #2184
  • lan: fix IPv6 address parsing and formatting by @ihubanov in #2186
  • Keyboard shortcuts without grabbing by @daniellandau in #2037
  • Fix 'shortucts' typo error to 'shortcuts' by @mlorier in #2188
  • Better conditional GioUnix loading by @ferdnyc in #2189
  • GNOME 51 by @DaPigGuy in #2192

gnome-shell-extension-gsconnect-73-1.fc43

Fedora Security Advisories
16 hours 7 minutes ago
FEDORA-2026-eb93fa8f63 Packages in this update:
  • gnome-shell-extension-gsconnect-73-1.fc43
Update description:

Voici les notes de la release, telles que publiées par daniellandau le 2026-09-23 :

Release GSConnect v73

What's Changed
  • Security: fix authenticated path traversal (arbitrary file write) in Share and Notification plugins by @jessedegans in #2163
  • Vipinus fix/clipboard handler safety net by @daniellandau in #2177
  • Improve CLI support for non-GNOME environment by @JingMatrix in #2157
  • Follow XDG Base Directory Specification for .mozilla (fixes #2121) by @Renarde-dev in #2156
  • Add TOTP copy button to messages that look like they have a TOTP code and fix undefined in notification by @xethlyx in #2111
  • Fix DesktopAppInfo loading by @ferdnyc in #2178
  • Fix two issues with the phone number conversion methods, and add tests by @ferdnyc in #2184
  • lan: fix IPv6 address parsing and formatting by @ihubanov in #2186
  • Keyboard shortcuts without grabbing by @daniellandau in #2037
  • Fix 'shortucts' typo error to 'shortcuts' by @mlorier in #2188
  • Better conditional GioUnix loading by @ferdnyc in #2189
  • GNOME 51 by @DaPigGuy in #2192

gnome-shell-extension-gsconnect-73-1.fc44

Fedora Security Advisories
16 hours 7 minutes ago
FEDORA-2026-37da8aa1f8 Packages in this update:
  • gnome-shell-extension-gsconnect-73-1.fc44
Update description:

Voici les notes de la release, telles que publiées par daniellandau le 2026-09-23 :

Release GSConnect v73

What's Changed
  • Security: fix authenticated path traversal (arbitrary file write) in Share and Notification plugins by @jessedegans in #2163
  • Vipinus fix/clipboard handler safety net by @daniellandau in #2177
  • Improve CLI support for non-GNOME environment by @JingMatrix in #2157
  • Follow XDG Base Directory Specification for .mozilla (fixes #2121) by @Renarde-dev in #2156
  • Add TOTP copy button to messages that look like they have a TOTP code and fix undefined in notification by @xethlyx in #2111
  • Fix DesktopAppInfo loading by @ferdnyc in #2178
  • Fix two issues with the phone number conversion methods, and add tests by @ferdnyc in #2184
  • lan: fix IPv6 address parsing and formatting by @ihubanov in #2186
  • Keyboard shortcuts without grabbing by @daniellandau in #2037
  • Fix 'shortucts' typo error to 'shortcuts' by @mlorier in #2188
  • Better conditional GioUnix loading by @ferdnyc in #2189
  • GNOME 51 by @DaPigGuy in #2192
Checked
25 minutes 20 seconds ago
URL
https://bodhi.fedoraproject.org/rss/updates/?type=security