Fedora Security Advisories

• slurm-26.05.4-2.el10_3

Merge rawhide into epel10 to reconcile diverged history

• slurm-26.05.4-2.el10_4

Merge rawhide into epel10 to reconcile diverged history

• librabbitmq-0.18.0-1.fc45

• Fix client-side memory-exhaustion DoS in amqp_handle_input (GHSA-5fp7-wg2f-hhgp, #899)

• amqp_login/amqp_login_with_properties return an error instead of crashing on NULL SASL credentials for AMQP_SASL_METHOD_PLAIN; NULL and "" are now accepted for the AMQP_SASL_METHOD_EXTERNAL identity argument (#898, #900)
• Fix pkgconfig bindings on Windows (#897)

• librabbitmq-0.18.0-1.fc43

• Fix client-side memory-exhaustion DoS in amqp_handle_input (GHSA-5fp7-wg2f-hhgp, #899)

• amqp_login/amqp_login_with_properties return an error instead of crashing on NULL SASL credentials for AMQP_SASL_METHOD_PLAIN; NULL and "" are now accepted for the AMQP_SASL_METHOD_EXTERNAL identity argument (#898, #900)
• Fix pkgconfig bindings on Windows (#897)

• librabbitmq-0.18.0-1.fc44

• Fix client-side memory-exhaustion DoS in amqp_handle_input (GHSA-5fp7-wg2f-hhgp, #899)

• amqp_login/amqp_login_with_properties return an error instead of crashing on NULL SASL credentials for AMQP_SASL_METHOD_PLAIN; NULL and "" are now accepted for the AMQP_SASL_METHOD_EXTERNAL identity argument (#898, #900)
• Fix pkgconfig bindings on Windows (#897)

• mongo-c-driver-1.30.10-1.el10_2

Fixes

• Use exact match for file ID in GridFS methods CVE-2026-88036
• Validate SASL username CVE-2026-88035

• mongo-c-driver-1.30.10-1.el9

Fixes

• Use exact match for file ID in GridFS methods CVE-2026-88036
• Validate SASL username CVE-2026-88035

• mongo-c-driver-1.30.10-1.el8

Fixes

• Use exact match for file ID in GridFS methods CVE-2026-88036
• Validate SASL username CVE-2026-88035

• mongo-c-driver-1.30.10-1.fc44

Fixes

• Use exact match for file ID in GridFS methods CVE-2026-88036
• Validate SASL username CVE-2026-88035

• mongo-c-driver-1.30.10-1.fc43

Fixes

• Use exact match for file ID in GridFS methods CVE-2026-88036
• Validate SASL username CVE-2026-88035

• mongo-c-driver-2.5.3-1.el10_4

Fixes

• Use exact match for file ID in GridFS methods CVE-2026-88036
• Validate SASL username CVE-2026-88035

• mongo-c-driver-2.5.3-1.fc45

Fixes

• Use exact match for file ID in GridFS methods CVE-2026-88036
• Validate SASL username CVE-2026-88035

• mongo-c-driver-2.5.3-1.el10_3

Fixes

• Use exact match for file ID in GridFS methods CVE-2026-88036
• Validate SASL username CVE-2026-88035

• parted-3.6-14.fc43

• parted: Fix partition number allocation in do_print (bcl)
• fdasd: Make sure data set name is positive (bcl)
• resize: Make sure hfsc_new_cachetable cannot overflow on 32bit (bcl)
• resize: Make sure 32bit build cannot overflow frag_count (bcl)
• libparted: Catch FAT metadata triggered errors (bcl) Resolves: CVE-2026-89085 Resolves: CVE-2026-89088

• parted-3.6-15.fc44

• parted: Fix partition number allocation in do_print (bcl)
• fdasd: Make sure data set name is positive (bcl)
• resize: Make sure hfsc_new_cachetable cannot overflow on 32bit (bcl)
• resize: Make sure 32bit build cannot overflow frag_count (bcl)
• libparted: Catch FAT metadata triggered errors (bcl) Resolves: CVE-2026-89085 Resolves: CVE-2026-89088

• parted-3.7.13-1.fc45

• Removed included patches
• version 3.7.13 (bcl)
• maint: Update to latest gnulib and bootstrap script (bcl)
• parted: Fix partition number allocation in do_print (bcl)
• fdasd: Make sure data set name is positive (bcl)
• resize: Make sure hfsc_new_cachetable cannot overflow on 32bit (bcl)
• resize: Make sure 32bit build cannot overflow frag_count (bcl)
• libparted: Catch FAT metadata triggered errors (bcl) Resolves: CVE-2026-89085 Resolves: CVE-2026-89088

• dotnet8.0-8.0.131-1.fc44

Update to .NET SDK 8.0.131 and Runtime 8.0.31

Fixes: CVE-2026-58649,CVE-2026-69304,CVE-2026-69439,CVE-2026-69522,CVE-2026-71328

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.31/8.0.131.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.31/8.0.31.md

• dotnet8.0-8.0.131-1.fc43

Update to .NET SDK 8.0.131 and Runtime 8.0.31

Fixes: CVE-2026-58649,CVE-2026-69304,CVE-2026-69439,CVE-2026-69522,CVE-2026-71328

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.31/8.0.131.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.31/8.0.31.md

• dotnet9.0-9.0.121-1.fc43

Update to .NET SDK 9.0.121 and Runtime 9.0.20

Fixes: CVE-2026-58649,CVE-2026-69304,CVE-2026-69439,CVE-2026-69522,CVE-2026-69806,CVE-2026-71328

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.20/9.0.121.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.20/9.0.20.md

• dotnet10.0-10.0.112-1.fc44

Update to .NET SDK 10.0.112 and Runtime 10.0.12

Fixes: CVE-2026-58649,CVE-2026-69304,CVE-2026-69439,CVE-2026-69522,CVE-2026-69806,CVE-2026-71328

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.12/10.0.112.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.12/10.0.12.md