Fedora Security Advisories

• plasma-nm-6.7.5-2.fc45

Update to remove support for vpnc and fortissl for F45

• openvpn-2.7.8-1.el10_2

Update to upstream 2.7.8 release

• knot-3.6.1-1.fc45

New upstream release containing various security fixes.

See release notes for more details.

• curl-8.21.0-8.fc45

• fix OpenLDAP SASL authentication bypass (CVE-2026-13608)
• fix OpenSSL pinning bypass (CVE-2026-80230)

• php-pecl-mongodb2-2.1.11-1.el10_2

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432

• php-pecl-mongodb2-2.1.11-1.fc43

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432

• php-pecl-mongodb2-2.1.11-1.fc44

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432

• php-pecl-mongodb2-2.5.4-1.fc45

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432
• PHPC-2505: Fix foreach iteration of MongoDB\Driver\Cursor after garbage collection.

• php-pecl-mongodb2-2.5.4-1.el10_4

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432
• PHPC-2505: Fix foreach iteration of MongoDB\Driver\Cursor after garbage collection.

• php-pecl-mongodb2-2.5.4-1.el10_3

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432
• PHPC-2505: Fix foreach iteration of MongoDB\Driver\Cursor after garbage collection.

• php-pecl-mongodb-1.21.11-1.el10_2

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432

• mongo-c-driver-1.30.13-1.el9

• Fix edge case in Decimal128 parsing. CVE-2026-106438
• Enforce minimum size in bson_reserve_buffer. CVE-2026-106437
• Fix bson_writer_new when writing empty documents. CVE-2026-106431

• Fix SCRAM parser. CVE-2026-106428

• mongo-c-driver-1.30.13-1.el8

• Fix edge case in Decimal128 parsing. CVE-2026-106438
• Enforce minimum size in bson_reserve_buffer. CVE-2026-106437
• Fix bson_writer_new when writing empty documents. CVE-2026-106431

• Fix SCRAM parser. CVE-2026-106428

• mongo-c-driver-1.30.13-1.el10_2

• Fix edge case in Decimal128 parsing. CVE-2026-106438
• Enforce minimum size in bson_reserve_buffer. CVE-2026-106437
• Fix bson_writer_new when writing empty documents. CVE-2026-106431

• Fix SCRAM parser. CVE-2026-106428

• mongo-c-driver-1.30.13-1.fc44

• Fix edge case in Decimal128 parsing. CVE-2026-106438
• Enforce minimum size in bson_reserve_buffer. CVE-2026-106437
• Fix bson_writer_new when writing empty documents. CVE-2026-106431

• Fix SCRAM parser. CVE-2026-106428

• mongo-c-driver-1.30.13-1.fc43

• Fix edge case in Decimal128 parsing. CVE-2026-106438
• Enforce minimum size in bson_reserve_buffer. CVE-2026-106437
• Fix bson_writer_new when writing empty documents. CVE-2026-106431

• Fix SCRAM parser. CVE-2026-106428

• curl-8.18.0-13.fc44

• Fix Negotiate ambient user conn reuse (CVE-2026-19931)

• mongo-c-driver-2.5.6-1.fc45

• Fix edge case in Decimal128 parsing. CVE-2026-106438
• Enforce minimum size in bson_reserve_buffer. CVE-2026-106437
• Fix bson_writer_new when writing empty documents. CVE-2026-106431

• mongo-c-driver-2.5.6-1.el10_3

• Fix edge case in Decimal128 parsing. CVE-2026-106438
• Enforce minimum size in bson_reserve_buffer. CVE-2026-106437
• Fix bson_writer_new when writing empty documents. CVE-2026-106431

• mongo-c-driver-2.5.6-1.el10_4

• Fix edge case in Decimal128 parsing. CVE-2026-106438
• Enforce minimum size in bson_reserve_buffer. CVE-2026-106437
• Fix bson_writer_new when writing empty documents. CVE-2026-106431