Fedora Security Advisories

• nodejs24-24.21.0-1.fc45

Rebase to Node.js 24.21.0, pulling in the upstream security releases and refreshed bundled dependencies: undici 7.29.1, nghttp2 1.70.0, npm 11.19.0, tar 7.5.19, pacote 21.5.1, brace-expansion 5.0.7.

• nodejs24-24.21.0-1.fc44

Rebase to Node.js 24.21.0, pulling in the upstream security releases and refreshed bundled dependencies: undici 7.29.1, nghttp2 1.70.0, npm 11.19.0, tar 7.5.19, pacote 21.5.1, brace-expansion 5.0.7.

• grout-0.19.3-1.fc45

New upstream release 0.19.3 (fedora#2552839)

New upstream release 0.19.0 (fedora#2548674)

• php-pecl-mongodb2-2.1.12-1.el10_2

Release Highlights

• PHPC-276: Prevent stack exhaustion when decoding deeply nested BSON
• PHPC-276: Enforce the decode nesting limit for CodeWScope scopes

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432

• php-pecl-mongodb2-2.1.12-1.fc44

Release Highlights

• PHPC-276: Prevent stack exhaustion when decoding deeply nested BSON
• PHPC-276: Enforce the decode nesting limit for CodeWScope scopes

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432

• php-pecl-mongodb2-2.1.12-1.fc43

Release Highlights

• PHPC-276: Prevent stack exhaustion when decoding deeply nested BSON
• PHPC-276: Enforce the decode nesting limit for CodeWScope scopes

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432

• php-pecl-mongodb-1.21.12-1.el10_2

Release Highlights

• PHPC-276: Prevent stack exhaustion when decoding deeply nested BSON
• PHPC-276: Enforce the decode nesting limit for CodeWScope scopes

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432

• php-pecl-mongodb2-2.5.5-1.el10_4

Release Highlights

• PHPC-276: Prevent stack exhaustion when decoding deeply nested BSON
• PHPC-276: Enforce the decode nesting limit for CodeWScope scopes

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432
• PHPC-2505: Fix foreach iteration of MongoDB\Driver\Cursor after garbage collection.

• php-pecl-mongodb2-2.5.5-1.fc45

Release Highlights

• PHPC-276: Prevent stack exhaustion when decoding deeply nested BSON
• PHPC-276: Enforce the decode nesting limit for CodeWScope scopes

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432
• PHPC-2505: Fix foreach iteration of MongoDB\Driver\Cursor after garbage collection.

• php-pecl-mongodb2-2.5.5-1.el10_3

Release Highlights

• PHPC-276: Prevent stack exhaustion when decoding deeply nested BSON
• PHPC-276: Enforce the decode nesting limit for CodeWScope scopes

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432
• PHPC-2505: Fix foreach iteration of MongoDB\Driver\Cursor after garbage collection.

• xorg-x11-server-21.1.25-2.fc44

xorg-server-21.1.25 fixups

Update to xserver 21.1.24, Security fixes for CVE-2026-88812, CVE-2026-93515, CVE-2026-93516, CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520, CVE-2026-93521, CVE-2026-93522, CVE-2026-93523, CVE-2026-93524, CVE-2026-93536

• xorg-x11-server-21.1.25-2.fc45

xorg-server-21.1.25 fixups

Update to xserver 21.1.24, Security fixes for CVE-2026-88812, CVE-2026-93515, CVE-2026-93516, CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520, CVE-2026-93521, CVE-2026-93522, CVE-2026-93523, CVE-2026-93524, CVE-2026-93536

• evolution-3.60.2-3.fc44
• evolution-data-server-3.60.2-2.fc44

Backport upstream patches for CVE-2026-110777 (Calendar: Limit which local files are inlined in components)

• pgbouncer-1.26.1-1.el10_4

Update to 1.26.1.

• pgbouncer-1.26.1-1.el10_2

Update to 1.26.1.

• pgbouncer-1.26.1-1.fc43

Update to 1.26.1.

• pgbouncer-1.26.1-1.fc44

Update to 1.26.1.

• pgbouncer-1.26.1-1.fc45

Update to 1.26.1.

• pgbouncer-1.26.1-1.el10_3

Update to 1.26.1.

• pgbouncer-1.26.1-1.el9

Update to 1.26.1.