Fedora Security Advisories

nsd-4.15.3-1.fc43

Fedora Security Advisories
2 hours 49 minutes ago
FEDORA-2026-447c66a9bc Packages in this update:
  • nsd-4.15.3-1.fc43
Update description: Update to simdzone-0.2.7 with fixes for CVE-2026-101337, CVE-2026-101338, CVE-2026-101339 and CVE-2026-101341 Fix for CVE-2026-101337: Reserve correct number of bytes for base64 sequence tokens, regardless of stream decoder phase. Thanks to Qifan Zhang, Palo Alto Networks, and Gaurang Maheta for the report. https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101337.txt Fix for CVE-2026-101338: No SVCB and/or HTTPS parameters are parsed when the RDATA is already filled to the brim. Thanks to Qifan Zhang, Palo Alto Networks, for the report. https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101338.txt Fix CVE-2026-101339: Fix for dname possibility to overwrite the stack when near the RDATA limit. Thanks to Qifan Zhang, Palo Alto Networks, and Alwaleed Ashi (LXR) waleed.9998@hotmail.com for the report. https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101339.txt Fix for CVE-2026-101341: Also check that RDATA stays within bounds while parsing string tokens under 32 bytes. Thanks to Alwaleed Ashi (LXR) waleed.9998@hotmail.com for the report https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101341.txt

nsd-4.15.3-1.el10_2

Fedora Security Advisories
2 hours 49 minutes ago
FEDORA-EPEL-2026-f041c72fb8 Packages in this update:
  • nsd-4.15.3-1.el10_2
Update description: Update to simdzone-0.2.7 with fixes for CVE-2026-101337, CVE-2026-101338, CVE-2026-101339 and CVE-2026-101341 Fix for CVE-2026-101337: Reserve correct number of bytes for base64 sequence tokens, regardless of stream decoder phase. Thanks to Qifan Zhang, Palo Alto Networks, and Gaurang Maheta for the report. https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101337.txt Fix for CVE-2026-101338: No SVCB and/or HTTPS parameters are parsed when the RDATA is already filled to the brim. Thanks to Qifan Zhang, Palo Alto Networks, for the report. https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101338.txt Fix CVE-2026-101339: Fix for dname possibility to overwrite the stack when near the RDATA limit. Thanks to Qifan Zhang, Palo Alto Networks, and Alwaleed Ashi (LXR) waleed.9998@hotmail.com for the report. https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101339.txt Fix for CVE-2026-101341: Also check that RDATA stays within bounds while parsing string tokens under 32 bytes. Thanks to Alwaleed Ashi (LXR) waleed.9998@hotmail.com for the report https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101341.txt

nsd-4.15.3-1.el10_3

Fedora Security Advisories
2 hours 49 minutes ago
FEDORA-EPEL-2026-326e6032bd Packages in this update:
  • nsd-4.15.3-1.el10_3
Update description: Update to simdzone-0.2.7 with fixes for CVE-2026-101337, CVE-2026-101338, CVE-2026-101339 and CVE-2026-101341 Fix for CVE-2026-101337: Reserve correct number of bytes for base64 sequence tokens, regardless of stream decoder phase. Thanks to Qifan Zhang, Palo Alto Networks, and Gaurang Maheta for the report. https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101337.txt Fix for CVE-2026-101338: No SVCB and/or HTTPS parameters are parsed when the RDATA is already filled to the brim. Thanks to Qifan Zhang, Palo Alto Networks, for the report. https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101338.txt Fix CVE-2026-101339: Fix for dname possibility to overwrite the stack when near the RDATA limit. Thanks to Qifan Zhang, Palo Alto Networks, and Alwaleed Ashi (LXR) waleed.9998@hotmail.com for the report. https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101339.txt Fix for CVE-2026-101341: Also check that RDATA stays within bounds while parsing string tokens under 32 bytes. Thanks to Alwaleed Ashi (LXR) waleed.9998@hotmail.com for the report https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101341.txt

nsd-4.15.3-1.fc44

Fedora Security Advisories
2 hours 49 minutes ago
FEDORA-2026-24b48c1f89 Packages in this update:
  • nsd-4.15.3-1.fc44
Update description: Update to simdzone-0.2.7 with fixes for CVE-2026-101337, CVE-2026-101338, CVE-2026-101339 and CVE-2026-101341 Fix for CVE-2026-101337: Reserve correct number of bytes for base64 sequence tokens, regardless of stream decoder phase. Thanks to Qifan Zhang, Palo Alto Networks, and Gaurang Maheta for the report. https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101337.txt Fix for CVE-2026-101338: No SVCB and/or HTTPS parameters are parsed when the RDATA is already filled to the brim. Thanks to Qifan Zhang, Palo Alto Networks, for the report. https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101338.txt Fix CVE-2026-101339: Fix for dname possibility to overwrite the stack when near the RDATA limit. Thanks to Qifan Zhang, Palo Alto Networks, and Alwaleed Ashi (LXR) waleed.9998@hotmail.com for the report. https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101339.txt Fix for CVE-2026-101341: Also check that RDATA stays within bounds while parsing string tokens under 32 bytes. Thanks to Alwaleed Ashi (LXR) waleed.9998@hotmail.com for the report https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101341.txt

nsd-4.15.3-1.fc45

Fedora Security Advisories
2 hours 49 minutes ago
FEDORA-2026-3d49d46891 Packages in this update:
  • nsd-4.15.3-1.fc45
Update description: Update to simdzone-0.2.7 with fixes for CVE-2026-101337, CVE-2026-101338, CVE-2026-101339 and CVE-2026-101341 Fix for CVE-2026-101337: Reserve correct number of bytes for base64 sequence tokens, regardless of stream decoder phase. Thanks to Qifan Zhang, Palo Alto Networks, and Gaurang Maheta for the report. https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101337.txt Fix for CVE-2026-101338: No SVCB and/or HTTPS parameters are parsed when the RDATA is already filled to the brim. Thanks to Qifan Zhang, Palo Alto Networks, for the report. https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101338.txt Fix CVE-2026-101339: Fix for dname possibility to overwrite the stack when near the RDATA limit. Thanks to Qifan Zhang, Palo Alto Networks, and Alwaleed Ashi (LXR) waleed.9998@hotmail.com for the report. https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101339.txt Fix for CVE-2026-101341: Also check that RDATA stays within bounds while parsing string tokens under 32 bytes. Thanks to Alwaleed Ashi (LXR) waleed.9998@hotmail.com for the report https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101341.txt

nsd-4.15.3-1.el10_4

Fedora Security Advisories
2 hours 49 minutes ago
FEDORA-EPEL-2026-8eb91c1bcf Packages in this update:
  • nsd-4.15.3-1.el10_4
Update description: Update to simdzone-0.2.7 with fixes for CVE-2026-101337, CVE-2026-101338, CVE-2026-101339 and CVE-2026-101341 Fix for CVE-2026-101337: Reserve correct number of bytes for base64 sequence tokens, regardless of stream decoder phase. Thanks to Qifan Zhang, Palo Alto Networks, and Gaurang Maheta for the report. https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101337.txt Fix for CVE-2026-101338: No SVCB and/or HTTPS parameters are parsed when the RDATA is already filled to the brim. Thanks to Qifan Zhang, Palo Alto Networks, for the report. https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101338.txt Fix CVE-2026-101339: Fix for dname possibility to overwrite the stack when near the RDATA limit. Thanks to Qifan Zhang, Palo Alto Networks, and Alwaleed Ashi (LXR) waleed.9998@hotmail.com for the report. https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101339.txt Fix for CVE-2026-101341: Also check that RDATA stays within bounds while parsing string tokens under 32 bytes. Thanks to Alwaleed Ashi (LXR) waleed.9998@hotmail.com for the report https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101341.txt

nsd-4.15.3-1.el9

Fedora Security Advisories
2 hours 49 minutes ago
FEDORA-EPEL-2026-94e7fc5f94 Packages in this update:
  • nsd-4.15.3-1.el9
Update description: Update to simdzone-0.2.7 with fixes for CVE-2026-101337, CVE-2026-101338, CVE-2026-101339 and CVE-2026-101341 Fix for CVE-2026-101337: Reserve correct number of bytes for base64 sequence tokens, regardless of stream decoder phase. Thanks to Qifan Zhang, Palo Alto Networks, and Gaurang Maheta for the report. https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101337.txt Fix for CVE-2026-101338: No SVCB and/or HTTPS parameters are parsed when the RDATA is already filled to the brim. Thanks to Qifan Zhang, Palo Alto Networks, for the report. https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101338.txt Fix CVE-2026-101339: Fix for dname possibility to overwrite the stack when near the RDATA limit. Thanks to Qifan Zhang, Palo Alto Networks, and Alwaleed Ashi (LXR) waleed.9998@hotmail.com for the report. https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101339.txt Fix for CVE-2026-101341: Also check that RDATA stays within bounds while parsing string tokens under 32 bytes. Thanks to Alwaleed Ashi (LXR) waleed.9998@hotmail.com for the report https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101341.txt

helix-25.07.1-13.fc43 rust-dua-cli-2.38.1-3.fc43 rust-gengo-bin-0.15.0-3.fc43 rust-gitui-0.28.1-4.fc43 stgit-2.6.1-3.fc43

Fedora Security Advisories
10 hours 7 minutes ago
FEDORA-2026-957c1e5c9d Packages in this update:
  • helix-25.07.1-13.fc43
  • rust-dua-cli-2.38.1-3.fc43
  • rust-gengo-bin-0.15.0-3.fc43
  • rust-gitui-0.28.1-4.fc43
  • stgit-2.6.1-3.fc43
Update description:

Rebuilt several packages with faster-hex version 0.10.1 to fix RUSTSEC-2026-0306, an unsoundness issue on x86 and x86_64 when AVX2 is enabled.

chromium-155.0.8059.84-1.el10_4

Fedora Security Advisories
11 hours 13 minutes ago
FEDORA-EPEL-2026-8f19f5cc9d Packages in this update:
  • chromium-155.0.8059.84-1.el10_4
Update description:

Update to 155.0.8059.84, includes 10 security fixes

  • CVE-2026-110913: Memory corruption in DOM
  • CVE-2026-110914: Memory corruption in Workers
  • CVE-2026-110915: Use after free in Compositing
  • CVE-2026-110916: Improper input validation in Desktop
  • CVE-2026-110917: Memory corruption in SVG
  • CVE-2026-110918: Memory corruption in Core
  • CVE-2026-110919: Use after free in V8
  • CVE-2026-110920: Memory corruption in V8
  • CVE-2026-110921: Use after free in V8
  • CVE-2026-110922: Use after free in Prerender

chromium-155.0.8059.84-1.fc44

Fedora Security Advisories
11 hours 13 minutes ago
FEDORA-2026-aab47c4e08 Packages in this update:
  • chromium-155.0.8059.84-1.fc44
Update description:

Update to 155.0.8059.84, includes 10 security fixes

  • CVE-2026-110913: Memory corruption in DOM
  • CVE-2026-110914: Memory corruption in Workers
  • CVE-2026-110915: Use after free in Compositing
  • CVE-2026-110916: Improper input validation in Desktop
  • CVE-2026-110917: Memory corruption in SVG
  • CVE-2026-110918: Memory corruption in Core
  • CVE-2026-110919: Use after free in V8
  • CVE-2026-110920: Memory corruption in V8
  • CVE-2026-110921: Use after free in V8
  • CVE-2026-110922: Use after free in Prerender
Checked
1 minute 1 second ago
URL
https://bodhi.fedoraproject.org/rss/updates/?type=security