Until now, GD::SecurityImage used Perl's built-in rand function to generate secrets. The rand function is unsuitable for security applications because it is predictable and reversible. With this update, the module is patched to use Crypt::URandom::MonkeyPatch to override built-in rand (CVE-2026-13082)
Until now, GD::SecurityImage used Perl's built-in rand function to generate secrets. The rand function is unsuitable for security applications because it is predictable and reversible. With this update, the module is patched to use Crypt::URandom::MonkeyPatch to override built-in rand (CVE-2026-13082)
Until now, GD::SecurityImage used Perl's built-in rand function to generate secrets. The rand function is unsuitable for security applications because it is predictable and reversible. With this update, the module is patched to use Crypt::URandom::MonkeyPatch to override built-in rand (CVE-2026-13082)
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. This tool now uses Net::IDN::Encode instead of Net::IDN::Punycode, which fixes the issue.
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. This tool now uses Net::IDN::Encode instead of Net::IDN::Punycode, which fixes the issue.
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. This tool now uses Net::IDN::Encode instead of Net::IDN::Punycode, which fixes the issue.
Backported fix for CVE-2026-90783.
Latest mkvtoolnix stable update (changes: https://mkvtoolnix.download/doc/NEWS.md), with the fix for CVE-2026-90783. Includes required updates of libebml and libmatroska.
Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode. This also leak the output buffer on every rejected label in decode_punycode.
This update fixes both issues (and others).
Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode. This also leak the output buffer on every rejected label in decode_punycode.
This update fixes both issues (and others).
Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode. This also leak the output buffer on every rejected label in decode_punycode.
This update fixes both issues (and others).
Update to 1.75.2
Update to 1.75.2
closes rhbz#2521816
Automatic update for ImageMagick-7.1.2.33-1.fc44.
Changelog for ImageMagick * Sun Oct 11 2026 Luya Tshimbalanga <luya@fedoraproject.org> - 1:7.1.2.33-1 - Update to version 7.1.2.33 - Resolves: rhbz#2391123 - Resolves: rhbz#2392771 - Resolves: rhbz#2393598 - Resolves: rhbz#2418551 - Resolves: rhbz#2548419 - Resolves: rhbz#2548420 - Resolves: rhbz#2548997Automatic update for ImageMagick-7.1.2.33-1.fc45.
Changelog for ImageMagick * Sun Oct 11 2026 Luya Tshimbalanga <luya@fedoraproject.org> - 1:7.1.2.33-1 - Update to version 7.1.2.33 - Resolves: rhbz#2391123 - Resolves: rhbz#2392771 - Resolves: rhbz#2393598 - Resolves: rhbz#2418551 - Resolves: rhbz#2548419 - Resolves: rhbz#2548420 - Resolves: rhbz#2548997Automatic update for ImageMagick-7.1.2.33-1.fc43.
Changelog for ImageMagick * Sun Oct 11 2026 Luya Tshimbalanga <luya@fedoraproject.org> - 1:7.1.2.33-1 - Update to version 7.1.2.33 - Resolves: rhbz#2391123 - Resolves: rhbz#2392771 - Resolves: rhbz#2393598 - Resolves: rhbz#2418551 - Resolves: rhbz#2548419 - Resolves: rhbz#2548420 - Resolves: rhbz#2548997Automatic update for ImageMagick-7.1.2.33-1.fc46.
Changelog * Sun Oct 11 2026 Luya Tshimbalanga <luya@fedoraproject.org> - 1:7.1.2.33-1 - Update to version 7.1.2.33 - Resolves: rhbz#2391123 - Resolves: rhbz#2392771 - Resolves: rhbz#2393598 - Resolves: rhbz#2418551 - Resolves: rhbz#2548419 - Resolves: rhbz#2548420 - Resolves: rhbz#2548997Update libheif to 1.23.6
Yet another security and bugfix release, see https://github.com/strukturag/libheif/releases/tag/v1.23.6
Update libheif to 1.23.6
Yet another security and bugfix release, see https://github.com/strukturag/libheif/releases/tag/v1.23.6