Fedora Security Advisories

• suricata-7.0.16-1.el8

Upstream bugfix/security release

• suricata-7.0.16-1.el9

Upstream security/bugfix release

• suricata-8.0.5-1.el10_2

Upstream security/bugfix release

• suricata-8.0.5-1.el10_3

Upstream security/bugfix release

• suricata-7.0.17-1.fc43

Upstream security/bugfix release

• suricata-8.0.6-1.fc44

Upstream security/bugfix release

• python-wsgidav-4.3.5-1.el9

fixes the following security issues:

• CVE-2026-55509
• CVE-2026-55560

• python-wsgidav-4.3.5-1.fc43

fixes the following security issues:

• CVE-2026-55509
• CVE-2026-55560

• python-wsgidav-4.3.5-1.el10_2

fixes the following security issues:

• CVE-2026-55509
• CVE-2026-55560

• python-wsgidav-4.3.5-1.fc44

fixes the following security issues:

• CVE-2026-55509
• CVE-2026-55560

• python-wsgidav-4.3.5-1.el10_3

fixes the following security issues:

• CVE-2026-55509
• CVE-2026-55560

• curl-8.18.0-8.fc44

• Fix trailing dot domain super cookie (CVE-2026-8924)
• Fix SSH improper host validation (CVE-2026-9547)
• Fix password leak with netrc and user in URL (CVE-2026-8926)
• Fix cross-origin Digest auth state leak (CVE-2026-11856)
• Fix cross-proxy Digest auth state leak (CVE-2026-7168)
• Fix OCSP stapling bypass with Apple SecTrust (CVE-2026-7009)

• gh-2.97.0-2.fc44

Update to 2.97.0

• gh-2.97.0-2.el10_2

Update to 2.97.0

• gh-2.97.0-2.el10_3

Update to 2.97.0

• gh-2.97.0-2.el9

Update to 2.97.0

• bird-3.3.2-1.el8

• BGP: Fix stack buffer overflow in Flowspec NLRI decoder
• BGP: Minor improvements in Flowspec parsing
• BGP: Fix minor issues with send hold timer
• Fix null byte handling in authentication keys
• Pipe, L3VPN: Fix hostentry stripping
• Filter: Fix zero arg handling
• Logging: Fix use-after-free on failed rotation
• CLI: Fix crashes in show route
• Allocator: Pre-fill hot pages when entering RCU critical section
• Fix obstacle cleanup
• Update bird-users mailing list links

See also: https://trubka.network.cz/archives/list/bird-users@network.cz/thread/XOVK5DHDS4LXJ5HB5PZX7533T7JEZZ4U/

• bird-3.3.2-1.fc43

• BGP: Fix stack buffer overflow in Flowspec NLRI decoder
• BGP: Minor improvements in Flowspec parsing
• BGP: Fix minor issues with send hold timer
• Fix null byte handling in authentication keys
• Pipe, L3VPN: Fix hostentry stripping
• Filter: Fix zero arg handling
• Logging: Fix use-after-free on failed rotation
• CLI: Fix crashes in show route
• Allocator: Pre-fill hot pages when entering RCU critical section
• Fix obstacle cleanup
• Update bird-users mailing list links

See also: https://trubka.network.cz/archives/list/bird-users@network.cz/thread/XOVK5DHDS4LXJ5HB5PZX7533T7JEZZ4U/

• bird-3.3.2-1.el10_3

• BGP: Fix stack buffer overflow in Flowspec NLRI decoder
• BGP: Minor improvements in Flowspec parsing
• BGP: Fix minor issues with send hold timer
• Fix null byte handling in authentication keys
• Pipe, L3VPN: Fix hostentry stripping
• Filter: Fix zero arg handling
• Logging: Fix use-after-free on failed rotation
• CLI: Fix crashes in show route
• Allocator: Pre-fill hot pages when entering RCU critical section
• Fix obstacle cleanup
• Update bird-users mailing list links

See also: https://trubka.network.cz/archives/list/bird-users@network.cz/thread/XOVK5DHDS4LXJ5HB5PZX7533T7JEZZ4U/

• bird-3.3.2-1.el9

• BGP: Fix stack buffer overflow in Flowspec NLRI decoder
• BGP: Minor improvements in Flowspec parsing
• BGP: Fix minor issues with send hold timer
• Fix null byte handling in authentication keys
• Pipe, L3VPN: Fix hostentry stripping
• Filter: Fix zero arg handling
• Logging: Fix use-after-free on failed rotation
• CLI: Fix crashes in show route
• Allocator: Pre-fill hot pages when entering RCU critical section
• Fix obstacle cleanup
• Update bird-users mailing list links

See also: https://trubka.network.cz/archives/list/bird-users@network.cz/thread/XOVK5DHDS4LXJ5HB5PZX7533T7JEZZ4U/