Automatic update for ImageMagick-6.9.13.58-1.el9.
Changelog for ImageMagick * Sun Oct 11 2026 Luya Tshimbalanga <luya@fedoraproject.org> - 1:6.9.13.58-1 - Update to version 6.9.13.58 - Resolves: rhbz#2391125 - Resolves: rhbz#2392773 - Resolves: rhbz#2393600 - Resolves: rhbz#2404847 - Resolves: rhbz#2418553 - Resolves: rhbz#2421113Automatic update for ImageMagick-6.9.13.58-1.el8.
Changelog for ImageMagick * Sun Oct 11 2026 Luya Tshimbalanga <luya@fedoraproject.org> - 1:6.9.13.58-1 - Update to version 6.9.13.58 - Resolves: rhbz#2391124 - Resolves: rhbz#2392772 - Resolves: rhbz#2393599 - Resolves: rhbz#2404847 - Resolves: rhbz#2418552Automatic update for libpng12-1.2.57-27.fc46.
Changelog * Sun Oct 11 2026 Michal Hlavinka <mhlavink@redhat.com> - 1.2.57-27 - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (rhbz#2452156) - fix CVE-2025-64505: heap buffer overflow via malformed palette index (rhbz#2418423)The 7.2.10 stable kernel updates contain a number of important fixes across the tree.
The 7.2.10 stable kernel updates contain a number of important fixes across the tree.
The 7.2.10 stable kernel updates contain a number of important fixes across the tree.
Automatic update for libpng15-1.5.30-27.fc46.
Changelog * Sun Oct 11 2026 Michal Hlavinka <mhlavink@redhat.com> - 1.5.30-27 - fix CVE-2025-64505: heap buffer overflow via malformed palette index (rhbz#2418424) - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (rhbz#2452157)Windows tracks NLMTU per address family and Nebula only ever set it for AF_INET, so the IPv6 MTU on every Windows adapter sat at the adapter default of 65535 regardless of tun.mtu and the stack could hand Nebula packets far larger than configured. An IPv6 enabled overlay with tun.mtu under 1280 now refuses to start, matching the other platforms. (#1871) Android 11+ denies bind() on netlink route sockets inside the app sandbox, so local address discovery failed and an Android node advertised no underlay addresses, leaving peers on the same LAN to reach it only at the address a lighthouse observed. (#1881) Recompute the transport checksum on packets a host sends to its own overlay address. On macOS the kernel leaves the checksum unfinished for hardware offload, which does not survive the trip through userspace, so TCP and UDP to a host's own IPv6 overlay address were dropped as corrupt. (#1862)
Windows tracks NLMTU per address family and Nebula only ever set it for AF_INET, so the IPv6 MTU on every Windows adapter sat at the adapter default of 65535 regardless of tun.mtu and the stack could hand Nebula packets far larger than configured. An IPv6 enabled overlay with tun.mtu under 1280 now refuses to start, matching the other platforms. (#1871) Android 11+ denies bind() on netlink route sockets inside the app sandbox, so local address discovery failed and an Android node advertised no underlay addresses, leaving peers on the same LAN to reach it only at the address a lighthouse observed. (#1881) Recompute the transport checksum on packets a host sends to its own overlay address. On macOS the kernel leaves the checksum unfinished for hardware offload, which does not survive the trip through userspace, so TCP and UDP to a host's own IPv6 overlay address were dropped as corrupt. (#1862)
Update
Until now, GD::SecurityImage used Perl's built-in rand function to generate secrets. The rand function is unsuitable for security applications because it is predictable and reversible. With this update, the module is patched to use Crypt::URandom::MonkeyPatch to override built-in rand (CVE-2026-13082)
Until now, GD::SecurityImage used Perl's built-in rand function to generate secrets. The rand function is unsuitable for security applications because it is predictable and reversible. With this update, the module is patched to use Crypt::URandom::MonkeyPatch to override built-in rand (CVE-2026-13082)
Until now, GD::SecurityImage used Perl's built-in rand function to generate secrets. The rand function is unsuitable for security applications because it is predictable and reversible. With this update, the module is patched to use Crypt::URandom::MonkeyPatch to override built-in rand (CVE-2026-13082)
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. This tool now uses Net::IDN::Encode instead of Net::IDN::Punycode, which fixes the issue.
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. This tool now uses Net::IDN::Encode instead of Net::IDN::Punycode, which fixes the issue.
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. This tool now uses Net::IDN::Encode instead of Net::IDN::Punycode, which fixes the issue.
Backported fix for CVE-2026-90783.
Latest mkvtoolnix stable update (changes: https://mkvtoolnix.download/doc/NEWS.md), with the fix for CVE-2026-90783. Includes required updates of libebml and libmatroska.
Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode. This also leak the output buffer on every rejected label in decode_punycode.
This update fixes both issues (and others).
Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode. This also leak the output buffer on every rejected label in decode_punycode.
This update fixes both issues (and others).