Update to latest upstream security release. Fixes an impersonation vulnerability in libsignal-service-rs. See: https://gitlab.com/schmiddi-on-mobile/flare/-/releases/0.22.4 .
Update to latest upstream security release. Fixes an impersonation vulnerability in libsignal-service-rs. See: https://gitlab.com/schmiddi-on-mobile/flare/-/releases/0.22.4 .
Update to latest upstream security release. Fixes an impersonation vulnerability in libsignal-service-rs. See: https://gitlab.com/schmiddi-on-mobile/flare/-/releases/0.22.4 .
Automatic update for ImageMagick-6.9.13.58-1.el9.
Changelog for ImageMagick * Sun Oct 11 2026 Luya Tshimbalanga <luya@fedoraproject.org> - 1:6.9.13.58-1 - Update to version 6.9.13.58 - Resolves: rhbz#2391125 - Resolves: rhbz#2392773 - Resolves: rhbz#2393600 - Resolves: rhbz#2404847 - Resolves: rhbz#2418553 - Resolves: rhbz#2421113Automatic update for ImageMagick-6.9.13.58-1.el8.
Changelog for ImageMagick * Sun Oct 11 2026 Luya Tshimbalanga <luya@fedoraproject.org> - 1:6.9.13.58-1 - Update to version 6.9.13.58 - Resolves: rhbz#2391124 - Resolves: rhbz#2392772 - Resolves: rhbz#2393599 - Resolves: rhbz#2404847 - Resolves: rhbz#2418552Automatic update for libpng12-1.2.57-27.fc46.
Changelog * Sun Oct 11 2026 Michal Hlavinka <mhlavink@redhat.com> - 1.2.57-27 - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (rhbz#2452156) - fix CVE-2025-64505: heap buffer overflow via malformed palette index (rhbz#2418423)The 7.2.10 stable kernel updates contain a number of important fixes across the tree.
The 7.2.10 stable kernel updates contain a number of important fixes across the tree.
The 7.2.10 stable kernel updates contain a number of important fixes across the tree.
Automatic update for libpng15-1.5.30-27.fc46.
Changelog * Sun Oct 11 2026 Michal Hlavinka <mhlavink@redhat.com> - 1.5.30-27 - fix CVE-2025-64505: heap buffer overflow via malformed palette index (rhbz#2418424) - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (rhbz#2452157)Windows tracks NLMTU per address family and Nebula only ever set it for AF_INET, so the IPv6 MTU on every Windows adapter sat at the adapter default of 65535 regardless of tun.mtu and the stack could hand Nebula packets far larger than configured. An IPv6 enabled overlay with tun.mtu under 1280 now refuses to start, matching the other platforms. (#1871) Android 11+ denies bind() on netlink route sockets inside the app sandbox, so local address discovery failed and an Android node advertised no underlay addresses, leaving peers on the same LAN to reach it only at the address a lighthouse observed. (#1881) Recompute the transport checksum on packets a host sends to its own overlay address. On macOS the kernel leaves the checksum unfinished for hardware offload, which does not survive the trip through userspace, so TCP and UDP to a host's own IPv6 overlay address were dropped as corrupt. (#1862)
Windows tracks NLMTU per address family and Nebula only ever set it for AF_INET, so the IPv6 MTU on every Windows adapter sat at the adapter default of 65535 regardless of tun.mtu and the stack could hand Nebula packets far larger than configured. An IPv6 enabled overlay with tun.mtu under 1280 now refuses to start, matching the other platforms. (#1871) Android 11+ denies bind() on netlink route sockets inside the app sandbox, so local address discovery failed and an Android node advertised no underlay addresses, leaving peers on the same LAN to reach it only at the address a lighthouse observed. (#1881) Recompute the transport checksum on packets a host sends to its own overlay address. On macOS the kernel leaves the checksum unfinished for hardware offload, which does not survive the trip through userspace, so TCP and UDP to a host's own IPv6 overlay address were dropped as corrupt. (#1862)
Update
Until now, GD::SecurityImage used Perl's built-in rand function to generate secrets. The rand function is unsuitable for security applications because it is predictable and reversible. With this update, the module is patched to use Crypt::URandom::MonkeyPatch to override built-in rand (CVE-2026-13082)