Fedora Security Advisories

python-django6-6.0.5-1.fc44

4 days 21 hours ago

FEDORA-2026-de6e24ae07 Packages in this update:

python-django6-6.0.5-1.fc44

Update description:

Fixes CVE-2026-5766: Potential denial-of-service vulnerability in ASGI requests via file upload limit bypass
Fixes CVE-2026-35192: Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST
Fixes CVE-2026-6907: Potential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware
Fixes CVE-2026-3902: ASGI header spoofing via underscore/hyphen conflation
Fixes CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin
Fixes CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable
Fixes CVE-2026-33033: Potential denial-of-service vulnerability in MultiPartParser via base64-encoded file upload
Fixes CVE-2026-33034: Potential denial-of-service vulnerability in ASGI requests via memory upload limit bypass
Fixes CVE-2026-25674: Potential incorrect permissions on newly created file system objects

mysql8.0-8.0.46-1.fc44

Fedora Security Advisories

5 days 2 hours ago

FEDORA-2026-1704f705ab Packages in this update:

mysql8.0-8.0.46-1.fc44

Update description:

MySQL 8.0.46

Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-46.html Known issue: s390x-specific issue - zlib with DFLTCC compressed pages with low KEY_BLOCK_SIZE values can cause ER_TOO_BIG_ROWSIZE errors in tables near the column count and their size limits. EOL notice: As of April 2026, with version 8.0.46, MySQL 8.0 reached End of Life (EoL).

mysql8.0-8.0.46-1.fc43

Fedora Security Advisories

5 days 2 hours ago

FEDORA-2026-0c462e5676 Packages in this update:

mysql8.0-8.0.46-1.fc43

Update description:

MySQL 8.0.46

Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-46.html Known issue: s390x-specific issue - zlib with DFLTCC compressed pages with low KEY_BLOCK_SIZE values can cause ER_TOO_BIG_ROWSIZE errors in tables near the column count and their size limits. EOL notice: As of April 2026, with version 8.0.46, MySQL 8.0 reached End of Life (EoL).

mysql8.0-8.0.46-1.fc42

Fedora Security Advisories

5 days 2 hours ago

FEDORA-2026-b78d5204fe Packages in this update:

mysql8.0-8.0.46-1.fc42

Update description:

MySQL 8.0.46

Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-46.html Known issue: s390x-specific issue - zlib with DFLTCC compressed pages with low KEY_BLOCK_SIZE values can cause ER_TOO_BIG_ROWSIZE errors in tables near the column count and their size limits. EOL notice: As of April 2026, with version 8.0.46, MySQL 8.0 reached End of Life (EoL).

proftpd-1.3.6e-10.el8

Fedora Security Advisories

5 days 2 hours ago

FEDORA-EPEL-2026-f4f7a26f7a Packages in this update:

proftpd-1.3.6e-10.el8

Update description:

This update contains an updated mod_wrap2_sql that addresses a potential SQL injection issue when connected to from a client with a maliciously-constructed reverse DNS record (CVE-2026-44331). Note that mod_wrap2_sql is not enabled by default and the issue can only happen if UseReverseDNS is enabled, which is also off by default.

proftpd-1.3.8d-3.el9

Fedora Security Advisories

5 days 2 hours ago

FEDORA-EPEL-2026-ddf8b5eac2 Packages in this update:

proftpd-1.3.8d-3.el9

Update description:

This update contains an updated mod_wrap2_sql that addresses a potential SQL injection issue when connected to from a client with a maliciously-constructed reverse DNS record (CVE-2026-44331). Note that mod_wrap2_sql is not enabled by default and the issue can only happen if UseReverseDNS is enabled, which is also off by default.

proftpd-1.3.9a-2.el10_3

Fedora Security Advisories

5 days 2 hours ago

FEDORA-EPEL-2026-fda27c1b84 Packages in this update:

proftpd-1.3.9a-2.el10_3

Update description:

This update contains an updated mod_wrap2_sql that addresses a potential SQL injection issue when connected to from a client with a maliciously-constructed reverse DNS record (CVE-2026-44331). Note that mod_wrap2_sql is not enabled by default and the issue can only happen if UseReverseDNS is enabled, which is also off by default.

proftpd-1.3.9a-2.el10_2

Fedora Security Advisories

5 days 2 hours ago

FEDORA-EPEL-2026-9f8a61c142 Packages in this update:

proftpd-1.3.9a-2.el10_2

Update description:

This update contains an updated mod_wrap2_sql that addresses a potential SQL injection issue when connected to from a client with a maliciously-constructed reverse DNS record (CVE-2026-44331). Note that mod_wrap2_sql is not enabled by default and the issue can only happen if UseReverseDNS is enabled, which is also off by default.

proftpd-1.3.9a-2.el10_1

Fedora Security Advisories

5 days 2 hours ago

FEDORA-EPEL-2026-c8e9680bd3 Packages in this update:

proftpd-1.3.9a-2.el10_1

Update description:

This update contains an updated mod_wrap2_sql that addresses a potential SQL injection issue when connected to from a client with a maliciously-constructed reverse DNS record (CVE-2026-44331). Note that mod_wrap2_sql is not enabled by default and the issue can only happen if UseReverseDNS is enabled, which is also off by default.

proftpd-1.3.9a-2.fc44

Fedora Security Advisories

5 days 2 hours ago

FEDORA-2026-871243b391 Packages in this update:

proftpd-1.3.9a-2.fc44

Update description:

This update contains an updated mod_wrap2_sql that addresses a potential SQL injection issue when connected to from a client with a maliciously-constructed reverse DNS record (CVE-2026-44331). Note that mod_wrap2_sql is not enabled by default and the issue can only happen if UseReverseDNS is enabled, which is also off by default.

proftpd-1.3.9a-2.fc43

Fedora Security Advisories

5 days 2 hours ago

FEDORA-2026-4ddb108952 Packages in this update:

proftpd-1.3.9a-2.fc43

Update description:

This update contains an updated mod_wrap2_sql that addresses a potential SQL injection issue when connected to from a client with a maliciously-constructed reverse DNS record (CVE-2026-44331). Note that mod_wrap2_sql is not enabled by default and the issue can only happen if UseReverseDNS is enabled, which is also off by default.