Aggregator

FEDORA-2026-61b2a3477a Packages in this update:

• cockpit-368-1.fc44

Update description:

Automatic update for cockpit-368-1.fc44.

Changelog for cockpit * Wed Sep 23 2026 Packit <hello@packit.dev> - 368-1 - Limit concurrent connections CVE-2026-91149 - Harden cockpit-ws against trailing slash CVE-2026-91147 - Sanitize URLs from PackageKit CVE-2026-91148 - Interactive file chooser for SSH keys - Bug fixes and translation updates - Resolves RHEL-263070, RHEL-262891, RHEL-253609 for rhel-10.4 - Resolves RHEL-263066 for rhel-9.10

FEDORA-2026-d375ea9e79 Packages in this update:

• cockpit-368-1.fc45

Update description:

Automatic update for cockpit-368-1.fc45.

Changelog for cockpit * Wed Sep 23 2026 Packit <hello@packit.dev> - 368-1 - Limit concurrent connections CVE-2026-91149 - Harden cockpit-ws against trailing slash CVE-2026-91147 - Sanitize URLs from PackageKit CVE-2026-91148 - Interactive file chooser for SSH keys - Bug fixes and translation updates - Resolves RHEL-263070, RHEL-262891, RHEL-253609 for rhel-10.4 - Resolves RHEL-263066 for rhel-9.10

FEDORA-2026-4923296720 Packages in this update:

• cockpit-machines-357-1.fc43

Update description:

Automatic update for cockpit-machines-357-1.fc43.

Changelog for cockpit-machines * Wed Sep 23 2026 Packit <hello@packit.dev> - 357-1 - Harden against local attacks from accessing sensitive data CVE-2026-92768, CVE-2026-92747, CVE-2026-92745 - Resolves RHEL-263125, RHEL-263121, RHEL-263122 for rhel-10.4 - Resolves RHEL-263116, RHEL-263119, RHEL-263126 for rhel-9.10

FEDORA-2026-57e39fc2fa Packages in this update:

• cockpit-machines-357-1.fc44

Update description:

Automatic update for cockpit-machines-357-1.fc44.

Changelog for cockpit-machines * Wed Sep 23 2026 Packit <hello@packit.dev> - 357-1 - Harden against local attacks from accessing sensitive data CVE-2026-92768, CVE-2026-92747, CVE-2026-92745 - Resolves RHEL-263125, RHEL-263121, RHEL-263122 for rhel-10.4 - Resolves RHEL-263116, RHEL-263119, RHEL-263126 for rhel-9.10

FEDORA-2026-2afda0f514 Packages in this update:

• cockpit-machines-357-1.fc45

Update description:

Automatic update for cockpit-machines-357-1.fc45.

Changelog for cockpit-machines * Wed Sep 23 2026 Packit <hello@packit.dev> - 357-1 - Harden against local attacks from accessing sensitive data CVE-2026-92768, CVE-2026-92747, CVE-2026-92745 - Resolves RHEL-263125, RHEL-263121, RHEL-263122 for rhel-10.4 - Resolves RHEL-263116, RHEL-263119, RHEL-263126 for rhel-9.10

FEDORA-2026-f41fd82fcf Packages in this update:

• cockpit-files-45-1.fc45

Update description:

Automatic update for cockpit-files-45-1.fc45.

FEDORA-2026-a643ae21d6 Packages in this update:

• cockpit-files-45-1.fc43

Update description:

Automatic update for cockpit-files-45-1.fc43.

Changelog for cockpit-files * Wed Sep 23 2026 Packit <hello@packit.dev> - 45-1 - Fixes CVE-2026-91202, CVE-2026-91203, CVE-2026-91205 - Resolves RHEL-263138, RHEL-263139, RHEL-263144 for rhel-10.4 - Resolves RHEL-263135, RHEL-263137, RHEL-263145 for rhel-9.10

It was discovered that Moodle did not properly restrict URLs. An authenticated user could possibly use this issue to perform a server-side request forgery attack and expose sensitive information.

FEDORA-2026-b3367f2111 Packages in this update:

• emacs-31.1-4.fc46

Update description:

Automatic update for emacs-31.1-4.fc46.

Changelog * Wed Sep 23 2026 Peter Oliver <git@mavit.org.uk> - 1:31.1-4 - Prevent arbitrary code execution in flymake (rhbz#2537390).

FEDORA-2026-d2c4c4794c Packages in this update:

• openvpn-2.6.23-1.fc43

Update description:

Update to upstream OpenVPN 2.6.23

FEDORA-2026-59a4f90bc0 Packages in this update:

• hplip-3.26.6-1.fc43

Update description:

3.26.6, fixes CVE-2026-91105,CVE-2026-91103,CVE-2026-91102,CVE-2026-91101,

CVE-2026-91100,CVE-2026-91099,CVE-2026-91098,CVE-2026-91097

FEDORA-2026-1e23d80c94 Packages in this update:

• librsvg2-2.63.2-1.fc45
• rust-librsvg-2.63.2-1.fc45
• rust-xml5ever-0.39.0-1.fc45

Update description:

Update librsvg to version 2.63.2.

This includes a fix for a potential use-after-free bug (assigned RUSTSEC-2026-0305, also assigned CVE-2026-96889 - see upstream bug report).

It was discovered that NetworkManager did not properly restrict the ca-path and phase2-ca-path certificate authority settings for private (single-user) 802.1X network connections. An attacker could use this issue to point their own private 802.1X connection profile at a directory under their control, causing NetworkManager to trust an attacker-chosen certificate authority and potentially exposing network credentials via a rogue authentication server.

FEDORA-2026-9e80aed94f Packages in this update:

• hplip-3.26.6-1.fc44

Update description:

3.26.6, fixes CVE-2026-91105,CVE-2026-91103,CVE-2026-91102,CVE-2026-91101,

CVE-2026-91100,CVE-2026-91099,CVE-2026-91098,CVE-2026-91097

FEDORA-2026-ebccf08143 Packages in this update:

• hplip-3.26.6-1.fc45

Update description:

3.26.6, fixes CVE-2026-91105,CVE-2026-91103,CVE-2026-91102,CVE-2026-91101,

CVE-2026-91100,CVE-2026-91099,CVE-2026-91098,CVE-2026-91097

FEDORA-2026-ff8f6f4444 Packages in this update:

• freerdp-3.32.0-1.fc45

Update description:

Update to 3.32.0

FEDORA-2026-d021fefd24 Packages in this update:

• freerdp-3.32.0-1.fc44

Update description:

Update to 3.32.0

FEDORA-2026-2c0751e1a3 Packages in this update:

• freerdp-3.32.0-1.fc43

Update description:

Update to 3.32.0

FEDORA-2026-fdb231ab53 Packages in this update:

• fetchmail-6.6.8-1.fc43

Update description:

Update to fetchmail-6.6.8 (CVE-2026-94184)

Update to fetchmail-6.6.7

FEDORA-2026-ffdc059b16 Packages in this update:

• fetchmail-6.6.8-1.fc44

Update description:

Update to fetchmail-6.6.8 (CVE-2026-94184)

Update to fetchmail-6.6.7