Aggregator

freerdp2-2.11.7-16.fc46

Fedora Security Advisories
4 days 21 hours ago
FEDORA-2026-1c0deda1e7 Packages in this update:
  • freerdp2-2.11.7-16.fc46
Update description:

Automatic update for freerdp2-2.11.7-16.fc46.

Changelog * Mon Aug 31 2026 Ondrej Holy <oholy@redhat.com> - 2.11.7-16 - Backport several CVE fixes (CVE-2026-22852, CVE-2026-22854, CVE-2026-22855, CVE-2026-22856, CVE-2026-22858, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531, CVE-2026-23532, CVE-2026-23533, CVE-2026-23534, CVE-2026-23732, CVE-2026-23883, CVE-2026-23884, CVE-2026-23948, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676, CVE-2026-24679, CVE-2026-24681, CVE-2026-24683, CVE-2026-24684, CVE-2026-25952, CVE-2026-26955, CVE-2026-26965, CVE-2026-26986, CVE-2026-27951, CVE-2026-29775, CVE-2026-31806, CVE-2026-31883, CVE-2026-31884, CVE-2026-31885, CVE-2026-33983, CVE-2026-33984, CVE-2026-33985, CVE-2026-45700, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299 and CVE-2026-68580) Resolves: rhbz#2430919, rhbz#2430908, rhbz#2430898, rhbz#2430914, rhbz#2430903 Resolves: rhbz#2430924, rhbz#2430933, rhbz#2429808, rhbz#2429823, rhbz#2429794 Resolves: rhbz#2443146, rhbz#2442975, rhbz#2429799, rhbz#2429814, rhbz#2429821 Resolves: rhbz#2438309, rhbz#2438321, rhbz#2438308, rhbz#2438328, rhbz#2438324 Resolves: rhbz#2438302, rhbz#2438310, rhbz#2438300, rhbz#2447394, rhbz#2453243 Resolves: rhbz#2453240, rhbz#2442837, rhbz#2442810, rhbz#2447426, rhbz#2447422 Resolves: rhbz#2447413, rhbz#2447416, rhbz#2453247, rhbz#2442857, rhbz#2491683 Resolves: rhbz#2510295, rhbz#2510643, rhbz#2503646, rhbz#2510448

USN-8708-1: sudo-rs vulnerability

Ubuntu Security Advisories
4 days 22 hours ago
It was discovered that sudo-rs incorrectly handled time-of-check vs time- of-use conditions in sudoedit. A local attacker with permission to edit specific files using sudoedit could use this issue to place files in arbitrary directories, and possibly escalate their privileges. This issue only affected systems configured to grant fine-grained sudoedit file editing permissions, which is not the default configuration.

perl-Net-DNS-1.56-1.el10_3

Fedora Security Advisories
5 days ago
FEDORA-EPEL-2026-9d8de529df Packages in this update:
  • perl-Net-DNS-1.56-1.el10_3
Update description:

Security fixes (main reason to update) - Remote code injection via EDNS EXTENDED ERROR (rt.cpan #179945) - 1.56 - DoS via long DNS compression chains (rt.cpan #179946) - 1.56 - UNIX.pm no longer relies on shell for uname (rt.cpan #176900) -1.55

Notable bug fixes across the range - TCP AXFR corruption from 1-byte 0x30 treated as EOF (#177003) - IPv4 loopback disabled in IPv6-only config — Fedora41 (#158714) - Multiple "uninitialized value" fixes in UDP/TCP paths (#158706, #157700) - Nameserver: SOA missing in NODATA response (#157669)

perl-Net-DNS-1.56-1.el10_4

Fedora Security Advisories
5 days ago
FEDORA-EPEL-2026-8249fe4a72 Packages in this update:
  • perl-Net-DNS-1.56-1.el10_4
Update description:

1.56 bump

Security fixes (main reason to update) - Remote code injection via EDNS EXTENDED ERROR (rt.cpan #179945) — 1.56 - DoS via long DNS compression chains (rt.cpan #179946) — 1.56 - UNIX.pm no longer relies on shell for uname (rt.cpan #176900) — 1.55

Notable bug fixes across the range

  • TCP AXFR corruption from 1-byte 0x30 treated as EOF (#177003)
  • IPv4 loopback disabled in IPv6-only config — Fedora41 (#158714)
  • Multiple "uninitialized value" fixes in UDP/TCP paths (#158706, #157700)
  • Nameserver: SOA missing in NODATA response (#157669)
  • Resolver base selection bug on non-Unix platforms (#168433)

perl-Net-DNS-1.56-1.fc43

Fedora Security Advisories
5 days 2 hours ago
FEDORA-2026-1237afef8a Packages in this update:
  • perl-Net-DNS-1.56-1.fc43
Update description:

Update to Net-DNS 1.56 (from 1.53).

Security fixes: - CVE-worthy: Remote code injection via EDNS EXTENDED ERROR (rt.cpan #179945) - Denial of Service via long DNS compression chains (rt.cpan #179946) - Resolver/UNIX.pm no longer relies on shell for uname (rt.cpan #176900)

Bug fixes: - Fix TCP read loop treating 1-byte recv() of "0" (0x30) as EOF, which corrupted AXFRs (rt.cpan #177003) - Fix unhelpful TAINT error (rt.cpan #178183) - Fix unreachable-code warning under Apache/mod_perl (rt.cpan #179692/#176900) - Documentation fix for Net::DNS::RR::RRSIG::verify() (rt.cpan #180088).

Other: - Resync with IANA DNS parameters and DNSSEC algorithm registries - New DNSKEY adt() accessor; DELEG parser backported to SVCB

perl-Net-DNS-1.56-1.fc44

Fedora Security Advisories
5 days 2 hours ago
FEDORA-2026-a0607111e6 Packages in this update:
  • perl-Net-DNS-1.56-1.fc44
Update description:

Update to Net-DNS 1.56 (from 1.53).

Security fixes: - CVE-worthy: Remote code injection via EDNS EXTENDED ERROR (rt.cpan #179945) - Denial of Service via long DNS compression chains (rt.cpan #179946) - Resolver/UNIX.pm no longer relies on shell for uname (rt.cpan #176900)

Bug fixes: - Fix TCP read loop treating 1-byte recv() of "0" (0x30) as EOF, which corrupted AXFRs (rt.cpan #177003) - Fix unhelpful TAINT error (rt.cpan #178183) - Fix unreachable-code warning under Apache/mod_perl (rt.cpan #179692/#176900) - Documentation fix for Net::DNS::RR::RRSIG::verify() (rt.cpan #180088).

Other: - Resync with IANA DNS parameters and DNSSEC algorithm registries - New DNSKEY adt() accessor; DELEG parser backported to SVCB

mongo-c-driver-2.5.1-1.fc45

Fedora Security Advisories
5 days 3 hours ago
FEDORA-2026-fec1bd0e65 Packages in this update:
  • mongo-c-driver-2.5.1-1.fc45
Update description: libmongoc 2.5.1

Fixes

  • Validate database and collection name arguments against "." and NUL bytes (CVE-2026-81524)