Aggregator

ceph-20.2.4-1.fc44

Fedora Security Advisories
5 days 20 hours ago
FEDORA-2026-7de7d03796 Packages in this update:
  • ceph-20.2.4-1.fc44
Update description: Ceph 20.2.4 GA

ceph-19.2.6-1.fc43

Fedora Security Advisories
5 days 21 hours ago
FEDORA-2026-ebffec502b Packages in this update:
  • ceph-19.2.6-1.fc43
Update description: Ceph 19.2.6 GA

USN-8563-4: nginx regression

Ubuntu Security Advisories
6 days ago
USN-8563-3 fixed a vulnerability in nginx. The fix introduced a regression in certain environments. This update reverts the fix for CVE-2026-42533 pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered that nginx incorrectly handled certain map directives using regex matching and capture variables. A remote attacker could use this issue to cause nginx to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-42533) It was discovered that nginx had a use-after-free vulnerability in the ngx_http_ssi_module module when configured with Server-Side Includes, proxy_pass, and proxy buffering disabled directives. An attacker able to intercept traffic and control responses from an upstream server could possibly use this issue to cause nginx to crash, resulting in a denial of service. (CVE-2026-56434) It was discovered that nginx incorrectly handled certain requests in the ngx_http_slice_module module. A remote attacker could possibly use this issue to obtain sensitive information or cause nginx to crash, resulting in a denial of service. (CVE-2026-60005)

USN-8650-1: Cap'n Proto vulnerabilities

Ubuntu Security Advisories
6 days 3 hours ago
Chanho Kim and Jihyeok Han discovered that Cap'n Proto incorrectly handled negative Content-Length values or excessively large chunk sizes when processing HTTP messages. An attacker could possibly use these issues to cause HTTP messages to be interpreted inconsistently, resulting in HTTP request or response smuggling. (CVE-2026-32239, CVE-2026-32240)

bluez-5.87-4.fc43

Fedora Security Advisories
6 days 5 hours ago
FEDORA-2026-a1cdcc1604 Packages in this update:
  • bluez-5.87-4.fc43
Update description:

An out-of-bounds read flaw was found in BlueZ in the AVRCP profile implementation. The vulnerability exists in the parse_media_element() and parse_media_folder() functions in profiles/audio/avrcp.c, where insufficient validation of packet length fields in GetFolderItems responses allows a malicious Bluetooth device within range to cause an out-of-bounds memory read. This can result in a crash of the bluetoothd daemon (denial of service) and potentially expose sensitive heap memory contents.

This update fixes this issue (CVE-2026-75032)