Aggregator

Version:next-20261105 (linux-next) Released:2026-11-05

USN-7230-2 fixed vulnerabilities in FRR. Unfortunately, the fix for CVE-2024-55553 introduced a regression in RPKI support, causing FRR to stop processing RPKI updates after the first one, so routes were not revalidated when RPKI data changed. In Ubuntu 20.04 LTS, the BGP daemon also failed to start when the RPKI module was enabled. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Iggy Frankovic discovered that FRR incorrectly handled certain BGP messages. A remote attacker could possibly use this issue to cause FRR to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2024-44070) It was discovered that FRR re-validated all routes in certain instances when the internal socket's buffer size overflowed. A remote attacker could possibly use this issue to impact the performance of FRR, resulting in a denial of service. (CVE-2024-55553)

FEDORA-EPEL-2026-353cc882e0 Packages in this update:

• rust-zstd-0.13.4-1.el10_3
• rust-zstd-safe-7.4.0-1.el10_3
• rust-zstd-sys-2.0.17-1.el10_3

Update description:

• Update the zstd crate to version 0.13.4.
• Update the zstd-safe crate to version 7.4.0.
• Update the zstd-sys crate to version 2.0.17.

This addresses multiple unsoundness and security issues in the zstd-safe and zstd-sys crates (assigned RUSTSEC-2026-0391, RUSTSEC-2026-0392, RUSTSEC-2026-0393, RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399, RUSTSEC-2026-0400, RUSTSEC-2026-0401, RUSTSEC-2026-0402, RUSTSEC-2026-0403, RUSTSEC-2026-0404, RUSTSEC-2026-0405, RUSTSEC-2026-0406).

Rebuilds of affected applications will be tracked and performed separately.

USN-8972-1 fixed vulnerabilities in HAProxy. On Ubuntu 22.04 LTS, the update caused a regression when processing certain chunked requests. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that HAProxy incorrectly handled truncated HTTP/2 PING frames. A remote attacker could possibly use this issue to cause HAProxy to consume excessive CPU resources, leading to a denial of service. (CVE-2026-110353) It was discovered that HAProxy incorrectly handled certain HTTP/1.1 chunked requests. A remote attacker could possibly use this issue to cause HAProxy to consume excessive CPU resources, leading to a denial of service. (CVE-2026-110354)

FEDORA-EPEL-2026-607a0f126b Packages in this update:

• prometheus-3.15.1-1.el10_2

Update description:

Update to 3.15.1

FEDORA-2026-141982f4f6 Packages in this update:

• python-PyMuPDF-1.27.2.2-3.fc43

Update description:

fix CVE-2026-120752 (rhbz#2567074)

FEDORA-EPEL-2026-127c54080c Packages in this update:

• qbittorrent-4.2.5-6.el8

Update description:

Security fixes for CVE-2024-51774 and CVE-2025-54310

FEDORA-2026-b0c436e022 Packages in this update:

• mysql8.4-8.4.13-2.fc45

Update description:

MySQL 8.4.13

Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-13.html Changelog: https://dev.mysql.com/doc/relnotes/mysql/8.4/en/ Released: 2026-10-20

FEDORA-2026-ffabfb2558 Packages in this update:

• mysql9.7-9.7.4-3.fc45

Update description:

MySQL 9.7.4

Release notes: https://dev.mysql.com/doc/relnotes/mysql/9.7/en/news-9-7-4.html Changelog: https://dev.mysql.com/doc/relnotes/mysql/9.7/en/ Released: 2026-10-20

FEDORA-EPEL-2026-31cdbfe4d8 Packages in this update:

• qbittorrent-4.6.7-1.el9

Update description:

Update to 4.6.7

FEDORA-EPEL-2026-1bf9f2a209 Packages in this update:

• pylint-3.3.9-3.el10_4

Update description:

Patch for CVE-2026-114608

FEDORA-EPEL-2026-4c3a95074e Packages in this update:

• rust-crypto-bigint-0.7.10-1.el9
• rust-ctutils-0.4.8-1.el9
• rust-elliptic-curve-0.14.3-1.el9
• rust-num-bigint0.4-0.4.8-1.el9
• rust-num-bigint-0.5.1-1.el9
• rust-num-modular0.6-0.6.5-1.el9
• rust-num-modular-0.7.0-1.el9
• rust-num-prime-0.5.0-3.el9
• rust-zmij-1.0.23-1.el9

Update description:

• Update the crypto-bigint crate to version 0.7.10.
• Update the ctutils crate to version 0.4.8.
• Update the elliptic-curve crate to version 0.14.3.
• Update the num-bigint crate to version 0.5.1 and add a compat package for version 0.4.
• Update the num-modular crate to version 0.7.0 and add a compat package for version 0.6.
• Update the zmij crate to version 1.0.23.

This update includes improvements to constant-time implementations in the crypto-bigint crate (assigned RUSTSEC-2026-0387).

Update to version 0.4.7.

FEDORA-EPEL-2026-9de0336e50 Packages in this update:

• rust-crypto-bigint-0.7.10-1.el10_4
• rust-ctutils-0.4.8-1.el10_4
• rust-elliptic-curve-0.14.3-1.el10_4
• rust-num-bigint0.4-0.4.8-1.el10_4
• rust-num-bigint-0.5.1-1.el10_4
• rust-num-modular0.6-0.6.5-1.el10_4
• rust-num-modular-0.7.0-1.el10_4
• rust-num-prime-0.5.0-3.el10_4
• rust-zmij-1.0.23-1.el10_4

Update description:

• Update the crypto-bigint crate to version 0.7.10.
• Update the ctutils crate to version 0.4.8.
• Update the elliptic-curve crate to version 0.14.3.
• Update the num-bigint crate to version 0.5.1 and add a compat package for version 0.4.
• Update the num-modular crate to version 0.7.0 and add a compat package for version 0.6.
• Update the zmij crate to version 1.0.23.

This update includes improvements to constant-time implementations in the crypto-bigint crate (assigned RUSTSEC-2026-0387).

Update to version 0.4.7.

FEDORA-2026-49adf7234d Packages in this update:

• rust-crypto-bigint-0.7.10-1.fc43
• rust-ctutils-0.4.8-1.fc43
• rust-elliptic-curve-0.14.3-1.fc43
• rust-num-bigint0.4-0.4.8-1.fc43
• rust-num-bigint-0.5.1-1.fc43
• rust-num-modular0.6-0.6.5-1.fc43
• rust-num-modular-0.7.0-1.fc43
• rust-num-prime-0.5.0-3.fc43
• rust-zmij-1.0.23-1.fc43

Update description:

• Update the crypto-bigint crate to version 0.7.10.
• Update the ctutils crate to version 0.4.8.
• Update the elliptic-curve crate to version 0.14.3.
• Update the num-bigint crate to version 0.5.1 and add a compat package for version 0.4.
• Update the num-modular crate to version 0.7.0 and add a compat package for version 0.6.
• Update the zmij crate to version 1.0.23.

This update includes improvements to constant-time implementations in the crypto-bigint crate (assigned RUSTSEC-2026-0387).

Update to version 0.4.7.

FEDORA-2026-666aa95b1b Packages in this update:

• rust-crypto-bigint-0.7.10-1.fc44
• rust-ctutils-0.4.8-1.fc44
• rust-elliptic-curve-0.14.3-1.fc44
• rust-num-bigint0.4-0.4.8-1.fc44
• rust-num-bigint-0.5.1-1.fc44
• rust-num-modular0.6-0.6.5-1.fc44
• rust-num-modular-0.7.0-1.fc44
• rust-num-prime-0.5.0-3.fc44
• rust-zmij-1.0.23-1.fc44

Update description:

• Update the crypto-bigint crate to version 0.7.10.
• Update the ctutils crate to version 0.4.8.
• Update the elliptic-curve crate to version 0.14.3.
• Update the num-bigint crate to version 0.5.1 and add a compat package for version 0.4.
• Update the num-modular crate to version 0.7.0 and add a compat package for version 0.6.
• Update the zmij crate to version 1.0.23.

This update includes improvements to constant-time implementations in the crypto-bigint crate (assigned RUSTSEC-2026-0387).

Update to version 0.4.7.

FEDORA-2026-45268841b3 Packages in this update:

• rust-crypto-bigint-0.7.10-1.fc45
• rust-ctutils-0.4.8-1.fc45
• rust-elliptic-curve-0.14.3-1.fc45
• rust-num-bigint0.4-0.4.8-1.fc45
• rust-num-bigint-0.5.1-1.fc45
• rust-num-modular0.6-0.6.5-1.fc45
• rust-num-modular-0.7.0-1.fc45
• rust-num-prime-0.5.0-3.fc45
• rust-zmij-1.0.23-1.fc45

Update description:

• Update the crypto-bigint crate to version 0.7.10.
• Update the ctutils crate to version 0.4.8.
• Update the elliptic-curve crate to version 0.14.3.
• Update the num-bigint crate to version 0.5.1 and add a compat package for version 0.4.
• Update the num-modular crate to version 0.7.0 and add a compat package for version 0.6.
• Update the zmij crate to version 1.0.23.

This update includes improvements to constant-time implementations in the crypto-bigint crate (assigned RUSTSEC-2026-0387).

Update to version 0.4.7.

FEDORA-2026-152c7451f3 Packages in this update:

• pylint-3.3.9-3.fc43

Update description:

Patch for CVE-2026-114608

FEDORA-EPEL-2026-d6713a3bf8 Packages in this update:

• rust-zstd0.13-0.13.4-1.el9
• rust-zstd-0.14.3-1.el9
• rust-zstd-safe7-7.4.0-1.el9
• rust-zstd-safe-8.2.0-1.el9
• rust-zstd-sys-2.1.2-1.el9

Update description:

• Update the zstd crate to version 0.14.3 and add a compat package for version 0.13.
• Update the zstd-safe crate to version 8.2.0 and add a compat package for version 7.
• Update the zstd-sys crate to version 2.1.2.

This addresses multiple unsoundness and security issues in the zstd-safe and zstd-sys crates (assigned RUSTSEC-2026-0391, RUSTSEC-2026-0392, RUSTSEC-2026-0393, RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399, RUSTSEC-2026-0400, RUSTSEC-2026-0401, RUSTSEC-2026-0402, RUSTSEC-2026-0403, RUSTSEC-2026-0404, RUSTSEC-2026-0405, RUSTSEC-2026-0406).

Rebuilds of affected applications will be tracked and performed separately.

FEDORA-EPEL-2026-545bd16420 Packages in this update:

• rust-zstd0.13-0.13.4-1.el10_4
• rust-zstd-0.14.3-1.el10_4
• rust-zstd-safe7-7.4.0-1.el10_4
• rust-zstd-safe-8.2.0-1.el10_4
• rust-zstd-sys-2.1.2-1.el10_4

Update description:

• Update the zstd crate to version 0.14.3 and add a compat package for version 0.13.
• Update the zstd-safe crate to version 8.2.0 and add a compat package for version 7.
• Update the zstd-sys crate to version 2.1.2.

This addresses multiple unsoundness and security issues in the zstd-safe and zstd-sys crates (assigned RUSTSEC-2026-0391, RUSTSEC-2026-0392, RUSTSEC-2026-0393, RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399, RUSTSEC-2026-0400, RUSTSEC-2026-0401, RUSTSEC-2026-0402, RUSTSEC-2026-0403, RUSTSEC-2026-0404, RUSTSEC-2026-0405, RUSTSEC-2026-0406).

Rebuilds of affected applications will be tracked and performed separately.

FEDORA-2026-965f6f4669 Packages in this update:

• rust-zstd0.13-0.13.4-1.fc43
• rust-zstd-0.14.3-1.fc43
• rust-zstd-safe7-7.4.0-1.fc43
• rust-zstd-safe-8.2.0-1.fc43
• rust-zstd-sys-2.1.2-1.fc43

Update description:

• Update the zstd crate to version 0.14.3 and add a compat package for version 0.13.
• Update the zstd-safe crate to version 8.2.0 and add a compat package for version 7.
• Update the zstd-sys crate to version 2.1.2.

This addresses multiple unsoundness and security issues in the zstd-safe and zstd-sys crates (assigned RUSTSEC-2026-0391, RUSTSEC-2026-0392, RUSTSEC-2026-0393, RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399, RUSTSEC-2026-0400, RUSTSEC-2026-0401, RUSTSEC-2026-0402, RUSTSEC-2026-0403, RUSTSEC-2026-0404, RUSTSEC-2026-0405, RUSTSEC-2026-0406).

Rebuilds of affected applications will be tracked and performed separately.