Aggregator

It was discovered that Erlang incorrectly validated peer certificates when incorrect extended key usage was presented. A remote attacker could possibly use this issue to bypass SSL key usage restrictions.

FEDORA-2026-bac983cf83 Packages in this update:

• harfbuzz-10.4.0-2.fc42

Update description:

Backport security fix for CVE-2026-22693 (fix RHBZ#2429278)

FEDORA-2026-b38fe572ef Packages in this update:

• harfbuzz-11.5.1-2.fc43

Update description:

Backport security fix for CVE-2026-22693 (fix RHBZ#2429288)

FEDORA-2026-9af71a53ce Packages in this update:

• hcloud-1.59.0-1.fc42

Update description:

Update to 1.59.0

FEDORA-EPEL-2026-cf3b9d64bd Packages in this update:

• rclone-1.72.1-1.el9

Update description:

Update to 1.72.1

FEDORA-2026-a193f1698f Packages in this update:

• freerdp-3.20.2-1.fc42

Update description:

Update to 3.20.2

FEDORA-2026-79f923d917 Packages in this update:

• freerdp-3.20.2-1.fc43

Update description:

Update to 3.20.2

It was discovered that Rack incorrectly handled certain query parameters. An attacker could possibly use this issue to cause a limited denial of service. This issue was only addressed in Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2025-59830) It was discovered that Rack did not properly handle certain multipart form data. An attacker could possibly use this issue to cause memory exhaustion, leading to a denial of service. This issue was only addressed in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2025-61770, CVE-2025-61772) It was discovered that Rack did not properly handle certain form fields. An attacker could possibly use this issue to cause memory exhaustion, leading to a denial of service. This issue was only addressed in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2025-61771) It was discovered that Rack did not properly handle certain headers. An attacker could possibly use this issue to bypass proxy access restrictions and obtain sensitive information. (CVE-2025-61780) Tomoya Yamashita discovered that Rack did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause memory exhaustion, leading to a denial of service. This issue was only addressed in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2025-61919)

FEDORA-2026-7069f6c1c8 Packages in this update:

• assimp-5.3.1-6.fc42

Update description:

Backport fix for CVE-2025-11277.

FEDORA-2026-b4a6ca0bd0 Packages in this update:

• rclone-1.72.1-1.fc42

Update description:

Update to 1.72.1

FEDORA-2026-3de3ece93a Packages in this update:

• rclone-1.72.1-1.fc43

Update description:

Update to 1.72.1

FEDORA-EPEL-2026-6523bfceaf Packages in this update:

• rclone-1.72.1-1.el10_2

Update description:

Update to 1.72.1

FEDORA-EPEL-2026-082c111817 Packages in this update:

• rclone-1.72.1-1.el10_1

Update description:

Update to 1.72.1

FEDORA-EPEL-2026-e04f9da1af Packages in this update:

• rust-rkyv0.7-0.7.46-1.el9
• rust-rkyv_derive0.7-0.7.46-1.el9

Update description:

https://rustsec.org/advisories/RUSTSEC-2026-0001

FEDORA-EPEL-2026-b967c7e19e Packages in this update:

• rust-rkyv0.7-0.7.46-1.el10_1
• rust-rkyv_derive0.7-0.7.46-1.el10_1

Update description:

https://rustsec.org/advisories/RUSTSEC-2026-0001

FEDORA-EPEL-2026-80d7c1ec10 Packages in this update:

• rust-rkyv0.7-0.7.46-1.el10_2
• rust-rkyv_derive0.7-0.7.46-1.el10_2

Update description:

https://rustsec.org/advisories/RUSTSEC-2026-0001

FEDORA-2026-801214adba Packages in this update:

• rust-rkyv0.7-0.7.46-1.fc42
• rust-rkyv_derive0.7-0.7.46-1.fc42

Update description:

https://rustsec.org/advisories/RUSTSEC-2026-0001

FEDORA-2026-35d1dee2ab Packages in this update:

• rust-rkyv0.7-0.7.46-1.fc43
• rust-rkyv_derive0.7-0.7.46-1.fc43

Update description:

https://rustsec.org/advisories/RUSTSEC-2026-0001

FEDORA-2026-f08ea66b23 Packages in this update:

• rust-rkyv0.7-0.7.46-1.fc44
• rust-rkyv_derive0.7-0.7.46-1.fc44

Update description:

https://rustsec.org/advisories/RUSTSEC-2026-0001

It was discovered that zlib, vendored in klibc, did not properly handle integer arithmetic. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service.