pdns-recursor-5.4.6-2.el10_3
FEDORA-EPEL-2026-5f7576d774
Packages in this update:
- pdns-recursor-5.4.6-2.el10_3
Update to 5.4.6
Resolves: rhbz#2527899
Aggregator
pdns-recursor-5.4.6-2.fc44
FEDORA-2026-ae048e451f
Packages in this update:
- pdns-recursor-5.4.6-2.fc44
Update to 5.4.6
Resolves: rhbz#2527899
USN-8714-2: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- OCFS2 file system;
- SCTP protocol;
(CVE-2026-53043, CVE-2026-53224, CVE-2026-53225, CVE-2026-53246,
CVE-2026-53309)
USN-8725-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- NVIDIA Tegra memory controller driver;
- File systems infrastructure;
- Network file system (NFS) server daemon;
- OCFS2 file system;
- B.A.T.M.A.N. meshing protocol;
- Netfilter;
- SCTP protocol;
(CVE-2022-50401, CVE-2026-43071, CVE-2026-52914, CVE-2026-53002,
CVE-2026-53043, CVE-2026-53045, CVE-2026-53224, CVE-2026-53309)
corosync-3.1.10-3.fc43
FEDORA-2026-c0427570d6
Packages in this update:
- corosync-3.1.10-3.fc43
Fix CVE-2026-81666 and CVE-2026-81665
corosync-3.1.10-6.fc44
FEDORA-2026-e97124c200
Packages in this update:
- corosync-3.1.10-6.fc44
Fix CVE-2026-81666 and CVE-2026-81665
corosync-3.1.10-8.fc45
FEDORA-2026-ef5ca6ecf7
Packages in this update:
- corosync-3.1.10-8.fc45
Fix CVE-2026-81666 and CVE-2026-81665
php-pecl-mongodb2-2.5.2-1.fc45
FEDORA-2026-1576c48cce
Packages in this update:
- php-pecl-mongodb2-2.5.2-1.fc45
- PHPC-2744 Fix out-of-bounds read when building BSON field path by @paulinevos & @GromNaN in #2081 CVE-2026-84968
- Honor the server-supplied baseBackoffMS on responses labeled SystemOverloadedError, using it in place of the driver's default base delay when calculating how long to wait before retrying.
- PHPC-2742: Bump libmongocrypt to 1.20.2 by @GromNaN in https://github.com/mongodb/mongo-php-driver/pull/2051
- PHPC-2755: Fix test suite failures with PHP 8.6 by @GromNaN in https://github.com/mongodb/mongo-php-driver/pull/2056
- PHPC-2745: Reject null bytes in namespaces and periods in database names [v2.4] by @GromNaN in https://github.com/mongodb/mongo-php-driver/pull/2060
- PHPC-2745: Reject null bytes in namespaces and periods in database names [v1.21] by @GromNaN in https://github.com/mongodb/mongo-php-driver/pull/2059
php-pecl-mongodb2-2.5.2-1.el10_4
FEDORA-EPEL-2026-b4364ba946
Packages in this update:
- php-pecl-mongodb2-2.5.2-1.el10_4
- PHPC-2744 Fix out-of-bounds read when building BSON field path by @paulinevos & @GromNaN in #2081 CVE-2026-84968
- Honor the server-supplied baseBackoffMS on responses labeled SystemOverloadedError, using it in place of the driver's default base delay when calculating how long to wait before retrying.
- PHPC-2742: Bump libmongocrypt to 1.20.2 by @GromNaN in https://github.com/mongodb/mongo-php-driver/pull/2051
- PHPC-2755: Fix test suite failures with PHP 8.6 by @GromNaN in https://github.com/mongodb/mongo-php-driver/pull/2056
- PHPC-2745: Reject null bytes in namespaces and periods in database names [v2.4] by @GromNaN in https://github.com/mongodb/mongo-php-driver/pull/2060
- PHPC-2745: Reject null bytes in namespaces and periods in database names [v1.21] by @GromNaN in https://github.com/mongodb/mongo-php-driver/pull/2059
Release Highlights
- Add support for stringOpts in ClientEncryption::encrypt() in #2033 by @GromNaN
- Support object cloning for ReadConcern, ReadPreference, and WriteConcern in #2002 by @GromNaN
php-pecl-mongodb2-2.5.2-1.el10_3
FEDORA-EPEL-2026-bb3aac9602
Packages in this update:
- php-pecl-mongodb2-2.5.2-1.el10_3
- PHPC-2744 Fix out-of-bounds read when building BSON field path by @paulinevos & @GromNaN in #2081 CVE-2026-84968
- Honor the server-supplied baseBackoffMS on responses labeled SystemOverloadedError, using it in place of the driver's default base delay when calculating how long to wait before retrying.
- PHPC-2742: Bump libmongocrypt to 1.20.2 by @GromNaN in https://github.com/mongodb/mongo-php-driver/pull/2051
- PHPC-2755: Fix test suite failures with PHP 8.6 by @GromNaN in https://github.com/mongodb/mongo-php-driver/pull/2056
- PHPC-2745: Reject null bytes in namespaces and periods in database names [v2.4] by @GromNaN in https://github.com/mongodb/mongo-php-driver/pull/2060
- PHPC-2745: Reject null bytes in namespaces and periods in database names [v1.21] by @GromNaN in https://github.com/mongodb/mongo-php-driver/pull/2059
Release Highlights
- Add support for stringOpts in ClientEncryption::encrypt() in #2033 by @GromNaN
- Support object cloning for ReadConcern, ReadPreference, and WriteConcern in #2002 by @GromNaN
perl-Protocol-HTTP2-1.14-1.fc43
FEDORA-2026-06b545f607
Packages in this update:
- perl-Protocol-HTTP2-1.14-1.fc43
This release fixes CVE-2026-16028 (a memory exhaustion causing a denial of service) and a license wording.
perl-Protocol-HTTP2-1.14-1.fc44
FEDORA-2026-e06691a7c4
Packages in this update:
- perl-Protocol-HTTP2-1.14-1.fc44
This release fixes CVE-2026-16028 (a memory exhaustion causing a denial of service) and a license wording.
perl-Protocol-HTTP2-1.14-1.fc45
FEDORA-2026-038229756e
Packages in this update:
- perl-Protocol-HTTP2-1.14-1.fc45
This release fixes CVE-2026-16028 (a memory exhaustion causing a denial of service) and a license wording.
mongo-c-driver-1.30.9-1.el10_2
FEDORA-EPEL-2026-ef4ca1433b
Packages in this update:
- mongo-c-driver-1.30.9-1.el10_2
Fixes
- Fix OCSP error handling. CVE-2026-84964
- Fix unsafe casts during JSON parsing. CVE-2026-84965
- Fix possible unsafe truncation when logging base64. CVE-2026-84969
- Fix unsafe calls to bson_next_power_of_two. CVE-2026-84963
mongo-c-driver-1.30.9-1.el9
FEDORA-EPEL-2026-942d98e619
Packages in this update:
- mongo-c-driver-1.30.9-1.el9
Fixes
- Fix OCSP error handling. CVE-2026-84964
- Fix unsafe casts during JSON parsing. CVE-2026-84965
- Fix possible unsafe truncation when logging base64. CVE-2026-84969
- Fix unsafe calls to bson_next_power_of_two. CVE-2026-84963
mongo-c-driver-1.30.9-1.fc44
FEDORA-2026-8ed63cce6b
Packages in this update:
- mongo-c-driver-1.30.9-1.fc44
Fixes
- Fix OCSP error handling. CVE-2026-84964
- Fix unsafe casts during JSON parsing. CVE-2026-84965
- Fix possible unsafe truncation when logging base64. CVE-2026-84969
- Fix unsafe calls to bson_next_power_of_two. CVE-2026-84963
mongo-c-driver-1.30.9-1.fc43
FEDORA-2026-f74926c622
Packages in this update:
- mongo-c-driver-1.30.9-1.fc43
Fixes
- Fix OCSP error handling. CVE-2026-84964
- Fix unsafe casts during JSON parsing. CVE-2026-84965
- Fix possible unsafe truncation when logging base64. CVE-2026-84969
- Fix unsafe calls to bson_next_power_of_two. CVE-2026-84963
mongo-c-driver-1.30.9-1.el8
FEDORA-EPEL-2026-4f2d0d5209
Packages in this update:
- mongo-c-driver-1.30.9-1.el8
Fixes
- Fix OCSP error handling. CVE-2026-84964
- Fix unsafe casts during JSON parsing. CVE-2026-84965
- Fix possible unsafe truncation when logging base64. CVE-2026-84969
- Fix unsafe calls to bson_next_power_of_two. CVE-2026-84963
mongo-c-driver-2.5.2-1.el10_3
FEDORA-EPEL-2026-03de7cc5de
Packages in this update:
- mongo-c-driver-2.5.2-1.el10_3
Fixes
- Fix OCSP error handling. CVE-2026-84964
- Fix unsafe casts during JSON parsing. CVE-2026-84965
- Fix possible unsafe truncation when logging base64. CVE-2026-84969
- Fix unsafe calls to bson_next_power_of_two. CVE-2026-84963
Fixes
- Validate database and collection name arguments against "." and NUL bytes (CVE-2026-81524)
New Features
- Honor the server-supplied baseBackoffMS on responses labeled SystemOverloadedError, using it in place of the driver's default base delay when calculating how long to wait before retrying.
- Add collection bulk write getters.
mongo-c-driver-2.5.2-1.el10_4
FEDORA-EPEL-2026-9df5c5ffc2
Packages in this update:
- mongo-c-driver-2.5.2-1.el10_4
Fixes
- Fix OCSP error handling. CVE-2026-84964
- Fix unsafe casts during JSON parsing. CVE-2026-84965
- Fix possible unsafe truncation when logging base64. CVE-2026-84969
- Fix unsafe calls to bson_next_power_of_two. CVE-2026-84963
Fixes
- Validate database and collection name arguments against "." and NUL bytes (CVE-2026-81524)
New Features
- Honor the server-supplied baseBackoffMS on responses labeled SystemOverloadedError, using it in place of the driver's default base delay when calculating how long to wait before retrying.
- Add collection bulk write getters.