Aggregator

FEDORA-EPEL-2026-3e44980ecd Packages in this update:

• rust-ammonia-4.0.3-1.el10_2

Update description:

• Update the ammonia crate to version 4.0.3.

FEDORA-EPEL-2026-158b5a6e46 Packages in this update:

• rust-ammonia-4.0.3-1.el10_3

Update description:

• Update the ammonia crate to version 4.0.3.

FEDORA-2026-9324385c43 Packages in this update:

• python-nh3-0.2.21-9.fc43
• rust-ammonia-4.1.4-1.fc43

Update description:

• Update the ammonia crate to version 4.1.4.
• Rebuild nh3 to apply fixes for RUSTSEC-2026-0193 and RUSTSEC-2026-0213.

FEDORA-2026-61f0d68398 Packages in this update:

• python-nh3-0.3.6-4.fc44
• rust-ammonia-4.1.4-1.fc44

Update description:

• Update the ammonia crate to version 4.1.4.
• Rebuild nh3 to apply fixes for RUSTSEC-2026-0193 and RUSTSEC-2026-0213.

FEDORA-2026-48677bc7ac Packages in this update:

• python-nh3-0.3.6-4.fc45
• rust-ammonia-4.1.4-1.fc45

Update description:

• Update the ammonia crate to version 4.1.4.
• Rebuild nh3 to apply fixes for RUSTSEC-2026-0193 and RUSTSEC-2026-0213.

It was discovered that OpenSSL incorrectly allocated memory buffers in the SSL/TLS state machine when receiving handshake data. A remote attacker could possibly use this issue to cause OpenSSL to consume excessive memory, leading to a denial of service. This issue is known as the "HollowByte" denial of service.

Version:6.18.41 (longterm) Released:2026-07-30 Source:linux-6.18.41.tar.xz PGP Signature:linux-6.18.41.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.18.41

Version:6.12.100 (longterm) Released:2026-07-30 Source:linux-6.12.100.tar.xz PGP Signature:linux-6.12.100.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.12.100

Version:6.6.147 (longterm) Released:2026-07-30 Source:linux-6.6.147.tar.xz PGP Signature:linux-6.6.147.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.6.147

Version:6.1.180 (longterm) Released:2026-07-30 Source:linux-6.1.180.tar.xz PGP Signature:linux-6.1.180.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.1.180

Version:5.15.213 (longterm) Released:2026-07-30 Source:linux-5.15.213.tar.xz PGP Signature:linux-5.15.213.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-5.15.213

Version:5.10.262 (longterm) Released:2026-07-30 Source:linux-5.10.262.tar.xz PGP Signature:linux-5.10.262.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-5.10.262

FEDORA-2026-2dfeac0818 Packages in this update:

• mingw-glib2-2.88.3-1.fc44

Update description:

Update to 2.88.3.

FEDORA-2026-030f3f2029 Packages in this update:

• perl-Archive-Tar-3.12-1.fc43

Update description:

The update is required for update Perl to 5.42.3

FEDORA-2026-c37317fdde Packages in this update:

• docker-buildx-0.36.0-1.fc45

Update description:

Automatic update for docker-buildx-0.36.0-1.fc45.

Changelog * Wed Jul 29 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 0.36.0-1 - Update to release v0.36.0 - Resolves: rhbz#2506339 - Upstream new features and fixes - Resolves CVE-2026-53492 - rhbz#2496553 - Resolves CVE-2026-47262 - rhbz#2496436

FEDORA-2026-c1c3dda3cd Packages in this update:

• isns-utils-0.103-8.fc45

Update description:

Automatic update for isns-utils-0.103-8.fc45.

Changelog * Wed Jul 29 2026 Chris Leech <cleech@redhat.com> - 0.103-8 - CVE-2026-55995: Denial of Service via double-free in iSNS attribute decoder (rhbz#2508456)

FEDORA-2026-004b11bc1e Packages in this update:

• iscsi-initiator-utils-6.2.1.12-1.fc45

Update description:

Automatic update for iscsi-initiator-utils-6.2.1.12-1.fc45.

Changelog * Wed Jul 29 2026 Chris Leech <cleech@redhat.com> - 6.2.1.12-1 - rebase to Open-iSCSI 2.1.12 - CVE-2026-44943: Privilege Escalation via Path Traversal (rhbz#2508458) - CVE-2026-44944: Authentication bypass in iscsiuio control socket (rhbz#2508457)

FEDORA-2026-68c59bf226 Packages in this update:

• goss-0.4.10-1.fc45

Update description:

Automatic update for goss-0.4.10-1.fc45.

Changelog * Wed Jul 29 2026 Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 0.4.10-1 - Update to 0.4.10 (rhbz#2494364,rhbz#2494459,rhbz#2494611,rhbz#2494911,rhbz#2495296)

It was discovered that Sinatra did not properly handle header parsing, causing ETag generation to hang when given specific input. A remote attacker could possibly use this issue to cause a denial of service.