Aggregator

FEDORA-EPEL-2026-49d3c785d9 Packages in this update:

• mongo-c-driver-1.30.10-1.el8

Update description: libmongoc 1.30.10

Fixes

• Use exact match for file ID in GridFS methods CVE-2026-88036
• Validate SASL username CVE-2026-88035

FEDORA-2026-5e35777502 Packages in this update:

• mongo-c-driver-1.30.10-1.fc44

Update description: libmongoc 1.30.10

Fixes

• Use exact match for file ID in GridFS methods CVE-2026-88036
• Validate SASL username CVE-2026-88035

FEDORA-2026-b056d7184a Packages in this update:

• mongo-c-driver-1.30.10-1.fc43

Update description: libmongoc 1.30.10

Fixes

• Use exact match for file ID in GridFS methods CVE-2026-88036
• Validate SASL username CVE-2026-88035

FEDORA-EPEL-2026-d69c3d4d86 Packages in this update:

• mongo-c-driver-2.5.3-1.el10_4

Update description: libmongoc 2.5.3

Fixes

• Use exact match for file ID in GridFS methods CVE-2026-88036
• Validate SASL username CVE-2026-88035

FEDORA-2026-785536c3ab Packages in this update:

• mongo-c-driver-2.5.3-1.fc45

Update description: libmongoc 2.5.3

Fixes

• Use exact match for file ID in GridFS methods CVE-2026-88036
• Validate SASL username CVE-2026-88035

FEDORA-EPEL-2026-77994590bf Packages in this update:

• mongo-c-driver-2.5.3-1.el10_3

Update description: libmongoc 2.5.3

Fixes

• Use exact match for file ID in GridFS methods CVE-2026-88036
• Validate SASL username CVE-2026-88035

FEDORA-2026-b56266ea73 Packages in this update:

• parted-3.6-14.fc43

Update description:

• parted: Fix partition number allocation in do_print (bcl)
• fdasd: Make sure data set name is positive (bcl)
• resize: Make sure hfsc_new_cachetable cannot overflow on 32bit (bcl)
• resize: Make sure 32bit build cannot overflow frag_count (bcl)
• libparted: Catch FAT metadata triggered errors (bcl) Resolves: CVE-2026-89085 Resolves: CVE-2026-89088

FEDORA-2026-6ac486039c Packages in this update:

• parted-3.6-15.fc44

Update description:

• parted: Fix partition number allocation in do_print (bcl)
• fdasd: Make sure data set name is positive (bcl)
• resize: Make sure hfsc_new_cachetable cannot overflow on 32bit (bcl)
• resize: Make sure 32bit build cannot overflow frag_count (bcl)
• libparted: Catch FAT metadata triggered errors (bcl) Resolves: CVE-2026-89085 Resolves: CVE-2026-89088

FEDORA-2026-6bfd19245e Packages in this update:

• parted-3.7.13-1.fc45

Update description:

• Removed included patches
• version 3.7.13 (bcl)
• maint: Update to latest gnulib and bootstrap script (bcl)
• parted: Fix partition number allocation in do_print (bcl)
• fdasd: Make sure data set name is positive (bcl)
• resize: Make sure hfsc_new_cachetable cannot overflow on 32bit (bcl)
• resize: Make sure 32bit build cannot overflow frag_count (bcl)
• libparted: Catch FAT metadata triggered errors (bcl) Resolves: CVE-2026-89085 Resolves: CVE-2026-89088

It was discovered that dracut did not properly shell-quote messages written by the die() function to the emergency hook directory. An attacker on the adjacent network controlling a rogue DHCP server could use this issue to inject commands that execute as root during boot-failure handling. (CVE-2026-15816)

USN-8739-1 fixed vulnerabilities in ImageMagick. This update provides the corresponding fixes for Ubuntu 24.04 LTS. Original advisory details: It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-56366, CVE-2026-56368, CVE-2026-56371, CVE-2026-56373) It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-56370) It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service or expose sensitive information. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-56378) It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-56379) It was discovered that ImageMagick incorrectly handled memory allocation in certain operations. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-61465) It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 22.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-61857) It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61870) It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-61866) It was discovered that ImageMagick incorrectly handled certain images on 32-bit systems. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-62946)

FEDORA-2026-0fa8c76e88 Packages in this update:

• dotnet8.0-8.0.131-1.fc44

Update description:

Update to .NET SDK 8.0.131 and Runtime 8.0.31

Fixes: CVE-2026-58649,CVE-2026-69304,CVE-2026-69439,CVE-2026-69522,CVE-2026-71328

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.31/8.0.131.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.31/8.0.31.md

FEDORA-2026-d757a4044b Packages in this update:

• dotnet8.0-8.0.131-1.fc43

Update description:

Update to .NET SDK 8.0.131 and Runtime 8.0.31

Fixes: CVE-2026-58649,CVE-2026-69304,CVE-2026-69439,CVE-2026-69522,CVE-2026-71328

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.31/8.0.131.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.31/8.0.31.md

FEDORA-2026-182712d480 Packages in this update:

• dotnet9.0-9.0.121-1.fc43

Update description:

Update to .NET SDK 9.0.121 and Runtime 9.0.20

Fixes: CVE-2026-58649,CVE-2026-69304,CVE-2026-69439,CVE-2026-69522,CVE-2026-69806,CVE-2026-71328

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.20/9.0.121.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.20/9.0.20.md

FEDORA-2026-a5c27e8727 Packages in this update:

• dotnet10.0-10.0.112-1.fc44

Update description:

Update to .NET SDK 10.0.112 and Runtime 10.0.12

Fixes: CVE-2026-58649,CVE-2026-69304,CVE-2026-69439,CVE-2026-69522,CVE-2026-69806,CVE-2026-71328

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.12/10.0.112.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.12/10.0.12.md

FEDORA-2026-04a0116777 Packages in this update:

• dotnet10.0-10.0.112-1.fc43

Update description:

Update to .NET SDK 10.0.112 and Runtime 10.0.12

Fixes: CVE-2026-58649,CVE-2026-69304,CVE-2026-69439,CVE-2026-69522,CVE-2026-69806,CVE-2026-71328

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.12/10.0.112.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.12/10.0.12.md

FEDORA-2026-9d80c37c0a Packages in this update:

• dotnet9.0-9.0.121-1.fc44

Update description:

Update to .NET SDK 9.0.121 and Runtime 9.0.20

Fixes: CVE-2026-58649,CVE-2026-69304,CVE-2026-69439,CVE-2026-69522,CVE-2026-69806,CVE-2026-71328

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.20/9.0.121.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.20/9.0.20.md

FEDORA-2026-fa6de37202 Packages in this update:

• dotnet10.0-10.0.112-1.fc45

Update description:

Update to .NET SDK 10.0.112 and Runtime 10.0.12

Fixes: CVE-2026-58649,CVE-2026-69304,CVE-2026-69439,CVE-2026-69522,CVE-2026-69806,CVE-2026-71328

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.12/10.0.112.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.12/10.0.12.md

Version:next-20260914 (linux-next) Released:2026-09-14