Aggregator

• rust-crypto-bigint-0.7.10-1.fc45
• rust-ctutils-0.4.8-1.fc45
• rust-elliptic-curve-0.14.3-1.fc45
• rust-num-bigint0.4-0.4.8-1.fc45
• rust-num-bigint-0.5.1-1.fc45
• rust-num-modular0.6-0.6.5-1.fc45
• rust-num-modular-0.7.0-1.fc45
• rust-num-prime-0.5.0-3.fc45
• rust-zmij-1.0.23-1.fc45

• Update the crypto-bigint crate to version 0.7.10.
• Update the ctutils crate to version 0.4.8.
• Update the elliptic-curve crate to version 0.14.3.
• Update the num-bigint crate to version 0.5.1 and add a compat package for version 0.4.
• Update the num-modular crate to version 0.7.0 and add a compat package for version 0.6.
• Update the zmij crate to version 1.0.23.

This update includes improvements to constant-time implementations in the crypto-bigint crate (assigned RUSTSEC-2026-0387).

Update to version 0.4.7.

• pylint-3.3.9-3.fc43

Patch for CVE-2026-114608

• rust-zstd0.13-0.13.4-1.el9
• rust-zstd-0.14.3-1.el9
• rust-zstd-safe7-7.4.0-1.el9
• rust-zstd-safe-8.2.0-1.el9
• rust-zstd-sys-2.1.2-1.el9

• Update the zstd crate to version 0.14.3 and add a compat package for version 0.13.
• Update the zstd-safe crate to version 8.2.0 and add a compat package for version 7.
• Update the zstd-sys crate to version 2.1.2.

This addresses multiple unsoundness and security issues in the zstd-safe and zstd-sys crates (assigned RUSTSEC-2026-0391, RUSTSEC-2026-0392, RUSTSEC-2026-0393, RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399, RUSTSEC-2026-0400, RUSTSEC-2026-0401, RUSTSEC-2026-0402, RUSTSEC-2026-0403, RUSTSEC-2026-0404, RUSTSEC-2026-0405, RUSTSEC-2026-0406).

Rebuilds of affected applications will be tracked and performed separately.

• rust-zstd0.13-0.13.4-1.el10_4
• rust-zstd-0.14.3-1.el10_4
• rust-zstd-safe7-7.4.0-1.el10_4
• rust-zstd-safe-8.2.0-1.el10_4
• rust-zstd-sys-2.1.2-1.el10_4

• Update the zstd crate to version 0.14.3 and add a compat package for version 0.13.
• Update the zstd-safe crate to version 8.2.0 and add a compat package for version 7.
• Update the zstd-sys crate to version 2.1.2.

This addresses multiple unsoundness and security issues in the zstd-safe and zstd-sys crates (assigned RUSTSEC-2026-0391, RUSTSEC-2026-0392, RUSTSEC-2026-0393, RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399, RUSTSEC-2026-0400, RUSTSEC-2026-0401, RUSTSEC-2026-0402, RUSTSEC-2026-0403, RUSTSEC-2026-0404, RUSTSEC-2026-0405, RUSTSEC-2026-0406).

Rebuilds of affected applications will be tracked and performed separately.

• rust-zstd0.13-0.13.4-1.fc43
• rust-zstd-0.14.3-1.fc43
• rust-zstd-safe7-7.4.0-1.fc43
• rust-zstd-safe-8.2.0-1.fc43
• rust-zstd-sys-2.1.2-1.fc43

• Update the zstd crate to version 0.14.3 and add a compat package for version 0.13.
• Update the zstd-safe crate to version 8.2.0 and add a compat package for version 7.
• Update the zstd-sys crate to version 2.1.2.

This addresses multiple unsoundness and security issues in the zstd-safe and zstd-sys crates (assigned RUSTSEC-2026-0391, RUSTSEC-2026-0392, RUSTSEC-2026-0393, RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399, RUSTSEC-2026-0400, RUSTSEC-2026-0401, RUSTSEC-2026-0402, RUSTSEC-2026-0403, RUSTSEC-2026-0404, RUSTSEC-2026-0405, RUSTSEC-2026-0406).

Rebuilds of affected applications will be tracked and performed separately.

• rust-zstd0.13-0.13.4-1.fc44
• rust-zstd-0.14.3-1.fc44
• rust-zstd-safe7-7.4.0-1.fc44
• rust-zstd-safe-8.2.0-1.fc44
• rust-zstd-sys-2.1.2-1.fc44

• Update the zstd crate to version 0.14.3 and add a compat package for version 0.13.
• Update the zstd-safe crate to version 8.2.0 and add a compat package for version 7.
• Update the zstd-sys crate to version 2.1.2.

This addresses multiple unsoundness and security issues in the zstd-safe and zstd-sys crates (assigned RUSTSEC-2026-0391, RUSTSEC-2026-0392, RUSTSEC-2026-0393, RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399, RUSTSEC-2026-0400, RUSTSEC-2026-0401, RUSTSEC-2026-0402, RUSTSEC-2026-0403, RUSTSEC-2026-0404, RUSTSEC-2026-0405, RUSTSEC-2026-0406).

Rebuilds of affected applications will be tracked and performed separately.

• rust-zstd0.13-0.13.4-1.fc45
• rust-zstd-0.14.3-1.fc45
• rust-zstd-safe7-7.4.0-1.fc45
• rust-zstd-safe-8.2.0-1.fc45
• rust-zstd-sys-2.1.2-1.fc45

• Update the zstd crate to version 0.14.3 and add a compat package for version 0.13.
• Update the zstd-safe crate to version 8.2.0 and add a compat package for version 7.
• Update the zstd-sys crate to version 2.1.2.

This addresses multiple unsoundness and security issues in the zstd-safe and zstd-sys crates (assigned RUSTSEC-2026-0391, RUSTSEC-2026-0392, RUSTSEC-2026-0393, RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399, RUSTSEC-2026-0400, RUSTSEC-2026-0401, RUSTSEC-2026-0402, RUSTSEC-2026-0403, RUSTSEC-2026-0404, RUSTSEC-2026-0405, RUSTSEC-2026-0406).

Rebuilds of affected applications will be tracked and performed separately.

• prometheus-3.15.1-1.el10_4

Update to 3.15.1

• prometheus-3.15.1-1.el10_3

Update to 3.15.1

• prometheus-3.15.1-1.el9

Update to 3.15.1

• prometheus-3.15.1-1.fc45

Update to 3.15.1

• prometheus-3.15.1-1.fc44

Update to 3.15.1

• pylint-4.0.5-3.fc44

Patch for CVE-2026-114608

• scribus-1.6.7-1.el9

1.6.7

• python-PyMuPDF-1.28.2-2.fc44

fix CVE-2026-120752 (rhbz#2567075) (rhbz#2567076)

• asterisk-18.26.4-3.el8

Security update: backport upstream Asterisk security fixes to 18.26.4.

Fixes for the bundled pjproject 2.15.1: - CVE-2026-41415: out-of-bounds read on a malformed Content-ID URI in SIP multipart bodies - CVE-2026-41416: integer overflow in the audio stream buffer size with an asymmetric ptime configuration - CVE-2026-57160: one-byte heap overflow when printing generic array headers - CVE-2026-84975: TLS server impersonation via an embedded NUL in a DNS SubjectAltName (OpenSSL and GnuTLS backends) - CVE-2026-25994: heap buffer overflow in ICE with a long username - CVE-2026-28799: use-after-free in presence subscription termination - CVE-2026-32942: ICE session use-after-free race conditions - CVE-2026-33069: out-of-bounds read in SIP multipart parsing

Fixes from the Asterisk 20.20.1 security release: - CVE-2026-57185: PJSIP MWI NOTIFY body over-read (DoS) - CVE-2026-57191: PJSIP MWI NOTIFY Message-Account stack buffer overflow - CVE-2026-57187: PJSIP use-after-free on early disconnect during INVITE - CVE-2026-57189, CVE-2026-57198: T.140 RED heap buffer overflows in res_rtp_asterisk - CVE-2026-57190: SQL injection via CELGenUserEvent in cel_pgsql / cel_tds - CVE-2026-57193: LDAP filter injection in res_config_ldap - CVE-2026-57194: chan_unistim out-of-bounds write - CVE-2026-57195: AMI HTTP digest authentication NULL dereference - CVE-2026-57196: reflected XSS in HTTP error pages - CVE-2026-57197: format_ogg_speex heap buffer overflow - CVE-2026-57199: app_sms buffer overflow - CVE-2026-57202: ARI setChannelVar bypassed live_dangerously - CVE-2026-57203: ast_loggrabber executed a helper script from /tmp

Fixes from the Asterisk 20.18.2 security release: - CVE-2026-23738: reflected XSS in /httpstatus (the page is now disabled by default) - CVE-2026-23739: XML parsing with external entity expansion - CVE-2026-23740: ast_coredumper created gdbinit/output files insecurely - CVE-2026-23741: ast_coredumper sourced a config file writable by the asterisk user

/etc/asterisk/ast_debug_tools.conf is now owned by root:asterisk. The debug scripts (ast_coredumper, ast_loggrabber, ast_logescalator) refuse to source it as root unless it is root-owned and not group- or world-writable.

Security update: backport upstream Asterisk security fixes to 18.26.4.

Fixes from the Asterisk 20.20.1 security release: - CVE-2026-57185: PJSIP MWI NOTIFY body over-read (DoS) - CVE-2026-57187: PJSIP use-after-free on early disconnect during INVITE - CVE-2026-57189, CVE-2026-57198: T.140 RED heap buffer overflows in res_rtp_asterisk - CVE-2026-57190: SQL injection via CELGenUserEvent in cel_pgsql / cel_tds - CVE-2026-57193: LDAP filter injection in res_config_ldap - CVE-2026-57194: chan_unistim out-of-bounds write - CVE-2026-57195: AMI HTTP digest authentication NULL dereference - CVE-2026-57196: reflected XSS in HTTP error pages - CVE-2026-57197: format_ogg_speex heap buffer overflow - CVE-2026-57199: app_sms buffer overflow - CVE-2026-57202: ARI setChannelVar bypassed live_dangerously - CVE-2026-57203: ast_loggrabber executed a helper script from /tmp

Fixes from the Asterisk 20.18.2 security release: - CVE-2026-23738: reflected XSS in /httpstatus (the page is now disabled by default) - CVE-2026-23739: XML parsing with external entity expansion - CVE-2026-23740: ast_coredumper created gdbinit/output files insecurely - CVE-2026-23741: ast_coredumper sourced a config file writable by the asterisk user

/etc/asterisk/ast_debug_tools.conf is now owned by root:asterisk. The debug scripts (ast_coredumper, ast_loggrabber, ast_logescalator) refuse to source it as root unless it is root-owned and not group- or world-writable.

• asterisk-18.26.4-3.el9

Security update: backport upstream Asterisk security fixes to 18.26.4.

Fixes for the bundled pjproject 2.15.1: - CVE-2026-41415: out-of-bounds read on a malformed Content-ID URI in SIP multipart bodies - CVE-2026-41416: integer overflow in the audio stream buffer size with an asymmetric ptime configuration - CVE-2026-57160: one-byte heap overflow when printing generic array headers - CVE-2026-84975: TLS server impersonation via an embedded NUL in a DNS SubjectAltName (OpenSSL and GnuTLS backends) - CVE-2026-25994: heap buffer overflow in ICE with a long username - CVE-2026-28799: use-after-free in presence subscription termination - CVE-2026-32942: ICE session use-after-free race conditions - CVE-2026-33069: out-of-bounds read in SIP multipart parsing

Fixes from the Asterisk 20.20.1 security release: - CVE-2026-57185: PJSIP MWI NOTIFY body over-read (DoS) - CVE-2026-57191: PJSIP MWI NOTIFY Message-Account stack buffer overflow - CVE-2026-57187: PJSIP use-after-free on early disconnect during INVITE - CVE-2026-57189, CVE-2026-57198: T.140 RED heap buffer overflows in res_rtp_asterisk - CVE-2026-57190: SQL injection via CELGenUserEvent in cel_pgsql / cel_tds - CVE-2026-57193: LDAP filter injection in res_config_ldap - CVE-2026-57194: chan_unistim out-of-bounds write - CVE-2026-57195: AMI HTTP digest authentication NULL dereference - CVE-2026-57196: reflected XSS in HTTP error pages - CVE-2026-57197: format_ogg_speex heap buffer overflow - CVE-2026-57199: app_sms buffer overflow - CVE-2026-57202: ARI setChannelVar bypassed live_dangerously - CVE-2026-57203: ast_loggrabber executed a helper script from /tmp

Fixes from the Asterisk 20.18.2 security release: - CVE-2026-23738: reflected XSS in /httpstatus (the page is now disabled by default) - CVE-2026-23739: XML parsing with external entity expansion - CVE-2026-23740: ast_coredumper created gdbinit/output files insecurely - CVE-2026-23741: ast_coredumper sourced a config file writable by the asterisk user

/etc/asterisk/ast_debug_tools.conf is now owned by root:asterisk. The debug scripts (ast_coredumper, ast_loggrabber, ast_logescalator) refuse to source it as root unless it is root-owned and not group- or world-writable.

Security update: backport upstream Asterisk security fixes to 18.26.4.

Fixes from the Asterisk 20.20.1 security release: - CVE-2026-57185: PJSIP MWI NOTIFY body over-read (DoS) - CVE-2026-57187: PJSIP use-after-free on early disconnect during INVITE - CVE-2026-57189, CVE-2026-57198: T.140 RED heap buffer overflows in res_rtp_asterisk - CVE-2026-57190: SQL injection via CELGenUserEvent in cel_pgsql / cel_tds - CVE-2026-57193: LDAP filter injection in res_config_ldap - CVE-2026-57194: chan_unistim out-of-bounds write - CVE-2026-57195: AMI HTTP digest authentication NULL dereference - CVE-2026-57196: reflected XSS in HTTP error pages - CVE-2026-57197: format_ogg_speex heap buffer overflow - CVE-2026-57199: app_sms buffer overflow - CVE-2026-57202: ARI setChannelVar bypassed live_dangerously - CVE-2026-57203: ast_loggrabber executed a helper script from /tmp

Fixes from the Asterisk 20.18.2 security release: - CVE-2026-23738: reflected XSS in /httpstatus (the page is now disabled by default) - CVE-2026-23739: XML parsing with external entity expansion - CVE-2026-23740: ast_coredumper created gdbinit/output files insecurely - CVE-2026-23741: ast_coredumper sourced a config file writable by the asterisk user

/etc/asterisk/ast_debug_tools.conf is now owned by root:asterisk. The debug scripts (ast_coredumper, ast_loggrabber, ast_logescalator) refuse to source it as root unless it is root-owned and not group- or world-writable.

• asterisk-18.26.4-3.fc43

Security update: backport upstream Asterisk security fixes to 18.26.4.

Fixes for the bundled pjproject 2.15.1: - CVE-2026-41415: out-of-bounds read on a malformed Content-ID URI in SIP multipart bodies - CVE-2026-41416: integer overflow in the audio stream buffer size with an asymmetric ptime configuration - CVE-2026-57160: one-byte heap overflow when printing generic array headers - CVE-2026-84975: TLS server impersonation via an embedded NUL in a DNS SubjectAltName (OpenSSL and GnuTLS backends) - CVE-2026-25994: heap buffer overflow in ICE with a long username - CVE-2026-28799: use-after-free in presence subscription termination - CVE-2026-32942: ICE session use-after-free race conditions - CVE-2026-33069: out-of-bounds read in SIP multipart parsing

Fixes from the Asterisk 20.20.1 security release: - CVE-2026-57185: PJSIP MWI NOTIFY body over-read (DoS) - CVE-2026-57191: PJSIP MWI NOTIFY Message-Account stack buffer overflow - CVE-2026-57187: PJSIP use-after-free on early disconnect during INVITE - CVE-2026-57189, CVE-2026-57198: T.140 RED heap buffer overflows in res_rtp_asterisk - CVE-2026-57190: SQL injection via CELGenUserEvent in cel_pgsql / cel_tds - CVE-2026-57193: LDAP filter injection in res_config_ldap - CVE-2026-57194: chan_unistim out-of-bounds write - CVE-2026-57195: AMI HTTP digest authentication NULL dereference - CVE-2026-57196: reflected XSS in HTTP error pages - CVE-2026-57197: format_ogg_speex heap buffer overflow - CVE-2026-57199: app_sms buffer overflow - CVE-2026-57202: ARI setChannelVar bypassed live_dangerously - CVE-2026-57203: ast_loggrabber executed a helper script from /tmp

Fixes from the Asterisk 20.18.2 security release: - CVE-2026-23738: reflected XSS in /httpstatus (the page is now disabled by default) - CVE-2026-23739: XML parsing with external entity expansion - CVE-2026-23740: ast_coredumper created gdbinit/output files insecurely - CVE-2026-23741: ast_coredumper sourced a config file writable by the asterisk user

/etc/asterisk/ast_debug_tools.conf is now owned by root:asterisk. The debug scripts (ast_coredumper, ast_loggrabber, ast_logescalator) refuse to source it as root unless it is root-owned and not group- or world-writable.

Security update: backport upstream Asterisk security fixes to 18.26.4.

Fixes from the Asterisk 20.20.1 security release: - CVE-2026-57185: PJSIP MWI NOTIFY body over-read (DoS) - CVE-2026-57187: PJSIP use-after-free on early disconnect during INVITE - CVE-2026-57189, CVE-2026-57198: T.140 RED heap buffer overflows in res_rtp_asterisk - CVE-2026-57190: SQL injection via CELGenUserEvent in cel_pgsql / cel_tds - CVE-2026-57193: LDAP filter injection in res_config_ldap - CVE-2026-57194: chan_unistim out-of-bounds write - CVE-2026-57195: AMI HTTP digest authentication NULL dereference - CVE-2026-57196: reflected XSS in HTTP error pages - CVE-2026-57197: format_ogg_speex heap buffer overflow - CVE-2026-57199: app_sms buffer overflow - CVE-2026-57202: ARI setChannelVar bypassed live_dangerously - CVE-2026-57203: ast_loggrabber executed a helper script from /tmp

Fixes from the Asterisk 20.18.2 security release: - CVE-2026-23738: reflected XSS in /httpstatus (the page is now disabled by default) - CVE-2026-23739: XML parsing with external entity expansion - CVE-2026-23740: ast_coredumper created gdbinit/output files insecurely - CVE-2026-23741: ast_coredumper sourced a config file writable by the asterisk user

/etc/asterisk/ast_debug_tools.conf is now owned by root:asterisk. The debug scripts (ast_coredumper, ast_loggrabber, ast_logescalator) refuse to source it as root unless it is root-owned and not group- or world-writable.

• asterisk-18.26.4-3.fc44

Security update: backport upstream Asterisk security fixes to 18.26.4.

Fixes for the bundled pjproject 2.15.1: - CVE-2026-41415: out-of-bounds read on a malformed Content-ID URI in SIP multipart bodies - CVE-2026-41416: integer overflow in the audio stream buffer size with an asymmetric ptime configuration - CVE-2026-57160: one-byte heap overflow when printing generic array headers - CVE-2026-84975: TLS server impersonation via an embedded NUL in a DNS SubjectAltName (OpenSSL and GnuTLS backends) - CVE-2026-25994: heap buffer overflow in ICE with a long username - CVE-2026-28799: use-after-free in presence subscription termination - CVE-2026-32942: ICE session use-after-free race conditions - CVE-2026-33069: out-of-bounds read in SIP multipart parsing

Fixes from the Asterisk 20.20.1 security release: - CVE-2026-57185: PJSIP MWI NOTIFY body over-read (DoS) - CVE-2026-57191: PJSIP MWI NOTIFY Message-Account stack buffer overflow - CVE-2026-57187: PJSIP use-after-free on early disconnect during INVITE - CVE-2026-57189, CVE-2026-57198: T.140 RED heap buffer overflows in res_rtp_asterisk - CVE-2026-57190: SQL injection via CELGenUserEvent in cel_pgsql / cel_tds - CVE-2026-57193: LDAP filter injection in res_config_ldap - CVE-2026-57194: chan_unistim out-of-bounds write - CVE-2026-57195: AMI HTTP digest authentication NULL dereference - CVE-2026-57196: reflected XSS in HTTP error pages - CVE-2026-57197: format_ogg_speex heap buffer overflow - CVE-2026-57199: app_sms buffer overflow - CVE-2026-57202: ARI setChannelVar bypassed live_dangerously - CVE-2026-57203: ast_loggrabber executed a helper script from /tmp

Fixes from the Asterisk 20.18.2 security release: - CVE-2026-23738: reflected XSS in /httpstatus (the page is now disabled by default) - CVE-2026-23739: XML parsing with external entity expansion - CVE-2026-23740: ast_coredumper created gdbinit/output files insecurely - CVE-2026-23741: ast_coredumper sourced a config file writable by the asterisk user

/etc/asterisk/ast_debug_tools.conf is now owned by root:asterisk. The debug scripts (ast_coredumper, ast_loggrabber, ast_logescalator) refuse to source it as root unless it is root-owned and not group- or world-writable.

Security update: backport upstream Asterisk security fixes to 18.26.4.

Fixes from the Asterisk 20.20.1 security release: - CVE-2026-57185: PJSIP MWI NOTIFY body over-read (DoS) - CVE-2026-57187: PJSIP use-after-free on early disconnect during INVITE - CVE-2026-57189, CVE-2026-57198: T.140 RED heap buffer overflows in res_rtp_asterisk - CVE-2026-57190: SQL injection via CELGenUserEvent in cel_pgsql / cel_tds - CVE-2026-57193: LDAP filter injection in res_config_ldap - CVE-2026-57194: chan_unistim out-of-bounds write - CVE-2026-57195: AMI HTTP digest authentication NULL dereference - CVE-2026-57196: reflected XSS in HTTP error pages - CVE-2026-57197: format_ogg_speex heap buffer overflow - CVE-2026-57199: app_sms buffer overflow - CVE-2026-57202: ARI setChannelVar bypassed live_dangerously - CVE-2026-57203: ast_loggrabber executed a helper script from /tmp

Fixes from the Asterisk 20.18.2 security release: - CVE-2026-23738: reflected XSS in /httpstatus (the page is now disabled by default) - CVE-2026-23739: XML parsing with external entity expansion - CVE-2026-23740: ast_coredumper created gdbinit/output files insecurely - CVE-2026-23741: ast_coredumper sourced a config file writable by the asterisk user

/etc/asterisk/ast_debug_tools.conf is now owned by root:asterisk. The debug scripts (ast_coredumper, ast_loggrabber, ast_logescalator) refuse to source it as root unless it is root-owned and not group- or world-writable.

• python-PyMuPDF-1.28.2-2.fc45

fix CVE-2026-120752 (rhbz#2567075) (rhbz#2567076)