Aggregator

FEDORA-2026-0510f0e866 Packages in this update:

• virt-v2v-2.13.7-1.fc45

Update description:

New upstream development version 2.13.7

Version:next-20261001 (linux-next) Released:2026-10-01

FEDORA-2026-d1b26c4745 Packages in this update:

• docker-buildx-0.37.2-1.fc43

Update description:

• Update to release v0.37.2
• Resolves: rhbz#2544198
• Resolves CVE-2026-56855: rhbz#2530594
• resolves CVE-2026-78662: rhbz#2530802
• Upstream fix

FEDORA-2026-af9902ab5e Packages in this update:

• docker-buildx-0.37.2-1.fc44

Update description:

• Update to release v0.37.2
• Resolves: rhbz#2544198
• Resolves CVE-2026-56855: rhbz#2530594
• resolves CVE-2026-78662: rhbz#2530802
• Upstream fix

It was discovered that libXpm did not correctly handle XPM images with zero-dimension values. A local attacker could possibly use this issue to cause libXpm to use excessive resources, leading to a denial of service.

It was discovered that OpenSSL had an inefficient algorithm in its QUIC stream reassembly implementation. A remote attacker could possibly use this issue to cause OpenSSL to use excessive CPU resources, leading to a denial of service. (CVE-2026-42772) It was discovered that OpenSSL did not properly limit memory allocated for QUIC packet buffers. A remote attacker could possibly use this issue to cause OpenSSL to use excessive memory resources, leading to a denial of service. (CVE-2026-54873)

It was discovered that OpenStack Designate did not properly validate overlapping zones under certain circumstances. An authenticated user could possibly use this issue to redirect DNS traffic to attacker-controlled systems or cause a denial of service.

It was discovered that KCoreAddons incorrectly handled shell argument quoting in KShell::quoteArgs. The parsing did not adequately handle shell metacharacters, which could lead to a shell escape. An attacker could possibly use this issue to execute arbitrary commands in applications that relied on this method to handle user input.

FEDORA-2026-71df118e18 Packages in this update:

• php-getid3-1.9.27-1.fc44

Update description: Version 1.9.27: [2026-09-22]

• GHSA-c2xw-vp6w-gpph compressed ID3v2 frames max length
• GHSA-j649-xr34-mmmh remove LIBXML_NOENT
• embedded picture in WMA files is corrupt
• silent failure of @libxml_disable_entity_loader() enables XXE

FEDORA-2026-6ef35023a5 Packages in this update:

• php-getid3-1.9.27-1.fc45

Update description: Version 1.9.27: [2026-09-22]

• GHSA-c2xw-vp6w-gpph compressed ID3v2 frames max length
• GHSA-j649-xr34-mmmh remove LIBXML_NOENT
• embedded picture in WMA files is corrupt
• silent failure of @libxml_disable_entity_loader() enables XXE

FEDORA-2026-b9ef1180ce Packages in this update:

• php-getid3-1.9.27-1.fc43

Update description: Version 1.9.27: [2026-09-22]

• GHSA-c2xw-vp6w-gpph compressed ID3v2 frames max length
• GHSA-j649-xr34-mmmh remove LIBXML_NOENT
• embedded picture in WMA files is corrupt
• silent failure of @libxml_disable_entity_loader() enables XXE

FEDORA-EPEL-2026-e0e0737425 Packages in this update:

• GitPython-3.2.0-1.el9

Update description:

Update to 3.2.0

Fixes GHSA-gq48-pqfc-9p58, GHSA-23mf-xhv8-69c2, GHSA-f9j4-qggq-h239, GHSA-w8jc-g24h-crhw, GHSA-m64x-33q8-m5h7, and GHSA-fx3j-rwgx-fr94.

FEDORA-2026-cf9ac55adc Packages in this update:

• dhcpcd-10.5.2-1.fc43

Update description:

• Update to 10.5.2 (rhbz#2511521)

FEDORA-2026-c39845b961 Packages in this update:

• dhcpcd-10.5.2-1.fc44

Update description:

• Update to 10.5.2 (rhbz#2511521)

FEDORA-2026-f6c24b91ee Packages in this update:

• dhcpcd-10.5.2-1.fc45

Update description:

• Update to 10.5.2 (rhbz#2511521)

FEDORA-2026-59c42d53ab Packages in this update:

• docker-buildx-0.37.2-1.fc45

Update description:

• Update to release v0.37.2
• Resolves: rhbz#2544198
• Resolves CVE-2026-56855: rhbz#2530594
• resolves CVE-2026-78662: rhbz#2530802
• Upstream fix