Aggregator

FEDORA-EPEL-2026-0879abafaa Packages in this update:

• zabbix7.0-7.0.31-1.el9

Update description:

Update to 7.0.31 (CVE-2026-59782, CVE-2026-59783, CVE-2026-59785, CVE-2026-59786, CVE-2026-59787)

FEDORA-EPEL-2026-367fe24aeb Packages in this update:

• zabbix7.0-7.0.31-1.el8

Update description:

Update to 7.0.31 (CVE-2026-59782, CVE-2026-59783, CVE-2026-59785, CVE-2026-59786, CVE-2026-59787)

Update to 7.0.28

FEDORA-EPEL-2026-6aaa054bb4 Packages in this update:

• zabbix7.0-7.0.31-1.el10_2

Update description:

Update to 7.0.31 (CVE-2026-59782, CVE-2026-59783, CVE-2026-59785, CVE-2026-59786, CVE-2026-59787)

FEDORA-EPEL-2026-d82469a549 Packages in this update:

• zabbix-6.0.48-1.el9

Update description:

Update to 6.0.48 (CVE-2026-59782, CVE-2026-59785, CVE-2026-59787)

FEDORA-EPEL-2026-097fd3579f Packages in this update:

• zabbix6.0-6.0.48-1.el8

Update description:

Update to 6.0.48 (CVE-2026-59782, CVE-2026-59785, CVE-2026-59787)

FEDORA-2026-9a0831b48c Packages in this update:

• curl-8.18.0-11.fc44

Update description:

• Fix HTTP/2 server push UAF (CVE-2026-18924)

It was discovered that LibreOffice incorrectly handled WMF image imports. An attacker could possibly use this issue to cause LibreOffice to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-63272) It was discovered that LibreOffice incorrectly handled PDF document imports. An attacker could possibly use this issue to cause LibreOffice to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-63273, CVE-2026-63274) It was discovered that LibreOffice incorrectly handled CFF fonts embedded in documents. An attacker could possibly use this issue to cause LibreOffice to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-63275, CVE-2026-63276) It was discovered that LibreOffice incorrectly validated package URLs. An attacker could possibly use this issue to obtain sensitive information. (CVE-2026-63278) It was discovered that LibreOffice incorrectly handled PICT image imports. An attacker could possibly use this issue to cause LibreOffice to crash, resulting in a denial of service, or obtain sensitive information. (CVE-2026-63279) It was discovered that LibreOffice incorrectly mitigated out-of-bounds writes via Graphite font actions. An attacker could possibly use this issue to cause LibreOffice to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-50593)

Version:next-20261005 (linux-next) Released:2026-10-05

FEDORA-2026-0e2e6878f4 Packages in this update:

• arm-none-eabi-binutils-cs-2.45-5.fc45

Update description:

• fix CVE-2026-19582: a potential buffer overflow in rsrc_resource_name (rhbz#2519352)

FEDORA-2026-5215055b2a Packages in this update:

• arm-none-eabi-binutils-cs-2.45-5.fc44

Update description:

• fix CVE-2026-19582: a potential buffer overflow in rsrc_resource_name (rhbz#2519352)

FEDORA-2026-093a11f472 Packages in this update:

• arm-none-eabi-binutils-cs-2.45-5.fc43

Update description:

• fix CVE-2026-19582: a potential buffer overflow in rsrc_resource_name (rhbz#2519352)

FEDORA-2026-220bbf27df Packages in this update:

• avr-binutils-2.45-8.fc45

Update description:

• fix CVE-2026-19582: a potential buffer overflow in rsrc_resource_name (rhbz#2519351)

FEDORA-2026-bd6b3ee737 Packages in this update:

• avr-binutils-2.45-8.fc44

Update description:

• fix CVE-2026-19582: a potential buffer overflow in rsrc_resource_name (rhbz#2519351)

FEDORA-2026-5a5f49bc55 Packages in this update:

• avr-binutils-2.45-8.fc43

Update description:

• fix CVE-2026-19582: a potential buffer overflow in rsrc_resource_name (rhbz#2519351)

It was discovered that the Ceph Object Gateway (RGW) SigV4 handler did not reject requests carrying x-amz-* headers that were absent from the signed header set. An attacker holding a presigned URL could possibly use this issue to attach arbitrary unsigned x-amz-* headers that RGW would honor, allowing them to escalate their privileges beyond what the URL's signer intended.

It was discovered that EDK II incorrectly handled CMS key unwrapping in the embedded OpenSSL library. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-63072) It was discovered that EDK II incorrectly handled CMP protection verification in the embedded OpenSSL library. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-63076) It was discovered that EDK II incorrectly buffered DTLS records in the embedded OpenSSL library. A remote attacker could possibly use this issue to cause EDK II to consume excessive memory, resulting in a denial of service. (CVE-2026-54874) It was discovered that EDK II incorrectly verified AEAD tags in the embedded OpenSSL library. An attacker could possibly use this issue to cause EDK II to accept forged messages. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-75803)

FEDORA-2026-a48c050313 Packages in this update:

• python3.15-3.15.0~rc3-2.fc43

Update description:

New version of the Python interpreter

FEDORA-2026-ab1400e97a Packages in this update:

• python3.15-3.15.0~rc3-2.fc45
• python3-docs-3.15.0~rc3-1.fc45

Update description:

New version of the Python interpreter

FEDORA-2026-96f6bd1144 Packages in this update:

• arm-none-eabi-binutils-cs-2.45-5.fc46

Update description:

Automatic update for arm-none-eabi-binutils-cs-2.45-5.fc46.

Changelog * Mon Oct 5 2026 Michal Hlavinka <mhlavink@redhat.com> - 1:2.45-5 - fix CVE-2026-19582: a potential buffer overflow in rsrc_resource_name (rhbz#2519352)

FEDORA-2026-0c04027565 Packages in this update:

• avr-binutils-2.45-8.fc46

Update description:

Automatic update for avr-binutils-2.45-8.fc46.

Changelog * Mon Oct 5 2026 Michal Hlavinka <mhlavink@redhat.com> - 1:2.45-8 - fix CVE-2026-19582: a potential buffer overflow in rsrc_resource_name (rhbz#2519351)