Aggregator

FEDORA-2026-ad8dfeadc9 Packages in this update:

• perl-Cpanel-JSON-XS-4.80-1.fc45

Update description:

Current upstream release, with multiple security fixes, updates for performance and correctness.

FEDORA-EPEL-2026-9b03a92984 Packages in this update:

• perl-Cpanel-JSON-XS-4.80-1.el10_2

Update description:

Current upstream release, with multiple security fixes, updates for performance and correctness.

FEDORA-2026-c65bed2849 Packages in this update:

• dotnet10.0-10.0.113-1.fc45

Update description:

Update to .NET SDK 10.0.113 and Runtime 10.0.13

Fixes: CVE-2026-102870,CVE-2026-105016,CVE-2026-58280,CVE-2026-66822,CVE-2026-69651,CVE-2026-70007,CVE-2026-70035,CVE-2026-70159,CVE-2026-70161,CVE-2026-70162,CVE-2026-70165,CVE-2026-70174,CVE-2026-70175,CVE-2026-70179,CVE-2026-70181,CVE-2026-70183,CVE-2026-70186,CVE-2026-70188,CVE-2026-70190,CVE-2026-70196,CVE-2026-70197,CVE-2026-83520,CVE-2026-84008,CVE-2026-85363,CVE-2026-85790,CVE-2026-87697,CVE-2026-88092,CVE-2026-92707,CVE-2026-96224,CVE-2026-96225,CVE-2026-96229,CVE-2026-96230,CVE-2026-96231,CVE-2026-96232,CVE-2026-96233,CVE-2026-96234,CVE-2026-96235,CVE-2026-96236,CVE-2026-96237,CVE-2026-96238,CVE-2026-96957,CVE-2026-96958,CVE-2026-96959,CVE-2026-96960

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.13/10.0.113.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.13/10.0.13.md

FEDORA-2026-c8cb08de43 Packages in this update:

• dotnet10.0-10.0.113-1.fc44

Update description:

Update to .NET SDK 10.0.113 and Runtime 10.0.13

Fixes: CVE-2026-102870,CVE-2026-105016,CVE-2026-58280,CVE-2026-66822,CVE-2026-69651,CVE-2026-70007,CVE-2026-70035,CVE-2026-70159,CVE-2026-70161,CVE-2026-70162,CVE-2026-70165,CVE-2026-70174,CVE-2026-70175,CVE-2026-70179,CVE-2026-70181,CVE-2026-70183,CVE-2026-70186,CVE-2026-70188,CVE-2026-70190,CVE-2026-70196,CVE-2026-70197,CVE-2026-83520,CVE-2026-84008,CVE-2026-85363,CVE-2026-85790,CVE-2026-87697,CVE-2026-88092,CVE-2026-92707,CVE-2026-96224,CVE-2026-96225,CVE-2026-96229,CVE-2026-96230,CVE-2026-96231,CVE-2026-96232,CVE-2026-96233,CVE-2026-96234,CVE-2026-96235,CVE-2026-96236,CVE-2026-96237,CVE-2026-96238,CVE-2026-96957,CVE-2026-96958,CVE-2026-96959,CVE-2026-96960

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.13/10.0.113.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.13/10.0.13.md

FEDORA-2026-c7c459ff4d Packages in this update:

• dotnet10.0-10.0.113-1.fc43

Update description:

Update to .NET SDK 10.0.113 and Runtime 10.0.13

Fixes: CVE-2026-102870,CVE-2026-105016,CVE-2026-58280,CVE-2026-66822,CVE-2026-69651,CVE-2026-70007,CVE-2026-70035,CVE-2026-70159,CVE-2026-70161,CVE-2026-70162,CVE-2026-70165,CVE-2026-70174,CVE-2026-70175,CVE-2026-70179,CVE-2026-70181,CVE-2026-70183,CVE-2026-70186,CVE-2026-70188,CVE-2026-70190,CVE-2026-70196,CVE-2026-70197,CVE-2026-83520,CVE-2026-84008,CVE-2026-85363,CVE-2026-85790,CVE-2026-87697,CVE-2026-88092,CVE-2026-92707,CVE-2026-96224,CVE-2026-96225,CVE-2026-96229,CVE-2026-96230,CVE-2026-96231,CVE-2026-96232,CVE-2026-96233,CVE-2026-96234,CVE-2026-96235,CVE-2026-96236,CVE-2026-96237,CVE-2026-96238,CVE-2026-96957,CVE-2026-96958,CVE-2026-96959,CVE-2026-96960

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.13/10.0.113.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.13/10.0.13.md

FEDORA-2026-b5ff201bad Packages in this update:

• gegl04-0.4.72-4.fc43

Update description:

This update fixes an overflow in parsing RGBE/HDR image files.

FEDORA-2026-34e59263ad Packages in this update:

• gegl04-0.4.72-4.fc44

Update description:

This update fixes an overflow in parsing RGBE/HDR image files.

FEDORA-2026-5ad31c49cd Packages in this update:

• gegl04-0.4.72-4.fc45

Update description:

This update fixes an overflow in parsing RGBE/HDR image files.

FEDORA-2026-d65da12723 Packages in this update:

• curl-8.15.0-12.fc43

Update description:

• fix incomplete mTLS config matching in conn reuse (CVE-2026-8932)
• fix OpenLDAP SASL authentication bypass (CVE-2026-13608)
• fix OpenSSL pinning bypass (CVE-2026-80230)

• fix secure cookie attribute bypass with tab (CVE-2026-80255)
• fix OpenSSL provider use-after-free (CVE-2026-80229)

Version:6.6.159 (longterm) Released:2026-10-15 Source:linux-6.6.159.tar.xz PGP Signature:linux-6.6.159.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.6.159

Version:6.1.190 (longterm) Released:2026-10-15 Source:linux-6.1.190.tar.xz PGP Signature:linux-6.1.190.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.1.190

Version:5.10.272 (longterm) Released:2026-10-15 Source:linux-5.10.272.tar.xz PGP Signature:linux-5.10.272.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-5.10.272

Version:5.15.223 (longterm) Released:2026-10-15 Source:linux-5.15.223.tar.xz PGP Signature:linux-5.15.223.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-5.15.223

FEDORA-2026-cb979e22de Packages in this update:

• nodejs24-24.21.0-1.fc45

Update description:

Rebase to Node.js 24.21.0, pulling in the upstream security releases and refreshed bundled dependencies: undici 7.29.1, nghttp2 1.70.0, npm 11.19.0, tar 7.5.19, pacote 21.5.1, brace-expansion 5.0.7.

FEDORA-2026-5ca956d465 Packages in this update:

• nodejs24-24.21.0-1.fc44

Update description:

Rebase to Node.js 24.21.0, pulling in the upstream security releases and refreshed bundled dependencies: undici 7.29.1, nghttp2 1.70.0, npm 11.19.0, tar 7.5.19, pacote 21.5.1, brace-expansion 5.0.7.

USN-8883-1 fixed a vulnerability in Go versions 1.18, 1.21, and 1.24. This update provides the corresponding fix for Go version 1.23. Original advisory details: It was discovered that the Go x/net/idna package incorrectly handled certain Punycode-encoded labels that decoded to ASCII-only labels. An attacker could possibly use this issue to bypass hostname-based access controls and escalate privileges.

FEDORA-2026-804a8c08e3 Packages in this update:

• grout-0.19.3-1.fc45

Update description:

New upstream release 0.19.3 (fedora#2552839)

New upstream release 0.19.0 (fedora#2548674)

Version:7.2.11 (stable) Released:2026-10-15 Source:linux-7.2.11.tar.xz PGP Signature:linux-7.2.11.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-7.2.11

Version:6.18.57 (longterm) Released:2026-10-15 Source:linux-6.18.57.tar.xz PGP Signature:linux-6.18.57.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.18.57

Version:6.12.113 (longterm) Released:2026-10-15 Source:linux-6.12.113.tar.xz PGP Signature:linux-6.12.113.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.12.113