2 days 8 hours ago
FEDORA-2026-6c58236667
Packages in this update:
- libmodplug-0.8.9.0-31.fc46
Update description:
Automatic update for libmodplug-0.8.9.0-31.fc46.
Changelog
* Tue Oct 20 2026 Karel Volný <
kvolny@redhat.com> - 1:0.8.9.0-31
- Fix CVE-2026-75904, OOB read in pat_smplooped() (rhbz#2521959)
- Fix CVE-2026-108577, unbounded alloc in abc_add_gchord() (rhbz#2550240)
- Bound abc_add_drum() accompaniment, fix divide by zero and OOB read
- Fix CVE-2026-111270, OOB write in ReadDSM() (rhbz#2554073)
- Backport upstream AMS loader hardening, 1bef4e1..63133e8
- Fix CVE-2026-111271, OOB read in ReadAMS2() (rhbz#2554079)
2 days 14 hours ago
2 days 14 hours ago
It was discovered that the Perl XS::Parse::Keyword module did not
correctly handle certain inputs. If a user or automated system were
tricked into receiving specially crafted input, an attacker could cause
a denial of service.
2 days 20 hours ago
FEDORA-2026-b7618e98ac
Packages in this update:
- linux-firmware-20261019-1.fc45
Update description:
Update to 20261019:
- rockchip: add PCIe3 PHY firmware for snps-pcie3
- Update ADSP firmware for Qualcomm qcs615 platform.
- Revert "amdgpu: update GC 11.0.0 firmware"
- amdgpu: a LOT of updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- rtw89: init board_elm.bin with stuffs for board ID 1
- rtw89: 8922d: update fw 0.35.119.3 with format suffix -1
- rtw89: 8922d: update fw 0.35.115.2
- wfx: update to firmware 3.18
- nvidia: Update and add missing firmware files for Tegra SoCs
- qcom:Update qdsp6sw firmware for shikra platform
- aic: Add AIC8800D80 Bluetooth and Wi-Fi firmware
- qcom: update HPASS firmware for nord platform
- amdgpu: DMCUB updates for various ASICs
- amdgpu: update gc 11.0.1 and 11.0.4 firmware
- qcom: update LPAICP firmware for shikra platform
- ath12k: WCN7850 hw2.0: update board-2.bin
- panthor: Add initial firmware for Architecture 14.8 Arm Mali GPU
- qcom: update ADSP firmware for glymur platform
- cirrus: cs35l41: Add firmware and tuning for Lenovo Thinkbook laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- cirrus: cs42l45: Add CS42L49 SDCA codec firmware for Dell laptops
- qcom: fix qcs8300 gpdspr.jsn symlink target
- qcom: update ADSP firmware for x1e80100 platform
- Update firmware for Intel Solar/Magnetar/Blazar*/Scorpius/ScorpiusGfp core
- cirrus: cs35l57 cs35l63: Add firmware for some Dell laptops
- WHENCE: add SPDX license references for non-standard license texts
- WHENCE: add initial SPDX identifiers
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for a Dell laptop
- cirrus: cs35l41: Add support for Lenovo Yoga Slim 7 Carbon 14ACN6
- Add ISH firmware files for Intel Nova Lake-H/S platforms
- qcom: add ADSP firmware for eliza platform
- qcom: update ADSP firmware for hawi platform
- QCA: Add QCA2066 Bluetooth firmware hpnv21g.30c
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- Revert "qcom: update ADSP firmware for qcs615 platform"
- qcom: Add gpu firmwares for Hawi and Maili chipsets
- qcom: update Rubik Pi 3 ADSP firmware
- cirrus: cs35l56: Correct firmware instances for 103c8c52 and 103c8c53
- contrib: post the MR comment to the project of the merge request
- qcom: vpu: add Gen2 firmware binary for Hawi/Maili
- Update AMD cpu microcode
- iwlwifi: add Bz/Sc FW for core24.80-41 release
- iwlwifi: Update Bz/Fm firmware for core24.80-41 release
- iwlwifi: Add Hr/Gf firmware for core24.80-41 release
- iwlwifi: update ty/So/Ma firmwares for core24.80-41 release
- iwlwifi: Add cc/Qu/QuZ firmwares for core24.80-41 release
- mwifiex: add IW416 firmware
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCC2072 hw1.0: update board-2.bin
- ci: add Qualcomm firmware version diff MR comment job
- qcom: sdx61: add missing firmware version
- qcom: sdx35: add missing firmware version
- qcom: aic100: add missing firmware versions
- qcom: qdu100: add missing firmware versions
- qcom: sdm845: add missing modem firmware version
- qcom: x1e80100: add missing Dell XPS 13 9345 DSP versions
- qcom: add missing Adreno ZAP shader versions
- qca: separate the WCN685x uart firmware revisions
- qca: group the QCA61x4 USB firmware files
- qca: drop duplicate version lines
- qca: fix the version of the QCA6698 Bluetooth firmware
- qca: fix the version of the WCN785x USB firmware
- qcom: fix the version of the a660 GMU firmware
- qcom: fix the version of the Eliza SQE microcode
- qcom: fix the version of the QCS615 ZAP shader
- qcom/shikra: link WiFi firmware from the ath10k subdir
- Revert "amdgpu: update GC 11.0.0 firmware"
- Revert "amdgpu: update GC 11.0.0 firmware"
- amdgpu: DMCUB updates for various ASICs
- intel: Update ibt-00a0-01a1-pci.ddc for BE211 - Whale Peak2 (WhP2)
- ath11k: WCN6855 hw2.0: update board-2.bin
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- qcom: add CDSP firmware for hawi platform
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops
- QCA: Update Bluetooth firmware for QCC2072 UART interface: 1.1.0-00340 to 1.1.0-00355
2 days 20 hours ago
FEDORA-2026-bd021461a8
Packages in this update:
- linux-firmware-20261019-1.fc43
Update description:
Update to 20261019:
- rockchip: add PCIe3 PHY firmware for snps-pcie3
- Update ADSP firmware for Qualcomm qcs615 platform.
- Revert "amdgpu: update GC 11.0.0 firmware"
- amdgpu: a LOT of updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- rtw89: init board_elm.bin with stuffs for board ID 1
- rtw89: 8922d: update fw 0.35.119.3 with format suffix -1
- rtw89: 8922d: update fw 0.35.115.2
- wfx: update to firmware 3.18
- nvidia: Update and add missing firmware files for Tegra SoCs
- qcom:Update qdsp6sw firmware for shikra platform
- aic: Add AIC8800D80 Bluetooth and Wi-Fi firmware
- qcom: update HPASS firmware for nord platform
- amdgpu: DMCUB updates for various ASICs
- amdgpu: update gc 11.0.1 and 11.0.4 firmware
- qcom: update LPAICP firmware for shikra platform
- ath12k: WCN7850 hw2.0: update board-2.bin
- panthor: Add initial firmware for Architecture 14.8 Arm Mali GPU
- qcom: update ADSP firmware for glymur platform
- cirrus: cs35l41: Add firmware and tuning for Lenovo Thinkbook laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- cirrus: cs42l45: Add CS42L49 SDCA codec firmware for Dell laptops
- qcom: fix qcs8300 gpdspr.jsn symlink target
- qcom: update ADSP firmware for x1e80100 platform
- Update firmware for Intel Solar/Magnetar/Blazar*/Scorpius/ScorpiusGfp core
- cirrus: cs35l57 cs35l63: Add firmware for some Dell laptops
- WHENCE: add SPDX license references for non-standard license texts
- WHENCE: add initial SPDX identifiers
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for a Dell laptop
- cirrus: cs35l41: Add support for Lenovo Yoga Slim 7 Carbon 14ACN6
- Add ISH firmware files for Intel Nova Lake-H/S platforms
- qcom: add ADSP firmware for eliza platform
- qcom: update ADSP firmware for hawi platform
- QCA: Add QCA2066 Bluetooth firmware hpnv21g.30c
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- Revert "qcom: update ADSP firmware for qcs615 platform"
- qcom: Add gpu firmwares for Hawi and Maili chipsets
- qcom: update Rubik Pi 3 ADSP firmware
- cirrus: cs35l56: Correct firmware instances for 103c8c52 and 103c8c53
- contrib: post the MR comment to the project of the merge request
- qcom: vpu: add Gen2 firmware binary for Hawi/Maili
- Update AMD cpu microcode
- iwlwifi: add Bz/Sc FW for core24.80-41 release
- iwlwifi: Update Bz/Fm firmware for core24.80-41 release
- iwlwifi: Add Hr/Gf firmware for core24.80-41 release
- iwlwifi: update ty/So/Ma firmwares for core24.80-41 release
- iwlwifi: Add cc/Qu/QuZ firmwares for core24.80-41 release
- mwifiex: add IW416 firmware
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCC2072 hw1.0: update board-2.bin
- ci: add Qualcomm firmware version diff MR comment job
- qcom: sdx61: add missing firmware version
- qcom: sdx35: add missing firmware version
- qcom: aic100: add missing firmware versions
- qcom: qdu100: add missing firmware versions
- qcom: sdm845: add missing modem firmware version
- qcom: x1e80100: add missing Dell XPS 13 9345 DSP versions
- qcom: add missing Adreno ZAP shader versions
- qca: separate the WCN685x uart firmware revisions
- qca: group the QCA61x4 USB firmware files
- qca: drop duplicate version lines
- qca: fix the version of the QCA6698 Bluetooth firmware
- qca: fix the version of the WCN785x USB firmware
- qcom: fix the version of the a660 GMU firmware
- qcom: fix the version of the Eliza SQE microcode
- qcom: fix the version of the QCS615 ZAP shader
- qcom/shikra: link WiFi firmware from the ath10k subdir
- Revert "amdgpu: update GC 11.0.0 firmware"
- Revert "amdgpu: update GC 11.0.0 firmware"
- amdgpu: DMCUB updates for various ASICs
- intel: Update ibt-00a0-01a1-pci.ddc for BE211 - Whale Peak2 (WhP2)
- ath11k: WCN6855 hw2.0: update board-2.bin
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- qcom: add CDSP firmware for hawi platform
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops
- QCA: Update Bluetooth firmware for QCC2072 UART interface: 1.1.0-00340 to 1.1.0-00355
2 days 20 hours ago
FEDORA-2026-546bad4cdb
Packages in this update:
- linux-firmware-20261019-1.fc44
Update description:
Update to 20261019:
- rockchip: add PCIe3 PHY firmware for snps-pcie3
- Update ADSP firmware for Qualcomm qcs615 platform.
- Revert "amdgpu: update GC 11.0.0 firmware"
- amdgpu: a LOT of updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- rtw89: init board_elm.bin with stuffs for board ID 1
- rtw89: 8922d: update fw 0.35.119.3 with format suffix -1
- rtw89: 8922d: update fw 0.35.115.2
- wfx: update to firmware 3.18
- nvidia: Update and add missing firmware files for Tegra SoCs
- qcom:Update qdsp6sw firmware for shikra platform
- aic: Add AIC8800D80 Bluetooth and Wi-Fi firmware
- qcom: update HPASS firmware for nord platform
- amdgpu: DMCUB updates for various ASICs
- amdgpu: update gc 11.0.1 and 11.0.4 firmware
- qcom: update LPAICP firmware for shikra platform
- ath12k: WCN7850 hw2.0: update board-2.bin
- panthor: Add initial firmware for Architecture 14.8 Arm Mali GPU
- qcom: update ADSP firmware for glymur platform
- cirrus: cs35l41: Add firmware and tuning for Lenovo Thinkbook laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- cirrus: cs42l45: Add CS42L49 SDCA codec firmware for Dell laptops
- qcom: fix qcs8300 gpdspr.jsn symlink target
- qcom: update ADSP firmware for x1e80100 platform
- Update firmware for Intel Solar/Magnetar/Blazar*/Scorpius/ScorpiusGfp core
- cirrus: cs35l57 cs35l63: Add firmware for some Dell laptops
- WHENCE: add SPDX license references for non-standard license texts
- WHENCE: add initial SPDX identifiers
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for a Dell laptop
- cirrus: cs35l41: Add support for Lenovo Yoga Slim 7 Carbon 14ACN6
- Add ISH firmware files for Intel Nova Lake-H/S platforms
- qcom: add ADSP firmware for eliza platform
- qcom: update ADSP firmware for hawi platform
- QCA: Add QCA2066 Bluetooth firmware hpnv21g.30c
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- Revert "qcom: update ADSP firmware for qcs615 platform"
- qcom: Add gpu firmwares for Hawi and Maili chipsets
- qcom: update Rubik Pi 3 ADSP firmware
- cirrus: cs35l56: Correct firmware instances for 103c8c52 and 103c8c53
- contrib: post the MR comment to the project of the merge request
- qcom: vpu: add Gen2 firmware binary for Hawi/Maili
- Update AMD cpu microcode
- iwlwifi: add Bz/Sc FW for core24.80-41 release
- iwlwifi: Update Bz/Fm firmware for core24.80-41 release
- iwlwifi: Add Hr/Gf firmware for core24.80-41 release
- iwlwifi: update ty/So/Ma firmwares for core24.80-41 release
- iwlwifi: Add cc/Qu/QuZ firmwares for core24.80-41 release
- mwifiex: add IW416 firmware
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCC2072 hw1.0: update board-2.bin
- ci: add Qualcomm firmware version diff MR comment job
- qcom: sdx61: add missing firmware version
- qcom: sdx35: add missing firmware version
- qcom: aic100: add missing firmware versions
- qcom: qdu100: add missing firmware versions
- qcom: sdm845: add missing modem firmware version
- qcom: x1e80100: add missing Dell XPS 13 9345 DSP versions
- qcom: add missing Adreno ZAP shader versions
- qca: separate the WCN685x uart firmware revisions
- qca: group the QCA61x4 USB firmware files
- qca: drop duplicate version lines
- qca: fix the version of the QCA6698 Bluetooth firmware
- qca: fix the version of the WCN785x USB firmware
- qcom: fix the version of the a660 GMU firmware
- qcom: fix the version of the Eliza SQE microcode
- qcom: fix the version of the QCS615 ZAP shader
- qcom/shikra: link WiFi firmware from the ath10k subdir
- Revert "amdgpu: update GC 11.0.0 firmware"
- Revert "amdgpu: update GC 11.0.0 firmware"
- amdgpu: DMCUB updates for various ASICs
- intel: Update ibt-00a0-01a1-pci.ddc for BE211 - Whale Peak2 (WhP2)
- ath11k: WCN6855 hw2.0: update board-2.bin
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- qcom: add CDSP firmware for hawi platform
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops
- QCA: Update Bluetooth firmware for QCC2072 UART interface: 1.1.0-00340 to 1.1.0-00355
2 days 20 hours ago
FEDORA-2026-7e84de33a8
Packages in this update:
Update description:
- Update to release v2.4.2
- Resolves: rhbz#2535733
- Resolves CVE-2026-41178: rhbz#2515054
2 days 21 hours ago
FEDORA-2026-2887458a9f
Packages in this update:
Update description:
Automatic update for containerd-2.4.2-1.fc46.
Changelog
* Thu Oct 15 2026 Bradley G Smith <
bradley.g.smith@gmail.com> - 2.4.2-1
- Update to release v2.4.2
- Resolves: rhbz#2535733
- Resolves CVE-2026-41178: rhbz#2515054
2 days 23 hours ago
FEDORA-2026-839be67202
Packages in this update:
Update description:
x86/AMD: ineffectual Zenbleed workaround [XSA-515, CVE-2026-79608]
x86: XPTI may break on huge-memory systems [XSA-516, CVE-2026-79609]
grant-table: double version change race [XSA-517, CVE-2026-79610]
VMX: VMentry failure with branch tracing and blocked states
[XSA-518, CVE-2026-79611]
Arm: multiple issues with GNTTABOP_cache_flush
[XSA-519, CVE-2026-102699, CVE-2026-102702]
gnttab: cache-flush handling may cause page reference leak
[XSA-520, CVE-2026-102700]
2 days 23 hours ago
Version:next-20261019 (linux-next)
Released:2026-10-19
3 days ago
It was discovered that libXtst did not properly handle certain RECORD
replies from the X server. A malicious X server could possibly use this
issue to cause libXtst clients to crash, resulting in a denial of service.
(CVE-2026-94286)
Tobias Stoeckmann discovered that libXtst did not properly handle certain
memory operations. A malicious X server could possibly use this issue to
cause libXtst to access memory out of bounds, resulting in a denial of
service. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-7951)
Tobias Stoeckmann discovered that libXtst did not properly handle certain
replies from the X server. A malicious X server could possibly use this
issue to cause libXtst to enter an infinite loop, resulting in a denial of
service. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-7952)
3 days 2 hours ago
USN-8927-1 fixed vulnerabilities in curl. This update provides the
corresponding fixes for Ubuntu 26.10.
Original advisory details:
It was discovered that curl, when built with GnuTLS support, had an
out-of-bounds read in the WebSocket send path. An attacker could
possibly use this issue to obtain sensitive information.
(CVE-2026-107928)
Maksim discovered that curl did not correctly include the interface
binding in connection reuse decisions when CURLOPT_INTERFACE was used.
An attacker could possibly use this issue to cause connections to go
out from an unintended source address. (CVE-2026-107929)
Stanislav Fort discovered that curl did not properly clear AWS SigV4
authentication state when CURLOPT_AWS_SIGV4 was set to NULL. An
attacker could possibly use this issue to obtain sensitive information.
(CVE-2026-86409)
Stanislav Fort discovered that the curl command line tool did not set
SSH host verification options when following redirects to SFTP or SCP
URLs. An attacker could possibly use this issue to perform
machine-in-the-middle attacks. (CVE-2026-86410)
Stanislav Fort discovered that curl did not properly handle cookie jar
entries that could not be reloaded. An attacker could possibly use this
issue to cause a denial of service. (CVE-2026-86412)
Stanislav Fort discovered that an HTTP proxy could trick libcurl into
sending credentials to the proxy itself by responding to a CONNECT
request with an unexpected authentication challenge. An attacker could
possibly use this issue to obtain sensitive information.
(CVE-2026-86414)
Stanislav Fort discovered that curl did not correctly handle HSTS
entries when an includeSubDomains parent entry was imported before a
longer-lived child entry. An attacker could possibly use this issue to
cause curl to use unencrypted HTTP connections. (CVE-2026-87862)
Stanislav Fort discovered that curl did not properly handle HSTS
max-age values that exceeded calendar time structure bounds. An
attacker could possibly use this issue to cause a denial of service or
data loss. (CVE-2026-87863)
Stanislav Fort discovered that curl did not properly handle IMAP APPEND
commands when CURLOPT_CRLF was enabled, allowing overflow bytes to be
interpreted as pipelined commands. An authenticated attacker could
possibly use this issue to inject arbitrary IMAP commands.
(CVE-2026-87864)
Bobbeh Rhino discovered that libcurl, when used with libssh2 and a
hashed known_hosts file, could misreport a host key mismatch as a
missing key. An attacker could possibly use this issue to perform
machine-in-the-middle attacks. (CVE-2026-87865)
Joshua Rogers discovered that curl did not properly handle long cookie
entries written to a Netscape cookie jar. An attacker could possibly
use this issue to cause a denial of service. (CVE-2026-92386)
Joshua Rogers discovered that a malicious FTP, IMAP, POP3, or SMTP
server could cause libcurl to block indefinitely by omitting the final
control-response line. An attacker could possibly use this issue to
cause a denial of service. (CVE-2026-92387)
Joshua Rogers discovered that libcurl had a use-after-free
vulnerability in the FTP wildcard matching code. An attacker could
possibly use this issue to cause curl to crash, resulting in a denial
of service, or execute arbitrary code. (CVE-2026-92388)
Joshua Rogers discovered that libcurl's TFTP state machine did not
properly validate transfer directions, allowing a malicious server to
force the client into transmit mode. An attacker could possibly use
this issue to obtain sensitive information. (CVE-2026-92389)
Joshua Rogers discovered that curl did not properly enforce its file
overwrite protection when using --remote-header-name in certain
circumstances. An attacker could possibly use this issue to overwrite
local files. (CVE-2026-92390)
Joshua Rogers discovered that curl had a stack overflow vulnerability
when processing deeply nested MIME structures. An attacker could
possibly use this issue to cause curl to crash, resulting in a denial
of service. (CVE-2026-92391)
Joshua Rogers discovered that libcurl could expose credentials in the
URL returned by CURLINFO_EFFECTIVE_URL when credentials were retrieved
from a .netrc file. An attacker could possibly use this issue to obtain
sensitive information. (CVE-2026-94266)
Joshua Rogers discovered that libcurl had a use-after-free
vulnerability during HTTP/2 uploads when handling RST_STREAM responses
from the server. An attacker could possibly use this issue to cause
curl to crash, resulting in a denial of service, or execute arbitrary
code. (CVE-2026-92392)
3 days 4 hours ago
It was discovered that cifs-utils incorrectly handled credentials files
used by privileged mount.cifs invocations. A local attacker could
possibly use this issue to inject arbitrary mount options into a
privileged mount, resulting in a privilege escalation.
3 days 4 hours ago
FEDORA-EPEL-2026-7adf9f32c3
Packages in this update:
- rust-onefetch-2.28.1-5.el9
Update description:
Rebuilt with faster-hex 0.10.1 for RUSTSEC-2026-0306
3 days 5 hours ago
FEDORA-EPEL-2026-563fcd8d3e
Packages in this update:
- rust-onefetch-2.27.1-6.el10_2
Update description:
Rebuilt with faster-hex 0.10.1 for RUSTSEC-2026-0306
3 days 6 hours ago
FEDORA-2026-ea3ceeda71
Packages in this update:
- mingw-freetype-2.14.3-3.fc45
Update description:
Backport fix for CVE-2026-95512.
3 days 6 hours ago
FEDORA-2026-ce03acf998
Packages in this update:
- mingw-freetype-2.14.3-3.fc44
Update description:
Backport fix for CVE-2026-95512.
3 days 7 hours ago
FEDORA-EPEL-2026-e3bf681096
Packages in this update:
- rust-onefetch-2.27.1-11.el10_3
Update description:
Rebuilt with faster-hex 0.10.1 for RUSTSEC-2026-0306
3 days 7 hours ago
FEDORA-2026-ea9d9f0e38
Packages in this update:
Update description:
Changes for version 1.656
Remove lock file on end of scope
Prevent dbi_profile crash (CVE-2026-108518) (Henrik Teichmann)
Memory corruption via selectrow_array + SQLite UDF (issue#98)
Fix errstr when dbm_updatable_key attribute for DBD::DBM is set to 2 (croak) on Perl versions < v5.13.2.
Fix emit warnings when dbm_updatable_key attribute for DBD::DBM is set to 1 (carp)
Fix lock file not removed when DBD::DBM check for bad serializer class fails. (CVE-2026-111879)
*** WARNING: Next release will require perl-5.14 ***
Main reason: Exception handling
3 days 7 hours ago
FEDORA-2026-a95b9f327e
Packages in this update:
Update description:
Changes for version 1.656
Remove lock file on end of scope
Prevent dbi_profile crash (CVE-2026-108518) (Henrik Teichmann)
Memory corruption via selectrow_array + SQLite UDF (issue#98)
Fix errstr when dbm_updatable_key attribute for DBD::DBM is set to 2 (croak) on Perl versions < v5.13.2.
Fix emit warnings when dbm_updatable_key attribute for DBD::DBM is set to 1 (carp)
Fix lock file not removed when DBD::DBM check for bad serializer class fails. (CVE-2026-111879)
*** WARNING: Next release will require perl-5.14 ***
Main reason: Exception handling