Aggregator

FEDORA-2026-6ff3ef2d32 Packages in this update:

• goose-1.23.2-8.fc44

Update description:

Update goose to fix fedora#2449678

FEDORA-2026-a45f438402 Packages in this update:

• goose-1.23.2-7.fc43

Update description:

Update goose to fix fedora#2449678

FEDORA-2026-f0293b845e Packages in this update:

• rauc-1.15.2-1.fc43

Update description:

version bumped from 1.15.1 to 1.15.2

FEDORA-2026-17dbeca425 Packages in this update:

• rauc-1.15.2-1.fc44

Update description:

version bumped from 1.15.1 to 1.15.2

FEDORA-2026-e77ad9d792 Packages in this update:

• gst-devtools-1.26.11-1.fc43
• gst-editing-services-1.26.11-1.fc43
• gstreamer1-1.26.11-1.fc43
• gstreamer1-doc-1.26.11-1.fc43
• gstreamer1-plugin-libav-1.26.11-1.fc43
• gstreamer1-plugins-bad-free-1.26.11-1.fc43
• gstreamer1-plugins-base-1.26.11-1.fc43
• gstreamer1-plugins-good-1.26.11-1.fc43
• gstreamer1-plugins-ugly-free-1.26.11-1.fc43
• gstreamer1-rtsp-server-1.26.11-1.fc43
• gstreamer1-vaapi-1.26.11-1.fc43
• python-gstreamer1-1.26.11-1.fc43

Update description:

1.26.11

It was discovered that PyJWT did not validate the critical header parameter, contrary to the RFC specification expectations. A remote attacker could possibly use this issue to bypass certain authentication checks and restrictions.

FEDORA-EPEL-2026-01ea52d899 Packages in this update:

• kea-2.6.5-1.el9

Update description:

• New version 2.6.5
• Fixes CVE-2026-3608 (rhbz#2452134)

FEDORA-2026-66f19b11e0 Packages in this update:

• kea-3.0.3-1.fc42

Update description:

• New version 3.0.3 (rhbz#2451141)
• Fixes CVE-2026-3608 (rhbz#2451621)

FEDORA-2026-04263e2a5b Packages in this update:

• kea-3.0.3-1.fc43

Update description:

• New version 3.0.3 (rhbz#2451141)
• Fixes CVE-2026-3608 (rhbz#2451621)

FEDORA-2026-2b21a4dafe Packages in this update:

• kea-3.0.3-1.fc44

Update description:

• New version 3.0.3 (rhbz#2451141)
• Fixes CVE-2026-3608 (rhbz#2451621)

FEDORA-2026-11e168602c Packages in this update:

• kea-3.0.3-1.fc45

Update description:

Automatic update for kea-3.0.3-1.fc45.

Changelog * Thu Mar 26 2026 Martin Osvald <mosvald@redhat.com> - 3.0.3-1 - New version 3.0.3 (rhbz#2451141) - Fixes CVE-2026-3608 (rhbz#2451621)

It was discovered that GStreamer Good Plugins incorrectly handled certain X-QDM RTP payloads. A remote attacker could use this issue to cause GStreamer Good Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code.

It was discovered that GStreamer Base Plugins incorrectly handled certain AVI media files. A remote attacker could use this issue to cause GStreamer Base Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code.

It was discovered that pyasn1 incorrectly handled recursion when decoding ASN.1 data. An attacker could use this issue to cause pyasn1 to consume resources, leading to a denial of service._

It was discovered that ImageMagick did not properly process certain tags prior to an image being loaded. An attacker could possibly use this issue to cause ImageMagick to crash, resulting in a denial of service. (CVE-2026-23952) It was discovered that ImageMagick did not properly handle temporary file creation failures. An attacker could possibly use this issue to cause ImageMagick to crash, resulting in a denial of service. (CVE-2026-25795) It was discovered that ImageMagick did not properly manage memory under certain conditions. An attacker could possibly use this issue to cause ImageMagick to consume resources, resulting in a denial of service. (CVE-2026-25796) It was discovered that ImageMagick incorrectly handled certain specially crafted image files. An attacker could possibly use this issue to cause ImageMagick to crash, resulting in a denial of service. (CVE-2026-25798) It was discovered that ImageMagick did not properly validate certain YUV sampling factors. An attacker could possibly use this issue to cause ImageMagick to crash, resulting in a denial of service. (CVE-2026-25799) It was discovered that ImageMagick incorrectly handled certain specially crafted image files. An attacker could possibly use this issue to cause ImageMagick to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-25970) It was discovered that ImageMagick incorrectly managed memory when handling certain specially crafted image files. An attacker could possibly use this issue to cause ImageMagick to consume resources, resulting in a denial of service. (CVE-2026-25988) It was discovered that ImageMagick incorrectly handled certain crafted image profiles. An attacker could possibly use this issue to cause ImageMagick to consume available resources, resulting in a denial of service. (CVE-2026-26066) It was discovered that ImageMagick incorrectly handled large image profiles when encoding PNG images. An attacker could use this issue to cause ImageMagick to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-30883) Kamil Frankowicz discovered that ImageMagick incorrectly handled certain XML data. An attacker could possibly use this issue to cause ImageMagick to crash, resulting in a denial of service. (CVE-2026-32636)

Version:7.0-rc6 (mainline) Released:2026-03-29 Source:linux-7.0-rc6.tar.gz Patch:full (incremental)

FEDORA-2026-ca43aa006f Packages in this update:

• nextcloud-33.0.1-1.fc42

Update description:

33.0.1 release

FEDORA-EPEL-2026-35986c0192 Packages in this update:

• nextcloud-33.0.1-1.el10_1

Update description:

33.0.1 release

FEDORA-2026-9cc418c23e Packages in this update:

• calibre-9.6.0-1.fc43

Update description:

Update to 9.6.0. Fixes rhbz#2452087

FEDORA-2026-7de23151cd Packages in this update:

• calibre-9.6.0-1.fc44

Update description:

Update to 9.6.0. Fixes rhbz#2452087