[SECURITY] Fedora 43 Update: python3.12-3.12.15-1.fc43

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...

CVE-2026-104044

A flaw was found in sssd. A local attacker can trigger a Denial of Service DoS by sending a specially crafted Pluggable Authentication Module PAM request when passkey authentication is enabled. Due to a missing state validation check in passkey Kerberos handling, the PAM responder dereferences an...

CVE-2026-104043 Sssd: sssd: denial of service via undersized packet parsing in nss responder

A flaw was found in SSSD. A local attacker with access to the Name Service Switch NSS responder UNIX socket can trigger an integer underflow by sending a specially crafted request with an undersized packet header. This issue causes an out-of-bounds memory read during packet parsing, crashing the...

CVE-2026-104043

A flaw was found in SSSD. A local attacker with access to the Name Service Switch NSS responder UNIX socket can trigger an integer underflow by sending a specially crafted request with an undersized packet header. This issue causes an out-of-bounds memory read during packet parsing, crashing the...

CVE-2026-104043

A flaw exists in SSSD where a local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigger an integer underflow . By sending a specially crafted request with an undersized packet header, the attacker can cause an out-of-bounds memory read during packet parsing. Th...

CVE-2026-104042

A flaw was found in sssd. A local attacker can cause a Denial of Service DoS by sending a crafted Pluggable Authentication Module PAM request containing a zero-length authentication token to the responder socket. Due to missing input validation, the service attempts to read beyond buffer boundari...

CVE-2026-104039

A flaw was found in SSSD. A local user can cause a denial of service DoS by disrupting system authentication services. When handling Generic Security Services Application Programming Interface GSSAPI authentication in the Pluggable Authentication Module PAM responder, cached connection state is...

CLEANSTART-2026-LS69569 On Unix platforms, when listing the contents of a directory using File

Security vulnerability affects the temporal-server package. On Unix platforms, when listing the contents of a directory using File...

CLEANSTART-2026-JZ54456 On Unix systems, opening a file in an os

Security vulnerability affects the temporal-server package. On Unix systems, opening a file in an os...

[SECURITY] Fedora 45 Update: zenon-0.8.5-45.fc45

Zenon is an automated theorem prover for first order classical logic with equality, based on the tableau method. Zenon can read input files in TPTP, Coq, Focal, and its own Zenon format. Zenon can directly generate Coq proofs proof scripts or proof terms, which can be reinserted into Coq...

[SECURITY] Fedora 45 Update: rocq-stdlib-9.2.0-1.fc45

Rocq is a formal proof management system. It provides a formal language to write mathematical definitions, executable algorithms and theorems together with an environment for semi-interactive development of machine-checked proof s. This package includes the Rocq Standard Library, that is to say,...

[SECURITY] Fedora 45 Update: utop-2.17.0-5.fc45

utop is an improved toplevel i.e., Read-Eval-Print Loop for OCaml. It can run in a terminal or in Emacs. It supports line editing, history, real-time and context sensitive completion, colors, and more...

[SECURITY] Fedora 45 Update: ocaml-xmlrpc-light-0.6.1-92.fc45

XmlRpc-Light is an XmlRpc library written in OCaml...

[SECURITY] Fedora 45 Update: ocaml-yojson-3.0.0-14.fc45

Yojson is an optimized parsing and printing library for the JSON format. It addresses a few shortcomings of json-wheel including 2x speedup, polymorphic variants and optional syntax for tuples and variants. ydump is a pretty-printing command-line program provided with the yojson package. The...

[SECURITY] Fedora 45 Update: ocaml-xmlm-1.4.0-21.fc45

Xmlm is an OCaml streaming codec to decode and encode the XML data format. It can process XML documents without a complete in-memory representation of the data...

[SECURITY] Fedora 45 Update: ocaml-uucd-18.0.0-1.fc45

Uucd is an OCaml module to decode the data of the Unicode character database http://www.unicode.org/reports/tr44/ from its XML representation http://www.unicode.org/reports/tr42/. It provides high-level but not necessarily efficient access to the data so that efficient representations can be...

[SECURITY] Fedora 45 Update: ocaml-uutf-1.0.4-11.fc45

Uutf is a non-blocking streaming codec to decode and encode the UTF-8, UTF-16, UTF-16LE and UTF-16BE encoding schemes. It can efficiently work character by character without blocking on I/O. Decoders perform character position tracking and support newline normalization. Functions are also provide...

[SECURITY] Fedora 45 Update: ocaml-spdx-licenses-1.5.0-2.fc45

spdxlicenses is an OCaml library aiming to provide an up-to-date and strict SPDX License Expression parser. It implements the format described in https://spdx.github.io/spdx-spec/appendix-IV-SPDX-license-expressions/...

[SECURITY] Fedora 45 Update: ocaml-stdio-0.17.0-15.fc45

Stdio provides input/output functions for OCaml. It re-exports the buffered channels of the stdlib distributed with OCaml but with some improvements...

[SECURITY] Fedora 45 Update: ocaml-testo-0.5.0-5.fc45

Testo is a test framework for OCaml that takes inspiration from its predecessor alcotest and from pytest. Features include: - support for explicit XFAIL tests i.e. tests that are expected to fail, indicating that they should be fixed eventually; - support for test snapshots i.e. persistent storag...