CVE-2026-49838

A flaw was found in GoBGP, an open-source Border Gateway Protocol BGP implementation. A configured confederation eBGP peer can send a specially crafted BGP UPDATE message with a zero-length ASPATH attribute. This malformed message is improperly handled during validation, leading to an unchecked...

[SECURITY] Fedora 43 Update: curl-8.15.0-10.fc43

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

[SECURITY] Fedora 43 Update: libevent-2.1.13-1.fc43

The libevent API provides a mechanism to execute a callback function when a specific event occurs on a file descriptor or after a timeout has been reached. libevent is meant to replace the asynchronous event loop found in event driven network servers. An application just needs to call eventdispat...

[SECURITY] Fedora 43 Update: corosync-3.1.10-3.fc43

This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script...

[SECURITY] Fedora 43 Update: dokuwiki-20250514b-6.fc43

DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creati ng documentation of any kind. It has a simple but powerful syntax which makes su re the data-files remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no...

[SECURITY] Fedora 43 Update: grpcurl-1.9.4-1.fc43

Like cURL, but for gRPC: Command-line tool for interacting with gRPC servers...

[SECURITY] Fedora 43 Update: rest-0.10.2-5.fc43

This library was designed to make it easier to access web services that claim to be "RESTful". A RESTful service should have urls that represent remote objects, which methods can then be called on. The majority of services don't actually adhere to this strict definition. Instead, their RESTful en...

[SECURITY] Fedora 44 Update: bluez-5.87+1.git8750129efca8-1.fc44

Utilities for use in Bluetooth applications: - avinfo - bluemoon - bluetoothctl - bluetoothd - btattach - btmon - hex2hcd - mpris-proxy The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A...

[SECURITY] Fedora 44 Update: curl-8.18.0-10.fc44

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

[SECURITY] Fedora 44 Update: dokuwiki-20250514b-8.fc44

DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creati ng documentation of any kind. It has a simple but powerful syntax which makes su re the data-files remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no...

OPENSUSE-SU-2026:11756-1 python311-3.11.16-1.1 on GA media

These are all security issues fixed in the python311-3.11.16-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11760-1 tomcat10-10.1.59-1.1 on GA media

These are all security issues fixed in the tomcat10-10.1.59-1.1 package on the GA media of openSUSE Tumbleweed...

MAL-2026-16164 Malicious code in logs_update (crates.io)

logs-update is a malicious crate published to crates.io on 2026-09-10 with zero downloads. It pretends to be a terminal progress-bar library, but renders nothing to a terminal. The whole crate steals files and sets up remote access. The crate has no build script, so it does not run during cargo...

osbuild-composer security update

101.5-1.0.1 - Bump to 101.5-1.0.1 - CVE-2026-32280 - CVE-2026-32282 - CVE-2026-32283 - CVE-2026-33186 - CVE-2026-34986...

OPENSUSE-SU-2026:11750-1 chromedriver-153.0.8010.36-1.1 on GA media

These are all security issues fixed in the chromedriver-153.0.8010.36-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11758-1 steampipe-2.4.6-1.1 on GA media

These are all security issues fixed in the steampipe-2.4.6-1.1 package on the GA media of openSUSE Tumbleweed...

image-builder security update

72.0.0-1.0.2 - Rebuid to fix CVE-2026-32280, CVE-2026-32281, CVE-2026-33810, CVE-2026-33811, CVE-2026-33818, CVE-2026-39820, CVE-2026-39821, CVE-2026-42499, CVE-2026-42504, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862...

osbuild-composer security update

175-1.0.2 - Rebuild to fix CVE-2026-33818, CVE-2026-39820, CVE-2026-39821, CVE-2026-42499, CVE-2026-42504, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862...

OPENSUSE-SU-2026:11752-1 kubevirt1.9-container-disk-1.9.0-3.1 on GA media

These are all security issues fixed in the kubevirt1.9-container-disk-1.9.0-3.1 package on the GA media of openSUSE Tumbleweed...

image-builder security update

72.0.0-1.0.2 - Rebuild to fix CVE-2026-32280, CVE-2026-32281, CVE-2026-33811, CVE-2026-33818, CVE-2026-39820, CVE-2026-39821, CVE-2026-42499, CVE-2026-42504, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862...