New upstream release (151.0.3). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-91bc662689 2026-06-10 01:08:28.183020+00:00 -------------------------------------------------------------------------------- Name : firefox Product : Fedora 43 Version : 151.0.3 Release : 1.fc43 URL : https://www.mozilla.org/firefox/ Summary : Mozilla Firefox Web browser Description : Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. -------------------------------------------------------------------------------- Update Information: New upstream release (151.0.3) -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 3 2026 Martin Stransky - 151.0.3-1 - Update to latest upstream (151.0.3) -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-91bc662689' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Update to xserver 21.1.23, Security fixes for: ZDI-CAN-30136, ZDI-CAN-30159, ZDI-CAN-30160, ZDI-CAN-30161, ZDI-CAN-30163, ZDI-CAN-30164, ZDI-CAN-30165, ZDI-CAN-30168. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-c3ea7d7b0e 2026-06-10 01:08:28.183015+00:00 -------------------------------------------------------------------------------- Name : xorg-x11-server Product : Fedora 43 Version : 21.1.23 Release : 1.fc43 URL : http://www.x.org Summary : X.Org X11 X server Description : X.Org X11 X server. -------------------------------------------------------------------------------- Update Information: Update to xserver 21.1.23, Security fixes for: ZDI-CAN-30136, ZDI-CAN-30159, ZDI-CAN-30160, ZDI-CAN-30161, ZDI-CAN-30163, ZDI-CAN-30164, ZDI-CAN-30165, ZDI-CAN-30168 -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 2 2026 Peter Hutterer - 21.1.23-1 - Update to xserver 21.1.23 Security fixes for: ZDI-CAN-30136, ZDI-CAN-30159, ZDI-CAN-30160, ZDI-CAN-30161, ZDI-CAN-30163, ZDI-CAN-30164, ZDI-CAN-30165, ZDI-CAN-30168 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-c3ea7d7b0e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
This is an update fixing a pre-authentication information disclosure (CVE-2026-48840).. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-71b1e9b455 2026-06-10 01:08:28.182999+00:00 -------------------------------------------------------------------------------- Name : exim Product : Fedora 43 Version : 4.99.4 Release : 1.fc43 URL : https://www.exim.org/ Summary : The exim mail transfer agent Description : Exim is a message transfer agent (MTA) developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal of flexibility in the way mail can be routed, and there are extensive facilities for checking incoming mail. Exim can be installed in place of sendmail, although the configuration of exim is quite different to that of sendmail. -------------------------------------------------------------------------------- Update Information: This is an update fixing a pre-authentication information disclosure (CVE-2026-48840). -------------------------------------------------------------------------------- ChangeLog: * Mon Jun 1 2026 Jaroslav Škarvada - 4.99.4-1 - New version Resolves: rhbz#2483300 Resolves: CVE-2026-48840 * Mon May 18 2026 Jaroslav Škarvada - 4.99.3-1 - New version Resolves: rhbz#2476497 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2483300 - exim-4.99.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2483300 [ 2 ] Bug #2484718 - CVE-2026-48840 exim: Exim: Information disclosure via mishandled short payloads in proxy configurations [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2484718 -------------------------------------------------------------------------------- This update can be installed withthe "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-71b1e9b455' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . An important update for Fedora 43 fixing information disclosure in Exim. Immediate action recommended.. Exim update,fedora 43,information disclosure,security advisory,important update. . Severity: Important. LinuxSecurity.com Team
This is an update fixing several security related problems in putty.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-61f53cc218 2026-06-10 01:08:28.182994+00:00 -------------------------------------------------------------------------------- Name : putty Product : Fedora 43 Version : 0.84 Release : 1.fc43 URL : http://www.chiark.greenend.org.uk/~sgtatham/putty/ Summary : SSH, Telnet and Rlogin client Description : Putty is a SSH, Telnet & Rlogin client - this time for Linux. -------------------------------------------------------------------------------- Update Information: This is an update fixing several security related problems in putty. -------------------------------------------------------------------------------- ChangeLog: * Mon May 25 2026 Jaroslav Škarvada - 0.84-1 - New version Resolves: rhbz#2480724 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2480724 - putty-0.84 is available https://bugzilla.redhat.com/show_bug.cgi?id=2480724 [ 2 ] Bug #2481658 - CVE-2026-48850 putty: double free vulnerability in RSA KEX code [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2481658 [ 3 ] Bug #2481659 - CVE-2026-48851 putty: TELNET session data is marked with trust sigils after authenticating to a proxy [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2481659 [ 4 ] Bug #2481662 - CVE-2026-48852 putty: assertion failure in ECDSA signature verification [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2481662 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-61f53cc218' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages aresigned with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Update addresses security issues in Putty on Fedora 43, ensuring safer remote connections and data integrity.. Putty Update, Fedora Security, SSH Client Upgrade, Putty Security Fix, Fedora Vulnerability. . Severity: Important. LinuxSecurity.com Team
Updated standalone web UI and HA Cluster Management Cockpit application to pcs- web-ui 0.1.24.3 (see CHANGELOG_WUI.md) Fixed a crash when running pcs resource|stonith list Fixed order of resources in sets when listing configuration of constraints. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-c0f7d885ee 2026-06-10 01:08:28.182950+00:00 -------------------------------------------------------------------------------- Name : pcs Product : Fedora 43 Version : 0.12.2 Release : 2.fc43 URL : https://github.com/ClusterLabs/pcs Summary : Pacemaker/Corosync Configuration System Description : pcs is a configuration tool for Corosync and Pacemaker. It permits users to easily view, modify and create high availability clusters based on Pacemaker. This package contains the pcs command-line utility and its server pcsd. -------------------------------------------------------------------------------- Update Information: Updated standalone web UI and HA Cluster Management Cockpit application to pcs- web-ui 0.1.24.3 (see CHANGELOG_WUI.md) Fixed a crash when running pcs resource|stonith list Fixed order of resources in sets when listing configuration of constraints -------------------------------------------------------------------------------- ChangeLog: * Fri May 15 2026 Michal Pospíšil - 0.12.2-2 - Updated standalone web UI and HA Cluster Management Cockpit application to pcs-web-ui 0.1.24.3 (see CHANGELOG_WUI.md) Resolves: rhbz#2454042 - Fixed a crash when running pcs resource|stonith list Resolves: rhbz#2458608 - Fixed order of resources in sets when listing configuration of constraints Resolves: rhbz#2461143 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2454042 - CVE-2026-4800 pcs: lodash: Arbitrary code execution via untrusted input in template imports [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2454042 [ 2 ] Bug #2458608 -pcs resource list produces traceback https://bugzilla.redhat.com/show_bug.cgi?id=2458608 [ 3 ] Bug #2461143 - pcs constraint in default text mode orders resources alphabetically https://bugzilla.redhat.com/show_bug.cgi?id=2461143 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-c0f7d885ee' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Enhance your Fedora 43 pcs setup by applying important updates and fixes to avoid security risks.. Fedora pcs update security fixes management. . Severity: Important. LinuxSecurity.com Team
This is an update fixing a pre-authentication information disclosure (CVE-2026-48840).. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-78bf093219 2026-06-10 00:54:41.795265+00:00 -------------------------------------------------------------------------------- Name : exim Product : Fedora 44 Version : 4.99.4 Release : 1.fc44 URL : https://www.exim.org/ Summary : The exim mail transfer agent Description : Exim is a message transfer agent (MTA) developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal of flexibility in the way mail can be routed, and there are extensive facilities for checking incoming mail. Exim can be installed in place of sendmail, although the configuration of exim is quite different to that of sendmail. -------------------------------------------------------------------------------- Update Information: This is an update fixing a pre-authentication information disclosure (CVE-2026-48840). -------------------------------------------------------------------------------- ChangeLog: * Mon Jun 1 2026 Jaroslav Škarvada - 4.99.4-1 - New version Resolves: rhbz#2483300 Resolves: CVE-2026-48840 * Mon May 18 2026 Jaroslav Škarvada - 4.99.3-1 - New version Resolves: rhbz#2476497 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2483300 - exim-4.99.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2483300 [ 2 ] Bug #2484718 - CVE-2026-48840 exim: Exim: Information disclosure via mishandled short payloads in proxy configurations [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2484718 -------------------------------------------------------------------------------- This update can be installed withthe "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-78bf093219' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Update for Fedora 44 fixing CVE-2026-48840 pre-auth information disclosure in exim mail agent.. Fedora 44, Exim mail agent, Information disclosure, Security update, CVE-2026-48840. . Severity: Critical. LinuxSecurity.com Team
This is an update fixing several security related problems in putty.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-1ab61e6e20 2026-06-10 00:54:41.795258+00:00 -------------------------------------------------------------------------------- Name : putty Product : Fedora 44 Version : 0.84 Release : 1.fc44 URL : http://www.chiark.greenend.org.uk/~sgtatham/putty/ Summary : SSH, Telnet and Rlogin client Description : Putty is a SSH, Telnet & Rlogin client - this time for Linux. -------------------------------------------------------------------------------- Update Information: This is an update fixing several security related problems in putty. -------------------------------------------------------------------------------- ChangeLog: * Mon May 25 2026 Jaroslav Škarvada - 0.84-1 - New version Resolves: rhbz#2480724 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2480724 - putty-0.84 is available https://bugzilla.redhat.com/show_bug.cgi?id=2480724 [ 2 ] Bug #2481658 - CVE-2026-48850 putty: double free vulnerability in RSA KEX code [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2481658 [ 3 ] Bug #2481659 - CVE-2026-48851 putty: TELNET session data is marked with trust sigils after authenticating to a proxy [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2481659 [ 4 ] Bug #2481662 - CVE-2026-48852 putty: assertion failure in ECDSA signature verification [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2481662 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-1ab61e6e20' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages aresigned with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Fixes multiple security issues in Putty, ensuring safer SSH sessions in Fedora 44. Update now!. Putty update Fedora security SSH. . Severity: Important. LinuxSecurity.com Team
Updated standalone web UI and HA Cluster Management Cockpit application to pcs- web-ui 0.1.24.3 (see CHANGELOG_WUI.md) Fixed a crash when running pcs resource|stonith list Fixed order of resources in sets when listing configuration of constraints. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-d420bebe72 2026-06-10 00:54:41.795203+00:00 -------------------------------------------------------------------------------- Name : pcs Product : Fedora 44 Version : 0.12.2 Release : 2.fc44 URL : https://github.com/ClusterLabs/pcs Summary : Pacemaker/Corosync Configuration System Description : pcs is a configuration tool for Corosync and Pacemaker. It permits users to easily view, modify and create high availability clusters based on Pacemaker. This package contains the pcs command-line utility and its server pcsd. -------------------------------------------------------------------------------- Update Information: Updated standalone web UI and HA Cluster Management Cockpit application to pcs- web-ui 0.1.24.3 (see CHANGELOG_WUI.md) Fixed a crash when running pcs resource|stonith list Fixed order of resources in sets when listing configuration of constraints -------------------------------------------------------------------------------- ChangeLog: * Fri May 15 2026 Michal Pospíšil - 0.12.2-2 - Updated standalone web UI and HA Cluster Management Cockpit application to pcs-web-ui 0.1.24.3 (see CHANGELOG_WUI.md) Resolves: rhbz#2454042 - Fixed a crash when running pcs resource|stonith list Resolves: rhbz#2458608 - Fixed order of resources in sets when listing configuration of constraints Resolves: rhbz#2461143 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2454042 - CVE-2026-4800 pcs: lodash: Arbitrary code execution via untrusted input in template imports [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2454042 [ 2 ] Bug #2458608 -pcs resource list produces traceback https://bugzilla.redhat.com/show_bug.cgi?id=2458608 [ 3 ] Bug #2461143 - pcs constraint in default text mode orders resources alphabetically https://bugzilla.redhat.com/show_bug.cgi?id=2461143 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-d420bebe72' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Explore the update for Fedora 44 pcs addressing critical security issues including code execution vulnerabilities.. Fedora 44 pcs update security web UI code execution. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.