Fixes CVE-2026-25075, CVE-2026-35328, CVE-2026-35329, CVE-2026-35330, CVE-2026-35331, CVE-2026-35332, CVE-2026-35333, CVE-2026-35334. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-cc6fcd3a58 2026-05-21 00:54:04.884703+00:00 -------------------------------------------------------------------------------- Name : strongswan Product : Fedora 44 Version : 6.0.6 Release : 2.fc44 URL : https://www.strongswan.org/ Summary : An OpenSource IPsec-based VPN and TNC solution Description : The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel. -------------------------------------------------------------------------------- Update Information: Fixes CVE-2026-25075, CVE-2026-35328, CVE-2026-35329, CVE-2026-35330, CVE-2026-35331, CVE-2026-35332, CVE-2026-35333, CVE-2026-35334 -------------------------------------------------------------------------------- ChangeLog: * Tue May 12 2026 Paul Wouters - 6.0.6-2 - updated sources * Tue May 12 2026 Paul Wouters - 6.0.6-1 - Update to 6.0.6 for 8 CVEs -------------------------------------------------------------------------------- References: [ 1 ] Bug #2450414 - CVE-2026-25075 strongSwan: strongSwan: Denial of Service via integer underflow in EAP-TTLS AVP parser https://bugzilla.redhat.com/show_bug.cgi?id=2450414 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-cc6fcd3a58' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-4756 http://linux.oracle.com/errata/ELSA-2026-4756.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: x86_64: libpng-1.5.13-8.0.3.el7.i686.rpm libpng-1.5.13-8.0.3.el7.x86_64.rpm libpng-devel-1.5.13-8.0.3.el7.i686.rpm libpng-devel-1.5.13-8.0.3.el7.x86_64.rpm libpng-static-1.5.13-8.0.3.el7.i686.rpm libpng-static-1.5.13-8.0.3.el7.x86_64.rpm SRPMS: http://oss.oracle.com/ol7/SRPMS-updates/libpng-1.5.13-8.0.3.el7.src.rpm Related CVEs: CVE-2026-25646 Description of changes: [2:1.5.13-8.0.3] - Fix CVE-2026-25646 [Orabug: 39093556] [2:1.5.13-8.0.1] - Fix CVE-2025-64720 [Orabug: 38824465] _______________________________________________ El-errata mailing list
Update to uriparser-0.9.8.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-40e8512956 2024-05-14 03:27:20.127763 -------------------------------------------------------------------------------- Name : uriparser Product : Fedora 39 Version : 0.9.8 Release : 1.fc39 URL : https://uriparser.github.io/ Summary : URI parsing library - RFC 3986 Description : Uriparser is a strictly RFC 3986 compliant URI parsing library written in C. uriparser is cross-platform, fast, supports Unicode and is licensed under the New BSD license. -------------------------------------------------------------------------------- Update Information: Update to uriparser-0.9.8. -------------------------------------------------------------------------------- ChangeLog: * Sun May 5 2024 Sandro Mani - 0.9.8-1 - Update to 0.9.8 * Sat Jan 27 2024 Fedora Release Engineering - 0.9.7-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Neal Gompa - 0.9.7-4 - Move cmake files to the devel subpackage -------------------------------------------------------------------------------- References: [ 1 ] Bug #2278811 - CVE-2024-34402 CVE-2024-34403 uriparser: various flaws [fedora-38] https://bugzilla.redhat.com/show_bug.cgi?id=2278811 [ 2 ] Bug #2278812 - CVE-2024-34402 CVE-2024-34403 uriparser: various flaws [fedora-39] https://bugzilla.redhat.com/show_bug.cgi?id=2278812 [ 3 ] Bug #2278813 - CVE-2024-34402 CVE-2024-34403 uriparser: various flaws [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2278813 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-40e8512956' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.