Fedora 44 Update: rust-pretty-git-prompt-0.2.2-11.fc44
Fedora 44 Update: rust-lsd-1.2.0-8.fc44
Fedora 44 Update: rust-tokei-14.0.0-7.fc44
Fedora 44 Update: rust-git-interactive-rebase-tool-2.4.1-17.fc44
Fedora 44 Update: rust-git-delta-0.19.1-7.fc44
Fedora 44 Update: rust-bat-0.26.1-3.fc44
Fedora 44 Update: jrnl-4.6-1.fc44
Fedora 44 Update: libgsasl-1.10.0-17.fc44
Fedora 44 Update: stunnel-5.80-1.fc44
Fedora 43 Update: jrnl-4.6-1.fc43
Fedora 43 Update: libgsasl-1.10.0-17.fc43
Fedora 43 Update: stunnel-5.80-1.fc43
[SECURITY] Fedora 44 Update: rust-pretty-git-prompt-0.2.2-11.fc44
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-74c4a6f82e
2026-08-16 01:05:31.112859+00:00
--------------------------------------------------------------------------------
Name : rust-pretty-git-prompt
Product : Fedora 44
Version : 0.2.2
Release : 11.fc44
URL : https://crates.io/crates/pretty-git-prompt
Summary : Your current git repository information inside a beautiful shell prompt
Description :
Your current git repository information inside a beautiful shell prompt.
--------------------------------------------------------------------------------
Update Information:
Rebuild applications that use libgit2 via the Rust bindings (git2 / libgit2-sys
crates) with the latest version of the libgit2-sys crate.
This ensures applications now link against the libgit2 library provided by the
system, which now includes fixes for various security issues compared to the
statically linked version of libgit2 that was previously bundled in the
libgit2-sys crate (CVE-2026-5917, CVE-2026-53586, CVE-2026-53587,
CVE-2026-53585, CVE-2026-53584, CVE-2026-53583, and others).
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 14 2026 Fabio Valentini [decathorpe@gmail.com] - 0.2.2-11
- Rebuild with latest libgit2-sys crate for libgit2 fixes
* Fri Jul 17 2026 Fedora Release Engineering [releng@fedoraproject.org] - 0.2.2-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-74c4a6f82e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 44 Update: rust-lsd-1.2.0-8.fc44
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-74c4a6f82e
2026-08-16 01:05:31.112859+00:00
--------------------------------------------------------------------------------
Name : rust-lsd
Product : Fedora 44
Version : 1.2.0
Release : 8.fc44
URL : https://crates.io/crates/lsd
Summary : Ls command with a lot of pretty colors and some other stuff
Description :
An ls command with a lot of pretty colors and some other stuff.
--------------------------------------------------------------------------------
Update Information:
Rebuild applications that use libgit2 via the Rust bindings (git2 / libgit2-sys
crates) with the latest version of the libgit2-sys crate.
This ensures applications now link against the libgit2 library provided by the
system, which now includes fixes for various security issues compared to the
statically linked version of libgit2 that was previously bundled in the
libgit2-sys crate (CVE-2026-5917, CVE-2026-53586, CVE-2026-53587,
CVE-2026-53585, CVE-2026-53584, CVE-2026-53583, and others).
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 14 2026 Fabio Valentini [decathorpe@gmail.com] - 1.2.0-8
- Rebuild with latest libgit2-sys crate for libgit2 fixes
* Fri Jul 17 2026 Fedora Release Engineering [releng@fedoraproject.org] - 1.2.0-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
* Mon Apr 27 2026 Michel Lind [salimma@fedoraproject.org] - 1.2.0-6
- Allow both lscolors 0.20 and 0.21
* Mon Apr 27 2026 Michel Lind [salimma@fedoraproject.org] - 1.2.0-5
- Update uzers to 0.12 and xdg to 3
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-74c4a6f82e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 44 Update: rust-tokei-14.0.0-7.fc44
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-74c4a6f82e
2026-08-16 01:05:31.112859+00:00
--------------------------------------------------------------------------------
Name : rust-tokei
Product : Fedora 44
Version : 14.0.0
Release : 7.fc44
URL : https://crates.io/crates/tokei
Summary : Count your code, quickly
Description :
Count your code, quickly.
--------------------------------------------------------------------------------
Update Information:
Rebuild applications that use libgit2 via the Rust bindings (git2 / libgit2-sys
crates) with the latest version of the libgit2-sys crate.
This ensures applications now link against the libgit2 library provided by the
system, which now includes fixes for various security issues compared to the
statically linked version of libgit2 that was previously bundled in the
libgit2-sys crate (CVE-2026-5917, CVE-2026-53586, CVE-2026-53587,
CVE-2026-53585, CVE-2026-53584, CVE-2026-53583, and others).
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 14 2026 Fabio Valentini [decathorpe@gmail.com] - 14.0.0-7
- Rebuild with latest libgit2-sys crate for libgit2 fixes
* Fri Jul 17 2026 Fedora Release Engineering [releng@fedoraproject.org] - 14.0.0-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-74c4a6f82e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 44 Update: rust-git-interactive-rebase-tool-2.4.1-17.fc44
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-74c4a6f82e
2026-08-16 01:05:31.112859+00:00
--------------------------------------------------------------------------------
Name : rust-git-interactive-rebase-tool
Product : Fedora 44
Version : 2.4.1
Release : 17.fc44
URL : https://crates.io/crates/git-interactive-rebase-tool
Summary : Full-featured terminal-based sequence editor for Git interactive rebase
Description :
Full-featured terminal-based sequence editor for Git interactive rebase.
--------------------------------------------------------------------------------
Update Information:
Rebuild applications that use libgit2 via the Rust bindings (git2 / libgit2-sys
crates) with the latest version of the libgit2-sys crate.
This ensures applications now link against the libgit2 library provided by the
system, which now includes fixes for various security issues compared to the
statically linked version of libgit2 that was previously bundled in the
libgit2-sys crate (CVE-2026-5917, CVE-2026-53586, CVE-2026-53587,
CVE-2026-53585, CVE-2026-53584, CVE-2026-53583, and others).
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 14 2026 Fabio Valentini [decathorpe@gmail.com] - 2.4.1-17
- Rebuild with latest libgit2-sys crate for libgit2 fixes
* Fri Jul 17 2026 Fedora Release Engineering [releng@fedoraproject.org] - 2.4.1-16
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-74c4a6f82e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 44 Update: rust-git-delta-0.19.1-7.fc44
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-74c4a6f82e
2026-08-16 01:05:31.112859+00:00
--------------------------------------------------------------------------------
Name : rust-git-delta
Product : Fedora 44
Version : 0.19.1
Release : 7.fc44
URL : https://crates.io/crates/git-delta
Summary : Syntax-highlighting pager for git
Description :
A syntax-highlighting pager for git.
--------------------------------------------------------------------------------
Update Information:
Rebuild applications that use libgit2 via the Rust bindings (git2 / libgit2-sys
crates) with the latest version of the libgit2-sys crate.
This ensures applications now link against the libgit2 library provided by the
system, which now includes fixes for various security issues compared to the
statically linked version of libgit2 that was previously bundled in the
libgit2-sys crate (CVE-2026-5917, CVE-2026-53586, CVE-2026-53587,
CVE-2026-53585, CVE-2026-53584, CVE-2026-53583, and others).
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 14 2026 Fabio Valentini [decathorpe@gmail.com] - 0.19.1-7
- Rebuild with latest libgit2-sys crate for libgit2 fixes
* Fri Jul 17 2026 Fedora Release Engineering [releng@fedoraproject.org] - 0.19.1-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
* Mon Apr 20 2026 Benjamin A. Beasley [code@musicinmybrain.net] - 0.19.1-5
- Add themes.gitconfig handling to rust2rpm.toml
* Mon Apr 20 2026 Benjamin A. Beasley [code@musicinmybrain.net] - 0.19.1-4
- Update xdg from 2.4.1 to 3.0.0
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-74c4a6f82e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 44 Update: rust-bat-0.26.1-3.fc44
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-74c4a6f82e
2026-08-16 01:05:31.112859+00:00
--------------------------------------------------------------------------------
Name : rust-bat
Product : Fedora 44
Version : 0.26.1
Release : 3.fc44
URL : https://crates.io/crates/bat
Summary : Cat(1) clone with wings
Description :
A cat(1) clone with wings.
--------------------------------------------------------------------------------
Update Information:
Rebuild applications that use libgit2 via the Rust bindings (git2 / libgit2-sys
crates) with the latest version of the libgit2-sys crate.
This ensures applications now link against the libgit2 library provided by the
system, which now includes fixes for various security issues compared to the
statically linked version of libgit2 that was previously bundled in the
libgit2-sys crate (CVE-2026-5917, CVE-2026-53586, CVE-2026-53587,
CVE-2026-53585, CVE-2026-53584, CVE-2026-53583, and others).
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 14 2026 Fabio Valentini [decathorpe@gmail.com] - 0.26.1-3
- Rebuild with latest libgit2-sys crate for libgit2 fixes
* Fri Jul 17 2026 Fedora Release Engineering [releng@fedoraproject.org] - 0.26.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-74c4a6f82e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 44 Update: jrnl-4.6-1.fc44
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-1f4ad7617f
2026-08-16 01:05:31.112788+00:00
--------------------------------------------------------------------------------
Name : jrnl
Product : Fedora 44
Version : 4.6
Release : 1.fc44
URL : https://jrnl.sh
Summary : Collect your thoughts and notes without leaving the command line
Description :
jrnl is a simple journal application for the command line.
You can use it to easily create, search, and view journal entries. Journals are
stored as human-readable plain text, and can also be encrypted using AES
encryption.
--------------------------------------------------------------------------------
Update Information:
Update to version 4.6: fixes GHSA-rhx6-37mm-5q9r and other bugs.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 7 2026 Benjamin A. Beasley [code@musicinmybrain.net] - 4.6-1
- Update to version 4.6 (close RHBZ#2512481)
* Thu Jul 16 2026 Fedora Release Engineering [releng@fedoraproject.org] - 4.3-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
* Wed Jul 15 2026 Benjamin A. Beasley [code@musicinmybrain.net] - 4.3-5
- Backport patch for version tests
* Thu Jun 4 2026 Python Maint - 4.3-4
- Rebuilt for Python 3.15
* Tue May 19 2026 Benjamin A. Beasley [code@musicinmybrain.net] - 4.3-3
- Use various long options
* Fri May 8 2026 Benjamin A. Beasley [code@musicinmybrain.net] - 4.3-2
- Use long pyproject options
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2512481 - jrnl-4.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2512481
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-1f4ad7617f' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 44 Update: libgsasl-1.10.0-17.fc44
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-f2ced62115
2026-08-16 01:05:31.112760+00:00
--------------------------------------------------------------------------------
Name : libgsasl
Product : Fedora 44
Version : 1.10.0
Release : 17.fc44
URL : https://www.gnu.org/software/gsasl/
Summary : GNU SASL library
Description :
The library includes support for the SASL framework
and at least partial support for the CRAM-MD5, EXTERNAL,
GSSAPI, ANONYMOUS, PLAIN, SECURID, DIGEST-MD5, LOGIN,
and NTLM mechanisms.
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2026-48829
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 7 2026 Peter Lemenkov [lemenkov@gmail.com] - 1.10.0-17
- Fix CVE-2026-48829
* Thu Jul 16 2026 Fedora Release Engineering [releng@fedoraproject.org] - 1.10.0-16
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2507565 - CVE-2026-48829 libgsasl: Denial of Service via NULL pointer dereference in DIGEST-MD5 [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2507565
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-f2ced62115' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 44 Update: stunnel-5.80-1.fc44
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-67c2201ad8
2026-08-16 01:05:31.112755+00:00
--------------------------------------------------------------------------------
Name : stunnel
Product : Fedora 44
Version : 5.80
Release : 1.fc44
URL : https://www.stunnel.org/
Summary : A TLS-encrypting socket wrapper
Description :
Stunnel is a socket wrapper which can provide TLS/SSL
(Transport Layer Security/Secure Sockets Layer) support
to ordinary applications. For example, it can be used in
conjunction with imapd to create a TLS secure IMAP server.
--------------------------------------------------------------------------------
Update Information:
* Security bugfixes
- CVE-2026-70368: Fixed an out-of-bounds memory access triggered by
logging attacker-controlled protocol messages longer than 1,024 bytes
(thanks to AISLE Research and Clemens Lang).
- CVE-2026-70367: Fixed a SOCKS server mode bypass of the localhost
destination filter using alternate local-address encodings and
interface-scoped IPv6 destinations (thanks to AISLE Research and
Clemens Lang).
- Restricted Windows GUI/service control pipes to local clients.
* Bugfixes
- Fixed concurrent DTLS handshakes from clients sharing an IP address.
- Fixed version reporting in builds from source.
- Rejected stream-oriented protocol negotiation with the UDP transport
during configuration validation.
- Fixed a TCP stream truncation (thanks to Solomon Jacobs).
- Fixed a transfer() loop (thanks to Solomon Jacobs).
- Fixed log reopening logs without a configured log file.
- Fixed some logged values (thanks to Jose Alf.).
- Fixed some error handling and cleanup issues (thanks to Jose Alf.).
- Fixed OpenSSL applink detection and MSYS2 MinGW builds.
* Features
- Added the "CRLcheckChain" service-level option for opt-in full-chain
CRL verification.
- Added the new 'transport' service-level option to choose between TLS
over TCP and DTLS over UDP.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 7 2026 Clemens Lang [cllang@redhat.com] - 5.80-1
- New upstream release 5.80
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2494485 - stunnel-5.80 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2494485
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-67c2201ad8' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 43 Update: jrnl-4.6-1.fc43
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-d51fe2075c
2026-08-16 01:04:46.490392+00:00
--------------------------------------------------------------------------------
Name : jrnl
Product : Fedora 43
Version : 4.6
Release : 1.fc43
URL : https://jrnl.sh
Summary : Collect your thoughts and notes without leaving the command line
Description :
jrnl is a simple journal application for the command line.
You can use it to easily create, search, and view journal entries. Journals are
stored as human-readable plain text, and can also be encrypted using AES
encryption.
--------------------------------------------------------------------------------
Update Information:
Update to version 4.6: fixes GHSA-rhx6-37mm-5q9r and other bugs.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 7 2026 Benjamin A. Beasley [code@musicinmybrain.net] - 4.6-1
- Update to version 4.6 (close RHBZ#2512481)
* Fri Aug 7 2026 Benjamin A. Beasley [code@musicinmybrain.net] - 4.3-4
- Backport patch for version tests
* Fri Aug 7 2026 Benjamin A. Beasley [code@musicinmybrain.net] - 4.3-3
- Use various long options
* Fri Aug 7 2026 Benjamin A. Beasley [code@musicinmybrain.net] - 4.3-2
- Use long pyproject options
* Fri Aug 7 2026 Benjamin A. Beasley [code@musicinmybrain.net] - 4.3-1
- Update to 4.3 (close RHBZ#2442437)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2512481 - jrnl-4.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2512481
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-d51fe2075c' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 43 Update: libgsasl-1.10.0-17.fc43
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-110274a705
2026-08-16 01:04:46.490354+00:00
--------------------------------------------------------------------------------
Name : libgsasl
Product : Fedora 43
Version : 1.10.0
Release : 17.fc43
URL : https://www.gnu.org/software/gsasl/
Summary : GNU SASL library
Description :
The library includes support for the SASL framework
and at least partial support for the CRAM-MD5, EXTERNAL,
GSSAPI, ANONYMOUS, PLAIN, SECURID, DIGEST-MD5, LOGIN,
and NTLM mechanisms.
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2026-48829
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 7 2026 Peter Lemenkov [lemenkov@gmail.com] - 1.10.0-17
- Fix CVE-2026-48829
* Thu Jul 16 2026 Fedora Release Engineering [releng@fedoraproject.org] - 1.10.0-16
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2507565 - CVE-2026-48829 libgsasl: Denial of Service via NULL pointer dereference in DIGEST-MD5 [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2507565
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-110274a705' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 43 Update: stunnel-5.80-1.fc43
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-de8630b736
2026-08-16 01:04:46.490349+00:00
--------------------------------------------------------------------------------
Name : stunnel
Product : Fedora 43
Version : 5.80
Release : 1.fc43
URL : https://www.stunnel.org/
Summary : A TLS-encrypting socket wrapper
Description :
Stunnel is a socket wrapper which can provide TLS/SSL
(Transport Layer Security/Secure Sockets Layer) support
to ordinary applications. For example, it can be used in
conjunction with imapd to create a TLS secure IMAP server.
--------------------------------------------------------------------------------
Update Information:
* Security bugfixes
- CVE-2026-70368: Fixed an out-of-bounds memory access triggered by
logging attacker-controlled protocol messages longer than 1,024 bytes
(thanks to AISLE Research and Clemens Lang).
- CVE-2026-70367: Fixed a SOCKS server mode bypass of the localhost
destination filter using alternate local-address encodings and
interface-scoped IPv6 destinations (thanks to AISLE Research and
Clemens Lang).
- Restricted Windows GUI/service control pipes to local clients.
* Bugfixes
- Fixed concurrent DTLS handshakes from clients sharing an IP address.
- Fixed version reporting in builds from source.
- Rejected stream-oriented protocol negotiation with the UDP transport
during configuration validation.
- Fixed a TCP stream truncation (thanks to Solomon Jacobs).
- Fixed a transfer() loop (thanks to Solomon Jacobs).
- Fixed log reopening logs without a configured log file.
- Fixed some logged values (thanks to Jose Alf.).
- Fixed some error handling and cleanup issues (thanks to Jose Alf.).
- Fixed OpenSSL applink detection and MSYS2 MinGW builds.
* Features
- Added the "CRLcheckChain" service-level option for opt-in full-chain
CRL verification.
- Added the new 'transport' service-level option to choose between TLS
over TCP and DTLS over UDP.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 7 2026 Clemens Lang [cllang@redhat.com] - 5.80-1
- New upstream release 5.80
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2494485 - stunnel-5.80 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2494485
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-de8630b736' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
