Fedora 43 Update: systemd-258.10-1.fc43
Fedora 43 Update: skopeo-1.22.2-2.fc43
Fedora 43 Update: trafficserver-10.1.3-1.fc43
Fedora 43 Update: libwebsockets-4.5.8-2.fc43
Fedora 44 Update: systemd-259.8-1.fc44
Fedora 44 Update: rust-libgit2-sys-0.18.7-1.fc44
Fedora 44 Update: libgit2-1.9.6-1.fc44
Fedora 44 Update: lego-5.3.1-2.fc44
Fedora 44 Update: trafficserver-10.1.3-1.fc44
Fedora 44 Update: libwebsockets-4.5.8-1.fc44
[SECURITY] Fedora 43 Update: systemd-258.10-1.fc43
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-289c38d6f2
2026-07-27 01:12:03.303815+00:00
--------------------------------------------------------------------------------
Name : systemd
Product : Fedora 43
Version : 258.10
Release : 1.fc43
URL : https://systemd.io
Summary : System and Service Manager
Description :
systemd is a system and service manager that runs as PID 1 and starts the rest
of the system. It provides aggressive parallelization capabilities, uses socket
and D-Bus activation for starting services, offers on-demand starting of
daemons, keeps track of processes using Linux control groups, maintains mount
and automount points, and implements an elaborate transactional dependency-based
service control logic. systemd supports SysV and LSB init scripts and works as a
replacement for sysvinit. Other parts of this package are a logging daemon,
utilities to control basic system configuration like the hostname, date, locale,
maintain a list of logged-in users, system accounts, runtime directories and
settings, and a logging daemons.
This package was built from the v258-stable branch of systemd.
--------------------------------------------------------------------------------
Update Information:
Latest upstream bugfix release.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 25 2026 Zbigniew Jędrzejewski-Szmek [zbyszek@amutable.com] - 258.10-1
- Version 258.10
- a bugfix release with correctness and security-relevant fixes too. 184
patches, so too many to describe here.
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-289c38d6f2' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
[SECURITY] Fedora 43 Update: skopeo-1.22.2-2.fc43
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-4d9a2870e5
2026-07-27 01:12:03.303805+00:00
--------------------------------------------------------------------------------
Name : skopeo
Product : Fedora 43
Version : 1.22.2
Release : 2.fc43
URL : https://github.com/containers/skopeo
Summary : Inspect container images and repositories on registries
Description :
Command line utility to inspect images and repositories directly on Docker
registries without the need to pull them.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2026-27145 (Go stdlib crypto/x509 DoS vulnerability).
Rebuild with golang-1.25.12 which includes the fix.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 22 2026 Lokesh Mandvekar [lsm5@redhat.com] - 1:1.22.2-2
- Rebuild for CVE-2026-27145
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2494281 - CVE-2026-27145 skopeo: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2494281
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-4d9a2870e5' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 43 Update: trafficserver-10.1.3-1.fc43
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-ddaabe38ab
2026-07-27 01:12:03.303800+00:00
--------------------------------------------------------------------------------
Name : trafficserver
Product : Fedora 43
Version : 10.1.3
Release : 1.fc43
URL : https://trafficserver.apache.org/
Summary : Fast, scalable and extensible HTTP/1.1 and HTTP/2 caching proxy server
Description :
Traffic Server is a high-performance building block for cloud services.
It's more than just a caching proxy server; it also has support for
plugins to build large scale web applications. Key features:
Caching - Improve your response time, while reducing server load and
bandwidth needs by caching and reusing frequently-requested web pages,
images, and web service calls.
Proxying - Easily add keep-alive, filter or anonymize content
requests, or add load balancing by adding a proxy layer.
Fast - Scales well on modern SMP hardware, handling 10s of thousands
of requests per second.
Extensible - APIs to write your own plug-ins to do anything from
modifying HTTP headers to handling ESI requests to writing your own
cache algorithm.
Proven - Handling over 400TB a day at Yahoo! both as forward and
reverse proxies, Apache Traffic Server is battle hardened.
--------------------------------------------------------------------------------
Update Information:
Resolves CVE-2026-59173 - DoS vulnerability in HTTP/2 via stalled flow-control
Additional Changes with Apache Traffic Server 9.2.14
#12910 - Fix connection-level window mismatch causing 408/504 timeouts
#13266 - Add Claude Code project guide for the 9.2.x branch
#13267 - [9.2.x] Backport format scripts fixes
#13377 - 9.2.x: http2: Track scheduled events
Additional Changes with Apache Traffic Server 10.1.3
#12192 - Return a 400 on chunk parse errors
#12733 - Fix retry logic for TSHttpTxnServerAddrSet (issue #12611)
#12854 - Fix LoadedPlugins::remove crash during static destruction
#12855 - Fix header_rewrite run-plugin relative path resolution
#12857 - Fix autest compatibility with Fedora 43 / Python 3.14
#12943 - Address incompatibility with BoringSSL
#12959 - Fix crash in HttpSM::tunnel_handler on unhandled VC events
#12972 - Fix cache retry assert on ServerAddrSet
#12990 - Update to Proxy Verifier v3.0.0
#13008 - cmake: limit GENERAL_NAME bssl probe
#13020 - Align AuTests with latest proxy-verifier checks (#12986)
#13025 - hrw: Refix loading geodb files
#13033 - tests/gold_tests/headers tests: use ATSReplayTest
#13113 - slice: Fix crash caused by use-after-free
#13114 - Fix bg fill teardown crash in update_size_and_time_stats
#13138 - Remove cache alternate vector detach
#13144 - Fix XPACK relative index underflow
#13162 - hrw: Fix an index bug in run plugin operator
#13177 - Correct records.yaml record drift
#13178 - 10.1.x: proxy.config.dns.search_default_domains: allow 2
#13182 - Stabilize parallel AuTest helpers
#13192 - yaml-cpp-0.9.0
#13193 - GCC 16: Regex header integer includes
#13198 - Fedora 44 test fixes
#13200 - Single source of truth for Proxy Verifier metadata
#13217 - Proxy Verifier v3.1.3
#13218 - Fix hdrHeap/hdrStrHeap allocator inuse metric underflow
#13220 - Fix flaky Fedora 44 AuTest helpers
#13223 - Fix mismatched sINT/dINT log field types
#13252 - cache: apply per-volume settings on first start after clear
#13256 - Fix mismatched log field types more
#13261 - header_rewrite: Improve URL Error messages
#13263 - Fix bounds check in CacheVC::scanObject
#13264 - Handle OpenSSL without dynamic ENGINE
#13280 - Enable probes in Fedora C++20 CI
#13293 - ProxyProtocol: free pp_info heap on NetVConnection recycle
#13294 - Fix pending HostDB DNS queue removal race
#13295 - Fix server entry cleanup after request tunnel setup
#13297 - 10.1.x: Add sni.yaml session ticket overrides (#13006)
#13303 - header_rewrite: Fix a leak and truncation in set-body-from
#13307 - dns: destruct HostEnt on free to fix SRV vector leak
#13318 - TLS: Fix memory leaks in cert load and OCSP stapling
#13325 - HttpSM.cc: fix cache read end milestone order
#13336 - 10.1.x: Fix redirected cache write without write VC
#13365 - 10.1.x: USDT: normalize names for STATE_ENTER
#13366 - 10.1.x: Fix set-status crash inside if/endif at remap time
#13387 - Hard-enforce max_active_streams_in at HTTP/2 stream creation
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 15 2026 Jered Floyd [jered@redhat.com] - 10.1.3-1
- Update to upstream 10.1.3
* Fri Jun 12 2026 Yaakov Selkowitz [yselkowi@redhat.com] - 10.1.2-2
- Rebuilt for openssl 4.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2501029 - trafficserver-10.1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2501029
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-ddaabe38ab' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 43 Update: libwebsockets-4.5.8-2.fc43
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-59fdef3e5f
2026-07-27 01:12:03.303787+00:00
--------------------------------------------------------------------------------
Name : libwebsockets
Product : Fedora 43
Version : 4.5.8
Release : 2.fc43
URL : http://libwebsockets.org
Summary : Lightweight C library for Websockets
Description :
This is the libwebsockets C library for lightweight websocket clients and
servers.
--------------------------------------------------------------------------------
Update Information:
Update to 4.5.8
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 18 2026 Peter Robinson [pbrobinson@gmail.com] - 4.5.8-1
- Update to 4.5.8
* Thu Jul 16 2026 Fedora Release Engineering [releng@fedoraproject.org] - 4.5.7-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
* Fri Jun 12 2026 Yaakov Selkowitz [yselkowi@redhat.com] - 4.5.7-3
- Rebuilt for openssl 4.0
* Thu Apr 30 2026 Dmitry Belyavskiy [beldmit@gmail.com] - 4.5.7-2
- Migrated to OpenSSL 4.0: use ASN1_STRING accessors instead of direct
struct access
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2452084 - libwebsockets-4.5.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2452084
[ 2 ] Bug #2487519 - CVE-2026-10650 libwebsockets: libwebsockets: Denial of Service via SSH Protocol Handler resource consumption [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2487519
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-59fdef3e5f' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 44 Update: systemd-259.8-1.fc44
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-230ba36543
2026-07-27 00:54:18.641585+00:00
--------------------------------------------------------------------------------
Name : systemd
Product : Fedora 44
Version : 259.8
Release : 1.fc44
URL : https://systemd.io
Summary : System and Service Manager
Description :
systemd is a system and service manager that runs as PID 1 and starts the rest
of the system. It provides aggressive parallelization capabilities, uses socket
and D-Bus activation for starting services, offers on-demand starting of
daemons, keeps track of processes using Linux control groups, maintains mount
and automount points, and implements an elaborate transactional dependency-based
service control logic. systemd supports SysV and LSB init scripts and works as a
replacement for sysvinit. Other parts of this package are a logging daemon,
utilities to control basic system configuration like the hostname, date, locale,
maintain a list of logged-in users, system accounts, runtime directories and
settings, and a logging daemons.
This package was built from the v259-stable branch of systemd.
--------------------------------------------------------------------------------
Update Information:
Latest upstream bugfix release.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 25 2026 Zbigniew Jędrzejewski-Szmek [zbyszek@amutable.com] - 259.8-1
- Version 259.8
- a bugfix release with correctness and security-relevant fixes too. 205
patches, so too much to describe here.
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-230ba36543' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
[SECURITY] Fedora 44 Update: rust-libgit2-sys-0.18.7-1.fc44
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-9d59721e9b
2026-07-27 00:54:18.641579+00:00
--------------------------------------------------------------------------------
Name : rust-libgit2-sys
Product : Fedora 44
Version : 0.18.7
Release : 1.fc44
URL : https://crates.io/crates/libgit2-sys
Summary : Native bindings to the libgit2 library
Description :
Native bindings to the libgit2 library.
--------------------------------------------------------------------------------
Update Information:
Update libgit2 to version 1.9.6.
Update the libgit2-sys Rust crate to the corresponding version 0.18.7.
This includes fixes for various security issues, including - but not limited to:
CVE-2026-53583
CVE-2026-53584
CVE-2026-53585
CVE-2026-53586
CVE-2026-53587
The Fedora package is not affected by GHSA-wfx7-g85r-q6vw since Fedora packages
always linked the system PCRE2 and did not use the bundled PCRE.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 23 2026 Fabio Valentini [decathorpe@gmail.com] - 0.18.7-1
- Update to version 0.18.7; Fixes RHBZ#2506308
* Fri Jul 17 2026 Fedora Release Engineering [releng@fedoraproject.org] - 0.18.5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-9d59721e9b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 44 Update: libgit2-1.9.6-1.fc44
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-9d59721e9b
2026-07-27 00:54:18.641579+00:00
--------------------------------------------------------------------------------
Name : libgit2
Product : Fedora 44
Version : 1.9.6
Release : 1.fc44
URL : https://libgit2.org/
Summary : C implementation of the Git core methods as a library with a solid API
Description :
libgit2 is a portable, pure C implementation of the Git core methods
provided as a re-entrant linkable library with a solid API, allowing
you to write native speed custom Git applications in any language
with bindings.
--------------------------------------------------------------------------------
Update Information:
Update libgit2 to version 1.9.6.
Update the libgit2-sys Rust crate to the corresponding version 0.18.7.
This includes fixes for various security issues, including - but not limited to:
CVE-2026-53583
CVE-2026-53584
CVE-2026-53585
CVE-2026-53586
CVE-2026-53587
The Fedora package is not affected by GHSA-wfx7-g85r-q6vw since Fedora packages
always linked the system PCRE2 and did not use the bundled PCRE.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 23 2026 Fabio Valentini [decathorpe@gmail.com] - 1.9.6-1
- Update to version 1.9.6
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-9d59721e9b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 44 Update: lego-5.3.1-2.fc44
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-30e8e9a2b2
2026-07-27 00:54:18.641577+00:00
--------------------------------------------------------------------------------
Name : lego
Product : Fedora 44
Version : 5.3.1
Release : 2.fc44
URL : https://github.com/go-acme/lego
Summary : Let's Encrypt/ACME client written in Go
Description :
Let's Encrypt/ACME client written in Go.
--------------------------------------------------------------------------------
Update Information:
Update to 5.3.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 21 2026 Packit [hello@packit.dev] - 5.3.1-1
- Update to 5.3.1 upstream release
- Resolves: rhbz#2504092
* Thu Jul 16 2026 Fedora Release Engineering [releng@fedoraproject.org] - 5.2.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2500376 - CVE-2026-10846 lego: ldns: Off-path poisoning attacks due to insufficient query-response matching [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2500376
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-30e8e9a2b2' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 44 Update: trafficserver-10.1.3-1.fc44
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-bb8dc1e5b6
2026-07-27 00:54:18.641567+00:00
--------------------------------------------------------------------------------
Name : trafficserver
Product : Fedora 44
Version : 10.1.3
Release : 1.fc44
URL : https://trafficserver.apache.org/
Summary : Fast, scalable and extensible HTTP/1.1 and HTTP/2 caching proxy server
Description :
Traffic Server is a high-performance building block for cloud services.
It's more than just a caching proxy server; it also has support for
plugins to build large scale web applications. Key features:
Caching - Improve your response time, while reducing server load and
bandwidth needs by caching and reusing frequently-requested web pages,
images, and web service calls.
Proxying - Easily add keep-alive, filter or anonymize content
requests, or add load balancing by adding a proxy layer.
Fast - Scales well on modern SMP hardware, handling 10s of thousands
of requests per second.
Extensible - APIs to write your own plug-ins to do anything from
modifying HTTP headers to handling ESI requests to writing your own
cache algorithm.
Proven - Handling over 400TB a day at Yahoo! both as forward and
reverse proxies, Apache Traffic Server is battle hardened.
--------------------------------------------------------------------------------
Update Information:
Resolves CVE-2026-59173 - DoS vulnerability in HTTP/2 via stalled flow-control
Additional Changes with Apache Traffic Server 9.2.14
#12910 - Fix connection-level window mismatch causing 408/504 timeouts
#13266 - Add Claude Code project guide for the 9.2.x branch
#13267 - [9.2.x] Backport format scripts fixes
#13377 - 9.2.x: http2: Track scheduled events
Additional Changes with Apache Traffic Server 10.1.3
#12192 - Return a 400 on chunk parse errors
#12733 - Fix retry logic for TSHttpTxnServerAddrSet (issue #12611)
#12854 - Fix LoadedPlugins::remove crash during static destruction
#12855 - Fix header_rewrite run-plugin relative path resolution
#12857 - Fix autest compatibility with Fedora 43 / Python 3.14
#12943 - Address incompatibility with BoringSSL
#12959 - Fix crash in HttpSM::tunnel_handler on unhandled VC events
#12972 - Fix cache retry assert on ServerAddrSet
#12990 - Update to Proxy Verifier v3.0.0
#13008 - cmake: limit GENERAL_NAME bssl probe
#13020 - Align AuTests with latest proxy-verifier checks (#12986)
#13025 - hrw: Refix loading geodb files
#13033 - tests/gold_tests/headers tests: use ATSReplayTest
#13113 - slice: Fix crash caused by use-after-free
#13114 - Fix bg fill teardown crash in update_size_and_time_stats
#13138 - Remove cache alternate vector detach
#13144 - Fix XPACK relative index underflow
#13162 - hrw: Fix an index bug in run plugin operator
#13177 - Correct records.yaml record drift
#13178 - 10.1.x: proxy.config.dns.search_default_domains: allow 2
#13182 - Stabilize parallel AuTest helpers
#13192 - yaml-cpp-0.9.0
#13193 - GCC 16: Regex header integer includes
#13198 - Fedora 44 test fixes
#13200 - Single source of truth for Proxy Verifier metadata
#13217 - Proxy Verifier v3.1.3
#13218 - Fix hdrHeap/hdrStrHeap allocator inuse metric underflow
#13220 - Fix flaky Fedora 44 AuTest helpers
#13223 - Fix mismatched sINT/dINT log field types
#13252 - cache: apply per-volume settings on first start after clear
#13256 - Fix mismatched log field types more
#13261 - header_rewrite: Improve URL Error messages
#13263 - Fix bounds check in CacheVC::scanObject
#13264 - Handle OpenSSL without dynamic ENGINE
#13280 - Enable probes in Fedora C++20 CI
#13293 - ProxyProtocol: free pp_info heap on NetVConnection recycle
#13294 - Fix pending HostDB DNS queue removal race
#13295 - Fix server entry cleanup after request tunnel setup
#13297 - 10.1.x: Add sni.yaml session ticket overrides (#13006)
#13303 - header_rewrite: Fix a leak and truncation in set-body-from
#13307 - dns: destruct HostEnt on free to fix SRV vector leak
#13318 - TLS: Fix memory leaks in cert load and OCSP stapling
#13325 - HttpSM.cc: fix cache read end milestone order
#13336 - 10.1.x: Fix redirected cache write without write VC
#13365 - 10.1.x: USDT: normalize names for STATE_ENTER
#13366 - 10.1.x: Fix set-status crash inside if/endif at remap time
#13387 - Hard-enforce max_active_streams_in at HTTP/2 stream creation
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 15 2026 Jered Floyd [jered@redhat.com] - 10.1.3-1
- Update to upstream 10.1.3
* Fri Jun 12 2026 Yaakov Selkowitz [yselkowi@redhat.com] - 10.1.2-2
- Rebuilt for openssl 4.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2501029 - trafficserver-10.1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2501029
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-bb8dc1e5b6' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 44 Update: libwebsockets-4.5.8-1.fc44
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-9921e0e415
2026-07-27 00:54:18.641550+00:00
--------------------------------------------------------------------------------
Name : libwebsockets
Product : Fedora 44
Version : 4.5.8
Release : 1.fc44
URL : http://libwebsockets.org
Summary : Lightweight C library for Websockets
Description :
This is the libwebsockets C library for lightweight websocket clients and
servers.
--------------------------------------------------------------------------------
Update Information:
Update to 4.5.8
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 18 2026 Peter Robinson [pbrobinson@gmail.com] - 4.5.8-1
- Update to 4.5.8
* Thu Jul 16 2026 Fedora Release Engineering [releng@fedoraproject.org] - 4.5.7-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
* Fri Jun 12 2026 Yaakov Selkowitz [yselkowi@redhat.com] - 4.5.7-3
- Rebuilt for openssl 4.0
* Thu Apr 30 2026 Dmitry Belyavskiy [beldmit@gmail.com] - 4.5.7-2
- Migrated to OpenSSL 4.0: use ASN1_STRING accessors instead of direct
struct access
* Wed Mar 18 2026 Peter Robinson [pbrobinson@gmail.com] - 4.5.7-1
- Update to 4.5.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2452084 - libwebsockets-4.5.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2452084
[ 2 ] Bug #2487519 - CVE-2026-10650 libwebsockets: libwebsockets: Denial of Service via SSH Protocol Handler resource consumption [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2487519
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-9921e0e415' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
