Fedora Security Advisories

dnf5-5.2.18.0-2.fc42

Fedora Security Advisories
23 hours 24 minutes ago
FEDORA-2026-beac8e1f11 Packages in this update:
  • dnf5-5.2.18.0-2.fc42
Update description:

This release fixes CVE-2026-3836 (a crash in dnf5daemon-server when receiving an unknown locale from a D-Bus client.

dnf5-5.2.18.0-2.fc43

Fedora Security Advisories
23 hours 48 minutes ago
FEDORA-2026-4e264a94a4 Packages in this update:
  • dnf5-5.2.18.0-2.fc43
Update description:

This release fixes CVE-2026-3836 (a crash in dnf5daemon-server when receiving an unknown locale from a D-Bus client.

dnf5-5.4.0.0-2.fc44

Fedora Security Advisories
1 day ago
FEDORA-2026-6072c6888a Packages in this update:
  • dnf5-5.4.0.0-2.fc44
Update description:

This release fixes CVE-2026-3836 (a crash in dnf5daemon-server when receiving an unknown locale from a D-Bus client.

Update to upstream release 5.4.0.0. Full changelog.

cpp-httplib-0.37.0-1.el9

Fedora Security Advisories
1 day 22 hours ago
FEDORA-EPEL-2026-53aded8e0e Packages in this update:
  • cpp-httplib-0.37.0-1.el9
Update description: Update to 0.37.0 (rhbz#2441656)
  • Fixes Denial of Service via crafted HTTP POST request (CVE-2026-29076, rhbz#2445663)
Update to 0.35.0
  • Payload size limit bypass via gzip decompression in ContentReader (streaming) allows oversized request bodies (CVE-2026-28435, rhbz#2444638)
  • Default exception handler leaks e.what() to clients via EXCEPTION_WHAT response header (CVE-2026-28434, rhbz#2444636)

https://github.com/yhirose/cpp-httplib/compare/v0.32.0...v0.37.0

cpp-httplib-0.37.0-1.fc44

Fedora Security Advisories
1 day 22 hours ago
FEDORA-2026-2c2afa9f9e Packages in this update:
  • cpp-httplib-0.37.0-1.fc44
Update description: Update to 0.37.0 (rhbz#2441656)
  • Fixes Denial of Service via crafted HTTP POST request (CVE-2026-29076, rhbz#2445663)
Update to 0.35.0
  • Payload size limit bypass via gzip decompression in ContentReader (streaming) allows oversized request bodies (CVE-2026-28435, rhbz#2444638)
  • Default exception handler leaks e.what() to clients via EXCEPTION_WHAT response header (CVE-2026-28434, rhbz#2444636)

https://github.com/yhirose/cpp-httplib/compare/v0.32.0...v0.37.0

cpp-httplib-0.37.0-1.fc42

Fedora Security Advisories
1 day 22 hours ago
FEDORA-2026-6ed9c65eaf Packages in this update:
  • cpp-httplib-0.37.0-1.fc42
Update description: Update to 0.37.0 (rhbz#2441656)
  • Fixes Denial of Service via crafted HTTP POST request (CVE-2026-29076, rhbz#2445663)
Update to 0.35.0
  • Payload size limit bypass via gzip decompression in ContentReader (streaming) allows oversized request bodies (CVE-2026-28435, rhbz#2444638)
  • Default exception handler leaks e.what() to clients via EXCEPTION_WHAT response header (CVE-2026-28434, rhbz#2444636)

https://github.com/yhirose/cpp-httplib/compare/v0.32.0...v0.37.0

cpp-httplib-0.37.0-1.fc43

Fedora Security Advisories
1 day 22 hours ago
FEDORA-2026-c2049f7220 Packages in this update:
  • cpp-httplib-0.37.0-1.fc43
Update description: Update to 0.37.0 (rhbz#2441656)
  • Fixes Denial of Service via crafted HTTP POST request (CVE-2026-29076, rhbz#2445663)
Update to 0.35.0
  • Payload size limit bypass via gzip decompression in ContentReader (streaming) allows oversized request bodies (CVE-2026-28435, rhbz#2444638)
  • Default exception handler leaks e.what() to clients via EXCEPTION_WHAT response header (CVE-2026-28434, rhbz#2444636)

https://github.com/yhirose/cpp-httplib/compare/v0.32.0...v0.37.0

Checked
1 hour ago
URL
https://bodhi.fedoraproject.org/rss/updates/?type=security