Fedora Security Advisories

nsd-4.15.0-1.fc43

Fedora Security Advisories
3 hours 50 minutes ago
FEDORA-2026-0b77a23312 Packages in this update:
  • nsd-4.15.0-1.fc43
Update description:

FEATURES:

Merge #483 from ruuda: Improve Prometheus metrics: Move zonestats from metric name to label

BUG FIXES:

Fix #478: Feature request: reduce syslog noise from frequent read-only control commands (e.g. stats_noreset). It logs the verbosity command always, and others at 2 and higher. Fix XDP cleanup code being executed even if xdp is not configured Merge #481 from jaredmauch: Fix pedantic/CodeQL warning in sources Merge #484 from orlitzky: OpenRC: fix network deps and support both supervisors Fix PROXYv2 header read and consume, it checks the header size. Thanks to Qifan Zhang, Palo Alto Networks for the report. Fix notify relay ipc to check for large size. This stops desync of the internal notify pipe. Thanks to Qifan Zhang, Palo Alto Networks for the report. Fix print of malformed HIP records. Thanks to Qifan Zhang, Palo Alto Networks, for the report, and Haruki Oyama (Waseda University) for also reporting this issue. Fix to not fail on NSEC3 records with a bad owner name. Thanks to Qifan Zhang, Palo Alto Networks, for the report. Fix print of NXT RR without bitmap Thanks to Qifan Zhang, Palo Alto Networks, for the report. Fix overflow for NSEC3 zones with 255-octet name Thanks to Haruki Oyama (Waseda University) for the report, and Qifan Zhang, Palo Alto Networks, for also reporting this issue. Fix to update github ci actions/checkout to v7. Fix notify and zone transfer processing for malformed SOA records, with a short rdata content. It stops an assertion failure. Thanks to Tristan Madani (@TristanInSec) from Talence Security for the report. Fix that wrong buffer position in IXFR for the first SOA causes the storage to retrieve wrong information. Later data would overwrite it so it did not cause observable trouble. Thanks to Tristan Madani (@TristanInSec) from Talence Security for the report. More robust removing of RRs from an IXFR processing. Thanks zhangph for reporting this issue Fix unit test for stopmany for process role logs. Fix nsd-control assoc_tsig, if that interrupts a zone transfer in progress, to not crash. It restarts the transfer from the primary. Thanks to Qifan Zhang, Palo Alto Networks, for the report. Fix nsd-control del_tsig, if that interrupts a zone transfer in progress, to not crash. It does not delete the key, if in use. Thanks to Qifan Zhang, Palo Alto Networks, for the report. Fix catalog producer zone with long name, so that it does not crash on that. Thanks to Qifan Zhang, Palo Alto Networks, for the report. Fix catalog consumer zone with long name for member unique label that is long, so that it does not crash on that. Thanks to Qifan Zhang, Palo Alto Networks, for the report. Fix that non-IN-class records cause a zone transfer to be rejected. Also such records are not added from a transfer. This stops an assertion failure. Thanks to Qifan Zhang, Palo Alto Networks, for the report. Fix to disallow a SOA record in the middle of an AXFR. This stops an assertion failure. Thanks to Qifan Zhang, Palo Alto Networks, for the report. Fix to set zone is_secure to false when IXFR removes RRSIG DNSKEY. This stops an assertion failure. Also fix soa and ns rrset change in IXFR when packed rrsets are disabled. Thanks to Qifan Zhang, Palo Alto Networks, for the report. Fix to handle NSEC3 zones without space for hashes. Zones with a apex domain name length >= 223 bytes, that have a NSEC3PARAM must not be prehashed, since the hashed owner name would not fit. Thanks Qifan Zhang, Palo Alto Networks, for the report Fix to add hardening to zone_ixfr_remove_oldest, for IXFR processing. Thanks to Qifan Zhang, Palo Alto Networks, for the report. Fix for xfrd crash with too short response to a UDP SOA query Only for release builds and only when configured for XFR over UDP Thanks to Qifan Zhang, Palo Alto Networks, for the report. Fix that out-of-zone records are skipped from zone transfers. Otherwise such records could stick around after zone deletion and cause failures for DS queries. Thanks to Qifan Zhang, Palo Alto Networks, for the report.

nsd-4.15.0-1.el10_3

Fedora Security Advisories
3 hours 50 minutes ago
FEDORA-EPEL-2026-484870f7f9 Packages in this update:
  • nsd-4.15.0-1.el10_3
Update description:

FEATURES:

Merge #483 from ruuda: Improve Prometheus metrics: Move zonestats from metric name to label

BUG FIXES:

Fix #478: Feature request: reduce syslog noise from frequent read-only control commands (e.g. stats_noreset). It logs the verbosity command always, and others at 2 and higher. Fix XDP cleanup code being executed even if xdp is not configured Merge #481 from jaredmauch: Fix pedantic/CodeQL warning in sources Merge #484 from orlitzky: OpenRC: fix network deps and support both supervisors Fix PROXYv2 header read and consume, it checks the header size. Thanks to Qifan Zhang, Palo Alto Networks for the report. Fix notify relay ipc to check for large size. This stops desync of the internal notify pipe. Thanks to Qifan Zhang, Palo Alto Networks for the report. Fix print of malformed HIP records. Thanks to Qifan Zhang, Palo Alto Networks, for the report, and Haruki Oyama (Waseda University) for also reporting this issue. Fix to not fail on NSEC3 records with a bad owner name. Thanks to Qifan Zhang, Palo Alto Networks, for the report. Fix print of NXT RR without bitmap Thanks to Qifan Zhang, Palo Alto Networks, for the report. Fix overflow for NSEC3 zones with 255-octet name Thanks to Haruki Oyama (Waseda University) for the report, and Qifan Zhang, Palo Alto Networks, for also reporting this issue. Fix to update github ci actions/checkout to v7. Fix notify and zone transfer processing for malformed SOA records, with a short rdata content. It stops an assertion failure. Thanks to Tristan Madani (@TristanInSec) from Talence Security for the report. Fix that wrong buffer position in IXFR for the first SOA causes the storage to retrieve wrong information. Later data would overwrite it so it did not cause observable trouble. Thanks to Tristan Madani (@TristanInSec) from Talence Security for the report. More robust removing of RRs from an IXFR processing. Thanks zhangph for reporting this issue Fix unit test for stopmany for process role logs. Fix nsd-control assoc_tsig, if that interrupts a zone transfer in progress, to not crash. It restarts the transfer from the primary. Thanks to Qifan Zhang, Palo Alto Networks, for the report. Fix nsd-control del_tsig, if that interrupts a zone transfer in progress, to not crash. It does not delete the key, if in use. Thanks to Qifan Zhang, Palo Alto Networks, for the report. Fix catalog producer zone with long name, so that it does not crash on that. Thanks to Qifan Zhang, Palo Alto Networks, for the report. Fix catalog consumer zone with long name for member unique label that is long, so that it does not crash on that. Thanks to Qifan Zhang, Palo Alto Networks, for the report. Fix that non-IN-class records cause a zone transfer to be rejected. Also such records are not added from a transfer. This stops an assertion failure. Thanks to Qifan Zhang, Palo Alto Networks, for the report. Fix to disallow a SOA record in the middle of an AXFR. This stops an assertion failure. Thanks to Qifan Zhang, Palo Alto Networks, for the report. Fix to set zone is_secure to false when IXFR removes RRSIG DNSKEY. This stops an assertion failure. Also fix soa and ns rrset change in IXFR when packed rrsets are disabled. Thanks to Qifan Zhang, Palo Alto Networks, for the report. Fix to handle NSEC3 zones without space for hashes. Zones with a apex domain name length >= 223 bytes, that have a NSEC3PARAM must not be prehashed, since the hashed owner name would not fit. Thanks Qifan Zhang, Palo Alto Networks, for the report Fix to add hardening to zone_ixfr_remove_oldest, for IXFR processing. Thanks to Qifan Zhang, Palo Alto Networks, for the report. Fix for xfrd crash with too short response to a UDP SOA query Only for release builds and only when configured for XFR over UDP Thanks to Qifan Zhang, Palo Alto Networks, for the report. Fix that out-of-zone records are skipped from zone transfers. Otherwise such records could stick around after zone deletion and cause failures for DS queries. Thanks to Qifan Zhang, Palo Alto Networks, for the report.

pack-0.40.8-1.el8

Fedora Security Advisories
18 hours 42 minutes ago
FEDORA-EPEL-2026-8513c30973 Packages in this update:
  • pack-0.40.8-1.el8
Update description:

Security update to pack 0.40.8

Fixes CVE-2025-47913: golang.org/x/crypto/ssh/agent - SSH client panic Fixes CVE-2025-47914: golang.org/x/crypto/ssh/agent - SSH Agent server DoS Fixes CVE-2025-65637: logrus - DoS via large single-line payload Fixes CVE-2026-27145: crypto/x509 - DoS via excessive DNS SAN processing Fixes CVE-2026-33747: BuildKit - Arbitrary file write Fixes CVE-2026-33748: BuildKit - Unauthorized file access Fixes CVE-2026-33762: go-git - DoS via crafted Git index Fixes CVE-2026-34165: go-git - DoS via crafted .idx file Fixes CVE-2026-39828: golang.org/x/crypto/ssh - Unauthorized command execution Fixes CVE-2026-39829: golang.org/x/crypto/ssh - DoS via crafted public key Fixes CVE-2026-39830: golang.org/x/crypto/ssh - Resource leak DoS Fixes CVE-2026-39832: golang.org/x/crypto/ssh/agent - Key restrictions bypass Fixes CVE-2026-39833: golang.org/x/crypto/ssh/agent - Key confirmation bypass Fixes CVE-2026-39835: golang.org/x/crypto/ssh - Certificate DoS Fixes CVE-2026-44740: go-billy - DoS via symlink cycle Fixes GO-2026-4970: Root escape via symlink plus trailing slash Fixes GO-2026-5856: Encrypted Client Hello privacy leak

audit-4.2-2.fc45

Fedora Security Advisories
19 hours 7 minutes ago
FEDORA-2026-ec653eca58 Packages in this update:
  • audit-4.2-2.fc45
Update description:

Automatic update for audit-4.2-2.fc45.

Changelog * Fri Jul 24 2026 Steve Grubb <sgrubb@redhat.com> 4.2-2 - Truncate comm instead of rejecting invalid length * Thu Jul 23 2026 Steve Grubb <sgrubb@redhat.com> 4.2-1 - New upstream release * Wed Jul 22 2026 Python Maint <python-maint@redhat.com> - 4.1.4-4 - Rebuilt for Python 3.15.0b4 ABI change

Automatic update for audit-4.2-1.fc45.

coturn-4.15.0-1.el9

Fedora Security Advisories
1 day 1 hour ago
FEDORA-EPEL-2026-5199ae351e Packages in this update:
  • coturn-4.15.0-1.el9
Update description: Coturn 4.15.0 Security
  • Ignore STUN attributes after MESSAGE-INTEGRITY (GHSA-5538-7cxj-5jcc). Per RFC 8489 §9 / RFC 5389 §15.4, attributes following MESSAGE-INTEGRITY (other than FINGERPRINT) must be ignored, but coturn processed the full attribute list. This also fixes an interop bug where an RFC 8489 client sending MESSAGE-INTEGRITY-SHA256 after MESSAGE-INTEGRITY was wrongly answered with error 420.
  • Bind mobility session-resume to the original allocation owner — a MOBILITY-TICKET resume is now only accepted from the user that created the allocation.
  • Reject ACME requests via signed 400 response instead of silently dropping them.
  • Reset the reused UDP receive-buffer offset in the DTLS listener.
  • Zeroed channel-data padding in stun_init_channel_message_str so uninitialized stack bytes never reach the wire.
  • Fixed a uint16_t truncation overflow when computing STUN message length.
  • Fixed an off-by-one write past the realm buffer in redis_list_admin_users.
  • Fixed a size_t underflow in the telnet (CLI) _process data emit and bounded MSSP subnegotiation parsing to the buffer end.
  • NULL-terminated the HTTP request buffer before it is logged verbatim; switched apputils.c to bounded snprintf.
New features
  • RFC 8016 graceful dual-5-tuple mobility handoff. A MOBILITY-TICKET resume no longer hard-switches the allocation at REFRESH time. The server now does a make-before-break transition: peer→client traffic stays on the old 5-tuple until the client's first packet arrives on the new one, and only then is the old socket discarded.
  • --drain-min-allocations — a shutdown threshold for drain mode: the server exits once the live allocation count falls to the configured value instead of waiting for zero.
  • --log-min-level (log_min_level in the config file) — a real minimum-log-level filter, since -v/--verbose had little effect on turnserver logging.
  • Alternate-server TCP/UDP distinction — alternate servers are now tracked per transport, so TCP and UDP clients can be redirected to different alternate servers.
  • Fail-fast allocation wrappers — all heap allocation in coturn-owned code goes through turn_malloc/turn_calloc/turn_realloc/turn_strdup, which log the call site and abort on OOM rather than risking NULL-dereference or silent degradation in a long-running server.
Reliability and correctness fixes
  • Fixed the remaining misaligned wire-buffer accesses and added alignment-safe turn_read_u16/u32/u64 / turn_write_* helpers — misaligned reads of STUN attribute values were undefined behavior and a SIGBUS on strict-alignment targets.
  • Fixed uint32_t counter wraparound in the relay port allocator.
  • Worker threads are now joined on shutdown, fixing an exit-time OpenSSL race; OpenSSL atexit cleanup is disabled in turnserver.
  • Released the alternate-server list mutex when del_alt_server removes the last entry, fixing a deadlock.
  • setgroups is no longer called unconditionally in mainrelay, fixing startup under environments where it's not permitted.
  • Freed EVP_CIPHER_CTX on error paths in the OAuth GCM encode/decode and avoided leaks on realloc failure in TCP relay allocation.
  • Cast to unsigned char before isspace() in config-file parsing.
  • Log an explicit error when a configured tls-listening-port cannot start.
  • Autotools build now detects hiredis_ssl, enabling Redis TLS in the ./configure build.
Metrics
  • Every STUN Binding response is now counted in the Prometheus metrics.
Client utilities
  • turnutils_uclient now sends the SNI host name on TLS connections.
  • heap-allocates its STUN message buffers instead of using large stack buffers.

coturn-4.15.0-1.fc44

Fedora Security Advisories
1 day 7 hours ago
FEDORA-2026-8856c5be6f Packages in this update:
  • coturn-4.15.0-1.fc44
Update description: Coturn 4.15.0 Security
  • Ignore STUN attributes after MESSAGE-INTEGRITY (GHSA-5538-7cxj-5jcc). Per RFC 8489 §9 / RFC 5389 §15.4, attributes following MESSAGE-INTEGRITY (other than FINGERPRINT) must be ignored, but coturn processed the full attribute list. This also fixes an interop bug where an RFC 8489 client sending MESSAGE-INTEGRITY-SHA256 after MESSAGE-INTEGRITY was wrongly answered with error 420.
  • Bind mobility session-resume to the original allocation owner — a MOBILITY-TICKET resume is now only accepted from the user that created the allocation.
  • Reject ACME requests via signed 400 response instead of silently dropping them.
  • Reset the reused UDP receive-buffer offset in the DTLS listener.
  • Zeroed channel-data padding in stun_init_channel_message_str so uninitialized stack bytes never reach the wire.
  • Fixed a uint16_t truncation overflow when computing STUN message length.
  • Fixed an off-by-one write past the realm buffer in redis_list_admin_users.
  • Fixed a size_t underflow in the telnet (CLI) _process data emit and bounded MSSP subnegotiation parsing to the buffer end.
  • NULL-terminated the HTTP request buffer before it is logged verbatim; switched apputils.c to bounded snprintf.
New features
  • RFC 8016 graceful dual-5-tuple mobility handoff. A MOBILITY-TICKET resume no longer hard-switches the allocation at REFRESH time. The server now does a make-before-break transition: peer→client traffic stays on the old 5-tuple until the client's first packet arrives on the new one, and only then is the old socket discarded.
  • --drain-min-allocations — a shutdown threshold for drain mode: the server exits once the live allocation count falls to the configured value instead of waiting for zero.
  • --log-min-level (log_min_level in the config file) — a real minimum-log-level filter, since -v/--verbose had little effect on turnserver logging.
  • Alternate-server TCP/UDP distinction — alternate servers are now tracked per transport, so TCP and UDP clients can be redirected to different alternate servers.
  • Fail-fast allocation wrappers — all heap allocation in coturn-owned code goes through turn_malloc/turn_calloc/turn_realloc/turn_strdup, which log the call site and abort on OOM rather than risking NULL-dereference or silent degradation in a long-running server.
Reliability and correctness fixes
  • Fixed the remaining misaligned wire-buffer accesses and added alignment-safe turn_read_u16/u32/u64 / turn_write_* helpers — misaligned reads of STUN attribute values were undefined behavior and a SIGBUS on strict-alignment targets.
  • Fixed uint32_t counter wraparound in the relay port allocator.
  • Worker threads are now joined on shutdown, fixing an exit-time OpenSSL race; OpenSSL atexit cleanup is disabled in turnserver.
  • Released the alternate-server list mutex when del_alt_server removes the last entry, fixing a deadlock.
  • setgroups is no longer called unconditionally in mainrelay, fixing startup under environments where it's not permitted.
  • Freed EVP_CIPHER_CTX on error paths in the OAuth GCM encode/decode and avoided leaks on realloc failure in TCP relay allocation.
  • Cast to unsigned char before isspace() in config-file parsing.
  • Log an explicit error when a configured tls-listening-port cannot start.
  • Autotools build now detects hiredis_ssl, enabling Redis TLS in the ./configure build.
Metrics
  • Every STUN Binding response is now counted in the Prometheus metrics.
Client utilities
  • turnutils_uclient now sends the SNI host name on TLS connections.
  • heap-allocates its STUN message buffers instead of using large stack buffers.

coturn-4.15.0-1.el10_2

Fedora Security Advisories
1 day 7 hours ago
FEDORA-EPEL-2026-7f3012c375 Packages in this update:
  • coturn-4.15.0-1.el10_2
Update description: Coturn 4.15.0 Security
  • Ignore STUN attributes after MESSAGE-INTEGRITY (GHSA-5538-7cxj-5jcc). Per RFC 8489 §9 / RFC 5389 §15.4, attributes following MESSAGE-INTEGRITY (other than FINGERPRINT) must be ignored, but coturn processed the full attribute list. This also fixes an interop bug where an RFC 8489 client sending MESSAGE-INTEGRITY-SHA256 after MESSAGE-INTEGRITY was wrongly answered with error 420.
  • Bind mobility session-resume to the original allocation owner — a MOBILITY-TICKET resume is now only accepted from the user that created the allocation.
  • Reject ACME requests via signed 400 response instead of silently dropping them.
  • Reset the reused UDP receive-buffer offset in the DTLS listener.
  • Zeroed channel-data padding in stun_init_channel_message_str so uninitialized stack bytes never reach the wire.
  • Fixed a uint16_t truncation overflow when computing STUN message length.
  • Fixed an off-by-one write past the realm buffer in redis_list_admin_users.
  • Fixed a size_t underflow in the telnet (CLI) _process data emit and bounded MSSP subnegotiation parsing to the buffer end.
  • NULL-terminated the HTTP request buffer before it is logged verbatim; switched apputils.c to bounded snprintf.
New features
  • RFC 8016 graceful dual-5-tuple mobility handoff. A MOBILITY-TICKET resume no longer hard-switches the allocation at REFRESH time. The server now does a make-before-break transition: peer→client traffic stays on the old 5-tuple until the client's first packet arrives on the new one, and only then is the old socket discarded.
  • --drain-min-allocations — a shutdown threshold for drain mode: the server exits once the live allocation count falls to the configured value instead of waiting for zero.
  • --log-min-level (log_min_level in the config file) — a real minimum-log-level filter, since -v/--verbose had little effect on turnserver logging.
  • Alternate-server TCP/UDP distinction — alternate servers are now tracked per transport, so TCP and UDP clients can be redirected to different alternate servers.
  • Fail-fast allocation wrappers — all heap allocation in coturn-owned code goes through turn_malloc/turn_calloc/turn_realloc/turn_strdup, which log the call site and abort on OOM rather than risking NULL-dereference or silent degradation in a long-running server.
Reliability and correctness fixes
  • Fixed the remaining misaligned wire-buffer accesses and added alignment-safe turn_read_u16/u32/u64 / turn_write_* helpers — misaligned reads of STUN attribute values were undefined behavior and a SIGBUS on strict-alignment targets.
  • Fixed uint32_t counter wraparound in the relay port allocator.
  • Worker threads are now joined on shutdown, fixing an exit-time OpenSSL race; OpenSSL atexit cleanup is disabled in turnserver.
  • Released the alternate-server list mutex when del_alt_server removes the last entry, fixing a deadlock.
  • setgroups is no longer called unconditionally in mainrelay, fixing startup under environments where it's not permitted.
  • Freed EVP_CIPHER_CTX on error paths in the OAuth GCM encode/decode and avoided leaks on realloc failure in TCP relay allocation.
  • Cast to unsigned char before isspace() in config-file parsing.
  • Log an explicit error when a configured tls-listening-port cannot start.
  • Autotools build now detects hiredis_ssl, enabling Redis TLS in the ./configure build.
Metrics
  • Every STUN Binding response is now counted in the Prometheus metrics.
Client utilities
  • turnutils_uclient now sends the SNI host name on TLS connections.
  • heap-allocates its STUN message buffers instead of using large stack buffers.

coturn-4.15.0-1.el10_3

Fedora Security Advisories
1 day 7 hours ago
FEDORA-EPEL-2026-bd9fc0a600 Packages in this update:
  • coturn-4.15.0-1.el10_3
Update description: Coturn 4.15.0 Security
  • Ignore STUN attributes after MESSAGE-INTEGRITY (GHSA-5538-7cxj-5jcc). Per RFC 8489 §9 / RFC 5389 §15.4, attributes following MESSAGE-INTEGRITY (other than FINGERPRINT) must be ignored, but coturn processed the full attribute list. This also fixes an interop bug where an RFC 8489 client sending MESSAGE-INTEGRITY-SHA256 after MESSAGE-INTEGRITY was wrongly answered with error 420.
  • Bind mobility session-resume to the original allocation owner — a MOBILITY-TICKET resume is now only accepted from the user that created the allocation.
  • Reject ACME requests via signed 400 response instead of silently dropping them.
  • Reset the reused UDP receive-buffer offset in the DTLS listener.
  • Zeroed channel-data padding in stun_init_channel_message_str so uninitialized stack bytes never reach the wire.
  • Fixed a uint16_t truncation overflow when computing STUN message length.
  • Fixed an off-by-one write past the realm buffer in redis_list_admin_users.
  • Fixed a size_t underflow in the telnet (CLI) _process data emit and bounded MSSP subnegotiation parsing to the buffer end.
  • NULL-terminated the HTTP request buffer before it is logged verbatim; switched apputils.c to bounded snprintf.
New features
  • RFC 8016 graceful dual-5-tuple mobility handoff. A MOBILITY-TICKET resume no longer hard-switches the allocation at REFRESH time. The server now does a make-before-break transition: peer→client traffic stays on the old 5-tuple until the client's first packet arrives on the new one, and only then is the old socket discarded.
  • --drain-min-allocations — a shutdown threshold for drain mode: the server exits once the live allocation count falls to the configured value instead of waiting for zero.
  • --log-min-level (log_min_level in the config file) — a real minimum-log-level filter, since -v/--verbose had little effect on turnserver logging.
  • Alternate-server TCP/UDP distinction — alternate servers are now tracked per transport, so TCP and UDP clients can be redirected to different alternate servers.
  • Fail-fast allocation wrappers — all heap allocation in coturn-owned code goes through turn_malloc/turn_calloc/turn_realloc/turn_strdup, which log the call site and abort on OOM rather than risking NULL-dereference or silent degradation in a long-running server.
Reliability and correctness fixes
  • Fixed the remaining misaligned wire-buffer accesses and added alignment-safe turn_read_u16/u32/u64 / turn_write_* helpers — misaligned reads of STUN attribute values were undefined behavior and a SIGBUS on strict-alignment targets.
  • Fixed uint32_t counter wraparound in the relay port allocator.
  • Worker threads are now joined on shutdown, fixing an exit-time OpenSSL race; OpenSSL atexit cleanup is disabled in turnserver.
  • Released the alternate-server list mutex when del_alt_server removes the last entry, fixing a deadlock.
  • setgroups is no longer called unconditionally in mainrelay, fixing startup under environments where it's not permitted.
  • Freed EVP_CIPHER_CTX on error paths in the OAuth GCM encode/decode and avoided leaks on realloc failure in TCP relay allocation.
  • Cast to unsigned char before isspace() in config-file parsing.
  • Log an explicit error when a configured tls-listening-port cannot start.
  • Autotools build now detects hiredis_ssl, enabling Redis TLS in the ./configure build.
Metrics
  • Every STUN Binding response is now counted in the Prometheus metrics.
Client utilities
  • turnutils_uclient now sends the SNI host name on TLS connections.
  • heap-allocates its STUN message buffers instead of using large stack buffers.

coturn-4.15.0-1.fc43

Fedora Security Advisories
1 day 7 hours ago
FEDORA-2026-02d5b68472 Packages in this update:
  • coturn-4.15.0-1.fc43
Update description: Coturn 4.15.0 Security
  • Ignore STUN attributes after MESSAGE-INTEGRITY (GHSA-5538-7cxj-5jcc). Per RFC 8489 §9 / RFC 5389 §15.4, attributes following MESSAGE-INTEGRITY (other than FINGERPRINT) must be ignored, but coturn processed the full attribute list. This also fixes an interop bug where an RFC 8489 client sending MESSAGE-INTEGRITY-SHA256 after MESSAGE-INTEGRITY was wrongly answered with error 420.
  • Bind mobility session-resume to the original allocation owner — a MOBILITY-TICKET resume is now only accepted from the user that created the allocation.
  • Reject ACME requests via signed 400 response instead of silently dropping them.
  • Reset the reused UDP receive-buffer offset in the DTLS listener.
  • Zeroed channel-data padding in stun_init_channel_message_str so uninitialized stack bytes never reach the wire.
  • Fixed a uint16_t truncation overflow when computing STUN message length.
  • Fixed an off-by-one write past the realm buffer in redis_list_admin_users.
  • Fixed a size_t underflow in the telnet (CLI) _process data emit and bounded MSSP subnegotiation parsing to the buffer end.
  • NULL-terminated the HTTP request buffer before it is logged verbatim; switched apputils.c to bounded snprintf.
New features
  • RFC 8016 graceful dual-5-tuple mobility handoff. A MOBILITY-TICKET resume no longer hard-switches the allocation at REFRESH time. The server now does a make-before-break transition: peer→client traffic stays on the old 5-tuple until the client's first packet arrives on the new one, and only then is the old socket discarded.
  • --drain-min-allocations — a shutdown threshold for drain mode: the server exits once the live allocation count falls to the configured value instead of waiting for zero.
  • --log-min-level (log_min_level in the config file) — a real minimum-log-level filter, since -v/--verbose had little effect on turnserver logging.
  • Alternate-server TCP/UDP distinction — alternate servers are now tracked per transport, so TCP and UDP clients can be redirected to different alternate servers.
  • Fail-fast allocation wrappers — all heap allocation in coturn-owned code goes through turn_malloc/turn_calloc/turn_realloc/turn_strdup, which log the call site and abort on OOM rather than risking NULL-dereference or silent degradation in a long-running server.
Reliability and correctness fixes
  • Fixed the remaining misaligned wire-buffer accesses and added alignment-safe turn_read_u16/u32/u64 / turn_write_* helpers — misaligned reads of STUN attribute values were undefined behavior and a SIGBUS on strict-alignment targets.
  • Fixed uint32_t counter wraparound in the relay port allocator.
  • Worker threads are now joined on shutdown, fixing an exit-time OpenSSL race; OpenSSL atexit cleanup is disabled in turnserver.
  • Released the alternate-server list mutex when del_alt_server removes the last entry, fixing a deadlock.
  • setgroups is no longer called unconditionally in mainrelay, fixing startup under environments where it's not permitted.
  • Freed EVP_CIPHER_CTX on error paths in the OAuth GCM encode/decode and avoided leaks on realloc failure in TCP relay allocation.
  • Cast to unsigned char before isspace() in config-file parsing.
  • Log an explicit error when a configured tls-listening-port cannot start.
  • Autotools build now detects hiredis_ssl, enabling Redis TLS in the ./configure build.
Metrics
  • Every STUN Binding response is now counted in the Prometheus metrics.
Client utilities
  • turnutils_uclient now sends the SNI host name on TLS connections.
  • heap-allocates its STUN message buffers instead of using large stack buffers.

coturn-4.15.0-1.el8

Fedora Security Advisories
1 day 7 hours ago
FEDORA-EPEL-2026-eb0c816bcd Packages in this update:
  • coturn-4.15.0-1.el8
Update description: Coturn 4.15.0 Security
  • Ignore STUN attributes after MESSAGE-INTEGRITY (GHSA-5538-7cxj-5jcc). Per RFC 8489 §9 / RFC 5389 §15.4, attributes following MESSAGE-INTEGRITY (other than FINGERPRINT) must be ignored, but coturn processed the full attribute list. This also fixes an interop bug where an RFC 8489 client sending MESSAGE-INTEGRITY-SHA256 after MESSAGE-INTEGRITY was wrongly answered with error 420.
  • Bind mobility session-resume to the original allocation owner — a MOBILITY-TICKET resume is now only accepted from the user that created the allocation.
  • Reject ACME requests via signed 400 response instead of silently dropping them.
  • Reset the reused UDP receive-buffer offset in the DTLS listener.
  • Zeroed channel-data padding in stun_init_channel_message_str so uninitialized stack bytes never reach the wire.
  • Fixed a uint16_t truncation overflow when computing STUN message length.
  • Fixed an off-by-one write past the realm buffer in redis_list_admin_users.
  • Fixed a size_t underflow in the telnet (CLI) _process data emit and bounded MSSP subnegotiation parsing to the buffer end.
  • NULL-terminated the HTTP request buffer before it is logged verbatim; switched apputils.c to bounded snprintf.
New features
  • RFC 8016 graceful dual-5-tuple mobility handoff. A MOBILITY-TICKET resume no longer hard-switches the allocation at REFRESH time. The server now does a make-before-break transition: peer→client traffic stays on the old 5-tuple until the client's first packet arrives on the new one, and only then is the old socket discarded.
  • --drain-min-allocations — a shutdown threshold for drain mode: the server exits once the live allocation count falls to the configured value instead of waiting for zero.
  • --log-min-level (log_min_level in the config file) — a real minimum-log-level filter, since -v/--verbose had little effect on turnserver logging.
  • Alternate-server TCP/UDP distinction — alternate servers are now tracked per transport, so TCP and UDP clients can be redirected to different alternate servers.
  • Fail-fast allocation wrappers — all heap allocation in coturn-owned code goes through turn_malloc/turn_calloc/turn_realloc/turn_strdup, which log the call site and abort on OOM rather than risking NULL-dereference or silent degradation in a long-running server.
Reliability and correctness fixes
  • Fixed the remaining misaligned wire-buffer accesses and added alignment-safe turn_read_u16/u32/u64 / turn_write_* helpers — misaligned reads of STUN attribute values were undefined behavior and a SIGBUS on strict-alignment targets.
  • Fixed uint32_t counter wraparound in the relay port allocator.
  • Worker threads are now joined on shutdown, fixing an exit-time OpenSSL race; OpenSSL atexit cleanup is disabled in turnserver.
  • Released the alternate-server list mutex when del_alt_server removes the last entry, fixing a deadlock.
  • setgroups is no longer called unconditionally in mainrelay, fixing startup under environments where it's not permitted.
  • Freed EVP_CIPHER_CTX on error paths in the OAuth GCM encode/decode and avoided leaks on realloc failure in TCP relay allocation.
  • Cast to unsigned char before isspace() in config-file parsing.
  • Log an explicit error when a configured tls-listening-port cannot start.
  • Autotools build now detects hiredis_ssl, enabling Redis TLS in the ./configure build.
Metrics
  • Every STUN Binding response is now counted in the Prometheus metrics.
Client utilities
  • turnutils_uclient now sends the SNI host name on TLS connections.
  • heap-allocates its STUN message buffers instead of using large stack buffers.

libgit2_1.9-1.9.6-1.el9 rust-libgit2-sys-0.18.7-1.el9

Fedora Security Advisories
1 day 16 hours ago
FEDORA-EPEL-2026-e57bda0a9c Packages in this update:
  • libgit2_1.9-1.9.6-1.el9
  • rust-libgit2-sys-0.18.7-1.el9
Update description:
  • Initial import of a package for libgit2 v1.9, in addition to v1.7 currently provided by the "libgit2" package.
  • Update the libgit2-sys Rust crate to version 0.18.7, corresponding to libgit2 v1.9.6.

The package for libgit2 v1.9 includes fixes for various security issues, including - but not limited to:

The EPEL package is not affected by GHSA-wfx7-g85r-q6vw since EPEL packages always linked the system PCRE2 and did not use the bundled PCRE.

Checked
12 minutes 48 seconds ago
URL
https://bodhi.fedoraproject.org/rss/updates/?type=security