| Date | Platform | Package | Version | Description |
|---|
| 2026-11-06 14:11:44 | x64 | joyatel | 53 | contact lookup - dont fail if number is text instead of integer |
| 2026-11-06 13:48:13 | x64 | asterisk | 22.12.0 | https://code.jlinux.no/?a=changelog&version_from=22.5.0&version_to=22.12.0&package=asterisk.org |
| 2026-11-06 11:49:41 | x64 | zlib | 1.4 | This mainline release contain security fixes that was fixed in the previous patch release
Bug fixes for both gzip, inflate and deflate |
| 2026-11-05 15:25:36 | x64 | whisper.cpp | 1.9.5 | bugfixes |
| 2026-11-05 13:12:31 | x64 | jid | 45 | Auth token - Support for SHA2-256 TOTP. Remove support for deprecated MOTP. |
| 2026-11-05 09:33:41 | x64 | jbalancer | 8 | TPACKET ABI changed from v2 to v3 |
| 2026-11-03 08:54:16 | x64 | jocr | 202 | html fix |
| 2026-11-02 10:48:35 | x64 | jbalancer | 7 | Add http response message to log entry in case of failed service.
Relink
|
| 2026-11-01 12:13:00 | x64 | tfso-jmail | 36 | relink
jcomsuite 88 |
| 2026-11-01 11:50:13 | x64 | jcomsuite | 88 | calendar - week/day event positioning improvements
app_gpt - accounting adjustments
skin default - replaced a few mail png icons with svg |
| 2026-10-30 21:57:10 | x64 | mrtg | 2.17.10 | relink |
| 2026-10-30 15:34:52 | x64 | glib | 2.90.1 | bugfixes |
| 2026-10-30 15:20:28 | x64 | harfbuzz | 15.0.0 | bugfixes |
| 2026-10-30 15:11:34 | x64 | libgcrypt | 1.12.4 | minor bugfixes |
| 2026-10-30 12:13:03 | x64 | jocr | 201 | Converter html - flag to allow or disallow white first page
Page::Peppol - disallow white first page in html converter |
| 2026-10-29 16:00:13 | x64 | kernel | 6.18.59 | CVE‑2026‑99110 - SMB cifs_do_set_acl
CVE‑2026‑99123, CVE‑2026‑99122 - virtio + VMCI validate packet source
KVM: SVM – "Stop toggling virtual VMSAVE/VMLOAD on intercept recalc"
net: psp – don't inherit Rx association on clone()
io_uring/cancel – don't spin on local work the task can't run
ipv4/udp FNHE fix
net/sched __tcf_action_put()
cls_flower mask OOB read
bridge mcast teardown
tipc node trace
scsi: st remove/open race
net/rds uninit trans, mac802154 assoc_dev
tracing predicate_parse() (2 OOB fixes)
fsnotify teardown race (unprivileged fdinfo read)
page_pool frag misalignment fatal split‑lock panic
Intel E810 backported |
| 2026-10-29 13:47:13 | x64 | jpeppol | 76 | relink |
| 2026-10-29 13:19:24 | x64 | j | 309 | dns - code cleanup and fixes |
| 2026-10-28 01:42:50 | x64 | jlinux | 67 | CAcerts - eMudhra CA removed
Whois db updated
Firmware and microcode updates |
| 2026-10-23 12:51:09 | x64 | ruby | 4.0.9 | CVE-2026-89078 Double free when parsing a pattern fails after an alternation
CVE-2026-93577, CVE-2026-97229 Integer overflow in the size of a compiled pattern
CVE-2026-110264 Overflow of internal IDs in a pattern with many repeats |
| 2026-10-22 12:50:50 | x64 | jaccounting | 137 | invoice - dont list deleted invoices in default view |
| 2026-10-21 14:16:58 | x64 | php | 8.5.12 | CVE-2026-109618 - RCE via OOM corruption
CVE-2026-109619 - RCE via stale global state |
| 2026-10-21 09:11:56 | x64 | j | 308 | TLS - domain_add - dont populate map with domains that fail |
| 2026-10-21 08:33:08 | x64 | php | 8.5.11-20261021 | CVE-2026-109618, CVE-2026-109618 - Session upload progress RCE workaround |
| 2026-10-20 13:28:00 | x64 | jwebcdn | 41 | Policy - Support WAF for post-handlers in addition to existing WAF backend
WAF analytics - Support for multiple keys as utm (waf_analytics_referrer_key). Use first one that exists.
WAF analytics - Support for waf_analytics_referrer_only that will only log clicks if referrer exists.
WAF analytics - Support for waf_analytics_response_code_filter that will only log clicks matching major response code
Backend host - redirect policy validator cleanup.
|
| 2026-10-20 13:15:52 | x64 | jhttp | 82 | Remove support for fixed fallback certificate |
| 2026-10-20 12:35:06 | x64 | jocr | 200 | HTML converter - hard fail if page 1 is blank |
| 2026-10-20 11:34:55 | x64 | jdns | 32 | Remove support for fixed fallback certificate |
| 2026-10-20 11:32:06 | x64 | jid | 44 | Remove support for fixed fallback certificate |
| 2026-10-19 10:00:20 | x64 | kernel | 6.18.57 | CVE‑2026‑99999 ipv4: validate checksum_start before completing checksum (CAP_RAW privilege) |