Aggregator

FEDORA-2026-e5e566b6b5 Packages in this update:

• suricata-8.0.8-1.fc45

Update description:

Upstream bugfix/security release.

FEDORA-2026-e7c5570ffc Packages in this update:

• grafana-10.2.6-23.fc43

Update description:

Rebuild with Go 1.26.10 to fix Go standard library vulnerabilities.

The previous build (grafana-10.2.6-22.fc43) was compiled with go1.25.4 and contained 48 known Go standard library issues. golang 1.26.10 is now the F43 buildroot toolchain and fixes all of them, so this is a pure rebuild with no source, spec logic or vendored dependency changes.

Not addressed by this update: the bundled Go modules (golang.org/x/net, go-jose, kin-openapi) and the prebuilt frontend bundle, which need separate vendor/frontend regeneration.

FEDORA-2026-043f4fc6f5 Packages in this update:

• mingw-cfitsio-4.6.4-3.fc43

Update description:

Backport fix for CVE-2026-115504.

FEDORA-2026-350d904ee3 Packages in this update:

• mingw-harfbuzz-11.5.1-3.fc43

Update description:

Backport fix for CVE-2026-113679.

FEDORA-2026-2e919836ea Packages in this update:

• mingw-freetype-2.13.3-4.fc43

Update description:

Backport fix for CVE-2026-49919.

FEDORA-2026-b3ab9da70c Packages in this update:

• mingw-qt5-qtwebkit-5.212.0-0.46.alpha4.fc43

Update description:

Backport fix for CVE-2206-111497.

FEDORA-2026-5244693d13 Packages in this update:

• mingw-qt6-qtbase-6.10.3-2.fc43

Update description:

Backport fix for CVE-2026-107157, CVE-2026-19248, CVE-2026-76151

FEDORA-2026-a83294f5ab Packages in this update:

• mingw-expat-2.9.0-1.fc43

Update description:

Update to 2.9.0, fixes CVE-2026-115506.

FEDORA-2026-0d5f06ec53 Packages in this update:

• mingw-glib-networking-2.80.1-5.fc44

Update description:

Backport fix for CVE-2206.103963.

FEDORA-2026-14b302ef32 Packages in this update:

• mingw-glib-networking-2.80.1-5.fc43

Update description:

Backport fix for CVE-2206.103963.

FEDORA-2026-4a6a1cdd19 Packages in this update:

• grafana-pcp-5.3.0-4.fc43

Update description:

Rebuild with golang >= 1.25.2 to fix Go standard library vulnerabilities: CVE-2025-58189 (crypto/tls), CVE-2025-61723 (encoding/pem), CVE-2025-58185 (encoding/asn1), CVE-2025-58188 (crypto/x509).

FEDORA-2026-7d4fcfe6c8 Packages in this update:

• nodejs-pnpm12-12.17.0-1.fc45

Update description:

Update to version 12.17.0

FEDORA-EPEL-2026-3154e223e7 Packages in this update:

• rccl-7.2.0-5.el10_4

Update description:

CVE-2026-43598

FEDORA-2026-bae971fad8 Packages in this update:

• python-pillow-11.3.0-14.fc43

Update description:

• Security fix for CVE-2026-112900
• Security fix for CVE-2026-112403
• Security fix for CVE-2026-112393
• Security fix for CVE-2026-112892

FEDORA-EPEL-2026-8312376c17 Packages in this update:

• pipx-1.18.11-1.el10_2

Update description:

Update to 1.18.11 upstream release, addressing 23 security problems.

FEDORA-EPEL-2026-8a179acd1e Packages in this update:

• copyparty-1.20.26-1.el10_3

Update description:

New upstream release.

FEDORA-2026-a7d1759884 Packages in this update:

• copyparty-1.20.26-1.fc45

Update description:

New upstream release.

FEDORA-EPEL-2026-da2b60886d Packages in this update:

• copyparty-1.20.26-1.el10_4

Update description:

New upstream release.

FEDORA-2026-4d013a5c67 Packages in this update:

• copyparty-1.20.26-1.fc44

Update description:

New upstream release.

FEDORA-2026-7adfb2bcdd Packages in this update:

• nodejs-pnpm12-12.17.0-1.fc46

Update description:

Automatic update for nodejs-pnpm12-12.17.0-1.fc46.

Changelog * Sat Oct 31 2026 Andreas Schneider <asn@redhat.com> - 12.17.0-1 - Update to version 12.17.0 - Fixes CVE-2026-115907 - resolves: rhbz#2562799 - Fixes CVE-2026-115908 - resolves: rhbz#2562854 * Fri Oct 30 2026 Andreas Schneider <asn@redhat.com> - 12.16.1-1 - Update to version 12.6.0 - Fixes CVE-2026-115907 - resolves: rhbz#2562799 - Fixes CVE-2026-115908 - resolves: rhbz#2562854