Fedora Security Advisories

• hamlib-4.5.5-2.el8

This is an update fixing stack out-of-bounds write and uninitialized memory disclosure (CVE-2026-54634).

• hamlib-4.5.5-2.el9

This is an update fixing stack out-of-bounds write and uninitialized memory disclosure (CVE-2026-54634).

• chezmoi-2.73.0-2.el10_2

Update to 2.73.0

• chezmoi-2.73.0-2.el10_4

Update to 2.73.0

• chezmoi-2.73.0-2.el9

Update to 2.73.0

• chezmoi-2.73.0-2.el10_3

Update to 2.73.0

• python-django5-5.2.18-1.fc44

Update Django 5 to version 5.2.18

• Fixes CVE-2026-77050 [low]: Potential denial-of-service vulnerability in get_supported_language_variant()
• Fixes CVE-2026-84429 [moderate]: Potential denial-of-service vulnerability in HTTP header parsing
• Fixes CVE-2026-87890 [moderate]: Potential request forgery via spatial lookup byte values
• Fixes CVE-2026-87975 [moderate]: Privilege abuse in model formsets with editable primary keys

See https://docs.djangoproject.com/en/dev/releases/5.2.18/ for more details

• python-django5-5.2.18-1.fc45

Update Django 5 to version 5.2.18

• Fixes CVE-2026-77050 [low]: Potential denial-of-service vulnerability in get_supported_language_variant()
• Fixes CVE-2026-84429 [moderate]: Potential denial-of-service vulnerability in HTTP header parsing
• Fixes CVE-2026-87890 [moderate]: Potential request forgery via spatial lookup byte values
• Fixes CVE-2026-87975 [moderate]: Privilege abuse in model formsets with editable primary keys

See https://docs.djangoproject.com/en/dev/releases/5.2.18/ for more details

• python-django5-5.2.18-1.fc43

Update Django 5 to version 5.2.18

• Fixes CVE-2026-77050 [low]: Potential denial-of-service vulnerability in get_supported_language_variant()
• Fixes CVE-2026-84429 [moderate]: Potential denial-of-service vulnerability in HTTP header parsing
• Fixes CVE-2026-87890 [moderate]: Potential request forgery via spatial lookup byte values
• Fixes CVE-2026-87975 [moderate]: Privilege abuse in model formsets with editable primary keys

See https://docs.djangoproject.com/en/dev/releases/5.2.18/ for more details

• tor-0.4.9.14-1.el9

Update to latest upstream release

• tor-0.4.9.14-1.el10_4

Update to latest upstream release

• tor-0.4.9.14-1.fc45

Update to latest upstream release

• tor-0.4.9.14-1.fc44

Update to latest upstream release

• tor-0.4.9.14-1.fc43

Update to latest upstream release

• rust-onefetch-2.27.1-5.el10_2

Backport fix for CVE-2026-100866 from 3.0.0

• rust-onefetch-2.27.1-10.el10_3

Backport fix for CVE-2026-100866 from 3.0.0

• rust-onefetch-2.28.1-4.el9

Backport fix for CVE-2026-100866 from 3.0.0

• python-django6-6.1.2-1.fc45

Update Django 6 to version 6.1.2

• Fixes CVE-2026-77050 [low]: Potential denial-of-service vulnerability in get_supported_language_variant()
• Fixes CVE-2026-84429 [moderate]: Potential denial-of-service vulnerability in HTTP header parsing
• Fixes CVE-2026-87890 [moderate]: Potential request forgery via spatial lookup byte values
• Fixes CVE-2026-87975 [moderate]: Privilege abuse in model formsets with editable primary keys

See https://docs.djangoproject.com/en/6.1/releases/6.1.2/ for more details

• python-django6-6.1.2-1.fc44

Update Django 6 to version 6.1.2

• Fixes CVE-2026-77050 [low]: Potential denial-of-service vulnerability in get_supported_language_variant()
• Fixes CVE-2026-84429 [moderate]: Potential denial-of-service vulnerability in HTTP header parsing
• Fixes CVE-2026-87890 [moderate]: Potential request forgery via spatial lookup byte values
• Fixes CVE-2026-87975 [moderate]: Privilege abuse in model formsets with editable primary keys

See https://docs.djangoproject.com/en/6.1/releases/6.1.2/ for more details

• chezmoi-2.73.0-1.fc45

Update to 2.73.0