Fedora Security Advisories

FEDORA-EPEL-2026-76aa4aa668 Packages in this update:

• opkssh-0.14.0-3.el10_2

Update description:

Update bundled golang.org/x/crypto to 0.53.0

Build for EPEL10.2

FEDORA-EPEL-2026-6a8ec0251b Packages in this update:

• opkssh-0.14.0-3.el10_3

Update description:

Update bundled golang.org/x/crypto to 0.53.0

FEDORA-2026-7794729685 Packages in this update:

• opkssh-0.14.0-3.fc44

Update description:

Update bundled golang.org/x/crypto to 0.53.0

FEDORA-2026-12d4cde449 Packages in this update:

• opkssh-0.14.0-3.fc43

Update description:

Update bundled golang.org/x/crypto to 0.53.0

FEDORA-2026-ed208f5337 Packages in this update:

• hut-0.8.0-1.fc44

Update description:

Update!

• Close Go standard library CVE bugs that are solved by a rebuild

FEDORA-2026-32113d4817 Packages in this update:

• hut-0.8.0-1.fc43

Update description:

Update!

• Close Go standard library CVE bugs that are solved by a rebuild

FEDORA-2026-bcaf0ddb2a Packages in this update:

• ffmpeg-8.1.2-2.fc44

Update description:

Backported fix for CVE-2026-30998.

FEDORA-2026-20f89207bb Packages in this update:

• ffmpeg-8.1.2-2.fc45

Update description:

Automatic update for ffmpeg-8.1.2-2.fc45.

Changelog * Mon Jun 22 2026 Dominik Mierzejewski <dominik@greysector.net> - 8.1.2-2 - Backport fix for CVE-2026-30998 (resolves rhbz#2457970).

FEDORA-2026-db770b7d7a Packages in this update:

• python-jupytext-1.19.4-1.fc44

Update description:

See https://github.com/jupytext/jupytext/releases/tag/v1.19.4 for changes in version 1.19.4. Notable, this update fixes CVE-2026-48779.

FEDORA-2026-31e6b85f4e Packages in this update:

• python-jupytext-1.19.4-1.fc43

Update description:

See https://github.com/jupytext/jupytext/releases/tag/v1.19.4 for changes in version 1.19.4. Notable, this update fixes CVE-2026-48779.

FEDORA-2026-1d2c7eaa2f Packages in this update:

• python-django-haystack-3.4.0-1.fc43

Update description:

Fixes GHSA-r3hx-x5rh-p9vv: via eval() in Elasticsearch Result Deserialization

https://github.com/django-haystack/django-haystack/security/advisories/GHSA-r3hx-x5rh-p9vv

What's Changed

https://github.com/django-haystack/django-haystack/releases/tag/v3.4.0

• Remove obsolete ElasticSearch2 support and tests by @claudep in https://github.com/django-haystack/django-haystack/pull/1978
• Add Django v5.1 to the testing by @cclauss in https://github.com/django-haystack/django-haystack/pull/1991
• GitHub Actions: Add Python 3.13 to the testing by @cclauss in https://github.com/django-haystack/django-haystack/pull/1997
• Fix typo. by @andresmrm in https://github.com/django-haystack/django-haystack/pull/1998
• Fix RelatedSearchQueryset.load_all() truncating results by @craigds in https://github.com/django-haystack/django-haystack/pull/2012
• [FIXED] -- handle trailing slash in Solr index URL for core reload. by @DhavalGojiya in https://github.com/django-haystack/django-haystack/pull/1968
• Bump the github-actions group with 2 updates by @dependabot[bot] in https://github.com/django-haystack/django-haystack/pull/2018
• Update license field to use proper SPDX identifier by @leifdreizler in https://github.com/django-haystack/django-haystack/pull/2016
• dev: Update Python dependencies by @kingbuzzman in https://github.com/django-haystack/django-haystack/pull/2019
• dev: Update django by @kingbuzzman in https://github.com/django-haystack/django-haystack/pull/2020
• fix: handle HEAD requests like GET in generic_views by @janheini in https://github.com/django-haystack/django-haystack/pull/2015
• feat: Add requires-python to pyproject.toml (PEP 621) by @DhavalGojiya in https://github.com/django-haystack/django-haystack/pull/2039
• Add Python 3.14 and 3.14t to the testing by @cclauss in https://github.com/django-haystack/django-haystack/pull/2031
• Fix race condition in ConnectionRouter.routers lazy initialization by @craigds in https://github.com/django-haystack/django-haystack/pull/2048
• add postgres backend to backend_support.rst by @fgregg in https://github.com/django-haystack/django-haystack/pull/2044
• Actions: limit permissions for tests by @acdha in https://github.com/django-haystack/django-haystack/pull/2053
• GitHub Actions: zizmor fixes by @acdha in https://github.com/django-haystack/django-haystack/pull/2055

FEDORA-2026-3e10194134 Packages in this update:

• python-django-haystack-3.4.0-1.fc44

Update description:

Fixes GHSA-r3hx-x5rh-p9vv: via eval() in Elasticsearch Result Deserialization

https://github.com/django-haystack/django-haystack/security/advisories/GHSA-r3hx-x5rh-p9vv

What's Changed

https://github.com/django-haystack/django-haystack/releases/tag/v3.4.0

• Remove obsolete ElasticSearch2 support and tests by @claudep in https://github.com/django-haystack/django-haystack/pull/1978
• Add Django v5.1 to the testing by @cclauss in https://github.com/django-haystack/django-haystack/pull/1991
• GitHub Actions: Add Python 3.13 to the testing by @cclauss in https://github.com/django-haystack/django-haystack/pull/1997
• Fix typo. by @andresmrm in https://github.com/django-haystack/django-haystack/pull/1998
• Fix RelatedSearchQueryset.load_all() truncating results by @craigds in https://github.com/django-haystack/django-haystack/pull/2012
• [FIXED] -- handle trailing slash in Solr index URL for core reload. by @DhavalGojiya in https://github.com/django-haystack/django-haystack/pull/1968
• Bump the github-actions group with 2 updates by @dependabot[bot] in https://github.com/django-haystack/django-haystack/pull/2018
• Update license field to use proper SPDX identifier by @leifdreizler in https://github.com/django-haystack/django-haystack/pull/2016
• dev: Update Python dependencies by @kingbuzzman in https://github.com/django-haystack/django-haystack/pull/2019
• dev: Update django by @kingbuzzman in https://github.com/django-haystack/django-haystack/pull/2020
• fix: handle HEAD requests like GET in generic_views by @janheini in https://github.com/django-haystack/django-haystack/pull/2015
• feat: Add requires-python to pyproject.toml (PEP 621) by @DhavalGojiya in https://github.com/django-haystack/django-haystack/pull/2039
• Add Python 3.14 and 3.14t to the testing by @cclauss in https://github.com/django-haystack/django-haystack/pull/2031
• Fix race condition in ConnectionRouter.routers lazy initialization by @craigds in https://github.com/django-haystack/django-haystack/pull/2048
• add postgres backend to backend_support.rst by @fgregg in https://github.com/django-haystack/django-haystack/pull/2044
• Actions: limit permissions for tests by @acdha in https://github.com/django-haystack/django-haystack/pull/2053
• GitHub Actions: zizmor fixes by @acdha in https://github.com/django-haystack/django-haystack/pull/2055

FEDORA-2026-7ecfdcf0e3 Packages in this update:

• perl-Compress-Raw-Bzip2-2.218-1.fc44
• perl-IO-Compress-2.221-1.fc44

Update description:

perl-Compress-Taw-Bzip2 - Updated to 2.218 perl-IO-Compress - Updated to 2.221 - Fix CVE-2025-15649, CVE-2026-48959, CVE-2026-48961, CVE-2026-48962

FEDORA-2026-fb1f15ce04 Packages in this update:

• perl-Compress-Raw-Bzip2-2.218-1.fc43
• perl-IO-Compress-2.221-1.fc43

Update description:

perl-Compress-Taw-Bzip2 - Updated to 2.218 perl-IO-Compress - Updated to 2.221 - Fix CVE-2025-15649, CVE-2026-48959, CVE-2026-48961, CVE-2026-48962

FEDORA-2026-7f36ec4c65 Packages in this update:

• collectd-5.12.0-57.fc43
• varnish-7.7.3-2.fc43
• varnish-modules-0.26.0-4.fc43
• vmod-querystring-2.0.3-11.fc43

Update description:

Update to latest 7.7.x release available, a security release. Includes fixes for VSV00017 aka CVE-2025-8671, aAdded patches for for VSV00018 aka CVE-2026-34475, added patches for for VSV00019.

FEDORA-2026-d74dd170ab Packages in this update:

• perl-DBI-1.648-1.fc43

Update description:

Update to 1.648; Fix CVE-2026-9698 and CVE-2026-10879

FEDORA-2026-134fcb8549 Packages in this update:

• perl-DBI-1.648-1.fc44

Update description:

Update to 1.648; Fix CVE-2026-9698 and CVE-2026-10879

FEDORA-2026-7726bdbcf1 Packages in this update:

• maradns-3.5.0037-1.fc44

Update description:

Update to 3.5.0037, fixing DNS-over-TCP bug (rhbz#2488786)

FEDORA-2026-bc8f441ba4 Packages in this update:

• ffmpeg-8.1.2-1.fc44

Update description:

The latest stable FFmpeg release from the 8.1 release branch. https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n8.1.2:/Changelog

Fixes CVE-2026-30999 .

FEDORA-2026-ade10efd88 Packages in this update:

• python-pydantic-settings-2.14.2-1.fc43

Update description:

Update to 2.14.2; fixes GHSA-4xgf-cpjx-pc3j.