Fedora Security Advisories

FEDORA-2026-af9902ab5e Packages in this update:

• docker-buildx-0.37.2-1.fc44

Update description:

• Update to release v0.37.2
• Resolves: rhbz#2544198
• Resolves CVE-2026-56855: rhbz#2530594
• resolves CVE-2026-78662: rhbz#2530802
• Upstream fix

FEDORA-2026-71df118e18 Packages in this update:

• php-getid3-1.9.27-1.fc44

Update description: Version 1.9.27: [2026-09-22]

• GHSA-c2xw-vp6w-gpph compressed ID3v2 frames max length
• GHSA-j649-xr34-mmmh remove LIBXML_NOENT
• embedded picture in WMA files is corrupt
• silent failure of @libxml_disable_entity_loader() enables XXE

FEDORA-2026-6ef35023a5 Packages in this update:

• php-getid3-1.9.27-1.fc45

Update description: Version 1.9.27: [2026-09-22]

• GHSA-c2xw-vp6w-gpph compressed ID3v2 frames max length
• GHSA-j649-xr34-mmmh remove LIBXML_NOENT
• embedded picture in WMA files is corrupt
• silent failure of @libxml_disable_entity_loader() enables XXE

FEDORA-2026-b9ef1180ce Packages in this update:

• php-getid3-1.9.27-1.fc43

Update description: Version 1.9.27: [2026-09-22]

• GHSA-c2xw-vp6w-gpph compressed ID3v2 frames max length
• GHSA-j649-xr34-mmmh remove LIBXML_NOENT
• embedded picture in WMA files is corrupt
• silent failure of @libxml_disable_entity_loader() enables XXE

FEDORA-EPEL-2026-e0e0737425 Packages in this update:

• GitPython-3.2.0-1.el9

Update description:

Update to 3.2.0

Fixes GHSA-gq48-pqfc-9p58, GHSA-23mf-xhv8-69c2, GHSA-f9j4-qggq-h239, GHSA-w8jc-g24h-crhw, GHSA-m64x-33q8-m5h7, and GHSA-fx3j-rwgx-fr94.

FEDORA-2026-cf9ac55adc Packages in this update:

• dhcpcd-10.5.2-1.fc43

Update description:

• Update to 10.5.2 (rhbz#2511521)

FEDORA-2026-c39845b961 Packages in this update:

• dhcpcd-10.5.2-1.fc44

Update description:

• Update to 10.5.2 (rhbz#2511521)

FEDORA-2026-f6c24b91ee Packages in this update:

• dhcpcd-10.5.2-1.fc45

Update description:

• Update to 10.5.2 (rhbz#2511521)

FEDORA-2026-59c42d53ab Packages in this update:

• docker-buildx-0.37.2-1.fc45

Update description:

• Update to release v0.37.2
• Resolves: rhbz#2544198
• Resolves CVE-2026-56855: rhbz#2530594
• resolves CVE-2026-78662: rhbz#2530802
• Upstream fix

FEDORA-2026-934d570022 Packages in this update:

• docker-buildx-0.37.2-1.fc46

Update description:

Automatic update for docker-buildx-0.37.2-1.fc46.

Changelog * Wed Sep 30 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 0.37.2-1 - Update to release v0.37.2 - Resolves: rhbz#2544198 - Resolves CVE-2026-56855: rhbz#2530594 - resolves CVE-2026-78662: rhbz#2530802 - Upstream fix

FEDORA-2026-0d57b0d529 Packages in this update:

• libX11-1.8.13-3.fc44

Update description:

xkb: Check the keysym range in _XkbReadKeyActions (CVE-2026-88806)

FEDORA-EPEL-2026-c3ee85c015 Packages in this update:

• GitPython-3.2.0-1.el10_2

Update description:

Update to 3.2.0

Fixes GHSA-gq48-pqfc-9p58, GHSA-23mf-xhv8-69c2, GHSA-f9j4-qggq-h239, GHSA-w8jc-g24h-crhw, GHSA-m64x-33q8-m5h7, and GHSA-fx3j-rwgx-fr94.

FEDORA-EPEL-2026-b8f0b437b3 Packages in this update:

• GitPython-3.2.0-1.el10_3

Update description:

Update to 3.2.0

Fixes GHSA-gq48-pqfc-9p58, GHSA-23mf-xhv8-69c2, GHSA-f9j4-qggq-h239, GHSA-w8jc-g24h-crhw, GHSA-m64x-33q8-m5h7, and GHSA-fx3j-rwgx-fr94.

FEDORA-EPEL-2026-58b3caf388 Packages in this update:

• GitPython-3.2.0-1.el10_4

Update description:

Update to 3.2.0

Fixes GHSA-gq48-pqfc-9p58, GHSA-23mf-xhv8-69c2, GHSA-f9j4-qggq-h239, GHSA-w8jc-g24h-crhw, GHSA-m64x-33q8-m5h7, and GHSA-fx3j-rwgx-fr94.

FEDORA-2026-819ccf04d8 Packages in this update:

• hcloud-1.69.0-1.fc44

Update description:

Update to 1.69.0

FEDORA-2026-6d4a64a6b0 Packages in this update:

• hcloud-1.69.0-1.fc43

Update description:

Update to 1.69.0

FEDORA-2026-838b95d839 Packages in this update:

• hcloud-1.69.0-1.fc45

Update description:

Update to 1.69.0

FEDORA-2026-06c29a2cb4 Packages in this update:

• openssl-4.0.3-1.fc45

Update description:

Rebase to OpenSSL 4.0.3

FEDORA-EPEL-2026-4132a6573a Packages in this update:

• libmodsecurity-3.0.17-1.el9
• nginx-mod-modsecurity-1.0.4-18.el9

Update description:

Update to latest libmodsecurity to address several CVEs: https://modsecurity.org/20260928/security-update-digest-overview-of-recent-advisory-fixes-2026-september/

FEDORA-2026-5da3a4753b Packages in this update:

• libmodsecurity-3.0.17-1.fc44
• nginx-mod-modsecurity-1.0.4-18.fc44

Update description:

Update to latest libmodsecurity to address several CVEs: https://modsecurity.org/20260928/security-update-digest-overview-of-recent-advisory-fixes-2026-september/