Fedora Security Advisories

FEDORA-2026-8deecdc6c6 Packages in this update:

• rust-cargo-vendor-filterer-0.5.18-4.fc44

Update description:

Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

FEDORA-2026-e5b9665269 Packages in this update:

• rust-cargo-rpmstatus-0.2.4-3.fc43

Update description:

Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

FEDORA-2026-ad73d6fafe Packages in this update:

• rust-cargo-c-0.10.19-2.fc44

Update description:

Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

FEDORA-2026-9e26f48b50 Packages in this update:

• stgit-2.5.5-5.fc42

Update description:

Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

FEDORA-2026-609bc373aa Packages in this update:

• rustup-1.29.0-2.fc42

Update description:

Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

FEDORA-2026-d7cc8fd693 Packages in this update:

• rust-cargo-rpmstatus-0.2.4-3.fc44

Update description:

Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

FEDORA-2026-d6b7d7e177 Packages in this update:

• stgit-2.5.5-5.fc43

Update description:

Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

FEDORA-2026-ae0b7bdc90 Packages in this update:

• bpfman-0.5.4-7.fc45

Update description:

Automatic update for bpfman-0.5.4-7.fc45.

Changelog * Sun Mar 22 2026 Daniel Mellado <dmellado@fedoraproject.org> - 0.5.4-7 - Fix CVE-2026-31812: Bump tar-rs to .5.45 - Closes rhbz#2449672

FEDORA-2026-9defa0fb00 Packages in this update:

• rustup-1.29.0-2.fc43

Update description:

Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

FEDORA-2026-25285d56e4 Packages in this update:

• stgit-2.5.5-5.fc44

Update description:

Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

FEDORA-2026-89d4b6644b Packages in this update:

• rustup-1.29.0-2.fc44

Update description:

Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

FEDORA-2026-49156d1598 Packages in this update:

• stgit-2.5.5-5.fc45

Update description:

Automatic update for stgit-2.5.5-5.fc45.

Changelog * Sun Mar 22 2026 Benjamin A. Beasley <code@musicinmybrain.net> - 2.5.5-5 - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056 - Fixes RHBZ#2449690 - Updated the License expression and wrote it one-term-per-line

FEDORA-2026-49ec7a73a3 Packages in this update:

• rustup-1.29.0-2.fc45

Update description:

Automatic update for rustup-1.29.0-2.fc45.

Changelog * Sun Mar 22 2026 Benjamin A. Beasley <code@musicinmybrain.net> - 1.29.0-2 - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056 - Fixes RHBZ#2449688

FEDORA-EPEL-2026-42f57464f0 Packages in this update:

• rust-astral-tokio-tar-0.6.0-1.el9
• rust-tar-0.4.45-1.el9

Update description:

Update rust-tar to 0.4.45, fixing CVE-2026-33056. Initial EPEL9 package for rust-astral-tokio-tar.

FEDORA-2026-e70c1919fe Packages in this update:

• mingw-expat-2.7.5-1.fc43

Update description:

Update to 2.7.5.

FEDORA-2026-1cbd107c34 Packages in this update:

• mingw-expat-2.7.5-1.fc42

Update description:

Update to 2.7.5.

FEDORA-2026-cf814a1a06 Packages in this update:

• mingw-expat-2.7.5-1.fc44

Update description:

Update to 2.7.5.

FEDORA-2026-0e9d55a05c Packages in this update:

• mingw-freetype-2.14.2-1.fc44

Update description:

Update to 2.14.2.

FEDORA-2026-c260342365 Packages in this update:

• giflib-5.2.2-9.fc43

Update description:

Fix CVE-2026-23868.

FEDORA-2026-758ce76ef6 Packages in this update:

• giflib-6.1.2-1.fc44

Update description:

Fix CVE-2026-23868.