Fedora Security Advisories

• ruff-0.16.9-1.fc46
• rust-salsa-0.28.5-1.fc46
• rust-salsa-macro-rules-0.28.5-1.fc46
• rust-salsa-macros-0.28.5-1.fc46
• ty-0.0.84-1.fc46

Update the salsa/salsa-macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA-xc3w-55vh-cw3w.

Update ruff to 0.16.9 and ty to 0.0.84, fixing GHSA-vxvm-j4xq-q7m4, which could result in arbitrary code execution when typechecking untrusted code.

• nagios-plugins-2.5-2.fc45

Update to upstream (bz#2453492) check_icmp: host-count overflow leads to heap buffer overflow (bz#2513957) Update 0012-fix-perl-ntp-ipv6.patch to allow uppercase hostnames (bz#2500542) Added perl-Math-BigInt as dependency for nagios-plugins-ssl_validity (bz#2439960)

• dnf5-5.4.6.0-2.fc45

• Update translations from weblate
• spec: Symlink microdnf(8) and yum(8) manual pages to dnf5(8)
• Update FSF's address in GPL-2.0 disclaimers
• Update LGPL-2.1 and GPL-2.0 texts to current FSF's wording
• fix: DNF5_FORCE_COLUMNS / non-TTY width in transaction table
• progressbar: Report progress to terminal taskbar via OSC 9;4
• Makefile: Add FEDORA_VERSION to unify defaults
• spec: Require GCC ≥ 14.1 for std::chrono::parse()
• dnf5daemon: Hide invalid offline transactions
• Clarify plugin source language options
• needs-restarting: Configure extra packages that require a reboot
• VendorChangeManager: Allow empty vendor policies in compact format
• manifest: Log before resolving & after writing files
• manifest: Print transaction table on resolve

• pgbouncer-1.26.0-1.el10_4

Update to 1.26.0.

• pgbouncer-1.26.0-1.el9

Update to 1.26.0.

• pgbouncer-1.26.0-1.el10_2

Update to 1.26.0.

• pgbouncer-1.26.0-1.fc44

Update to 1.26.0.

• pgbouncer-1.26.0-1.fc43

Update to 1.26.0.

• pgbouncer-1.26.0-1.fc45

Update to 1.26.0.

• nanosvg-20221221-11.fc45

Apply fix for CVE-2026-88367.

• nanosvg-20221221-11.fc44

Apply fix for CVE-2026-88367.

• nanosvg-20221221-11.fc43

Apply fix for CVE-2026-88367.

• python-uv-build-0.12.19-1.el10_4
• ruff-0.16.9-1.el10_4
• rust-libcst-1.9.0-1.el10_4
• rust-libcst_derive-1.9.0-1.el10_4
• rust-salsa-0.28.5-1.el10_4
• rust-salsa-macro-rules-0.28.5-1.el10_4
• rust-salsa-macros-0.28.5-1.el10_4
• uv-0.12.19-1.el10_4

Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa-macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA-xc3w-55vh-cw3w.

Update ruff to 0.16.9.

Update uv and python-uv-build to 0.12.9.

• python-uv-build-0.12.19-1.fc43
• ruff-0.16.9-1.fc43
• rust-libcst-1.9.0-1.fc43
• rust-libcst_derive-1.9.0-1.fc43
• rust-salsa-0.28.5-1.fc43
• rust-salsa-macro-rules-0.28.5-1.fc43
• rust-salsa-macros-0.28.5-1.fc43
• ty-0.0.84-1.fc43
• uv-0.12.19-1.fc43

Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa-macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA-xc3w-55vh-cw3w.

Update ruff to 0.16.9 and ty to 0.0.84, fixing GHSA-vxvm-j4xq-q7m4, which could result in arbitrary code execution when typechecking untrusted code.

Update uv and python-uv-build to 0.12.9.

• python-uv-build-0.12.19-1.fc44
• ruff-0.16.9-1.fc44
• rust-libcst-1.9.0-1.fc44
• rust-libcst_derive-1.9.0-1.fc44
• rust-salsa-0.28.5-1.fc44
• rust-salsa-macro-rules-0.28.5-1.fc44
• rust-salsa-macros-0.28.5-1.fc44
• ty-0.0.84-1.fc44
• uv-0.12.19-1.fc44

Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa-macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA-xc3w-55vh-cw3w.

Update ruff to 0.16.9 and ty to 0.0.84, fixing GHSA-vxvm-j4xq-q7m4, which could result in arbitrary code execution when typechecking untrusted code.

Update uv and python-uv-build to 0.12.9.

• python-uv-build-0.12.19-1.fc45
• ruff-0.16.9-1.fc45
• rust-libcst-1.9.0-1.fc45
• rust-libcst_derive-1.9.0-1.fc45
• rust-salsa-0.28.5-1.fc45
• rust-salsa-macro-rules-0.28.5-1.fc45
• rust-salsa-macros-0.28.5-1.fc45
• ty-0.0.84-1.fc45
• uv-0.12.19-1.fc45

Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa-macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA-xc3w-55vh-cw3w.

Update ruff to 0.16.9 and ty to 0.0.84, fixing GHSA-vxvm-j4xq-q7m4, which could result in arbitrary code execution when typechecking untrusted code.

Update uv and python-uv-build to 0.12.9.

• prometheus-3.15.0-1.fc45

Update to 3.15.0

• prometheus-3.15.0-1.fc44

Update to 3.15.0

• prometheus-3.15.0-1.el9

Update to 3.15.0

• prometheus-3.15.0-1.el10_3

Update to 3.15.0