Fedora Security Advisories

FEDORA-2026-78a11da997 Packages in this update:

• aegisub-3.5.0-1.fc43

Update description:

Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script references. The fix requires confirmation before loading associated scripts, makes extension validation consistent with filesystem path interpretation, and sanitizes embedded NUL characters in project metadata. Upstream advisory: https://github.com/TypesettingTools/Aegisub/security/advisories/GHSA-67hq-5vgg-6f23

FEDORA-2026-0c6d4471fc Packages in this update:

• aegisub-3.5.0-2.fc44

Update description:

Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script references. The fix requires confirmation before loading associated scripts, makes extension validation consistent with filesystem path interpretation, and sanitizes embedded NUL characters in project metadata. Upstream advisory: https://github.com/TypesettingTools/Aegisub/security/advisories/GHSA-67hq-5vgg-6f23

FEDORA-2026-d296db490c Packages in this update:

• aegisub-3.5.0-1.fc45

Update description:

Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script references. The fix requires confirmation before loading associated scripts, makes extension validation consistent with filesystem path interpretation, and sanitizes embedded NUL characters in project metadata. Upstream advisory: https://github.com/TypesettingTools/Aegisub/security/advisories/GHSA-67hq-5vgg-6f23

FEDORA-EPEL-2026-042a8bf4e4 Packages in this update:

• zabbix7.0-7.0.31-1.el10_3

Update description:

Update to 7.0.31 (CVE-2026-59782, CVE-2026-59783, CVE-2026-59785, CVE-2026-59786, CVE-2026-59787)

FEDORA-EPEL-2026-3e248bfcbd Packages in this update:

• zabbix7.0-7.0.31-1.el10_4

Update description:

Update to 7.0.31 (CVE-2026-59782, CVE-2026-59783, CVE-2026-59785, CVE-2026-59786, CVE-2026-59787)

FEDORA-EPEL-2026-0879abafaa Packages in this update:

• zabbix7.0-7.0.31-1.el9

Update description:

Update to 7.0.31 (CVE-2026-59782, CVE-2026-59783, CVE-2026-59785, CVE-2026-59786, CVE-2026-59787)

FEDORA-EPEL-2026-367fe24aeb Packages in this update:

• zabbix7.0-7.0.31-1.el8

Update description:

Update to 7.0.31 (CVE-2026-59782, CVE-2026-59783, CVE-2026-59785, CVE-2026-59786, CVE-2026-59787)

Update to 7.0.28

FEDORA-EPEL-2026-6aaa054bb4 Packages in this update:

• zabbix7.0-7.0.31-1.el10_2

Update description:

Update to 7.0.31 (CVE-2026-59782, CVE-2026-59783, CVE-2026-59785, CVE-2026-59786, CVE-2026-59787)

FEDORA-EPEL-2026-d82469a549 Packages in this update:

• zabbix-6.0.48-1.el9

Update description:

Update to 6.0.48 (CVE-2026-59782, CVE-2026-59785, CVE-2026-59787)

FEDORA-EPEL-2026-097fd3579f Packages in this update:

• zabbix6.0-6.0.48-1.el8

Update description:

Update to 6.0.48 (CVE-2026-59782, CVE-2026-59785, CVE-2026-59787)

FEDORA-2026-9a0831b48c Packages in this update:

• curl-8.18.0-11.fc44

Update description:

• Fix HTTP/2 server push UAF (CVE-2026-18924)

FEDORA-2026-0e2e6878f4 Packages in this update:

• arm-none-eabi-binutils-cs-2.45-5.fc45

Update description:

• fix CVE-2026-19582: a potential buffer overflow in rsrc_resource_name (rhbz#2519352)

FEDORA-2026-5215055b2a Packages in this update:

• arm-none-eabi-binutils-cs-2.45-5.fc44

Update description:

• fix CVE-2026-19582: a potential buffer overflow in rsrc_resource_name (rhbz#2519352)

FEDORA-2026-093a11f472 Packages in this update:

• arm-none-eabi-binutils-cs-2.45-5.fc43

Update description:

• fix CVE-2026-19582: a potential buffer overflow in rsrc_resource_name (rhbz#2519352)

FEDORA-2026-220bbf27df Packages in this update:

• avr-binutils-2.45-8.fc45

Update description:

• fix CVE-2026-19582: a potential buffer overflow in rsrc_resource_name (rhbz#2519351)

FEDORA-2026-bd6b3ee737 Packages in this update:

• avr-binutils-2.45-8.fc44

Update description:

• fix CVE-2026-19582: a potential buffer overflow in rsrc_resource_name (rhbz#2519351)

FEDORA-2026-5a5f49bc55 Packages in this update:

• avr-binutils-2.45-8.fc43

Update description:

• fix CVE-2026-19582: a potential buffer overflow in rsrc_resource_name (rhbz#2519351)

FEDORA-2026-a48c050313 Packages in this update:

• python3.15-3.15.0~rc3-2.fc43

Update description:

New version of the Python interpreter

FEDORA-2026-ab1400e97a Packages in this update:

• python3.15-3.15.0~rc3-2.fc45
• python3-docs-3.15.0~rc3-1.fc45

Update description:

New version of the Python interpreter

FEDORA-2026-96f6bd1144 Packages in this update:

• arm-none-eabi-binutils-cs-2.45-5.fc46

Update description:

Automatic update for arm-none-eabi-binutils-cs-2.45-5.fc46.

Changelog * Mon Oct 5 2026 Michal Hlavinka <mhlavink@redhat.com> - 1:2.45-5 - fix CVE-2026-19582: a potential buffer overflow in rsrc_resource_name (rhbz#2519352)