Fedora Security Advisories

FEDORA-2026-1ffbf97eba Packages in this update:

• rust-rustls-webpki-0.103.16-1.fc43
• rust-webpki-root-certs-1.0.10-1.fc43
• rust-webpki-roots-1.0.10-1.fc43

Update description:

• Update the rustls-webpki crate to version 0.103.16.
• Update the webpki-roots and webpki-root-certs crates to version 1.0.10.

This addresses security advisories RUSTSEC-2026-0382, RUSTSEC-2026-0381, and RUSTSEC-2026-0383 - also known as CVE-2026-111943 (i.e. the eMudhra Intermediate CA Compromise).

Rebuilds of affected packages are tracked in rust/backlog#46.

FEDORA-EPEL-2026-18ba500adb Packages in this update:

• rust-rustls-webpki-0.103.16-1.el9
• rust-webpki-root-certs-1.0.10-1.el9
• rust-webpki-roots-1.0.10-1.el9

Update description:

• Update the rustls-webpki crate to version 0.103.16.
• Update the webpki-roots and webpki-root-certs crates to version 1.0.10.

This addresses security advisories RUSTSEC-2026-0382, RUSTSEC-2026-0381, and RUSTSEC-2026-0383 - also known as CVE-2026-111943 (i.e. the eMudhra Intermediate CA Compromise).

Rebuilds of affected packages are tracked in rust/backlog#46.

FEDORA-EPEL-2026-93a23666b1 Packages in this update:

• rust-rustls-webpki-0.103.16-1.el10_2
• rust-webpki-roots-1.0.10-1.el10_2

Update description:

• Update the rustls-webpki crate to version 0.103.16.
• Update the webpki-roots and webpki-root-certs crates to version 1.0.10.

This addresses security advisories RUSTSEC-2026-0382, RUSTSEC-2026-0381, and RUSTSEC-2026-0383 - also known as CVE-2026-111943 (i.e. the eMudhra Intermediate CA Compromise).

Rebuilds of affected packages are tracked in rust/backlog#46.

FEDORA-2026-8eeffa4c43 Packages in this update:

• rust-rustls-webpki-0.103.16-1.fc44
• rust-webpki-root-certs-1.0.10-1.fc44
• rust-webpki-roots-1.0.10-1.fc44

Update description:

• Update the rustls-webpki crate to version 0.103.16.
• Update the webpki-roots and webpki-root-certs crates to version 1.0.10.

This addresses security advisories RUSTSEC-2026-0382, RUSTSEC-2026-0381, and RUSTSEC-2026-0383 - also known as CVE-2026-111943 (i.e. the eMudhra Intermediate CA Compromise).

Rebuilds of affected packages are tracked in rust/backlog#46.

FEDORA-2026-ec2ce9d2ef Packages in this update:

• rust-rustls-webpki-0.103.16-1.fc45
• rust-webpki-root-certs-1.0.10-1.fc45
• rust-webpki-roots-1.0.10-1.fc45

Update description:

• Update the rustls-webpki crate to version 0.103.16.
• Update the webpki-roots and webpki-root-certs crates to version 1.0.10.

This addresses security advisories RUSTSEC-2026-0382, RUSTSEC-2026-0381, and RUSTSEC-2026-0383 - also known as CVE-2026-111943 (i.e. the eMudhra Intermediate CA Compromise).

Rebuilds of affected packages are tracked in rust/backlog#46.

FEDORA-EPEL-2026-d3ec7f00e2 Packages in this update:

• rust-rustls-webpki-0.103.16-1.el10_3
• rust-webpki-root-certs-1.0.10-1.el10_3
• rust-webpki-roots-1.0.10-1.el10_3

Update description:

• Update the rustls-webpki crate to version 0.103.16.
• Update the webpki-roots and webpki-root-certs crates to version 1.0.10.

This addresses security advisories RUSTSEC-2026-0382, RUSTSEC-2026-0381, and RUSTSEC-2026-0383 - also known as CVE-2026-111943 (i.e. the eMudhra Intermediate CA Compromise).

Rebuilds of affected packages are tracked in rust/backlog#46.

FEDORA-EPEL-2026-2d8a0ed237 Packages in this update:

• rust-rustls-webpki-0.103.16-1.el10_4
• rust-webpki-root-certs-1.0.10-1.el10_4
• rust-webpki-roots-1.0.10-1.el10_4

Update description:

• Update the rustls-webpki crate to version 0.103.16.
• Update the webpki-roots and webpki-root-certs crates to version 1.0.10.

This addresses security advisories RUSTSEC-2026-0382, RUSTSEC-2026-0381, and RUSTSEC-2026-0383 - also known as CVE-2026-111943 (i.e. the eMudhra Intermediate CA Compromise).

Rebuilds of affected packages are tracked in rust/backlog#46.

FEDORA-2026-8e6e09deb9 Packages in this update:

• rust-cargo-semver-checks-0.51.0-5.fc44
• rust-trustfall-rustdoc-adapter57-57.1.3-2.fc44
• rust-trustfall-rustdoc-adapter60-60.0.3-2.fc44
• rust-trustfall-rustdoc-adapter-61.0.3-1.fc44

Update description:

Rebuild cargo-semver-checks with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, and RUSTSEC-2026-0349 and with faster-hex 0.10.1 for RUSTSEC-2026-0306. Update trustfall-rustdoc-adapter to 61.0.3/60.0.3/57.1.3.

FEDORA-2026-85f07f4f1b Packages in this update:

• dolphin-26.08.1-2.fc44

Update description:

• CVE-2026-110236 Arbitrary command execution via crafted folder name

FEDORA-2026-2add2065d0 Packages in this update:

• dolphin-26.04.3-2.fc43

Update description:

• CVE-2026-110236 Arbitrary command execution via crafted folder name

FEDORA-2026-b022206824 Packages in this update:

• dolphin-26.08.1-2.fc45

Update description:

• CVE-2026-110236 Arbitrary command execution via crafted folder name

FEDORA-2026-77dc014196 Packages in this update:

• dolphin-26.08.2-2.fc46

Update description:

Automatic update for dolphin-26.08.2-2.fc46.

Changelog * Fri Oct 16 2026 Than Ngo <than@redhat.com> - 26.08.2-2 - Fix rhbz#2553643 - CVE-2026-110236 dolphin: dolphin: Arbitrary command execution via crafted folder name

FEDORA-2026-13d6a67e0d Packages in this update:

• libical-3.0.20-6.fc43

Update description:

Add a patch for CVE-2026-111269: Denial of Service via out-of-bounds read in icalvalue_decode_ical_string()

FEDORA-2026-feebb9861c Packages in this update:

• libical-3.0.20-9.fc44

Update description:

Add a patch for CVE-2026-111269: Denial of Service via out-of-bounds read in icalvalue_decode_ical_string()

FEDORA-2026-05c27bbf4d Packages in this update:

• rust-sccache-0.17.0-5.fc46
• rust-typed-path-0.13.0-1.fc46
• rust-zip-8.6.0-12.fc46

Update description:

Update typed-path to version 0.13.0.

Rebuild sccache with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, and RUSTSEC-2026-0349.

FEDORA-EPEL-2026-9b6d85f62d Packages in this update:

• libmodplug-0.8.9.0-14.el9

Update description:

Fix CVE-2026-75904, CVE-2026-108577, CVE-2026-111270, CVE-2026-111271 and additional hardening

FEDORA-EPEL-2026-8d3dae5e65 Packages in this update:

• libmodplug-0.8.9.0-26.el10_4

Update description:

Fix CVE-2026-75904, CVE-2026-108577, CVE-2026-111270, CVE-2026-111271 and additional hardening

FEDORA-2026-6c58236667 Packages in this update:

• libmodplug-0.8.9.0-31.fc46

Update description:

Automatic update for libmodplug-0.8.9.0-31.fc46.

Changelog * Tue Oct 20 2026 Karel Volný <kvolny@redhat.com> - 1:0.8.9.0-31 - Fix CVE-2026-75904, OOB read in pat_smplooped() (rhbz#2521959) - Fix CVE-2026-108577, unbounded alloc in abc_add_gchord() (rhbz#2550240) - Bound abc_add_drum() accompaniment, fix divide by zero and OOB read - Fix CVE-2026-111270, OOB write in ReadDSM() (rhbz#2554073) - Backport upstream AMS loader hardening, 1bef4e1..63133e8 - Fix CVE-2026-111271, OOB read in ReadAMS2() (rhbz#2554079)

FEDORA-2026-b7618e98ac Packages in this update:

• linux-firmware-20261019-1.fc45

Update description:

Update to 20261019:

• rockchip: add PCIe3 PHY firmware for snps-pcie3
• Update ADSP firmware for Qualcomm qcs615 platform.
• Revert "amdgpu: update GC 11.0.0 firmware"
• amdgpu: a LOT of updates for various ASICs
• amdgpu: DMCUB updates for various ASICs
• rtw89: init board_elm.bin with stuffs for board ID 1
• rtw89: 8922d: update fw 0.35.119.3 with format suffix -1
• rtw89: 8922d: update fw 0.35.115.2
• wfx: update to firmware 3.18
• nvidia: Update and add missing firmware files for Tegra SoCs
• qcom:Update qdsp6sw firmware for shikra platform
• aic: Add AIC8800D80 Bluetooth and Wi-Fi firmware
• qcom: update HPASS firmware for nord platform
• amdgpu: DMCUB updates for various ASICs
• amdgpu: update gc 11.0.1 and 11.0.4 firmware
• qcom: update LPAICP firmware for shikra platform
• ath12k: WCN7850 hw2.0: update board-2.bin
• panthor: Add initial firmware for Architecture 14.8 Arm Mali GPU
• qcom: update ADSP firmware for glymur platform
• cirrus: cs35l41: Add firmware and tuning for Lenovo Thinkbook laptops
• cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
• cirrus: cs42l45: Add CS42L49 SDCA codec firmware for Dell laptops
• qcom: fix qcs8300 gpdspr.jsn symlink target
• qcom: update ADSP firmware for x1e80100 platform
• Update firmware for Intel Solar/Magnetar/Blazar*/Scorpius/ScorpiusGfp core
• cirrus: cs35l57 cs35l63: Add firmware for some Dell laptops
• WHENCE: add SPDX license references for non-standard license texts
• WHENCE: add initial SPDX identifiers
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for a Dell laptop
• cirrus: cs35l41: Add support for Lenovo Yoga Slim 7 Carbon 14ACN6
• Add ISH firmware files for Intel Nova Lake-H/S platforms
• qcom: add ADSP firmware for eliza platform
• qcom: update ADSP firmware for hawi platform
• QCA: Add QCA2066 Bluetooth firmware hpnv21g.30c
• QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
• Revert "qcom: update ADSP firmware for qcs615 platform"
• qcom: Add gpu firmwares for Hawi and Maili chipsets
• qcom: update Rubik Pi 3 ADSP firmware
• cirrus: cs35l56: Correct firmware instances for 103c8c52 and 103c8c53
• contrib: post the MR comment to the project of the merge request
• qcom: vpu: add Gen2 firmware binary for Hawi/Maili
• Update AMD cpu microcode
• iwlwifi: add Bz/Sc FW for core24.80-41 release
• iwlwifi: Update Bz/Fm firmware for core24.80-41 release
• iwlwifi: Add Hr/Gf firmware for core24.80-41 release
• iwlwifi: update ty/So/Ma firmwares for core24.80-41 release
• iwlwifi: Add cc/Qu/QuZ firmwares for core24.80-41 release
• mwifiex: add IW416 firmware
• ath12k: WCN7850 hw2.0: update board-2.bin
• ath12k: QCC2072 hw1.0: update board-2.bin
• ci: add Qualcomm firmware version diff MR comment job
• qcom: sdx61: add missing firmware version
• qcom: sdx35: add missing firmware version
• qcom: aic100: add missing firmware versions
• qcom: qdu100: add missing firmware versions
• qcom: sdm845: add missing modem firmware version
• qcom: x1e80100: add missing Dell XPS 13 9345 DSP versions
• qcom: add missing Adreno ZAP shader versions
• qca: separate the WCN685x uart firmware revisions
• qca: group the QCA61x4 USB firmware files
• qca: drop duplicate version lines
• qca: fix the version of the QCA6698 Bluetooth firmware
• qca: fix the version of the WCN785x USB firmware
• qcom: fix the version of the a660 GMU firmware
• qcom: fix the version of the Eliza SQE microcode
• qcom: fix the version of the QCS615 ZAP shader
• qcom/shikra: link WiFi firmware from the ath10k subdir
• Revert "amdgpu: update GC 11.0.0 firmware"
• Revert "amdgpu: update GC 11.0.0 firmware"
• amdgpu: DMCUB updates for various ASICs
• intel: Update ibt-00a0-01a1-pci.ddc for BE211 - Whale Peak2 (WhP2)
• ath11k: WCN6855 hw2.0: update board-2.bin
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
• qcom: add CDSP firmware for hawi platform
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
• cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops
• QCA: Update Bluetooth firmware for QCC2072 UART interface: 1.1.0-00340 to 1.1.0-00355

FEDORA-2026-bd021461a8 Packages in this update:

• linux-firmware-20261019-1.fc43

Update description:

Update to 20261019:

• rockchip: add PCIe3 PHY firmware for snps-pcie3
• Update ADSP firmware for Qualcomm qcs615 platform.
• Revert "amdgpu: update GC 11.0.0 firmware"
• amdgpu: a LOT of updates for various ASICs
• amdgpu: DMCUB updates for various ASICs
• rtw89: init board_elm.bin with stuffs for board ID 1
• rtw89: 8922d: update fw 0.35.119.3 with format suffix -1
• rtw89: 8922d: update fw 0.35.115.2
• wfx: update to firmware 3.18
• nvidia: Update and add missing firmware files for Tegra SoCs
• qcom:Update qdsp6sw firmware for shikra platform
• aic: Add AIC8800D80 Bluetooth and Wi-Fi firmware
• qcom: update HPASS firmware for nord platform
• amdgpu: DMCUB updates for various ASICs
• amdgpu: update gc 11.0.1 and 11.0.4 firmware
• qcom: update LPAICP firmware for shikra platform
• ath12k: WCN7850 hw2.0: update board-2.bin
• panthor: Add initial firmware for Architecture 14.8 Arm Mali GPU
• qcom: update ADSP firmware for glymur platform
• cirrus: cs35l41: Add firmware and tuning for Lenovo Thinkbook laptops
• cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
• cirrus: cs42l45: Add CS42L49 SDCA codec firmware for Dell laptops
• qcom: fix qcs8300 gpdspr.jsn symlink target
• qcom: update ADSP firmware for x1e80100 platform
• Update firmware for Intel Solar/Magnetar/Blazar*/Scorpius/ScorpiusGfp core
• cirrus: cs35l57 cs35l63: Add firmware for some Dell laptops
• WHENCE: add SPDX license references for non-standard license texts
• WHENCE: add initial SPDX identifiers
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for a Dell laptop
• cirrus: cs35l41: Add support for Lenovo Yoga Slim 7 Carbon 14ACN6
• Add ISH firmware files for Intel Nova Lake-H/S platforms
• qcom: add ADSP firmware for eliza platform
• qcom: update ADSP firmware for hawi platform
• QCA: Add QCA2066 Bluetooth firmware hpnv21g.30c
• QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
• Revert "qcom: update ADSP firmware for qcs615 platform"
• qcom: Add gpu firmwares for Hawi and Maili chipsets
• qcom: update Rubik Pi 3 ADSP firmware
• cirrus: cs35l56: Correct firmware instances for 103c8c52 and 103c8c53
• contrib: post the MR comment to the project of the merge request
• qcom: vpu: add Gen2 firmware binary for Hawi/Maili
• Update AMD cpu microcode
• iwlwifi: add Bz/Sc FW for core24.80-41 release
• iwlwifi: Update Bz/Fm firmware for core24.80-41 release
• iwlwifi: Add Hr/Gf firmware for core24.80-41 release
• iwlwifi: update ty/So/Ma firmwares for core24.80-41 release
• iwlwifi: Add cc/Qu/QuZ firmwares for core24.80-41 release
• mwifiex: add IW416 firmware
• ath12k: WCN7850 hw2.0: update board-2.bin
• ath12k: QCC2072 hw1.0: update board-2.bin
• ci: add Qualcomm firmware version diff MR comment job
• qcom: sdx61: add missing firmware version
• qcom: sdx35: add missing firmware version
• qcom: aic100: add missing firmware versions
• qcom: qdu100: add missing firmware versions
• qcom: sdm845: add missing modem firmware version
• qcom: x1e80100: add missing Dell XPS 13 9345 DSP versions
• qcom: add missing Adreno ZAP shader versions
• qca: separate the WCN685x uart firmware revisions
• qca: group the QCA61x4 USB firmware files
• qca: drop duplicate version lines
• qca: fix the version of the QCA6698 Bluetooth firmware
• qca: fix the version of the WCN785x USB firmware
• qcom: fix the version of the a660 GMU firmware
• qcom: fix the version of the Eliza SQE microcode
• qcom: fix the version of the QCS615 ZAP shader
• qcom/shikra: link WiFi firmware from the ath10k subdir
• Revert "amdgpu: update GC 11.0.0 firmware"
• Revert "amdgpu: update GC 11.0.0 firmware"
• amdgpu: DMCUB updates for various ASICs
• intel: Update ibt-00a0-01a1-pci.ddc for BE211 - Whale Peak2 (WhP2)
• ath11k: WCN6855 hw2.0: update board-2.bin
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
• qcom: add CDSP firmware for hawi platform
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
• cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops
• QCA: Update Bluetooth firmware for QCC2072 UART interface: 1.1.0-00340 to 1.1.0-00355