Fedora Security Advisories

FEDORA-EPEL-2026-e556a969dd Packages in this update:

• chromium-155.0.8059.39-1.el10_3

Update description:

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

FEDORA-EPEL-2026-4f0eafd918 Packages in this update:

• chromium-155.0.8059.39-1.el10_4

Update description:

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

FEDORA-2026-f4734755e7 Packages in this update:

• chromium-155.0.8059.39-1.fc43

Update description:

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

FEDORA-2026-d94b4ed6e7 Packages in this update:

• chromium-155.0.8059.39-1.fc44

Update description:

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

FEDORA-EPEL-2026-36c9d3c26d Packages in this update:

• chromium-155.0.8059.39-1.el9

Update description:

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

FEDORA-EPEL-2026-0f504f9d83 Packages in this update:

• chromium-155.0.8059.39-1.el10_2

Update description:

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

FEDORA-2026-87586557c0 Packages in this update:

• chromium-155.0.8059.39-1.fc45

Update description:

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

FEDORA-2026-a06b828d65 Packages in this update:

• curl-8.18.0-14.fc44

Update description:

• Fix incomplete mTLS config matching in conn reuse (CVE-2026-8932)
• Fix OpenLDAP SASL authentication bypass (CVE-2026-13608)
• Fix OpenSSL pinning bypass (CVE-2026-80230)

FEDORA-2026-a9e9ce1f16 Packages in this update:

• flare-im-0.22.4-1.fc45

Update description:

Update to latest upstream security release. Fixes an impersonation vulnerability in libsignal-service-rs. See: https://gitlab.com/schmiddi-on-mobile/flare/-/releases/0.22.4 .

FEDORA-2026-2eb07bf1f9 Packages in this update:

• flare-im-0.22.4-1.fc44

Update description:

Update to latest upstream security release. Fixes an impersonation vulnerability in libsignal-service-rs. See: https://gitlab.com/schmiddi-on-mobile/flare/-/releases/0.22.4 .

FEDORA-2026-67c5e97a79 Packages in this update:

• flare-im-0.22.4-1.fc43

Update description:

Update to latest upstream security release. Fixes an impersonation vulnerability in libsignal-service-rs. See: https://gitlab.com/schmiddi-on-mobile/flare/-/releases/0.22.4 .

FEDORA-2026-65b6e06c2d Packages in this update:

• libpng12-1.2.57-27.fc44

Update description:

• fixes CVE-2025-64505 and CVE-2026-33416

FEDORA-2026-9d85027cc0 Packages in this update:

• libpng12-1.2.57-27.fc45

Update description:

• fixes CVE-2025-64505 and CVE-2026-33416

FEDORA-2026-d6bf58e7ce Packages in this update:

• libpng12-1.2.57-27.fc43

Update description:

• fixes CVE-2025-64505 and CVE-2026-33416

FEDORA-2026-095025bfaa Packages in this update:

• libpng15-1.5.30-27.fc43

Update description:

• fixes CVE-2025-64505 and CVE-2026-33416

FEDORA-2026-7facd4fad2 Packages in this update:

• libpng15-1.5.30-27.fc44

Update description:

• fixes CVE-2025-64505 and CVE-2026-33416

FEDORA-2026-fe765b13ce Packages in this update:

• libpng15-1.5.30-27.fc45

Update description:

• fixes CVE-2025-64505 and CVE-2026-33416

FEDORA-EPEL-2026-602703bf01 Packages in this update:

• ImageMagick-6.9.13.58-1.el9

Update description:

Automatic update for ImageMagick-6.9.13.58-1.el9.

Changelog for ImageMagick * Sun Oct 11 2026 Luya Tshimbalanga <luya@fedoraproject.org> - 1:6.9.13.58-1 - Update to version 6.9.13.58 - Resolves: rhbz#2391125 - Resolves: rhbz#2392773 - Resolves: rhbz#2393600 - Resolves: rhbz#2404847 - Resolves: rhbz#2418553 - Resolves: rhbz#2421113

FEDORA-EPEL-2026-5497815500 Packages in this update:

• ImageMagick-6.9.13.58-1.el8

Update description:

Automatic update for ImageMagick-6.9.13.58-1.el8.

Changelog for ImageMagick * Sun Oct 11 2026 Luya Tshimbalanga <luya@fedoraproject.org> - 1:6.9.13.58-1 - Update to version 6.9.13.58 - Resolves: rhbz#2391124 - Resolves: rhbz#2392772 - Resolves: rhbz#2393599 - Resolves: rhbz#2404847 - Resolves: rhbz#2418552

FEDORA-2026-9729761538 Packages in this update:

• libpng12-1.2.57-27.fc46

Update description:

Automatic update for libpng12-1.2.57-27.fc46.

Changelog * Sun Oct 11 2026 Michal Hlavinka <mhlavink@redhat.com> - 1.2.57-27 - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (rhbz#2452156) - fix CVE-2025-64505: heap buffer overflow via malformed palette index (rhbz#2418423)