Fedora Security Advisories

FEDORA-2026-4157a13c05 Packages in this update:

• sofia-sip-1.13.18-2.fc46

Update description:

Automatic update for sofia-sip-1.13.18-2.fc46.

Changelog * Tue Oct 27 2026 Tomi Lähteenmäki <lihis@lihis.net> - 1.13.18-2 - Patch for oversized MIME boundary (fedora#2554363)

FEDORA-EPEL-2026-264057b632 Packages in this update:

• python-nh3-0.2.21-2.el10_3
• rust-ammonia-4.1.8-1.el10_3

Update description:

Update ammonia to version 4.1.8 and rebuild python-nh3 to address several security vulnerabilities.

FEDORA-EPEL-2026-9722adf177 Packages in this update:

• python-nh3-0.2.21-2.el10_4
• rust-ammonia-4.1.8-1.el10_4

Update description:

Update ammonia to version 4.1.8 and rebuild python-nh3 to address several security vulnerabilities.

FEDORA-2026-d470ba3df9 Packages in this update:

• python-lxml-html-clean-0.4.6-1.fc44

Update description:

Fixes three high severity ReDOS flaws.

FEDORA-2026-768edcd81d Packages in this update:

• python-lxml-html-clean-0.4.6-1.fc43

Update description:

Fixes three high severity ReDOS flaws.

FEDORA-2026-7c58252e69 Packages in this update:

• python-lxml-html-clean-0.4.6-1.fc45

Update description:

Fixes three high severity ReDOS flaws.

FEDORA-2026-183d3c32a6 Packages in this update:

• markdownlint-cli2-0.24.0-1.fc43

Update description:

Update

FEDORA-2026-6215800886 Packages in this update:

• markdownlint-cli2-0.24.0-1.fc44

Update description:

Update

FEDORA-2026-8f8cd892e5 Packages in this update:

• markdownlint-cli2-0.24.0-1.fc45

Update description:

Update

FEDORA-2026-36bc6490a3 Packages in this update:

• jackson-bom-2.21.8-1.fc46
• jackson-core-2.21.8-1.fc46
• jackson-databind-2.21.8-1.fc46
• jackson-modules-base-2.21.8-1.fc46

Update description:

Fix CVE-2026-89407 CVE-2026-89425 CVE-2026-68497 CVE-2026-83557 CVE-2026-19032 CVE-2026-91777 across aligned packages

FEDORA-2026-4f056db42e Packages in this update:

• python3.15-3.15.2-1.fc44

Update description:

• Update to Python 3.15.2
• CVE 2026-114583: tar filter allows writing outside destination via empty-named symlink
• CVE 2026-115557: Distrust compromised intermediate certificates in ssl module

Python 3.15.1 bugfix release.

FEDORA-2026-5e4931d206 Packages in this update:

• python3.15-3.15.2-1.fc43

Update description:

• Update to Python 3.15.2
• CVE 2026-114583: tar filter allows writing outside destination via empty-named symlink
• CVE 2026-115557: Distrust compromised intermediate certificates in ssl module

Python 3.15.1 bugfix release.

FEDORA-2026-1f4dd1b9ff Packages in this update:

• 3proxy-1.0.2-1.fc45

Update description:

Update to 1.0.2 (rhbz#2560278)

Patch CVE-2026-109438 (rhbz#2553107, rhbz#2553106)

FEDORA-EPEL-2026-e91b9637fd Packages in this update:

• 3proxy-1.0.2-2.el8

Update description:

Update to 1.0.2 (rhbz#2560278)

Patch CVE-2026-109438 (rhbz#2553107, rhbz#2553106)

FEDORA-EPEL-2026-4c8e4f578b Packages in this update:

• 3proxy-1.0.2-1.el10_4

Update description:

Update to 1.0.2 (rhbz#2560278)

Patch CVE-2026-109438 (rhbz#2553107, rhbz#2553106)

FEDORA-2026-1b5ddbaeb5 Packages in this update:

• 3proxy-1.0.2-1.fc44

Update description:

Update to 1.0.2 (rhbz#2560278)

Patch CVE-2026-109438 (rhbz#2553107, rhbz#2553106)

FEDORA-EPEL-2026-b8ac6029a2 Packages in this update:

• 3proxy-1.0.2-1.el9

Update description:

Update to 1.0.2 (rhbz#2560278)

Patch CVE-2026-109438 (rhbz#2553107, rhbz#2553106)

FEDORA-2026-540af356f2 Packages in this update:

• 3proxy-1.0.2-1.fc43

Update description:

Update to 1.0.2 (rhbz#2560278)

Patch CVE-2026-109438 (rhbz#2553107, rhbz#2553106)

FEDORA-2026-01926f9706 Packages in this update:

• freeipa-4.13.4-4.fc45
• krb5-1.22.2-11.fc45
• samba-4.25.1-1.fc45

Update description:

Update to Samba 4.25.1 (along with freeipa rebuild) and security fix CVE-2026-11850 in krb5

FEDORA-2026-82cc570aba Packages in this update:

• freeipa-4.13.4-4.fc46
• krb5-1.22.2-11.fc46
• samba-4.25.1-1.fc46

Update description:

Update to Samba 4.25.1 (along with freeipa rebuild) and security fix CVE-2026-11850 in krb5