Fedora Security Advisories

• tar-1.35-10.fc45

Fix CVE-2026-5704, CVE-2026-18508, CVE-2026-18477, and a regression in the fix for CVE-2025-45582.

• gnatcoll-26.0.0-5.fc45

Patched the vulnerabilities GNATCOLL-CORE-0162 and GNATCOLL-CORE-0164 in a way that avoids interface changes.

• bluez-5.87+1.git8750129efca8-1.fc43

This update fixes a number of security issues.

• bluez-5.87+1.git8750129efca8-1.fc44

This update fixes a number of security issues.

• bluez-5.87+1.git8750129efca8-1.fc45

This update fixes a number of security issues.

• gnatcoll-26.0.0-4.fc44

Patched the vulnerabilities GNATCOLL-CORE-0162 and GNATCOLL-CORE-0164 in a way that avoids interface changes.

• gnatcoll-25.0.0-6.fc43

Patched the vulnerabilities GNATCOLL-CORE-0162 and GNATCOLL-CORE-0164 in a way that avoids interface changes.

• sblim-cmpi-base-1.6.4-31.fc43

Use mktemp for temporary files in provider registration script (CVE-2026-73585)

• nodejs-undici-7.29.0-3.fc43

Update to version 7.29.0.

Contains fix for CVE-2026-18149.

• nodejs-undici-7.29.0-3.fc44

Update to version 7.29.0.

Contains fix for CVE-2026-18149.

• nodejs-undici-7.29.0-3.fc45

Update to version 7.29.0.

Contains fix for CVE-2026-18149.

• bcm283x-firmware-20260907-1.b76effd.fc45
• uboot-tools-2026.10-0.4.rc4.fc45

Update to the latest U-Boot 2026.10 RC4 fixes Display fixes from sleep for some generations of Raspberry Pi

• curl-8.15.0-10.fc43

• fix HTTP/2 stream-dependency tree UAF (CVE-2026-10536)
• fix stale proxy password leak (CVE-2026-9079)
• fix wrong reuse for different services (CVE-2026-8458)

• sblim-cmpi-base-1.6.4-33.fc44

Use mktemp for temporary files in provider registration script (CVE-2026-73585)

• sblim-cmpi-base-1.6.4-34.fc45

Use mktemp for temporary files in provider registration script (CVE-2026-73585)

• GitPython-3.1.62-1.el10_3

Update to 3.1.62 (close RHBZ#2529282)

• Fixes GHSA-hmq2-w58f-27jc

• curl-8.18.0-10.fc44

• Fix HTTP/2 stream-dependency tree UAF (CVE-2026-10536)
• Fix Native CA trust persist (CVE-2026-11564)
• Fix stale proxy password leak (CVE-2026-9079)
• Fix wrong reuse for different services (CVE-2026-8458)

• GitPython-3.1.62-1.el10_4

Update to 3.1.62 (close RHBZ#2529282)

• Fixes GHSA-hmq2-w58f-27jc

• GitPython-3.1.62-1.fc43

Update to 3.1.62 (close RHBZ#2529282)

• Fixes GHSA-hmq2-w58f-27jc

• python-django6-6.1.1-2.fc44

Update python-django6 (providing python3-django) to the latest 6.1.1 release