Fedora Security Advisories

• python-jupytext-1.19.4-1.fc44

See https://github.com/jupytext/jupytext/releases/tag/v1.19.4 for changes in version 1.19.4. Notable, this update fixes CVE-2026-48779.

• python-jupytext-1.19.4-1.fc43

See https://github.com/jupytext/jupytext/releases/tag/v1.19.4 for changes in version 1.19.4. Notable, this update fixes CVE-2026-48779.

• python-django-haystack-3.4.0-1.fc43

Fixes GHSA-r3hx-x5rh-p9vv: via eval() in Elasticsearch Result Deserialization

https://github.com/django-haystack/django-haystack/security/advisories/GHSA-r3hx-x5rh-p9vv

https://github.com/django-haystack/django-haystack/releases/tag/v3.4.0

• Remove obsolete ElasticSearch2 support and tests by @claudep in https://github.com/django-haystack/django-haystack/pull/1978
• Add Django v5.1 to the testing by @cclauss in https://github.com/django-haystack/django-haystack/pull/1991
• GitHub Actions: Add Python 3.13 to the testing by @cclauss in https://github.com/django-haystack/django-haystack/pull/1997
• Fix typo. by @andresmrm in https://github.com/django-haystack/django-haystack/pull/1998
• Fix RelatedSearchQueryset.load_all() truncating results by @craigds in https://github.com/django-haystack/django-haystack/pull/2012
• [FIXED] -- handle trailing slash in Solr index URL for core reload. by @DhavalGojiya in https://github.com/django-haystack/django-haystack/pull/1968
• Bump the github-actions group with 2 updates by @dependabot[bot] in https://github.com/django-haystack/django-haystack/pull/2018
• Update license field to use proper SPDX identifier by @leifdreizler in https://github.com/django-haystack/django-haystack/pull/2016
• dev: Update Python dependencies by @kingbuzzman in https://github.com/django-haystack/django-haystack/pull/2019
• dev: Update django by @kingbuzzman in https://github.com/django-haystack/django-haystack/pull/2020
• fix: handle HEAD requests like GET in generic_views by @janheini in https://github.com/django-haystack/django-haystack/pull/2015
• feat: Add requires-python to pyproject.toml (PEP 621) by @DhavalGojiya in https://github.com/django-haystack/django-haystack/pull/2039
• Add Python 3.14 and 3.14t to the testing by @cclauss in https://github.com/django-haystack/django-haystack/pull/2031
• Fix race condition in ConnectionRouter.routers lazy initialization by @craigds in https://github.com/django-haystack/django-haystack/pull/2048
• add postgres backend to backend_support.rst by @fgregg in https://github.com/django-haystack/django-haystack/pull/2044
• Actions: limit permissions for tests by @acdha in https://github.com/django-haystack/django-haystack/pull/2053
• GitHub Actions: zizmor fixes by @acdha in https://github.com/django-haystack/django-haystack/pull/2055

• python-django-haystack-3.4.0-1.fc44

Fixes GHSA-r3hx-x5rh-p9vv: via eval() in Elasticsearch Result Deserialization

https://github.com/django-haystack/django-haystack/security/advisories/GHSA-r3hx-x5rh-p9vv

https://github.com/django-haystack/django-haystack/releases/tag/v3.4.0

• Remove obsolete ElasticSearch2 support and tests by @claudep in https://github.com/django-haystack/django-haystack/pull/1978
• Add Django v5.1 to the testing by @cclauss in https://github.com/django-haystack/django-haystack/pull/1991
• GitHub Actions: Add Python 3.13 to the testing by @cclauss in https://github.com/django-haystack/django-haystack/pull/1997
• Fix typo. by @andresmrm in https://github.com/django-haystack/django-haystack/pull/1998
• Fix RelatedSearchQueryset.load_all() truncating results by @craigds in https://github.com/django-haystack/django-haystack/pull/2012
• [FIXED] -- handle trailing slash in Solr index URL for core reload. by @DhavalGojiya in https://github.com/django-haystack/django-haystack/pull/1968
• Bump the github-actions group with 2 updates by @dependabot[bot] in https://github.com/django-haystack/django-haystack/pull/2018
• Update license field to use proper SPDX identifier by @leifdreizler in https://github.com/django-haystack/django-haystack/pull/2016
• dev: Update Python dependencies by @kingbuzzman in https://github.com/django-haystack/django-haystack/pull/2019
• dev: Update django by @kingbuzzman in https://github.com/django-haystack/django-haystack/pull/2020
• fix: handle HEAD requests like GET in generic_views by @janheini in https://github.com/django-haystack/django-haystack/pull/2015
• feat: Add requires-python to pyproject.toml (PEP 621) by @DhavalGojiya in https://github.com/django-haystack/django-haystack/pull/2039
• Add Python 3.14 and 3.14t to the testing by @cclauss in https://github.com/django-haystack/django-haystack/pull/2031
• Fix race condition in ConnectionRouter.routers lazy initialization by @craigds in https://github.com/django-haystack/django-haystack/pull/2048
• add postgres backend to backend_support.rst by @fgregg in https://github.com/django-haystack/django-haystack/pull/2044
• Actions: limit permissions for tests by @acdha in https://github.com/django-haystack/django-haystack/pull/2053
• GitHub Actions: zizmor fixes by @acdha in https://github.com/django-haystack/django-haystack/pull/2055

• perl-Compress-Raw-Bzip2-2.218-1.fc44
• perl-IO-Compress-2.221-1.fc44

perl-Compress-Taw-Bzip2 - Updated to 2.218 perl-IO-Compress - Updated to 2.221 - Fix CVE-2025-15649, CVE-2026-48959, CVE-2026-48961, CVE-2026-48962

• perl-Compress-Raw-Bzip2-2.218-1.fc43
• perl-IO-Compress-2.221-1.fc43

perl-Compress-Taw-Bzip2 - Updated to 2.218 perl-IO-Compress - Updated to 2.221 - Fix CVE-2025-15649, CVE-2026-48959, CVE-2026-48961, CVE-2026-48962

• collectd-5.12.0-57.fc43
• varnish-7.7.3-2.fc43
• varnish-modules-0.26.0-4.fc43
• vmod-querystring-2.0.3-11.fc43

Update to latest 7.7.x release available, a security release. Includes fixes for VSV00017 aka CVE-2025-8671, aAdded patches for for VSV00018 aka CVE-2026-34475, added patches for for VSV00019.

• perl-DBI-1.648-1.fc43

Update to 1.648; Fix CVE-2026-9698 and CVE-2026-10879

• perl-DBI-1.648-1.fc44

Update to 1.648; Fix CVE-2026-9698 and CVE-2026-10879

• maradns-3.5.0037-1.fc44

Update to 3.5.0037, fixing DNS-over-TCP bug (rhbz#2488786)

• ffmpeg-8.1.2-1.fc44

The latest stable FFmpeg release from the 8.1 release branch. https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n8.1.2:/Changelog

Fixes CVE-2026-30999 .

• python-pydantic-settings-2.14.2-1.fc43

Update to 2.14.2; fixes GHSA-4xgf-cpjx-pc3j.

• prometheus-podman-exporter-1.21.1-1.fc44

release 1.21.1

• prometheus-podman-exporter-1.21.1-1.el10_3

release 1.21.1

• prometheus-podman-exporter-1.21.1-1.fc43

release 1.21.1

• prometheus-podman-exporter-1.21.1-1.el9

release 1.21.1

• podman-tui-1.11.2-1.el10_3

release 1.11.2

• podman-tui-1.11.2-1.fc43

release 1.11.2

• podman-tui-1.11.2-1.fc44

release 1.11.2

• podman-tui-1.11.2-1.el9

release 1.11.2