Fedora Security Advisories

• rust-cargo-rpmstatus-0.2.5-2.fc43

Update to 0.2.5 (with dependency updates only), and further update some dependencies. Particularly, quick-xml 0.41 fixes RUSTSEC-2026-0194 and RUSTSEC-2026-0195.

• rust-opendal-0.55.0-2.fc43

Update quick-xml to 0.41 (RUSTSEC-2026-0194, RUSTSEC-2026-0195)

• rust-cargo-rpmstatus-0.2.5-2.fc44

Update to 0.2.5 (with dependency updates only), and further update some dependencies. Particularly, quick-xml 0.41 fixes RUSTSEC-2026-0194 and RUSTSEC-2026-0195.

• python-uv-build-0.11.28-1.fc45
• rust-astral_async_zip-0.0.20-1.fc45
• uv-0.11.28-1.fc45

https://github.com/astral-sh/uv/releases/tag/0.11.28

• rust-opendal-0.55.0-2.fc44

Update quick-xml to 0.41 (RUSTSEC-2026-0194, RUSTSEC-2026-0195)

• mingw-glib2-2.88.2-2.fc44

Backport fix for CVE-2026-58016.

Update to glib-2.88.2.

• mingw-glib2-2.86.5-2.fc43

Backport fix for CVE-2026-58016.

Update to glib-2.86.5.

• perl-DBI-1.650-1.fc44

1.650 bump - Fix CVE-2026-14739, CVE-2026-14740 and CVE-2026-14380

• perl-DBI-1.650-1.fc43

1.650 bump - Fix CVE-2026-14739, CVE-2026-14740 and CVE-2026-14380

• python-pillow-12.3.0-1.fc44

Fix CVE-2026-55380, CVE-2026-54060, CVE-2026-54059, CVE-2026-55379, CVE-2026-55798

• python-pillow-11.3.0-9.fc43

Fix CVE-2026-55380, CVE-2026-54060, CVE-2026-54059, CVE-2026-55379, CVE-2026-55798

• pam-1.7.2-2.fc44

pam_userdb: fix password comparison timing leak

• python-safetensors-0.8.0-2.fc45
• rust-safetensors-0.8.0-1.fc45

Update safetensors to 0.8.0 and build the Python extension using PyO3 0.29, which fixes RUSTSEC-2026-0176 and RUSTSEC-2026-0177.

• libXfont2-2.0.8-1.fc43

libXfont2 2.0.8 (CVE-2026-56001, CVE-2026-56002, CVE-2026-56003)

• libXfont2-2.0.8-1.fc44

libXfont2 2.0.8 (CVE-2026-56001, CVE-2026-56002, CVE-2026-56003)

• xorg-x11-server-21.1.24-1.fc44

Update to xserver 21.1.24, fixes for: CVE-2026-55999, CVE-2025-56000

• xorg-x11-server-Xwayland-24.1.13-1.fc43

Update to xwayland 24.1.13, fixes for: CVE-2026-55999, CVE-2026-56000

• xorg-x11-server-Xwayland-24.1.13-1.fc44

Update to xwayland 24.1.13, fixes for: CVE-2026-55999, CVE-2026-56000

• ansible-collection-ansible-posix-1.6.2-1.el8

• Update to 1.6.2.
• Mitigates CVE-2026-11837 (rhbz#2487432)

• ansible-collection-ansible-posix-1.6.2-1.el9

• Update to 1.6.2.
• Mitigates CVE-2026-11837 (rhbz#2487432)