Fedora Security Advisories

FEDORA-2026-2c31df81dc Packages in this update:

• pacemaker-3.0.2-3.fc44

Update description: * Wed Jun 17 2026 Klaus Wenninger <klaus.wenninger@aon.at> - 3.0.2-3 - fix CVE-2026-10649: Fix integer overflows in remote message code

FEDORA-EPEL-2026-8718e36cc0 Packages in this update:

• tinyproxy-1.11.2-8.el10_3

Update description:

Backport upstream fixes for CVE-2026-54387 and CVE-2026-54388.

FEDORA-EPEL-2026-7a8fdd2831 Packages in this update:

• tinyproxy-1.11.2-8.el10_2

Update description:

Backport upstream fixes for CVE-2026-54387 and CVE-2026-54388.

FEDORA-EPEL-2026-00b57a4454 Packages in this update:

• tinyproxy-1.11.2-8.el8

Update description:

Backport upstream fixes for CVE-2026-54387 and CVE-2026-54388.

FEDORA-EPEL-2026-e8f116233b Packages in this update:

• tinyproxy-1.11.2-8.el9

Update description:

Backport upstream fixes for CVE-2026-54387 and CVE-2026-54388.

FEDORA-2026-efbe094630 Packages in this update:

• tinyproxy-1.11.2-8.fc44

Update description:

Backport upstream fixes for CVE-2026-54387 and CVE-2026-54388.

FEDORA-2026-77f1ca9c8f Packages in this update:

• tinyproxy-1.11.2-8.fc43

Update description:

Backport upstream fixes for CVE-2026-54387 and CVE-2026-54388.

FEDORA-2026-182b5d52c9 Packages in this update:

• python-mistune-3.2.1-1.fc45

Update description:

Automatic update for python-mistune-3.2.1-1.fc45.

Changelog * Thu Jun 18 2026 Miro Hrončok <miro@hroncok.cz> - 3.2.1-1 - Update to 3.2.1 - Security fix for CVE-2026-44898 - Fixes: rhbz#2424578 - Fixes: rhbz#2489782

FEDORA-2026-14941c1cf3 Packages in this update:

• rust-bon-3.9.3-1.fc45
• rust-bon-macros-3.9.3-1.fc45
• rust-openssl-0.10.81-1.fc45
• rust-openssl-sys-0.9.117-1.fc45
• rust-zeroize-1.9.0-1.fc45
• rust-zeroize_derive-1.5.0-1.fc45

Update description:

• Update the openssl crate to version 0.10.81 and the openssl-sys crate to version 0.9.117.
• Update the zeroize crate to version 1.9.0 and the zeroize_derive crate to version 1.5.0.
• Update the bon and bon-macros crates to version 3.9.3.

FEDORA-2026-3cca6f41d4 Packages in this update:

• docker-buildx-0.35.0-1.fc43

Update description:

• Update to release v0.35.0
• Resolves: rhbz#2487819
• Resolves CVE-2026-39828: rhbz#2489918, rhbz#2490102
• Upstream enhancements, new features, and fixes

FEDORA-2026-1a714d39b0 Packages in this update:

• docker-buildkit-0.31.0-1.fc43

Update description:

• Update to release v0.31.0
• Resolve CVE-2026-39829: rhbz#2489939, rhbz#2490056
• Upstream new features and fixes

FEDORA-2026-105f7df940 Packages in this update:

• docker-buildx-0.35.0-1.fc44

Update description:

• Update to release v0.35.0
• Resolves: rhbz#2487819
• Resolves CVE-2026-39828: rhbz#2489918, rhbz#2490102
• Upstream enhancements, new features, and fixes

FEDORA-2026-33cccee12b Packages in this update:

• docker-buildx-0.35.0-1.fc45

Update description:

Automatic update for docker-buildx-0.35.0-1.fc45.

Changelog * Thu Jun 18 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 0.35.0-1 - Update to release v0.35.0 - Resolves: rhbz#2487819 - Resolves CVE-2026-39828: rhbz#2489918, rhbz#2490102 - Upstream enhancements, new features, and fixes

FEDORA-2026-1e00728616 Packages in this update:

• docker-buildkit-0.31.0-1.fc44

Update description:

• Update to release v0.31.0
• Resolve CVE-2026-39829: rhbz#2489939, rhbz#2490056
• Upstream new features and fixes

FEDORA-2026-d7d472853a Packages in this update:

• lighttpd-1.4.84-1.fc43

Update description:

1.4.84

1.4.83

https://wiki.lighttpd.net/Release-1_4_83

FEDORA-2026-1907dd9339 Packages in this update:

• lighttpd-1.4.84-1.fc44

Update description:

1.4.84

1.4.83

https://wiki.lighttpd.net/Release-1_4_83

FEDORA-2026-c6481c190e Packages in this update:

• docker-buildkit-0.31.0-1.fc45

Update description:

Automatic update for docker-buildkit-0.31.0-1.fc45.

Changelog * Wed Jun 17 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 0.31.0-1 - Update to release v0.31.0 - Resolve CVE-2026-39829: rhbz#2489939, rhbz#2490056 - Upstream new features and fixes

FEDORA-2026-e7c97d043e Packages in this update:

• tigervnc-1.16.2-4.fc44

Update description:

Fixes CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263 CVE-2026-50264.

FEDORA-2026-ad10afa9cd Packages in this update:

• tigervnc-1.16.2-4.fc43

Update description:

Fixes CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263 CVE-2026-50264.

FEDORA-2026-9c6082d92d Packages in this update:

• freerdp-3.27.1-1.fc44

Update description:

Update to 3.27.1

It fixes CVE-2026-55191, CVE-2026-55192, CVE-2026-55193, CVE-2026-55194, CVE-2026-55648 and CVE-2026-55827.