Fedora Security Advisories

FEDORA-2026-f3f8679e02 Packages in this update:

• python-pymdown-extensions-12.3-2.fc44

Update description:

Update to 12.3 and fixes some CVEs.

FEDORA-2026-b252d555e1 Packages in this update:

• python-pymdown-extensions-12.3-1.fc45

Update description:

Update to 12.3 and fixes some CVEs.

FEDORA-2026-de1da3cf3b Packages in this update:

• python-pymdown-extensions-12.3-1.fc46

Update description:

Automatic update for python-pymdown-extensions-12.3-1.fc46.

Changelog * Sun Nov 8 2026 Mattia Verga <mattia.verga@proton.me> - 12.3-1 - Update to 12.3 (Fedora#2383999) - Fix CVE-2026-61632 (Fedora#2512418) - Fix CVE-2026-67422 (Fedora#2512405)

FEDORA-EPEL-2026-14d0b10244 Packages in this update:

• maturin-1.16.0-1.el10_4
• ruff-0.17.4-2.el10_4
• rust-astral_async_zip-0.0.22-2.el10_4
• rust-coreutils-0.7.0-13.el10_4
• rust-lzma-rust2-0.25.0-1.el10_4
• rust-mailparse-0.18.0-1.el10_4
• rust-pyo3-introspection-0.30.1-1.el10_4
• rust-python-pkginfo-0.7.0-1.el10_4
• rust-serde_json-1.0.154-1.el10_4
• rust-zip-9.4.1-1.el10_4

Update description:

Update ruff to 0.17.4. Update pyo3-introspection to version 0.30.1. Update maturin to 1.16.0.

Update the zip crate to version 9, fixing RUSTSEC-2026-0367, RUSTSEC-2026-0368, and RUSTSEC-2026-0369. Rebuild various applications with the updated zip crate.

Update the serde_json crate to version 1.0.154: support preserve_order in no_std builds and report invalid UTF-8 at the first bad byte.

Update various other Rust crates, including updating lzma-rust2 to 0.25.0, python-pkginfo to 0.7.0, and mailparse to 0.18.0.

FEDORA-2026-345313f259 Packages in this update:

• perl-Catalyst-Plugin-Authentication-0.10029-1.fc45

Update description:

Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier. This package updates the module to version 0.10029 that uses secure comparison for the legacy verifying.

FEDORA-2026-a6a25dc737 Packages in this update:

• perl-Catalyst-Plugin-Authentication-0.10029-1.fc44

Update description:

Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier. This package updates the module to version 0.10029 that uses secure comparison for the legacy verifying.

FEDORA-2026-fb10daefa7 Packages in this update:

• perl-Catalyst-Plugin-Authentication-0.10029-1.fc43

Update description:

Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier. This package updates the module to version 0.10029 that uses secure comparison for the legacy verifying.

FEDORA-2026-f0f8ed38af Packages in this update:

• qtox-1.18.6-1.fc43

Update description:

Update qTox to version 1.18.6

FEDORA-2026-235b35ed9a Packages in this update:

• qtox-1.18.6-1.fc45

Update description:

Update qTox to version 1.18.6

FEDORA-2026-24c36fc1de Packages in this update:

• qtox-1.18.6-1.fc44

Update description:

Update qTox to version 1.18.6

FEDORA-2026-c0c23c221e Packages in this update:

• mysql8.4-8.4.13-2.fc44

Update description:

MySQL 8.4.13

Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-13.html Changelog: https://dev.mysql.com/doc/relnotes/mysql/8.4/en/ Released: 2026-10-20

FEDORA-2026-bb8f9466d9 Packages in this update:

• mysql8.4-8.4.13-2.fc43

Update description:

MySQL 8.4.13

Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-13.html Changelog: https://dev.mysql.com/doc/relnotes/mysql/8.4/en/ Released: 2026-10-20

FEDORA-2026-857a425cbf Packages in this update:

• maturin-1.16.0-1.fc43
• python-jiter-0.19.0-1.fc43
• ruff-0.17.4-1.fc43
• rust-afterburn-5.11.0-3.fc43
• rust-astral_async_zip-0.0.22-2.fc43
• rust-clearscreen-5.0.0-1.fc43
• rust-coreutils-0.7.0-13.fc43
• rust-jiter-0.19.0-1.fc43
• rust-lzma-rust2-0.25.0-1.fc43
• rust-mailparse-0.18.0-1.fc43
• rust-pyo3-introspection-0.30.1-1.fc43
• rust-python-pkginfo-0.7.0-1.fc43
• rust-serde_json-1.0.154-1.fc43
• rust-zip-9.4.1-1.fc43
• selenium-manager-4.34.0-7.fc43
• ty-0.0.99-1.fc43

Update description:

Update ruff to 0.17.4 and ty to 0.0.99. Update pyo3-introspection to version 0.30.1. Update maturin to 1.16.0. Update python-jiter to 0.19.0.

Update the zip crate to version 9, fixing RUSTSEC-2026-0367, RUSTSEC-2026-0368, and RUSTSEC-2026-0369. Rebuild various applications with the updated zip crate.

Update the serde_json crate to version 1.0.154: support preserve_order in no_std builds and report invalid UTF-8 at the first bad byte.

Update various other Rust crates, including updating lzma-rust2 to 0.25.0, clearscreen to 5.0.0, python-pkginfo to 0.7.0, and mailparse to 0.18.0.

Rebuild afterburn with rustls-webpki 0.103.16 for RUSTSEC-2026-0382. This provides added protection against trusting the eMudhra intermediate CA certificates, which should already be distrusted system-wide via a ca-certificates update.

FEDORA-2026-650bb8baf4 Packages in this update:

• maturin-1.16.0-1.fc44
• python-jiter-0.19.0-1.fc44
• python-pysequoia-0.1.36-1.fc44
• ruff-0.17.4-1.fc44
• rust-afterburn-5.11.0-3.fc44
• rust-astral_async_zip-0.0.22-2.fc44
• rust-clearscreen-5.0.0-1.fc44
• rust-coreutils-0.7.0-13.fc44
• rust-jiter-0.19.0-1.fc44
• rust-lzma-rust2-0.25.0-1.fc44
• rust-mailparse-0.18.0-1.fc44
• rust-pyo3-introspection-0.30.1-1.fc44
• rust-python-pkginfo-0.7.0-1.fc44
• rust-serde_json-1.0.154-1.fc44
• rust-testresult-0.4.2-1.fc44
• rust-zip-9.4.1-1.fc44
• selenium-manager-4.34.0-8.fc44
• ty-0.0.99-1.fc44

Update description:

Update ruff to 0.17.4 and ty to 0.0.99. Update pyo3-introspection to version 0.30.1. Update maturin to 1.16.0. Update python-jiter to 0.19.0 and python-pysequoia to 0.1.36.

Update the zip crate to version 9, fixing RUSTSEC-2026-0367, RUSTSEC-2026-0368, and RUSTSEC-2026-0369. Rebuild various applications with the updated zip crate.

Update the serde_json crate to version 1.0.154: support preserve_order in no_std builds and report invalid UTF-8 at the first bad byte.

Update various other Rust crates, including updating lzma-rust2 to 0.25.0, clearscreen to 5.0.0, python-pkginfo to 0.7.0, and mailparse to 0.18.0.

Rebuild afterburn with rustls-webpki 0.103.16 for RUSTSEC-2026-0382. This provides added protection against trusting the eMudhra intermediate CA certificates, which should already be distrusted system-wide via a ca-certificates update.

FEDORA-2026-2b0f14aa7b Packages in this update:

• maturin-1.16.0-1.fc45
• python-jiter-0.19.0-1.fc45
• python-pydantic-core-2.46.5-7.fc45
• python-pysequoia-0.1.36-1.fc45
• ruff-0.17.4-1.fc45
• rust-afterburn-5.11.0-3.fc45
• rust-astral_async_zip-0.0.22-2.fc45
• rust-clearscreen-5.0.0-1.fc45
• rust-jiter-0.19.0-1.fc45
• rust-lzma-rust2-0.25.0-1.fc45
• rust-mailparse-0.18.0-1.fc45
• rust-pyo3-introspection-0.30.1-1.fc45
• rust-python-pkginfo-0.7.0-1.fc45
• rust-serde_json-1.0.154-1.fc45
• rust-testresult-0.4.2-1.fc45
• rust-zip-9.4.1-1.fc45
• selenium-manager-4.45.0-4.fc45
• ty-0.0.99-1.fc45
• uutils-coreutils-0.7.0-15.fc45

Update description:

Update ruff to 0.17.4 and ty to 0.0.99. Update pyo3-introspection to version 0.30.1. Update maturin to 1.16.0. Update python-jiter to 0.19.0 and python-pysequoia to 0.1.36.

Update the zip crate to version 9, fixing RUSTSEC-2026-0367, RUSTSEC-2026-0368, and RUSTSEC-2026-0369. Rebuild various applications with the updated zip crate.

Update the serde_json crate to version 1.0.154: support preserve_order in no_std builds and report invalid UTF-8 at the first bad byte.

Update various other Rust crates, including updating lzma-rust2 to 0.25.0, clearscreen to 5.0.0, python-pkginfo to 0.7.0, and mailparse to 0.18.0.

Rebuild afterburn with rustls-webpki 0.103.16 for RUSTSEC-2026-0382. This provides added protection against trusting the eMudhra intermediate CA certificates, which should already be distrusted system-wide via a ca-certificates update.

FEDORA-2026-a7c892ffe9 Packages in this update:

• maturin-1.16.0-1.fc46
• python-jiter-0.19.0-1.fc46
• python-pysequoia-0.1.36-1.fc46
• ruff-0.17.4-1.fc46
• rust-afterburn-5.11.0-3.fc46
• rust-astral_async_zip-0.0.22-2.fc46
• rust-clearscreen-5.0.0-1.fc46
• rust-jiter-0.19.0-1.fc46
• rust-lzma-rust2-0.25.0-1.fc46
• rust-mailparse-0.18.0-1.fc46
• rust-pyo3-introspection-0.30.1-1.fc46
• rust-python-pkginfo-0.7.0-1.fc46
• rust-serde_json-1.0.154-1.fc46
• rust-zip-9.4.1-1.fc46
• selenium-manager-4.45.0-4.fc46
• ty-0.0.99-1.fc46
• uutils-coreutils-0.7.0-15.fc46

Update description:

Update ruff to 0.17.4 and ty to 0.0.99. Update pyo3-introspection to version 0.30.1. Update maturin to 1.16.0. Update python-jiter to 0.19.0 and python-pysequoia to 0.1.36.

Update the zip crate to version 9, fixing RUSTSEC-2026-0367, RUSTSEC-2026-0368, and RUSTSEC-2026-0369. Rebuild various applications with the updated zip crate.

Update the serde_json crate to version 1.0.154: support preserve_order in no_std builds and report invalid UTF-8 at the first bad byte.

Update various other Rust crates, including updating lzma-rust2 to 0.25.0, clearscreen to 5.0.0, python-pkginfo to 0.7.0, and mailparse to 0.18.0.

FEDORA-EPEL-2026-227dcb6a8b Packages in this update:

• rust-coreutils-0.7.0-13.el9
• rust-lzma-rust2-0.25.0-1.el9
• rust-pyo3-introspection-0.30.1-1.el9
• rust-serde_json-1.0.154-1.el9
• rust-zip-9.4.1-1.el9

Update description:

Update the zip crate to version 9, fixing RUSTSEC-2026-0367, RUSTSEC-2026-0368, and RUSTSEC-2026-0369.

Update the serde_json crate to version 1.0.154: support preserve_order in no_std builds and report invalid UTF-8 at the first bad byte.

Update pyo3-introspection to version 0.30.1.

FEDORA-2026-cf5cea3096 Packages in this update:

• rust-sccache-0.15.0-7.fc43

Update description:

Rebuild to address multiple security advisories in zstd / zstd-safe

FEDORA-2026-b0da955212 Packages in this update:

• rust-sccache-0.17.0-8.fc44

Update description:

Rebuild to address multiple security advisories in zstd / zstd-safe

FEDORA-2026-8c0b42efd3 Packages in this update:

• rust-sccache-0.17.0-8.fc45

Update description:

Rebuild to address multiple security advisories in zstd / zstd-safe