Fedora Security Advisories

FEDORA-2026-da44c3870f Packages in this update:

• dotnet8.0-8.0.129-2.fc43

Update description:

Update to .NET SDK 8.0.129 and Runtime 8.0.29

Fixes: CVE-2026-47300,CVE-2026-47302,CVE-2026-47303,CVE-2026-47304,CVE-2026-50524,CVE-2026-50525,CVE-2026-50526,CVE-2026-50527,CVE-2026-50528,CVE-2026-50646,CVE-2026-50648,CVE-2026-50649,CVE-2026-50650,CVE-2026-50651,CVE-2026-50659,CVE-2026-56158,CVE-2026-57108

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.29/8.0.129.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.29/8.0.29.md

FEDORA-2026-9aef53fa96 Packages in this update:

• dotnet8.0-8.0.129-2.fc44

Update description:

Update to .NET SDK 8.0.129 and Runtime 8.0.29

Fixes: CVE-2026-47300,CVE-2026-47302,CVE-2026-47303,CVE-2026-47304,CVE-2026-50524,CVE-2026-50525,CVE-2026-50526,CVE-2026-50527,CVE-2026-50528,CVE-2026-50646,CVE-2026-50648,CVE-2026-50649,CVE-2026-50650,CVE-2026-50651,CVE-2026-50659,CVE-2026-56158,CVE-2026-57108

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.29/8.0.129.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.29/8.0.29.md

FEDORA-EPEL-2026-58bc6905cb Packages in this update:

• proftpd-1.3.9c-3.el10_3

Update description:

This update adds a new module, mod_procfs, which is enabled by default. It addressses CVE-2026-35025 (ACL bypass via /proc/self/root path prefix), by disallowing any file accesses via procfs filesystems.

FEDORA-EPEL-2026-8258136556 Packages in this update:

• proftpd-1.3.9c-3.el10_2

Update description:

This update adds a new module, mod_procfs, which is enabled by default. It addressses CVE-2026-35025 (ACL bypass via /proc/self/root path prefix), by disallowing any file accesses via procfs filesystems.

FEDORA-2026-f1fc7772c3 Packages in this update:

• kernel-7.1.4-102.fc43

Update description:

The 7.1.4-102/202 stable kernel updates contain a few important fixes across the tree.

The 7.1.4-101/201 stable kernel update contains a fix for a rather important security issue with net/can.

FEDORA-2026-2dd8b600bb Packages in this update:

• kernel-7.1.4-202.fc44

Update description:

The 7.1.4-102/202 stable kernel updates contain a few important fixes across the tree.

The 7.1.4-101/201 stable kernel update contains a fix for a rather important security issue with net/can.

FEDORA-2026-d314ce6051 Packages in this update:

• proftpd-1.3.9c-3.fc43

Update description:

This update adds a new module, mod_procfs, which is enabled by default. It addressses CVE-2026-35025 (ACL bypass via /proc/self/root path prefix), by disallowing any file accesses via procfs filesystems.

FEDORA-2026-2994824419 Packages in this update:

• proftpd-1.3.9c-3.fc44

Update description:

This update adds a new module, mod_procfs, which is enabled by default. It addressses CVE-2026-35025 (ACL bypass via /proc/self/root path prefix), by disallowing any file accesses via procfs filesystems.

FEDORA-2026-e6bbab8aa8 Packages in this update:

• squid-7.6-1.fc44

Update description:

• new version 7.6

FEDORA-2026-600530ae91 Packages in this update:

• fractal-14.1-1.fc44

Update description:

14.1

FEDORA-2026-9630be304f Packages in this update:

• fractal-14.1-1.fc43

Update description:

14.1

FEDORA-2026-51628b98a8 Packages in this update:

• srt-1.5.6-1.fc43

Update description:

Update to 1.5.6

FEDORA-2026-3e4b43a4cd Packages in this update:

• golang-x-image-0.44.0-1.fc45

Update description:

Automatic update for golang-x-image-0.44.0-1.fc45.

Changelog * Tue Jul 21 2026 Packit <hello@packit.dev> - 0.44.0-1 - Update to 0.44.0 upstream release - Resolves: rhbz#2343804 - Resolves: rhbz#2434621 - Resolves: rhbz#2494479 * Thu Jul 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 0.23.0-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Mon Feb 9 2026 Miroslav Suchý <msuchy@redhat.com> - 0.23.0-6 - migrate license to SPDX * Tue Feb 3 2026 Maxwell G <maxwell@gtmx.me> - 0.23.0-5 - Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26 * Fri Jan 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 0.23.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild

FEDORA-2026-45ce54d51e Packages in this update:

• srt-1.5.6-1.fc44

Update description:

Update to 1.5.6

FEDORA-2026-597e8f9de1 Packages in this update:

• llvm-22.1.8-4.fc44

Update description:

Backport fixes from LLVM 23

• Fix an issue that could cause a buffer overflow when reading a corrupted bitcode file.
• Fix a miscompilation known to affect rust applications.
• Fix a miscompilation in x86 vectorized code.
• Fix 2 issues in LLD.

FEDORA-2026-7e524e4412 Packages in this update:

• firefox-153.0-1.fc43

Update description:

• Updated to latest upstream (153.0)

FEDORA-2026-bf44fd38de Packages in this update:

• firefox-153.0-1.fc44

Update description:

• Updated to latest upstream (153.0)

FEDORA-2026-0e46c91ccf Packages in this update:

• libssh-0.12.1-1.fc44

Update description:

New upstream security release

FEDORA-2026-ce5dac2ed8 Packages in this update:

• nodejs24-24.18.0-1.fc44

Update description:

Update to version 24.18.0

FEDORA-EPEL-2026-80f5d69973 Packages in this update:

• chromium-150.0.7871.128-1.el10_3

Update description:

Update to 150.0.7871.128

* CVE-2026-15899: Use after free in CameraCapture * CVE-2026-15900: Use after free in GPU * CVE-2026-15901: Use after free in Network * CVE-2026-15902: Use after free in Cast * CVE-2026-15903: Out of bounds read and write in V8 * CVE-2026-15904: Use after free in Ozone * CVE-2026-15905: Use after free in Aura