Fedora Security Advisories

FEDORA-2026-203a947c26 Packages in this update:

• rubygem-gist-6.1.0-1.fc46

Update description:

Automatic update for rubygem-gist-6.1.0-1.fc46.

Changelog * Mon Oct 26 2026 Georg Sauthoff <mail@gms.tf> - 6.1.0-1 - Verify TLS server certificate (fixes fedora#2546280)

FEDORA-2026-dd82a0810d Packages in this update:

• freetype-2.13.3-4.fc43

Update description:

This update fixes an integer overflow in FreeType tracked as CVE-2026-49919.

FEDORA-EPEL-2026-2004bc76b4 Packages in this update:

• uv-0.12.7-11.el10_3

Update description:

The uv package has been rebuilt with updated rustls and webpki dependencies, fixing RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, RUSTSEC-2026-0349, RUSTSEC-2026-0381, RUSTSEC-2026-0383, and RUSTSEC-2026-0382. This includes fixes for the eMudhra intermediate CA compromise. Futhermore, we have backported the latest managed CPython builds for 3.11 and newer from uv 0.13.5; these builds distrust the eMudhra certificates. For more details and caveats, read the 0.13.5 changelogs. Finally, the system-wide configuration file (uv.toml) now sets system-certs = true, which means that, by default, the system-wide trust store is used instead of the root certificates bundled with uv. This better integrates with system-wide trust settings, and uv users can benefit from prompt security updates to the system-wide CA list.

FEDORA-EPEL-2026-220493a907 Packages in this update:

• libsidplayfp-2.15.0-2.el10_4

Update description:

Fix CVE-2026-111148 - possible OOB read (rhbz#2554228)

FEDORA-2026-6ebd8db1af Packages in this update:

• libsidplayfp-3.1.2-1.fc46

Update description:

Automatic update for libsidplayfp-3.1.2-1.fc46.

Changelog * Mon Oct 26 2026 Karel Volný <kvolny@redhat.com> - 3.1.2-1 - Update to 3.1.2 (rhbz#2560385) - Fixes CVE-2026-111148 - possible OOB read (rhbz#2554229)

FEDORA-2026-5b98dd6d78 Packages in this update:

• mingw-qt5-qtwebkit-5.212.0-0.46.alpha4.fc45

Update description:

Backport fix for CVE-2026-111497.

FEDORA-2026-a336a99528 Packages in this update:

• mingw-qt5-qtwebkit-5.212.0-0.46.alpha4.fc44

Update description:

Backport fix for CVE-2026-111497.

FEDORA-2026-5bfcad5462 Packages in this update:

• mingw-cfitsio-4.6.4-3.fc45

Update description:

Backport fix for CVE-2026-115504.

FEDORA-2026-723469d025 Packages in this update:

• mingw-cfitsio-4.6.4-3.fc44

Update description:

Backport fix for CVE-2026-115504.

FEDORA-2026-9c735f02d2 Packages in this update:

• mingw-qt5-qtbase-5.15.18-4.fc44

Update description:

Backport fixes for CVE-2026-19248 and CVE-2026-11573

FEDORA-2026-f569fa8fe3 Packages in this update:

• mingw-qt5-qtbase-5.15.18-4.fc45

Update description:

Backport fixes for CVE-2026-19248 and CVE-2026-11573

FEDORA-EPEL-2026-4a8d7d760b Packages in this update:

• radicale-3.9.0-1.el8

Update description:

Update to 3.9.0

FEDORA-2026-63128ed82f Packages in this update:

• radicale-3.9.0-1.fc45

Update description:

Update to 3.9.0

FEDORA-2026-5a704586a7 Packages in this update:

• radicale-3.9.0-1.fc44

Update description:

Update to 3.9.0

FEDORA-2026-3bf33310f5 Packages in this update:

• radicale-3.9.0-1.fc43

Update description:

Update to 3.9.0

FEDORA-EPEL-2026-09e71337d5 Packages in this update:

• radicale-3.9.0-1.el10_4

Update description:

Update to 3.9.0

FEDORA-EPEL-2026-4cc3ad4f7f Packages in this update:

• radicale-3.9.0-1.el10_2

Update description:

Update to 3.9.0

FEDORA-EPEL-2026-229cb2aea7 Packages in this update:

• radicale-3.9.0-1.el10_3

Update description:

Update to 3.9.0

FEDORA-EPEL-2026-817fd5a75a Packages in this update:

• radicale-3.9.0-1.el9

Update description:

Update to 3.9.0

FEDORA-2026-b514ab4cac Packages in this update:

• erlang-hex_core-0.21.1-1.fc45

Update description:

hex_core ver. 0.21.1