Fedora Security Advisories

• mingw-cfitsio-4.6.4-3.fc45

Backport fix for CVE-2026-115504.

• mingw-cfitsio-4.6.4-3.fc44

Backport fix for CVE-2026-115504.

• mingw-qt5-qtbase-5.15.18-4.fc44

Backport fixes for CVE-2026-19248 and CVE-2026-11573

• mingw-qt5-qtbase-5.15.18-4.fc45

Backport fixes for CVE-2026-19248 and CVE-2026-11573

• radicale-3.9.0-1.el8

Update to 3.9.0

• radicale-3.9.0-1.fc45

Update to 3.9.0

• radicale-3.9.0-1.fc44

Update to 3.9.0

• radicale-3.9.0-1.fc43

Update to 3.9.0

• radicale-3.9.0-1.el10_4

Update to 3.9.0

• radicale-3.9.0-1.el10_2

Update to 3.9.0

• radicale-3.9.0-1.el10_3

Update to 3.9.0

• radicale-3.9.0-1.el9

Update to 3.9.0

• erlang-hex_core-0.21.1-1.fc45

hex_core ver. 0.21.1

• erlang-hex_core-0.21.1-1.fc44

hex_core ver. 0.21.1

• barman-3.20.1-3.el10_4
• python-uv-build-0.13.5-1.el10_4
• ruff-0.17.2-1.el10_4
• rust-archive-trait-0.0.15-2.el10_4
• rust-astral_async_zip-0.0.22-1.el10_4
• rust-astral-ini-0.0.1-1.el10_4
• rust-astral-mail-headers-0.0.1-2.el10_4
• rust-astral-pubgrub-0.7.1-1.el10_4
• rust-astral-version-ranges-0.2.3-1.el10_4
• rust-quick-junit-0.8.0-1.el10_4
• rust-tar-codec-0.0.15-2.el10_4
• rust-tar-framing-0.0.15-2.el10_4
• uv-0.13.5-2.el10_4

Update uv and python-uv-build to version 0.13.5. This includes some breaking changes to uv (but none to python-uv-build); however, most users will not need to make any changes. The uv package has also been rebuilt with updated rustls and webpki dependencies, fixing RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, RUSTSEC-2026-0349, RUSTSEC-2026-0381, RUSTSEC-2026-0383, and RUSTSEC-2026-0382. This includes fixes for the eMudhra intermediate CA compromise. Futhermore, uv 0.13.5 updates the latest managed CPython builds for 3.11 and newer to builds that distrust the eMudhra certificates. Finally, the system-wide configuration file (uv.toml) now sets system-certs = true, which means that, by default, the system-wide trust store is used instead of the root certificates bundled with uv. This better integrates with system-wide trust settings, and uv users can benefit from prompt security updates to the system-wide CA list.

Update ruff to version 0.17.2. Similarly, this includes some small breaking changes.

• barman-3.20.1-3.fc43
• python-uv-build-0.13.5-1.fc43
• ruff-0.17.2-1.fc43
• rust-archive-trait-0.0.15-2.fc43
• rust-astral_async_zip-0.0.22-1.fc43
• rust-astral-ini-0.0.1-1.fc43
• rust-astral-mail-headers-0.0.1-2.fc43
• rust-astral-pubgrub-0.7.1-1.fc43
• rust-astral-version-ranges-0.2.3-1.fc43
• rust-quick-junit-0.8.0-1.fc43
• rust-tar-codec-0.0.15-2.fc43
• rust-tar-framing-0.0.15-2.fc43
• ty-0.0.91-1.fc43
• uv-0.13.5-2.fc43

Update uv and python-uv-build to version 0.13.5. This includes some breaking changes to uv (but none to python-uv-build); however, most users will not need to make any changes. The uv package has also been rebuilt with updated rustls and webpki dependencies, fixing RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, RUSTSEC-2026-0349, RUSTSEC-2026-0381, RUSTSEC-2026-0383, and RUSTSEC-2026-0382. This includes fixes for the eMudhra intermediate CA compromise. Futhermore, uv 0.13.5 updates the latest managed CPython builds for 3.11 and newer to builds that distrust the eMudhra certificates. Finally, the system-wide configuration file (uv.toml) now sets system-certs = true, which means that, by default, the system-wide trust store is used instead of the root certificates bundled with uv. This better integrates with system-wide trust settings, and uv users can benefit from prompt security updates to the system-wide CA list.

Update ruff to version 0.17.2 and ty to version 0.0.91. Similarly, this includes some small breaking changes.

• barman-3.20.1-3.fc44
• python-uv-build-0.13.5-1.fc44
• ruff-0.17.2-1.fc44
• rust-archive-trait-0.0.15-2.fc44
• rust-astral_async_zip-0.0.22-1.fc44
• rust-astral-ini-0.0.1-1.fc44
• rust-astral-mail-headers-0.0.1-2.fc44
• rust-astral-pubgrub-0.7.1-1.fc44
• rust-astral-version-ranges-0.2.3-1.fc44
• rust-quick-junit-0.8.0-1.fc44
• rust-tar-codec-0.0.15-2.fc44
• rust-tar-framing-0.0.15-2.fc44
• ty-0.0.91-1.fc44
• uv-0.13.5-2.fc44

Update uv and python-uv-build to version 0.13.5. This includes some breaking changes to uv (but none to python-uv-build); however, most users will not need to make any changes. The uv package has also been rebuilt with updated rustls and webpki dependencies, fixing RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, RUSTSEC-2026-0349, RUSTSEC-2026-0381, RUSTSEC-2026-0383, and RUSTSEC-2026-0382. This includes fixes for the eMudhra intermediate CA compromise. Futhermore, uv 0.13.5 updates the latest managed CPython builds for 3.11 and newer to builds that distrust the eMudhra certificates. Finally, the system-wide configuration file (uv.toml) now sets system-certs = true, which means that, by default, the system-wide trust store is used instead of the root certificates bundled with uv. This better integrates with system-wide trust settings, and uv users can benefit from prompt security updates to the system-wide CA list.

Update ruff to version 0.17.2 and ty to version 0.0.91. Similarly, this includes some small breaking changes.

• brotli-1.2.1-1.fc45
• perl-Alien-Brotli-0.2.2-16.fc45

Fixes CVE-2026-111497 in new upstream release of brotli-1.2.1

• rust-sequoia-chameleon-gnupg-0.13.1-20.fc45

Rebuild rpki with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities (RUSTSEC-2026-0285, RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, RUSTSEC-2026-0349, RUSTSEC-2026-0382).

• rust-sequoia-chameleon-gnupg-0.13.1-20.fc44

Rebuild rpki with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities (RUSTSEC-2026-0285, RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, RUSTSEC-2026-0349, RUSTSEC-2026-0382).