antlr4-project-4.13.2-14.fc43
FEDORA-2026-d9ca28a7b8
Packages in this update:
- antlr4-project-4.13.2-14.fc43
This update contains a fix for CVE-2026-13503.
Fedora Security Advisories
antlr4-project-4.13.2-18.fc44
FEDORA-2026-619f648cde
Packages in this update:
- antlr4-project-4.13.2-18.fc44
This update contains a fix for CVE-2026-13503.
opam-2.5.2-1.fc44
FEDORA-2026-239dbbff34
Packages in this update:
- opam-2.5.2-1.fc44
Version 2.5.2 of opam fixes CVE-2026-57825. See https://github.com/ocaml/opam/releases/tag/2.5.2 for more information.
opam-2.5.2-1.fc43
FEDORA-2026-fb48505840
Packages in this update:
- opam-2.5.2-1.fc43
Version 2.5.2 of opam fixes CVE-2026-57825. See https://github.com/ocaml/opam/releases/tag/2.5.2 for more information.
erlang-26.2.5.21-4.fc43
FEDORA-2026-965be97ac0
Packages in this update:
- erlang-26.2.5.21-4.fc43
Backport fixes for CVE-2026-48858 (ftp SSRF), CVE-2026-49759 (SCTP DoS), CVE-2026-48860 (dist-over-TLS auth bypass), CVE-2026-54886 (ssh SFTP DoS), CVE-2026-54891 (TLS handshake data injection), and CVE-2026-55952 (TLS 1.3 session ticket DoS). These are fixed upstream in OTP 27.x (rawhide/f45); backported here to the OTP 26.x line.
erlang-26.2.5.21-4.fc44
FEDORA-2026-dcf80dc1ff
Packages in this update:
- erlang-26.2.5.21-4.fc44
Backport fixes for CVE-2026-48858 (ftp SSRF), CVE-2026-49759 (SCTP DoS), CVE-2026-48860 (dist-over-TLS auth bypass), CVE-2026-54886 (ssh SFTP DoS), CVE-2026-54891 (TLS handshake data injection), and CVE-2026-55952 (TLS 1.3 session ticket DoS). These are fixed upstream in OTP 27.x (rawhide/f45); backported here to the OTP 26.x line.
c-ares-1.34.8-1.fc43
FEDORA-2026-d70d93fcd7
Packages in this update:
- c-ares-1.34.8-1.fc43
1.34.7 accidentally broke the API compatibility, this is fixed in 1.34.8.
- update to 1.34.7
- fixes CVE-2026-33630 (GHSA-6wfj-rwm7-3542) and GHSA-pjmc-gx33-gc76 and GHSA-jv8r-gqr9-68wj
python-dulwich-1.2.9-1.fc44
FEDORA-2026-fbd55e52fb
Packages in this update:
- python-dulwich-1.2.9-1.fc44
1.2.9, CVE fixes
python-orjson-3.11.9-3.fc43
FEDORA-2026-c8f1a4ee05
Packages in this update:
- python-orjson-3.11.9-3.fc43
Update PyO3 to 0.29, fixing RUSTSEC-2026-0194 and RUSTSEC-2026-0195.
p11-kit-0.26.4-1.fc43
FEDORA-2026-566791181a
Packages in this update:
- p11-kit-0.26.4-1.fc43
- server: fixed stack exhaustion via unbounded recursion in RPC attribute parsing by enforcing a recursion depth limit (CVE-2026-13757)
- fixed confusing error message when trying to store an existing cert with trust anchor
- fixed assert when parsing p11-kit files with value (")
- fixed numerous memory management issues
- Build and test fixes
- Updated translations
p11-kit-0.26.4-1.fc44
FEDORA-2026-695fd36daa
Packages in this update:
- p11-kit-0.26.4-1.fc44
- server: fixed stack exhaustion via unbounded recursion in RPC attribute parsing by enforcing a recursion depth limit (CVE-2026-13757)
- fixed confusing error message when trying to store an existing cert with trust anchor
- fixed assert when parsing p11-kit files with value (")
- fixed numerous memory management issues
- Build and test fixes
- Updated translations
python-orjson-3.11.9-3.fc44
FEDORA-2026-dd78d37ecf
Packages in this update:
- python-orjson-3.11.9-3.fc44
Update PyO3 to 0.29, fixing RUSTSEC-2026-0194 and RUSTSEC-2026-0195.
python-uv-build-0.11.28-1.fc43 rust-astral_async_zip-0.0.20-1.fc43 uv-0.11.28-1.fc43
FEDORA-2026-8893ec1aeb
Packages in this update:
- python-uv-build-0.11.28-1.fc43
- rust-astral_async_zip-0.0.20-1.fc43
- uv-0.11.28-1.fc43
Update uv / python-uv-build to 0.11.28, with significant hardening of zip file handling against parser differentials.
webkitgtk-2.52.5-1.fc44
FEDORA-2026-3bc4b3ccb3
Packages in this update:
- webkitgtk-2.52.5-1.fc44
- Fire scrollend event for instant programmatic scrolls.
- Increase network idle connection timeout to 115 seconds.
- Fix several crashes and rendering issues.
- Fix CVE-2024-4367, CVE-2026-39872, CVE-2026-43663, CVE-2026-43676, CVE-2026-43699, CVE-2026-43701, CVE-2026-43705, CVE-2026-43707, CVE-2026-43712, CVE-2026-43713, CVE-2026-43715, CVE-2026-43716, CVE-2026-43720, CVE-2026-43721, CVE-2026-43725, CVE-2026-43726, CVE-2026-43727, CVE-2026-43731, CVE-2026-43732, CVE-2026-43734, CVE-2026-43740, CVE-2026-43742, CVE-2026-43745
webkitgtk-2.52.5-1.fc43
FEDORA-2026-ec8e535c6e
Packages in this update:
- webkitgtk-2.52.5-1.fc43
- Fire scrollend event for instant programmatic scrolls.
- Increase network idle connection timeout to 115 seconds.
- Fix several crashes and rendering issues.
- Fix CVE-2024-4367, CVE-2026-39872, CVE-2026-43663, CVE-2026-43676, CVE-2026-43699, CVE-2026-43701, CVE-2026-43705, CVE-2026-43707, CVE-2026-43712, CVE-2026-43713, CVE-2026-43715, CVE-2026-43716, CVE-2026-43720, CVE-2026-43721, CVE-2026-43725, CVE-2026-43726, CVE-2026-43727, CVE-2026-43731, CVE-2026-43732, CVE-2026-43734, CVE-2026-43740, CVE-2026-43742, CVE-2026-43745
rust-astral_async_zip-0.0.20-1.el10_3 uv-0.11.28-1.el10_3
FEDORA-EPEL-2026-c475a25098
Packages in this update:
- rust-astral_async_zip-0.0.20-1.el10_3
- uv-0.11.28-1.el10_3
Update uv to 0.11.28, with significant hardening of zip file handling against parser differentials.
python-uv-build-0.11.28-1.fc44 rust-astral_async_zip-0.0.20-1.fc44 uv-0.11.28-1.fc44
FEDORA-2026-be84487fdd
Packages in this update:
- python-uv-build-0.11.28-1.fc44
- rust-astral_async_zip-0.0.20-1.fc44
- uv-0.11.28-1.fc44
Update uv / python-uv-build to 0.11.28, with significant hardening of zip file handling against parser differentials.
sssd-2.13.1-3.fc45
FEDORA-2026-8fad0036a5
Packages in this update:
- sssd-2.13.1-3.fc45
Automatic update for sssd-2.13.1-3.fc45.
Changelog * Wed Jul 8 2026 Sumit Bose <sbose@redhat.com> - 2.13.1-3 - CVE fixes: CVE-2026-12610 CVE-2026-14474 CVE-2026-14476 - rhbz#2494777: CVE-2026-12610 sssd: Use-after-free crash in SSSD' 'sssd_pam' process - rhbz#2497650: CVE-2026-14476 sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass - rhbz#2497651: CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalationpython-idna-3.18-1.fc44
FEDORA-2026-822c07add4
Packages in this update:
- python-idna-3.18-1.fc44
Update to the latest version to bring fixes for CVE-2026-45409 and CVE-2024-3651 into the stable releases.
python-idna-3.18-1.fc43
FEDORA-2026-6215e65f6c
Packages in this update:
- python-idna-3.18-1.fc43
Update to the latest version to bring fixes for CVE-2026-45409 and CVE-2024-3651 into the stable releases.