Fedora Security Advisories

• python-asyncssh-2.24.0-2.el10_3

update to version 2.24.0 Fix CVE-2026-54590: Unauthorized file modification via authorized-keys directory escape Fix CVE-2026-54591: Arbitrary file write via path traversal in SCP client

• calibre-9.11.0-1.fc43

Fixes CVE-2026-53511

• calibre-9.11.0-1.fc44

Update to 9.11.0. Fixes rhbz#2493338 and CVE-2026-53511

• mingw-python-pip-26.1.2-1.fc44

Update to pip-26.1.2.

• mingw-python-pip-26.1.2-1.fc43

Update to pip-26.1.2.

• mingw-python-idna-3.18-1.fc43

Update to 3.18.

• mingw-python-idna-3.18-1.fc44

Update to 3.18.

• pdns-5.0.6-1.el9

• Update to 5.0.6
• CVE-2026-42005

Security Advisory: https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-07.html

• python-asyncssh-2.23.1-1.fc43

import asyncssh 2.23.1 Fix CVE-2026-54590: Unauthorized file modification via authorized-keys directory escape Fix CVE-2026-54591: Arbitrary file write via path traversal in SCP client

• python-asyncssh-2.24.0-1.fc44

update to version 2.24.0 Fix CVE-2026-54590: Unauthorized file modification via authorized-keys directory escape Fix CVE-2026-54591: Arbitrary file write via path traversal in SCP client

• prometheus-3.13.1-1.fc44

Update to 3.13.1

• prometheus-3.13.1-1.fc43

Update to 3.13.1

• node-exporter-1.12.0-1.el10_2

Update to 1.12.0

• node-exporter-1.12.0-1.el10_3

Update to 1.12.0

• node-exporter-1.12.0-1.el9

Update to 1.12.0

• node-exporter-1.12.0-1.fc44

Update to 1.12.0

• node-exporter-1.12.0-1.fc43

Update to 1.12.0

• mbedtls-3.6.7-1.el10_3

• Update to 3.6.7
• Fixes CVE-2026-25832, CVE-2026-35336, CVE-2026-49300, CVE-2026-50579, CVE-2026-50580, CVE-2026-50581, CVE-2026-50583, CVE-2026-50584, CVE-2026-50585, CVE-2026-50586, CVE-2026-50587, CVE-2026-50588, CVE-2026-50640, CVE-2026-50713, CVE-2026-54435, CVE-2026-54441

Release notes: https://github.com/Mbed-TLS/mbedtls/releases#release-mbedtls-3.6.7

• mbedtls-3.6.7-1.el10_2

• Update to 3.6.7
• Fixes CVE-2026-25832, CVE-2026-35336, CVE-2026-49300, CVE-2026-50579, CVE-2026-50580, CVE-2026-50581, CVE-2026-50583, CVE-2026-50584, CVE-2026-50585, CVE-2026-50586, CVE-2026-50587, CVE-2026-50588, CVE-2026-50640, CVE-2026-50713, CVE-2026-54435, CVE-2026-54441

Release notes: https://github.com/Mbed-TLS/mbedtls/releases#release-mbedtls-3.6.7

• mbedtls-3.6.7-1.fc44

• Update to 3.6.7
• Fixes CVE-2026-25832, CVE-2026-35336, CVE-2026-49300, CVE-2026-50579, CVE-2026-50580, CVE-2026-50581, CVE-2026-50583, CVE-2026-50584, CVE-2026-50585, CVE-2026-50586, CVE-2026-50587, CVE-2026-50588, CVE-2026-50640, CVE-2026-50713, CVE-2026-54435, CVE-2026-54441

Release notes: https://github.com/Mbed-TLS/mbedtls/releases#release-mbedtls-3.6.7