Fedora Security Advisories

FEDORA-2026-fbb9501b22 Packages in this update:

• python-django5-5.2.16-1.fc43

Update description:

Update python-django5 to version 5.2.16

Fixes three low-severity CVEs

• CVE-2026-48588: Potential exposure of private data via cached Set-Cookie response
• CVE-2026-53877: Heap buffer over-read in GDALRaster
• CVE-2026-53878: Header injection possibility since DomainNameValidator accepted newlines in input

FEDORA-2026-595d35a4d1 Packages in this update:

• python-django5-5.2.16-1.fc44

Update description:

Update python-django5 to version 5.2.16

Fixes three low-severity CVEs

• CVE-2026-48588: Potential exposure of private data via cached Set-Cookie response
• CVE-2026-53877: Heap buffer over-read in GDALRaster
• CVE-2026-53878: Header injection possibility since DomainNameValidator accepted newlines in input

FEDORA-2026-3a690a88c2 Packages in this update:

• moby-engine-29.6.2-1.fc45

Update description:

Automatic update for moby-engine-29.6.2-1.fc45.

Changelog * Thu Jul 16 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 29.6.2-1 - Update to release v29.6.2 - Resolves: rhbz#2496437 - Upstream security fixes - - GHSA-hw3h-2gp9-cxpv - - GHSA-qx3x-mv6r-52p6 - - GHSA-32pv-7hq5-qhwq - - GHSA-g2h8-426c-7976 - - GHSA-388v-wmr2-g2v2 * Thu Jul 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 29.6.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild

FEDORA-2026-f738966fc9 Packages in this update:

• dotnet10.0-10.0.110-1.fc44

Update description:

Update to .NET SDK 10.0.110 and Runtime 10.0.10

Fixes: CVE-2026-47300,CVE-2026-47302,CVE-2026-47303,CVE-2026-47304,CVE-2026-50524,CVE-2026-50525,CVE-2026-50526,CVE-2026-50527,CVE-2026-50528,CVE-2026-50646,CVE-2026-50648,CVE-2026-50649,CVE-2026-50650,CVE-2026-50651,CVE-2026-50659,CVE-2026-56158,CVE-2026-57108

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.10/10.0.110.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.10/10.0.10.md

FEDORA-2026-d9817786d6 Packages in this update:

• dotnet10.0-10.0.110-1.fc43

Update description:

Update to .NET SDK 10.0.110 and Runtime 10.0.10

Fixes: CVE-2026-47300,CVE-2026-47302,CVE-2026-47303,CVE-2026-47304,CVE-2026-50524,CVE-2026-50525,CVE-2026-50526,CVE-2026-50527,CVE-2026-50528,CVE-2026-50646,CVE-2026-50648,CVE-2026-50649,CVE-2026-50650,CVE-2026-50651,CVE-2026-50659,CVE-2026-56158,CVE-2026-57108

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.10/10.0.110.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.10/10.0.10.md

FEDORA-2026-d085110cf3 Packages in this update:

• netatalk-4.5.1-1.fc44

Update description:

4.5.1 Release

FEDORA-2026-cfbf964c2e Packages in this update:

• libtiff-4.7.2-1.fc44

Update description:

updated to 4.7.2, fixes security issues

FEDORA-2026-feac063d56 Packages in this update:

• libtiff-4.7.2-1.fc43

Update description:

updated to 4.7.2, fixes security issues

FEDORA-2026-9985882270 Packages in this update:

• rpm-6.0.2-1.fc44

Update description:

Rebase to 6.0.2 (https://rpm.org/releases/6.0.2)

FEDORA-2026-a9f0d5370e Packages in this update:

• rpm-6.0.2-1.fc43

Update description:

Rebase to 6.0.2 (https://rpm.org/releases/6.0.2)

FEDORA-2026-8870088088 Packages in this update:

• mupdf-1.27.2-2.fc43

Update description:

fix CVE-2026-7233 (rhbz#2463402)

FEDORA-2026-d815916e2c Packages in this update:

• mupdf-1.27.2-2.fc44

Update description:

fix CVE-2026-7233 (rhbz#2463402)

FEDORA-2026-334a616b71 Packages in this update:

• mupdf-1.27.2-4.fc45

Update description:

Automatic update for mupdf-1.27.2-4.fc45.

Changelog * Thu Jul 16 2026 Michael J Gruber <mjg@fedoraproject.org> - 1.27.2-4 - fix CVE-2026-7233 (rhbz#2463402)

FEDORA-2026-1b91a2f126 Packages in this update:

• wget1-1.25.0-4.fc44

Update description:

Fix for CVE-2026-15146, CVE-2026-58470, CVE-2026-58471, CVE-2026-58472

FEDORA-2026-7bbb52b49d Packages in this update:

• wget1-1.25.0-3.fc43

Update description:

Fix for CVE-2026-15146, CVE-2026-58470, CVE-2026-58471, CVE-2026-58472

FEDORA-2026-d6b061ad69 Packages in this update:

• dotnet9.0-9.0.119-1.fc44

Update description:

Update to .NET SDK 9.0.119 and Runtime 9.0.18

Fixes: CVE-2026-47300,CVE-2026-47302,CVE-2026-47303,CVE-2026-47304,CVE-2026-50524,CVE-2026-50525,CVE-2026-50526,CVE-2026-50527,CVE-2026-50528,CVE-2026-50646,CVE-2026-50648,CVE-2026-50649,CVE-2026-50650,CVE-2026-50651,CVE-2026-50659,CVE-2026-56158,CVE-2026-57108

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.18/9.0.119.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.18/9.0.18.md

FEDORA-2026-3afd9d89f4 Packages in this update:

• dotnet9.0-9.0.119-1.fc43

Update description:

Update to .NET SDK 9.0.119 and Runtime 9.0.18

Fixes: CVE-2026-47300,CVE-2026-47302,CVE-2026-47303,CVE-2026-47304,CVE-2026-50524,CVE-2026-50525,CVE-2026-50526,CVE-2026-50527,CVE-2026-50528,CVE-2026-50646,CVE-2026-50648,CVE-2026-50649,CVE-2026-50650,CVE-2026-50651,CVE-2026-50659,CVE-2026-56158,CVE-2026-57108

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.18/9.0.119.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.18/9.0.18.md

FEDORA-2026-81ed0bb2bb Packages in this update:

• node-exporter-1.12.1-1.fc44

Update description:

Update to 1.12.1

Update to 1.12.0

FEDORA-EPEL-2026-73c6251f78 Packages in this update:

• node-exporter-1.12.1-1.el9

Update description:

Update to 1.12.1

Update to 1.12.0

FEDORA-2026-5924722657 Packages in this update:

• node-exporter-1.12.1-1.fc43

Update description:

Update to 1.12.1

Update to 1.12.0