Fedora Security Advisories

• plasma-nm-6.7.5-3.fc45

Removal of the vpnc and fortissl components

• kernel-7.2.9-201.fc44

The 7.2.9-1 updates contain a number of important fixes across the tree.

• kernel-7.2.9-301.fc45

The 7.2.9-1 updates contain a number of important fixes across the tree.

• kernel-7.2.9-101.fc43

The 7.2.9-1 updates contain a number of important fixes across the tree.

• knot-3.5.9-1.fc44

New upstream release containing various security fixes.

See release notes for more details.

• rabbitmq-server-4.2.9-3.fc44

Fix for CVE-2026-67420 (RabbitMQ: unauthorized user impersonation via stale OAuth token refresh). On a JWT/OAuth token refresh, rabbit_access_control:update_state/2 discarded the refreshed user tags, so a revoked 'impersonator' tag could survive on an existing connection. Backported from upstream v4.3.x (commit 5de287d).

• plasma-nm-6.7.5-2.fc45

Update to remove support for vpnc and fortissl for F45

• openvpn-2.7.8-1.el10_2

Update to upstream 2.7.8 release

• knot-3.6.1-1.fc45

New upstream release containing various security fixes.

See release notes for more details.

• curl-8.21.0-8.fc45

• fix OpenLDAP SASL authentication bypass (CVE-2026-13608)
• fix OpenSSL pinning bypass (CVE-2026-80230)

• php-pecl-mongodb2-2.1.11-1.el10_2

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432

• php-pecl-mongodb2-2.1.11-1.fc43

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432

• php-pecl-mongodb2-2.1.11-1.fc44

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432

• php-pecl-mongodb2-2.5.4-1.fc45

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432
• PHPC-2505: Fix foreach iteration of MongoDB\Driver\Cursor after garbage collection.

• php-pecl-mongodb2-2.5.4-1.el10_4

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432
• PHPC-2505: Fix foreach iteration of MongoDB\Driver\Cursor after garbage collection.

• php-pecl-mongodb2-2.5.4-1.el10_3

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432
• PHPC-2505: Fix foreach iteration of MongoDB\Driver\Cursor after garbage collection.

• php-pecl-mongodb-1.21.11-1.el10_2

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432

• mongo-c-driver-1.30.13-1.el9

• Fix edge case in Decimal128 parsing. CVE-2026-106438
• Enforce minimum size in bson_reserve_buffer. CVE-2026-106437
• Fix bson_writer_new when writing empty documents. CVE-2026-106431

• Fix SCRAM parser. CVE-2026-106428

• mongo-c-driver-1.30.13-1.el8

• Fix edge case in Decimal128 parsing. CVE-2026-106438
• Enforce minimum size in bson_reserve_buffer. CVE-2026-106437
• Fix bson_writer_new when writing empty documents. CVE-2026-106431

• Fix SCRAM parser. CVE-2026-106428

• mongo-c-driver-1.30.13-1.el10_2

• Fix edge case in Decimal128 parsing. CVE-2026-106438
• Enforce minimum size in bson_reserve_buffer. CVE-2026-106437
• Fix bson_writer_new when writing empty documents. CVE-2026-106431

• Fix SCRAM parser. CVE-2026-106428