Fedora Security Advisories

FEDORA-EPEL-2026-b27f635f06 Packages in this update:

• ImageMagick-7.1.2.32-1.el10_3

Update description:

Automatic update for ImageMagick-7.1.2.32-1.el10_3.

Changelog for ImageMagick * Sat Oct 10 2026 Luya Tshimbalanga <luya@fedoraproject.org> - 1:7.1.2.32-1 - Update to version 7.1.2.32 - Resolves: rhbz#2391123 - Resolves: rhbz#2392771 - Resolves: rhbz#2393598 - Resolves: rhbz#2418551 - Resolves: rhbz#2548419 - Resolves: rhbz#2548420 - Resolves: rhbz#2548997

FEDORA-2026-b47b03e5c9 Packages in this update:

• mkvtoolnix-102.0-1.fc45

Update description:

Latest upstream stable release. Fixes CVE-2026-90783 .

FEDORA-2026-19058d7704 Packages in this update:

• bcm283x-firmware-20261005-1.cdb0453.fc45
• uboot-tools-2026.10-1.fc45

Update description:

Update to 2026.10

FEDORA-2026-1419522981 Packages in this update:

• python3.15-3.15.0-1.fc44

Update description:

New version of the Python interpreter

FEDORA-2026-f86849b3f6 Packages in this update:

• python3.15-3.15.0-1.fc43

Update description:

New version of the Python interpreter

FEDORA-2026-683cb404da Packages in this update:

• plasma-nm-6.7.5-3.fc45

Update description:

Removal of the vpnc and fortissl components

FEDORA-2026-c2d6603acd Packages in this update:

• kernel-7.2.9-201.fc44

Update description:

The 7.2.9-1 updates contain a number of important fixes across the tree.

FEDORA-2026-d4b8c35afa Packages in this update:

• kernel-7.2.9-301.fc45

Update description:

The 7.2.9-1 updates contain a number of important fixes across the tree.

FEDORA-2026-e156a67e84 Packages in this update:

• kernel-7.2.9-101.fc43

Update description:

The 7.2.9-1 updates contain a number of important fixes across the tree.

FEDORA-2026-397ba00cb3 Packages in this update:

• knot-3.5.9-1.fc44

Update description:

New upstream release containing various security fixes.

See release notes for more details.

FEDORA-2026-fff73c7d8a Packages in this update:

• rabbitmq-server-4.2.9-3.fc44

Update description:

Fix for CVE-2026-67420 (RabbitMQ: unauthorized user impersonation via stale OAuth token refresh). On a JWT/OAuth token refresh, rabbit_access_control:update_state/2 discarded the refreshed user tags, so a revoked 'impersonator' tag could survive on an existing connection. Backported from upstream v4.3.x (commit 5de287d).

FEDORA-2026-9bfd7e56df Packages in this update:

• plasma-nm-6.7.5-2.fc45

Update description:

Update to remove support for vpnc and fortissl for F45

FEDORA-EPEL-2026-a237a2f17e Packages in this update:

• openvpn-2.7.8-1.el10_2

Update description:

Update to upstream 2.7.8 release

FEDORA-2026-4bfdea4c22 Packages in this update:

• knot-3.6.1-1.fc45

Update description:

New upstream release containing various security fixes.

See release notes for more details.

FEDORA-2026-b60c369f26 Packages in this update:

• curl-8.21.0-8.fc45

Update description:

• fix OpenLDAP SASL authentication bypass (CVE-2026-13608)
• fix OpenSSL pinning bypass (CVE-2026-80230)

FEDORA-EPEL-2026-b756a4f5b9 Packages in this update:

• php-pecl-mongodb2-2.1.11-1.el10_2

Update description: Version 2.1.11

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432

FEDORA-2026-6d651258fb Packages in this update:

• php-pecl-mongodb2-2.1.11-1.fc43

Update description: Version 2.1.11

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432

FEDORA-2026-42660f105e Packages in this update:

• php-pecl-mongodb2-2.1.11-1.fc44

Update description: Version 2.1.11

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432

FEDORA-2026-2ddb8e6c2e Packages in this update:

• php-pecl-mongodb2-2.5.4-1.fc45

Update description: Version 2.5.4

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432
• PHPC-2505: Fix foreach iteration of MongoDB\Driver\Cursor after garbage collection.

FEDORA-EPEL-2026-2d2d8aeb6c Packages in this update:

• php-pecl-mongodb2-2.5.4-1.el10_4

Update description: Version 2.5.4

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432
• PHPC-2505: Fix foreach iteration of MongoDB\Driver\Cursor after garbage collection.