Fedora Security Advisories

• maturin-1.16.0-1.el10_4
• ruff-0.17.4-2.el10_4
• rust-astral_async_zip-0.0.22-2.el10_4
• rust-coreutils-0.7.0-13.el10_4
• rust-lzma-rust2-0.25.0-1.el10_4
• rust-mailparse-0.18.0-1.el10_4
• rust-pyo3-introspection-0.30.1-1.el10_4
• rust-python-pkginfo-0.7.0-1.el10_4
• rust-serde_json-1.0.154-1.el10_4
• rust-zip-9.4.1-1.el10_4

Update ruff to 0.17.4. Update pyo3-introspection to version 0.30.1. Update maturin to 1.16.0.

Update the zip crate to version 9, fixing RUSTSEC-2026-0367, RUSTSEC-2026-0368, and RUSTSEC-2026-0369. Rebuild various applications with the updated zip crate.

Update the serde_json crate to version 1.0.154: support preserve_order in no_std builds and report invalid UTF-8 at the first bad byte.

Update various other Rust crates, including updating lzma-rust2 to 0.25.0, python-pkginfo to 0.7.0, and mailparse to 0.18.0.

• perl-Catalyst-Plugin-Authentication-0.10029-1.fc45

Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier. This package updates the module to version 0.10029 that uses secure comparison for the legacy verifying.

• perl-Catalyst-Plugin-Authentication-0.10029-1.fc44

Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier. This package updates the module to version 0.10029 that uses secure comparison for the legacy verifying.

• perl-Catalyst-Plugin-Authentication-0.10029-1.fc43

Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier. This package updates the module to version 0.10029 that uses secure comparison for the legacy verifying.

• qtox-1.18.6-1.fc43

Update qTox to version 1.18.6

• qtox-1.18.6-1.fc45

Update qTox to version 1.18.6

• qtox-1.18.6-1.fc44

Update qTox to version 1.18.6

• mysql8.4-8.4.13-2.fc44

MySQL 8.4.13

• mysql8.4-8.4.13-2.fc43

MySQL 8.4.13

• maturin-1.16.0-1.fc43
• python-jiter-0.19.0-1.fc43
• ruff-0.17.4-1.fc43
• rust-afterburn-5.11.0-3.fc43
• rust-astral_async_zip-0.0.22-2.fc43
• rust-clearscreen-5.0.0-1.fc43
• rust-coreutils-0.7.0-13.fc43
• rust-jiter-0.19.0-1.fc43
• rust-lzma-rust2-0.25.0-1.fc43
• rust-mailparse-0.18.0-1.fc43
• rust-pyo3-introspection-0.30.1-1.fc43
• rust-python-pkginfo-0.7.0-1.fc43
• rust-serde_json-1.0.154-1.fc43
• rust-zip-9.4.1-1.fc43
• selenium-manager-4.34.0-7.fc43
• ty-0.0.99-1.fc43

Update ruff to 0.17.4 and ty to 0.0.99. Update pyo3-introspection to version 0.30.1. Update maturin to 1.16.0. Update python-jiter to 0.19.0.

Update the zip crate to version 9, fixing RUSTSEC-2026-0367, RUSTSEC-2026-0368, and RUSTSEC-2026-0369. Rebuild various applications with the updated zip crate.

Update the serde_json crate to version 1.0.154: support preserve_order in no_std builds and report invalid UTF-8 at the first bad byte.

Update various other Rust crates, including updating lzma-rust2 to 0.25.0, clearscreen to 5.0.0, python-pkginfo to 0.7.0, and mailparse to 0.18.0.

Rebuild afterburn with rustls-webpki 0.103.16 for RUSTSEC-2026-0382. This provides added protection against trusting the eMudhra intermediate CA certificates, which should already be distrusted system-wide via a ca-certificates update.

• maturin-1.16.0-1.fc44
• python-jiter-0.19.0-1.fc44
• python-pysequoia-0.1.36-1.fc44
• ruff-0.17.4-1.fc44
• rust-afterburn-5.11.0-3.fc44
• rust-astral_async_zip-0.0.22-2.fc44
• rust-clearscreen-5.0.0-1.fc44
• rust-coreutils-0.7.0-13.fc44
• rust-jiter-0.19.0-1.fc44
• rust-lzma-rust2-0.25.0-1.fc44
• rust-mailparse-0.18.0-1.fc44
• rust-pyo3-introspection-0.30.1-1.fc44
• rust-python-pkginfo-0.7.0-1.fc44
• rust-serde_json-1.0.154-1.fc44
• rust-testresult-0.4.2-1.fc44
• rust-zip-9.4.1-1.fc44
• selenium-manager-4.34.0-8.fc44
• ty-0.0.99-1.fc44

Update ruff to 0.17.4 and ty to 0.0.99. Update pyo3-introspection to version 0.30.1. Update maturin to 1.16.0. Update python-jiter to 0.19.0 and python-pysequoia to 0.1.36.

Update the zip crate to version 9, fixing RUSTSEC-2026-0367, RUSTSEC-2026-0368, and RUSTSEC-2026-0369. Rebuild various applications with the updated zip crate.

Update the serde_json crate to version 1.0.154: support preserve_order in no_std builds and report invalid UTF-8 at the first bad byte.

Update various other Rust crates, including updating lzma-rust2 to 0.25.0, clearscreen to 5.0.0, python-pkginfo to 0.7.0, and mailparse to 0.18.0.

Rebuild afterburn with rustls-webpki 0.103.16 for RUSTSEC-2026-0382. This provides added protection against trusting the eMudhra intermediate CA certificates, which should already be distrusted system-wide via a ca-certificates update.

• maturin-1.16.0-1.fc45
• python-jiter-0.19.0-1.fc45
• python-pydantic-core-2.46.5-7.fc45
• python-pysequoia-0.1.36-1.fc45
• ruff-0.17.4-1.fc45
• rust-afterburn-5.11.0-3.fc45
• rust-astral_async_zip-0.0.22-2.fc45
• rust-clearscreen-5.0.0-1.fc45
• rust-jiter-0.19.0-1.fc45
• rust-lzma-rust2-0.25.0-1.fc45
• rust-mailparse-0.18.0-1.fc45
• rust-pyo3-introspection-0.30.1-1.fc45
• rust-python-pkginfo-0.7.0-1.fc45
• rust-serde_json-1.0.154-1.fc45
• rust-testresult-0.4.2-1.fc45
• rust-zip-9.4.1-1.fc45
• selenium-manager-4.45.0-4.fc45
• ty-0.0.99-1.fc45
• uutils-coreutils-0.7.0-15.fc45

Update ruff to 0.17.4 and ty to 0.0.99. Update pyo3-introspection to version 0.30.1. Update maturin to 1.16.0. Update python-jiter to 0.19.0 and python-pysequoia to 0.1.36.

Update the zip crate to version 9, fixing RUSTSEC-2026-0367, RUSTSEC-2026-0368, and RUSTSEC-2026-0369. Rebuild various applications with the updated zip crate.

Update the serde_json crate to version 1.0.154: support preserve_order in no_std builds and report invalid UTF-8 at the first bad byte.

Update various other Rust crates, including updating lzma-rust2 to 0.25.0, clearscreen to 5.0.0, python-pkginfo to 0.7.0, and mailparse to 0.18.0.

Rebuild afterburn with rustls-webpki 0.103.16 for RUSTSEC-2026-0382. This provides added protection against trusting the eMudhra intermediate CA certificates, which should already be distrusted system-wide via a ca-certificates update.

• maturin-1.16.0-1.fc46
• python-jiter-0.19.0-1.fc46
• python-pysequoia-0.1.36-1.fc46
• ruff-0.17.4-1.fc46
• rust-afterburn-5.11.0-3.fc46
• rust-astral_async_zip-0.0.22-2.fc46
• rust-clearscreen-5.0.0-1.fc46
• rust-jiter-0.19.0-1.fc46
• rust-lzma-rust2-0.25.0-1.fc46
• rust-mailparse-0.18.0-1.fc46
• rust-pyo3-introspection-0.30.1-1.fc46
• rust-python-pkginfo-0.7.0-1.fc46
• rust-serde_json-1.0.154-1.fc46
• rust-zip-9.4.1-1.fc46
• selenium-manager-4.45.0-4.fc46
• ty-0.0.99-1.fc46
• uutils-coreutils-0.7.0-15.fc46

Update ruff to 0.17.4 and ty to 0.0.99. Update pyo3-introspection to version 0.30.1. Update maturin to 1.16.0. Update python-jiter to 0.19.0 and python-pysequoia to 0.1.36.

Update the zip crate to version 9, fixing RUSTSEC-2026-0367, RUSTSEC-2026-0368, and RUSTSEC-2026-0369. Rebuild various applications with the updated zip crate.

Update the serde_json crate to version 1.0.154: support preserve_order in no_std builds and report invalid UTF-8 at the first bad byte.

Update various other Rust crates, including updating lzma-rust2 to 0.25.0, clearscreen to 5.0.0, python-pkginfo to 0.7.0, and mailparse to 0.18.0.

• rust-coreutils-0.7.0-13.el9
• rust-lzma-rust2-0.25.0-1.el9
• rust-pyo3-introspection-0.30.1-1.el9
• rust-serde_json-1.0.154-1.el9
• rust-zip-9.4.1-1.el9

Update the zip crate to version 9, fixing RUSTSEC-2026-0367, RUSTSEC-2026-0368, and RUSTSEC-2026-0369.

Update the serde_json crate to version 1.0.154: support preserve_order in no_std builds and report invalid UTF-8 at the first bad byte.

Update pyo3-introspection to version 0.30.1.

• rust-sccache-0.15.0-7.fc43

Rebuild to address multiple security advisories in zstd / zstd-safe

• rust-sccache-0.17.0-8.fc44

Rebuild to address multiple security advisories in zstd / zstd-safe

• rust-sccache-0.17.0-8.fc45

Rebuild to address multiple security advisories in zstd / zstd-safe

• rust-coreos-installer-0.27.0-3.fc43

Rebuild to address multiple security advisories in zstd / zstd-safe

Rebuilt with webpki-roots 1.0.11 (removed emSign Root CA - C1/C3)

Updated License expression based on a current Rawhide build

• kernel-7.3.3-100.fc43
• kernel-headers-7.3.3-100.fc43

The 7.3.3 stable kernel rebase contains new features, improved hardware support, and a number of important fixes across the tree.

• kernel-7.3.3-200.fc44
• kernel-headers-7.3.3-200.fc44

The 7.3.3 stable kernel rebase contains new features, improved hardware support, and a number of important fixes across the tree.