Fedora Security Advisories

FEDORA-2026-883e88db68 Packages in this update:

• xen-4.21.1-2.fc44

Update description:

oxenstored keeps quota related use counts across domain destruction [XSA-483, CVE-2026-23556] Xenstored DoS via XS_RESET_WATCHES command [XSA-484, CVE-2026-23557] grant table v2 race in status page mapping [XSA-486, CVE-2026-23558] x86: Floating Point Divider State Sampling [XSA-488, CVE-2025-54505]

FEDORA-EPEL-2026-c915864ece Packages in this update:

• GitPython-3.1.48-1.el10_3

Update description:

Fixes security defects GHSA-rpm5-65cw-6hj4, GHSA-x2qx-6953-8485, and GHSA-7545-fcxq-7j24.

FEDORA-2026-f03718862a Packages in this update:

• GitPython-3.1.48-1.fc42

Update description:

Fixes security defects GHSA-rpm5-65cw-6hj4, GHSA-x2qx-6953-8485, and GHSA-7545-fcxq-7j24.

FEDORA-2026-5034196672 Packages in this update:

• GitPython-3.1.48-1.fc43

Update description:

Fixes security defects GHSA-rpm5-65cw-6hj4, GHSA-x2qx-6953-8485, and GHSA-7545-fcxq-7j24.

FEDORA-2026-591e576c12 Packages in this update:

• GitPython-3.1.48-1.fc44

Update description:

Fixes security defects GHSA-rpm5-65cw-6hj4, GHSA-x2qx-6953-8485, and GHSA-7545-fcxq-7j24.

FEDORA-2026-4349d04c20 Packages in this update:

• dovecot-2.4.3-2.fc44

Update description:

updated to 2.4.3 which includes several security fixes

FEDORA-2026-51dba40a65 Packages in this update:

• dovecot-2.4.3-2.fc43

Update description:

updated to 2.4.3 which includes several security fixes

FEDORA-2026-3a2ff381f7 Packages in this update:

• subfinder-2.14.0-1.fc45

Update description:

Automatic update for subfinder-2.14.0-1.fc45.

Changelog * Tue Apr 28 2026 Mikel Olasagasti Uranga <mikel@olasagasti.info> - 2.14.0-1 - Update to 2.14.0 - Closes rhbz#2463149 rhbz#2458997 rhbz#2456046

FEDORA-2026-cf660bc96a Packages in this update:

• forgejo-runner-12.7.3-2.fc43

Update description:

Update vendor dependencies to fix: * CVE-2026-33762 * CVE-2026-33817 * CVE-2026-34165

FEDORA-EPEL-2026-a534b99d27 Packages in this update:

• openvpn-2.7.3-1.el10_1

Update description:

Update to upstream 2.7.3 release

Update to upstream 2.7.2 release CVE-2026-40215 CVE-2026-35058

FEDORA-EPEL-2026-07552e95ef Packages in this update:

• openvpn-2.7.3-1.el10_2

Update description:

Update to upstream 2.7.3 release

Update to upstream 2.7.2 release CVE-2026-40215 CVE-2026-35058

FEDORA-EPEL-2026-5560315e97 Packages in this update:

• openvpn-2.7.3-1.el10_3

Update description:

Update to upstream 2.7.3 release

Update to upstream 2.7.2 release CVE-2026-40215 CVE-2026-35058

FEDORA-2026-086acf3001 Packages in this update:

• openvpn-2.7.3-1.fc44

Update description:

Update to upstream 2.7.3 release

Update to upstream 2.7.2 release CVE-2026-40215 CVE-2026-35058

FEDORA-2026-e6a4814a4d Packages in this update:

• squid-7.5-1.fc43

Update description:

• new version 7.5
• security update

FEDORA-2026-c0590bd498 Packages in this update:

• squid-7.5-1.fc44

Update description:

• new version 7.5
• security update

FEDORA-2026-0174d1953a Packages in this update:

• xorg-x11-server-Xwayland-24.1.11-1.fc42

Update description:

Update to xwayland 24.1.11

Update to xwayland 24.1.10, CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003

FEDORA-EPEL-2026-59a9d512a4 Packages in this update:

• mbedtls-3.6.6-1.el10_3

Update description:

• Update to 3.6.6

Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.6

FEDORA-EPEL-2026-ba79b9dff1 Packages in this update:

• mbedtls-3.6.6-1.el10_2

Update description:

• Update to 3.6.6

Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.6

FEDORA-EPEL-2026-479c1d4133 Packages in this update:

• mbedtls-3.6.6-1.el10_1

Update description:

• Update to 3.6.6

Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.6

FEDORA-2026-8409145c11 Packages in this update:

• libgcrypt-1.11.1-4.fc43

Update description:

Fix CVE-2026-41989 (#2461782)