Fedora Security Advisories

moby-engine-29.4.0-1.fc42

1 hour 49 minutes ago
FEDORA-2026-49fd0d9636 Packages in this update:
  • moby-engine-29.4.0-1.fc42
Update description:
  • Update to release v29.4.0
  • Resolves: rhbz#2455894
  • Resolves CVE-2026-34986: rhbz#2455665
  • Upstream new features and fixes

moby-engine-29.4.0-1.fc43

2 hours 27 minutes ago
FEDORA-2026-a5015b57b9 Packages in this update:
  • moby-engine-29.4.0-1.fc43
Update description:
  • Update to release v29.4.0
  • Resolves: rhbz#2455894
  • Resolves CVE-2026-34986: rhbz#2455665
  • Upstream new features and fixes

moby-engine-29.4.0-1.fc44

2 hours 44 minutes ago
FEDORA-2026-853a2fa7e5 Packages in this update:
  • moby-engine-29.4.0-1.fc44
Update description:
  • Update to release v29.4.0
  • Resolves: rhbz#2455894
  • Resolves CVE-2026-34986: rhbz#2455665
  • Upstream new features and fixes

moby-engine-29.4.0-1.fc45

3 hours 35 minutes ago
FEDORA-2026-e520168745 Packages in this update:
  • moby-engine-29.4.0-1.fc45
Update description:

Automatic update for moby-engine-29.4.0-1.fc45.

Changelog * Tue Apr 7 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 29.4.0-1 - Update to release v29.4.0 - Resolves: rhbz#2455894 - Resolves CVE-2026-34986: rhbz#2455665 - Upstream new features and fixes

libpng-1.6.56-1.fc44

18 hours ago
FEDORA-2026-c6c617fe35 Packages in this update:
  • libpng-1.6.56-1.fc44
Update description:

1.6.56 is release fixes for the following two security vulnerabilities:

  • CVE-2026-33416 (high severity): Use-after-free memory bug in the transparency and palette-handling code. Similar to its predecessor CVE-2026-25646, this latent bug has existed for 25 years. Both Halil Oktay and Ryo Shimada discovered it within days of one another.

  • CVE-2026-33636 (high severity): Out-of-bounds read and write vulnerability in the ARM Neon palette-expansion code. This one was found and fixed by Taegu Ha and has existed since 1.6.36.

The images that trigger these bugs are valid. Users are encouraged to update immediately.

libpng-1.6.56-1.fc43

18 hours ago
FEDORA-2026-67c20bfb74 Packages in this update:
  • libpng-1.6.56-1.fc43
Update description:

1.6.56 is release fixes for the following two security vulnerabilities:

  • CVE-2026-33416 (high severity): Use-after-free memory bug in the transparency and palette-handling code. Similar to its predecessor CVE-2026-25646, this latent bug has existed for 25 years. Both Halil Oktay and Ryo Shimada discovered it within days of one another.

  • CVE-2026-33636 (high severity): Out-of-bounds read and write vulnerability in the ARM Neon palette-expansion code. This one was found and fixed by Taegu Ha and has existed since 1.6.36.

The images that trigger these bugs are valid. Users are encouraged to update immediately.

libpng-1.6.56-1.fc42

18 hours 1 minute ago
FEDORA-2026-ba18a54554 Packages in this update:
  • libpng-1.6.56-1.fc42
Update description:

1.6.56 is release fixes for the following two security vulnerabilities:

  • CVE-2026-33416 (high severity): Use-after-free memory bug in the transparency and palette-handling code. Similar to its predecessor CVE-2026-25646, this latent bug has existed for 25 years. Both Halil Oktay and Ryo Shimada discovered it within days of one another.

  • CVE-2026-33636 (high severity): Out-of-bounds read and write vulnerability in the ARM Neon palette-expansion code. This one was found and fixed by Taegu Ha and has existed since 1.6.36.

The images that trigger these bugs are valid. Users are encouraged to update immediately.

usd-26.03-2.fc45

1 day 9 hours ago
FEDORA-2026-abd4c1829d Packages in this update:
  • usd-26.03-2.fc45
Update description:

Automatic update for usd-26.03-2.fc45.

Changelog * Mon Apr 6 2026 Benjamin A. Beasley <code@musicinmybrain.net> - 26.03-2 - Backport fix for CVE-2026-34544 in OpenEXRCore - Fixes RHBZ#2454226
Checked
48 minutes 12 seconds ago