Fedora Security Advisories

FEDORA-EPEL-2026-8d15051ff1 Packages in this update:

• rust-ppmd-rust-1.5.2-1.el10_2

Update description:

Update ppmd-rust to 1.5.2, fixing a possible denial of service via an infinite loop.

1.5.1 - 2026-10-18 Fixed

• Fixed an infinite loop in the PPMd8 model restoration for a memory size between 2048 and 2063 bytes. PPMD8_MIN_MEM_SIZE is now 2064. The previous value 2048 was the minimum memory size of PPMd7. 7-Zip defines no minimum memory size for PPMd8 and has the same infinite loop for these sizes. The ZIP and .pmd codecs of 7-Zip always use at least 1 MiB and are unaffected.

FEDORA-EPEL-2026-90b6634716 Packages in this update:

• rust-ppmd-rust-1.5.2-1.el10_3

Update description:

Update ppmd-rust to 1.5.2, fixing a possible denial of service via an infinite loop.

1.5.1 - 2026-10-18 Fixed

• Fixed an infinite loop in the PPMd8 model restoration for a memory size between 2048 and 2063 bytes. PPMD8_MIN_MEM_SIZE is now 2064. The previous value 2048 was the minimum memory size of PPMd7. 7-Zip defines no minimum memory size for PPMd8 and has the same infinite loop for these sizes. The ZIP and .pmd codecs of 7-Zip always use at least 1 MiB and are unaffected.

FEDORA-2026-3ee4dad1c6 Packages in this update:

• ca-certificates-2026.2.92_v9.0.319-2.fc43

Update description:

Update ca-certificates to ca-certificates-2026.2.92_v9.0.319-2.fc43

• Remove emSign Root CS CA - G3

Additional code signing certificate that sign 2 of the compromised certificates

FEDORA-2026-0609e13c0d Packages in this update:

• ca-certificates-2026.2.92_v9.0.319-2.fc44

Update description:

Update ca-certificates to ca-certificates-2026.2.92_v9.0.319-2.fc44

• Remove emSign Root CS CA - G3

Additional code signing certificate that sign 2 of the compromised certificates

FEDORA-2026-e57d2527d5 Packages in this update:

• ca-certificates-2026.2.92_v9.0.319-2.fc45

Update description:

Update ca-certificates to ca-certificates-2026.2.92_v9.0.319-2.fc45

• Remove emSign Root CS CA - G3

Additional code signing certificate that sign 2 of the compromised certificates

Update ca-certificates to ca-certificates-2026.2.92_v9.0.319-1.fc45

FEDORA-2026-f7c7c6a7de Packages in this update:

• mingw-python-certifi-2026.10.18-1.fc45

Update description:

Update to certifi-2026.10.18.

FEDORA-2026-746612ff80 Packages in this update:

• mingw-python-certifi-2026.10.18-1.fc44

Update description:

Update to certifi-2026.10.18.

FEDORA-2026-f82897416f Packages in this update:

• mingw-python-certifi-2026.10.18-1.fc43

Update description:

Update to certifi-2026.10.18.

FEDORA-2026-844fdf9ca7 Packages in this update:

• openssh-10.6p1-1.fc45

Update description:

Rebasing OpenSSH to 10.6p1

FEDORA-EPEL-2026-f65970b394 Packages in this update:

• rust-cargo-semver-checks-0.51.0-5.el10_3
• rust-trustfall-rustdoc-adapter57-57.1.3-2.el10_3
• rust-trustfall-rustdoc-adapter60-60.0.3-2.el10_3
• rust-trustfall-rustdoc-adapter-61.0.3-1.el10_3

Update description:

Rebuild cargo-semver-checks with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, and RUSTSEC-2026-0349 and with faster-hex 0.10.1 for RUSTSEC-2026-0306. Update trustfall-rustdoc-adapter to 61.0.3/60.0.3/57.1.3.

FEDORA-EPEL-2026-7e7a60affc Packages in this update:

• rust-cargo-semver-checks-0.51.0-5.el10_4
• rust-trustfall-rustdoc-adapter57-57.1.3-2.el10_4
• rust-trustfall-rustdoc-adapter60-60.0.3-2.el10_4
• rust-trustfall-rustdoc-adapter-61.0.3-1.el10_4

Update description:

Rebuild cargo-semver-checks with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, and RUSTSEC-2026-0349 and with faster-hex 0.10.1 for RUSTSEC-2026-0306. Update trustfall-rustdoc-adapter to 61.0.3/60.0.3/57.1.3.

FEDORA-2026-d5f8446449 Packages in this update:

• php-8.4.27-2.fc43

Update description:

Security update: - RCE via OOM corruption, CVE-2026-109618 - RCE via stale global state, CVE-2026-109619

FEDORA-2026-a9354b8a1e Packages in this update:

• php-8.5.12-1.fc45

Update description:

Security update: - RCE via OOM corruption, CVE-2026-109618 - RCE via stale global state, CVE-2026-109619

FEDORA-2026-a9eba4bbc3 Packages in this update:

• php-8.5.12-1.fc44

Update description:

Security update: - RCE via OOM corruption, CVE-2026-109618 - RCE via stale global state, CVE-2026-109619

FEDORA-EPEL-2026-1d3c013156 Packages in this update:

• ntpsec-1.2.6-1.el10_3

Update description:

Update to the latest upstream release, which has security fixes for CVE-2026-18321 CVE-2026-102483 CVE-2026-102484 CVE-2026-102485 CVE-2026-102486.

FEDORA-EPEL-2026-077c9d1631 Packages in this update:

• ntpsec-1.2.6-1.el9

Update description:

Update to the latest upstream release, which has security fixes for CVE-2026-18321 CVE-2026-102483 CVE-2026-102484 CVE-2026-102485 CVE-2026-102486.

FEDORA-2026-ed3c0a9bce Packages in this update:

• libmspack-0.11-0.1.alpha.fc46

Update description:

Automatic update for libmspack-0.11-0.1.alpha.fc46.

Changelog * Wed Oct 21 2026 Dan Horák <dan[at]danny.cz> - 0.11-0.1.alpha - updated to 0.11alpha - fix CVE-2026-110602 (rhbz#2558186) - add %check section

FEDORA-2026-6b7650cc3c Packages in this update:

• rust-cargo-semver-checks-0.51.0-6.fc43
• rust-trustfall-rustdoc-adapter57-57.1.3-2.fc43
• rust-trustfall-rustdoc-adapter60-60.0.3-2.fc43
• rust-trustfall-rustdoc-adapter-61.0.3-1.fc43

Update description:

Rebuild cargo-semver-checks with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, and RUSTSEC-2026-0349, with faster-hex 0.10.1 for RUSTSEC-2026-0306, and with updated dependencies for the eMudhra intermediate CA compromise. Update trustfall-rustdoc-adapter to 61.0.3/60.0.3/57.1.3.

FEDORA-2026-b86561a89a Packages in this update:

• clevis-24-1.fc45

Update description:

Add new sources (release 24)

FEDORA-2026-9379466325 Packages in this update:

• clevis-24-1.fc44

Update description:

Add new sources (release 24)