Fedora Security Advisories

FEDORA-EPEL-2026-da74b047d6 Packages in this update:

• libgit2_1.9-1.9.7-1.el10_3

Update description:

Update to version 1.9.7.

Release notes: https://github.com/libgit2/libgit2/releases/tag/v1.9.7

FEDORA-EPEL-2026-a5f4b4222e Packages in this update:

• libgit2_1.9-1.9.7-1.el9

Update description:

Update to version 1.9.7.

Release notes: https://github.com/libgit2/libgit2/releases/tag/v1.9.7

FEDORA-EPEL-2026-7671e4d4a3 Packages in this update:

• libgit2_1.9-1.9.7-1.el10_2

Update description:

Update to version 1.9.7.

Release notes: https://github.com/libgit2/libgit2/releases/tag/v1.9.7

FEDORA-2026-86684eb696 Packages in this update:

• libgit2-1.9.7-1.fc44

Update description:

Update to version 1.9.7.

Release notes: https://github.com/libgit2/libgit2/releases/tag/v1.9.7

FEDORA-2026-60e31281d5 Packages in this update:

• libgit2-1.9.7-1.fc43

Update description:

Update to version 1.9.7.

Release notes: https://github.com/libgit2/libgit2/releases/tag/v1.9.7

FEDORA-2026-f3ca65c0c9 Packages in this update:

• libsoup3-3.6.6-4.fc43

Update description:

Fix for several CVEs

FEDORA-EPEL-2026-df0e6e2699 Packages in this update:

• pack-0.40.9-1.el8

Update description:

Update to 0.40.9 - fixes CVE-2026-41178 (DoS via oversized OpenTelemetry baggage headers)

FEDORA-EPEL-2026-0af8f5893c Packages in this update:

• pack-0.40.9-1.el9

Update description:

Update to 0.40.9 - fixes CVE-2026-41178 (DoS via oversized OpenTelemetry baggage headers)

FEDORA-2026-70dd9b4fc0 Packages in this update:

• pack-0.40.9-1.fc43

Update description:

Update to 0.40.9 - fixes CVE-2026-41178 (DoS via oversized OpenTelemetry baggage headers)

FEDORA-2026-14ebd38fea Packages in this update:

• pack-0.40.9-1.fc44

Update description:

Update to 0.40.9 - fixes CVE-2026-41178 (DoS via oversized OpenTelemetry baggage headers)

FEDORA-2026-c8cfd2f2f9 Packages in this update:

• libsoup3-3.6.6-9.fc44

Update description:

Patches for several CVEs

FEDORA-2026-7cfd54a4c1 Packages in this update:

• dotnet9.0-9.0.120-1.fc44

Update description:

Update to .NET SDK 9.0.120 and Runtime 9.0.19

Fixes: CVE-2026-62871,CVE-2026-62886,CVE-2026-62897,CVE-2026-62898,CVE-2026-62899,CVE-2026-62900,CVE-2026-62901,CVE-2026-62902,CVE-2026-62909,CVE-2026-70354

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.19/9.0.120.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.19/9.0.19.md

FEDORA-2026-9c8770dffb Packages in this update:

• dotnet9.0-9.0.120-1.fc43

Update description:

Update to .NET SDK 9.0.120 and Runtime 9.0.19

Fixes: CVE-2026-62871,CVE-2026-62886,CVE-2026-62897,CVE-2026-62898,CVE-2026-62899,CVE-2026-62900,CVE-2026-62901,CVE-2026-62902,CVE-2026-62909,CVE-2026-70354

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.19/9.0.120.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.19/9.0.19.md

FEDORA-EPEL-2026-164ecb432d Packages in this update:

• chromium-151.0.7922.137-1.el10_2

Update description:

chromium security release 151.0.7922.137 inludes fixes for:

* CVE-2026-19556: Use after free in V8 * CVE-2026-19557: Use after free in TabStrip * CVE-2026-19558: Use after free in Extensions * CVE-2026-19559: Use after free in HTML * CVE-2026-19560: Use after free in Blink

FEDORA-2026-51e9d3c767 Packages in this update:

• chromium-151.0.7922.137-1.fc43

Update description:

chromium security release 151.0.7922.137 inludes fixes for:

* CVE-2026-19556: Use after free in V8 * CVE-2026-19557: Use after free in TabStrip * CVE-2026-19558: Use after free in Extensions * CVE-2026-19559: Use after free in HTML * CVE-2026-19560: Use after free in Blink

FEDORA-2026-c374680c6a Packages in this update:

• chromium-151.0.7922.137-1.fc44

Update description:

chromium security release 151.0.7922.137 inludes fixes for:

* CVE-2026-19556: Use after free in V8 * CVE-2026-19557: Use after free in TabStrip * CVE-2026-19558: Use after free in Extensions * CVE-2026-19559: Use after free in HTML * CVE-2026-19560: Use after free in Blink

FEDORA-EPEL-2026-c2dac28c8c Packages in this update:

• chromium-151.0.7922.137-1.el9

Update description:

chromium security release 151.0.7922.137 inludes fixes for:

* CVE-2026-19556: Use after free in V8 * CVE-2026-19557: Use after free in TabStrip * CVE-2026-19558: Use after free in Extensions * CVE-2026-19559: Use after free in HTML * CVE-2026-19560: Use after free in Blink

FEDORA-EPEL-2026-40713968f8 Packages in this update:

• chromium-151.0.7922.137-1.el10_3

Update description:

chromium security release 151.0.7922.137 inludes fixes for:

* CVE-2026-19556: Use after free in V8 * CVE-2026-19557: Use after free in TabStrip * CVE-2026-19558: Use after free in Extensions * CVE-2026-19559: Use after free in HTML * CVE-2026-19560: Use after free in Blink

FEDORA-2026-1397d83d94 Packages in this update:

• dotnet8.0-8.0.130-1.fc44

Update description:

Update to .NET SDK 8.0.130 and Runtime 8.0.30

Fixes: CVE-2026-62871,CVE-2026-62886,CVE-2026-62897,CVE-2026-62898,CVE-2026-62899,CVE-2026-62900,CVE-2026-62901,CVE-2026-62902,CVE-2026-62909,CVE-2026-70354

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.30/8.0.130.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.30/8.0.30.md

FEDORA-2026-0db5bf0aae Packages in this update:

• dotnet8.0-8.0.130-1.fc43

Update description:

Update to .NET SDK 8.0.130 and Runtime 8.0.30

Fixes: CVE-2026-62871,CVE-2026-62886,CVE-2026-62897,CVE-2026-62898,CVE-2026-62899,CVE-2026-62900,CVE-2026-62901,CVE-2026-62902,CVE-2026-62909,CVE-2026-70354

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.30/8.0.130.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.30/8.0.30.md