Fedora Security Advisories

FEDORA-2026-8e7fa96cf3 Packages in this update:

• freeipa-4.13.2-1.fc43
• samba-4.23.10-1.fc43

Update description:

Update to Samba 4.23.10 (and rebuild of FreeIPA). Security fixes for CVE-2026-6949, CVE-2026-58218, CVE-2026-58221, CVE-2026-58222, CVE-2026-58216 and CVE-2026-58224

FEDORA-2026-fcd4630c0d Packages in this update:

• freeipa-4.13.2-1.fc44
• samba-4.24.5-1.fc44

Update description:

Update to Samba 4.24.5 (and rebuild of FreeIPA) Security fixes for CVE-2026-6949, CVE-2026-58218, CVE-2026-58221, CVE-2026-58222, CVE-2026-58216 and CVE-2026-58224

FEDORA-2026-3be8175017 Packages in this update:

• freeipa-4.13.2-1.fc45
• samba-4.24.5-1.fc45

Update description:

Update to Samba 4.24.5 (and rebuild of FreeIPA) Security fixes for CVE-2026-6949, CVE-2026-58218, CVE-2026-58221, CVE-2026-58222, CVE-2026-58216 and CVE-2026-58224

FEDORA-2026-976bbbc661 Packages in this update:

• chromium-151.0.7922.71-1.fc44

Update description:

security release chromium-151.0.7922.71 includes 370 security fixes: CVE-2026-17650 - CVE-2026-18019

FEDORA-EPEL-2026-b5ec63afe6 Packages in this update:

• chromium-151.0.7922.71-1.el10_3

Update description:

security release chromium-151.0.7922.71 includes 370 security fixes: CVE-2026-17650 - CVE-2026-18019

FEDORA-EPEL-2026-f3e21f8f08 Packages in this update:

• chromium-151.0.7922.71-1.el9

Update description:

security release chromium-151.0.7922.71 includes 370 security fixes: CVE-2026-17650 - CVE-2026-18019

FEDORA-EPEL-2026-72e908c2d7 Packages in this update:

• chromium-151.0.7922.71-1.el10_2

Update description:

security release chromium-151.0.7922.71 includes 370 security fixes: CVE-2026-17650 - CVE-2026-18019

FEDORA-2026-2c6aeb3b06 Packages in this update:

• chromium-151.0.7922.71-1.fc43

Update description:

security release chromium-151.0.7922.71 includes 370 security fixes: CVE-2026-17650 - CVE-2026-18019

FEDORA-2026-097fb2e7e9 Packages in this update:

• curl-8.15.0-8.fc43

Update description:

• fix cross-proxy Digest auth state leak (CVE-2026-7168)
• fix cross-origin Digest auth state leak (CVE-2026-11856)
• fix password leak with netrc and user in URL (CVE-2026-8926)
• fix SSH improper host validation (CVE-2026-9547)
• fix trailing dot domain super cookie (CVE-2026-8924)

FEDORA-2026-c28185613c Packages in this update:

• vaultwarden-1.37.1-1.fc44

Update description:

update to 1.37.1 fixes several cves, and some undisclosed vulnerabilities patched by upstream that will be published later

FEDORA-EPEL-2026-ad59021631 Packages in this update:

• vaultwarden-1.37.1-1.el10_3

Update description:

update to 1.37.1 fixes several cves, and some undisclosed vulnerabilities patched by upstream that will be published later

FEDORA-EPEL-2026-c159080928 Packages in this update:

• vaultwarden-1.37.1-1.el10_2

Update description:

update to 1.37.1 fixes several cves, and some undisclosed vulnerabilities patched by upstream that will be published later

FEDORA-EPEL-2026-4caf3ee5a7 Packages in this update:

• vaultwarden-1.37.1-1.el9

Update description:

update to 1.37.1 fixes several cves, and some undisclosed vulnerabilities patched by upstream that will be published later

FEDORA-2026-84a39c58c9 Packages in this update:

• vaultwarden-1.37.1-1.fc43

Update description:

update to 1.37.1 fixes several cves, and some undisclosed vulnerabilities patched by upstream that will be published later

FEDORA-2026-26c0a0ee30 Packages in this update:

• docker-buildkit-0.32.1-1.fc45

Update description:

Automatic update for docker-buildkit-0.32.1-1.fc45.

Changelog * Mon Aug 3 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 0.32.1-1 - Update to release v0.32.1 - Upstream fixes * Wed Jul 29 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 0.32.0-1 - Update to release v0.32.0 - Upstream new features and fixes - Resolves CVE-2026-47262 - rhbz#2496456 - Resolves CVE-2026-53492 - rhbz#2496552

FEDORA-2026-b986dd11b9 Packages in this update:

• vaultwarden-1.37.1-1.fc45

Update description:

Automatic update for vaultwarden-1.37.1-1.fc45.

Changelog * Mon Aug 3 2026 Jonathan Wright <jonathan@almalinux.org> - 1.37.1-1 - update to 1.37.1 rhbz#2510094 - Fix CVE-2026-31812 vaultwarden: quinn-proto: Denial of Service via crafted QUIC Initial packet rhbz#2446376 - Fix 8 cited but yet-to-be-listed medium-severity vulnerabilities

FEDORA-2026-80887c367d Packages in this update:

• ntpsec-1.2.5-1.fc44

Update description:

Update to the latest upstream release, which has a security fix for CVE-2026-18321, and other bug fixes and improvements.

FEDORA-2026-11d8a5a213 Packages in this update:

• ntpsec-1.2.5-1.fc43

Update description:

Update to the latest upstream release, which has a security fix for CVE-2026-18321, and other bug fixes and improvements.

FEDORA-2026-475559cbb9 Packages in this update:

• perl-5.42.3-525.fc44
• perl-Devel-Cover-1.52-4.fc44
• perl-PAR-Packer-1.064-6.fc44
• polymake-4.15-11.fc44

Update description:

Update Perl to 5.42.3

FEDORA-2026-b2e2c26935 Packages in this update:

• perl-5.42.3-524.fc43
• perl-Devel-Cover-1.51-4.fc43
• perl-PAR-Packer-1.064-5.fc43
• polymake-4.15-6.fc43

Update description:

Update Perl to 5.42.3