Fedora Security Advisories

FEDORA-2026-4f7402837e Packages in this update:

• fontforge-20230101-20.fc43

Update description:

Resolves: CVE-2025-15270

FEDORA-2026-3dbd8c4b89 Packages in this update:

• fontforge-20230101-19.fc42

Update description:

Resolves: CVE-2025-15270

FEDORA-2026-55f82da186 Packages in this update:

• vtk-9.2.6-44.fc43

Update description:

Add patch to fix integer overflow on 32-bit in KissFFT (CVE-2025-34297)

FEDORA-2026-ff768f8e37 Packages in this update:

• vtk-9.2.6-38.fc42

Update description:

Add patch to fix integer overflow on 32-bit in KissFFT (CVE-2025-34297)

FEDORA-2026-5ee06b864d Packages in this update:

• xen-4.21.0-5.fc44

Update description:

Use after free of paging structures in EPT [XSA-480, CVE-2026-23554] Xenstored DoS by unprivileged domain [XSA-481, CVE-2026-23555]

FEDORA-2026-66c97240f2 Packages in this update:

• dotnet8.0-8.0.125-1.fc42

Update description:

This is the March 2026 release of .NET 8

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.25/8.0.125.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.25/8.0.25.md

FEDORA-2026-f84afd42df Packages in this update:

• dotnet8.0-8.0.125-1.fc43

Update description:

This is the March 2026 release of .NET 8

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.25/8.0.125.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.25/8.0.25.md

FEDORA-2026-702a03ac4d Packages in this update:

• dotnet8.0-8.0.125-1.fc44

Update description:

This is the March 2026 release of .NET 8

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.25/8.0.125.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.25/8.0.25.md

FEDORA-2026-71154797a5 Packages in this update:

• wireshark-4.6.4-2.fc44

Update description:

Enabling a couple of python tools

New version 6.4.6

FEDORA-2026-8ae04c01e3 Packages in this update:

• dotnet9.0-9.0.115-1.fc42

Update description:

This is the March 2026 release of .NET 9.

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.14/9.0.115.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.14/9.0.14.md

FEDORA-2026-22e517fe60 Packages in this update:

• dotnet9.0-9.0.115-1.fc43

Update description:

This is the March 2026 release of .NET 9.

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.14/9.0.115.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.14/9.0.14.md

FEDORA-2026-624e30e8a7 Packages in this update:

• dotnet9.0-9.0.115-1.fc44

Update description:

This is the March 2026 release of .NET 9.

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.14/9.0.115.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.14/9.0.14.md

FEDORA-2026-48e73ed6b8 Packages in this update:

• dotnet10.0-10.0.104-1.fc42

Update description:

This is the March 2026 release of .NET 10.

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.4/10.0.104.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.4/10.0.4.md

FEDORA-2026-854e553ffa Packages in this update:

• dotnet10.0-10.0.104-1.fc43

Update description:

This is the March 2026 release of .NET 10.

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.4/10.0.104.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.4/10.0.4.md

FEDORA-2026-956fc306c4 Packages in this update:

• dotnet10.0-10.0.104-1.fc44

Update description:

This is the March 2026 release of .NET 10.

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.4/10.0.104.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.4/10.0.4.md

FEDORA-2026-06d1b46d1e Packages in this update:

• cpp-httplib-0.38.0-1.fc45

Update description:

Automatic update for cpp-httplib-0.38.0-1.fc45.

Changelog * Tue Mar 17 2026 Petr Menšík <pemensik@redhat.com> - 0.38.0-1 - Update to 0.38.0 (rhbz#2447261) * Tue Mar 17 2026 Petr Menšík <pemensik@redhat.com> - 0.37.2-1 - Update to 0.37.2 - Fixes silent TLS certificate verification bypass on HTTPS Redirect via proxy (CVE-2026-32627, rhbz#2448105)

FEDORA-2026-2e5626418f Packages in this update:

• musescore-4.3.2-21.fc42

Update description:

Rebuilt with patched dr_wav to fix CVE-2026-29022.

FEDORA-EPEL-2026-20bdd5028e Packages in this update:

• chromium-146.0.7680.80-1.el10_1

Update description:

Update to 146.0.7680.80

* CVE-2026-3909: Out of bounds write in Ski

FEDORA-EPEL-2026-d0656234cb Packages in this update:

• chromium-146.0.7680.80-1.el10_2

Update description:

Update to 146.0.7680.80

* CVE-2026-3909: Out of bounds write in Ski

FEDORA-2026-44c7458a92 Packages in this update:

• chromium-146.0.7680.80-1.fc43

Update description:

Update to 146.0.7680.80

* CVE-2026-3909: Out of bounds write in Ski