Fedora Security Advisories

• ntpd-rs-1.7.2-3.fc45

Rebuild ntpd-rs with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities (RUSTSEC-2026-0049, RUSTSEC-2026-0098, RUSTSEC-2026-0099, RUSTSEC-2026-0104, RUSTSEC-2026-0285, RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, RUSTSEC-2026-0349, RUSTSEC-2026-0382).

• ntpd-rs-1.7.2-3.fc44

Rebuild ntpd-rs with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities (RUSTSEC-2026-0049, RUSTSEC-2026-0098, RUSTSEC-2026-0099, RUSTSEC-2026-0104, RUSTSEC-2026-0285, RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, RUSTSEC-2026-0349, RUSTSEC-2026-0382).

• retsnoop-0.11-8.fc45

Rebuild retsnoop with newer versions of the ruzstd (fedora, epel10, epel9) and memmap2 (fedora, epel10, epel10.3, epel10.2, epel9) crates to address multiple security vulnerabilities (RUSTSEC-2026-0344, RUSTSEC-2026-0186).

• retsnoop-0.11-8.fc43

Rebuild retsnoop with newer versions of the ruzstd (fedora, epel10, epel9) and memmap2 (fedora, epel10, epel10.3, epel10.2, epel9) crates to address multiple security vulnerabilities (RUSTSEC-2026-0344, RUSTSEC-2026-0186).

• retsnoop-0.11-8.el10_3

Rebuild retsnoop with newer versions of the ruzstd (fedora, epel10, epel9) and memmap2 (fedora, epel10, epel10.3, epel10.2, epel9) crates to address multiple security vulnerabilities (RUSTSEC-2026-0344, RUSTSEC-2026-0186).

• retsnoop-0.11-8.el9

Rebuild retsnoop with newer versions of the ruzstd (fedora, epel10, epel9) and memmap2 (fedora, epel10, epel10.3, epel10.2, epel9) crates to address multiple security vulnerabilities (RUSTSEC-2026-0344, RUSTSEC-2026-0186).

• retsnoop-0.11-8.fc44

Rebuild retsnoop with newer versions of the ruzstd (fedora, epel10, epel9) and memmap2 (fedora, epel10, epel10.3, epel10.2, epel9) crates to address multiple security vulnerabilities (RUSTSEC-2026-0344, RUSTSEC-2026-0186).

• retsnoop-0.11-8.el10_4

Rebuild retsnoop with newer versions of the ruzstd (fedora, epel10, epel9) and memmap2 (fedora, epel10, epel10.3, epel10.2, epel9) crates to address multiple security vulnerabilities (RUSTSEC-2026-0344, RUSTSEC-2026-0186).

• retsnoop-0.11-8.el10_2

Rebuild retsnoop with newer versions of the ruzstd (fedora, epel10, epel9) and memmap2 (fedora, epel10, epel10.3, epel10.2, epel9) crates to address multiple security vulnerabilities (RUSTSEC-2026-0344, RUSTSEC-2026-0186).

• rust-rbspy-0.42.1-3.fc44

Rebuild rbspy with newer versions of the ruzstd, memmap2, anyhow, and quick-xml crates to address multiple security vulnerabilities (RUSTSEC-2026-0186, RUSTSEC-2026-0190, RUSTSEC-2026-0194, RUSTSEC-2026-0195, RUSTSEC-2026-0344).

• rust-rbspy-0.42.1-3.fc43

Rebuild rbspy with newer versions of the ruzstd, memmap2, anyhow, and quick-xml crates to address multiple security vulnerabilities (RUSTSEC-2026-0186, RUSTSEC-2026-0190, RUSTSEC-2026-0194, RUSTSEC-2026-0195, RUSTSEC-2026-0344).

• rust-rbspy-0.42.1-3.fc45

Rebuild rbspy with newer versions of the ruzstd, memmap2, anyhow, and quick-xml crates to address multiple security vulnerabilities (RUSTSEC-2026-0186, RUSTSEC-2026-0190, RUSTSEC-2026-0194, RUSTSEC-2026-0195, RUSTSEC-2026-0344).

• rust-ctutils-0.4.5-1.fc44

Update to version 0.4.5.

This update addresses RUSTSEC-2026-0385, a code path that was supposed to be constant-time but wasn't on some architectures.

• rust-ctutils-0.4.5-1.fc45

Update to version 0.4.5.

This update addresses RUSTSEC-2026-0385, a code path that was supposed to be constant-time but wasn't on some architectures.

• rust-ctutils-0.4.5-1.el10_4

Update to version 0.4.5.

This update addresses RUSTSEC-2026-0385, a code path that was supposed to be constant-time but wasn't on some architectures.

• rust-ctutils-0.4.5-1.el9

Update to version 0.4.5.

This update addresses RUSTSEC-2026-0385, a code path that was supposed to be constant-time but wasn't on some architectures.

• rust-ctutils-0.4.5-1.fc43

Update to version 0.4.5.

This update addresses RUSTSEC-2026-0385, a code path that was supposed to be constant-time but wasn't on some architectures.

• rust-ctutils-0.4.5-1.el10_3

Update to version 0.4.5.

This update addresses RUSTSEC-2026-0385, a code path that was supposed to be constant-time but wasn't on some architectures.

• webkitgtk-2.54.2-1.fc44

Update to version 2.54.2.

• Fix performance when compositing layers with backdrop filters.
• Fix prewarmed web process leak when they are rejected due to sandboxing.
• Release suspended pages and idle processes on memory pressure.
• Bind /dev/dxg in the bubblewrap sandbox.
• Notify input method about cursor area or surrounding text after a re-focus.
• Clear input method composition underlines before adding new ones.
• Do not enable input method for read-only text fields.
• Update the input method state when readonly changes on the focused element.
• Add User-Agent quirk for OrangeTV.
• Fix several crashes and rendering issues.

From the release notes: https://webkitgtk.org/2026/10/23/webkitgtk2.54.2-released.html

• webkitgtk-2.54.2-1.fc43

Update to version 2.54.2.

• Fix performance when compositing layers with backdrop filters.
• Fix prewarmed web process leak when they are rejected due to sandboxing.
• Release suspended pages and idle processes on memory pressure.
• Bind /dev/dxg in the bubblewrap sandbox.
• Notify input method about cursor area or surrounding text after a re-focus.
• Clear input method composition underlines before adding new ones.
• Do not enable input method for read-only text fields.
• Update the input method state when readonly changes on the focused element.
• Add User-Agent quirk for OrangeTV.
• Fix several crashes and rendering issues.

From the release notes: https://webkitgtk.org/2026/10/23/webkitgtk2.54.2-released.html