Fedora Security Advisories

• weasyprint-69.0-1.fc43

New upstream version which also includes a security update (CVE-2026-49452).

• weasyprint-69.0-1.fc44

New upstream version which also includes a security update (CVE-2026-49452).

• suricata-8.0.4-1.el10_3

Upstream bugfix/security release

• collectd-5.12.0-64.fc44
• varnish-8.0.2-1.fc44
• varnish-modules-0.27.0-4.fc44
• vmod-querystring-2.0.3-13.fc44
• vmod-uuid-1.10-31.fc44

New upstream release varnish-8.0.2, a security release. Includes fix for VSV00019. Dependent packages are included in this update.

• transmission-4.1.2-1.fc44

4.1.2, fix for CVE-2026-38978

• transmission-4.1.2-1.fc43

4.1.2, fix for CVE-2026-38978

• vaultwarden-1.36.0-1.el10_3

update to 1.36.0

• vaultwarden-1.36.0-1.el10_2

update to 1.36.0

• vaultwarden-1.36.0-1.fc43

update to 1.36.0

• vaultwarden-1.36.0-1.fc44

update to 1.36.0

• vaultwarden-1.36.0-1.el9

update to 1.36.0

• vaultwarden-web-2026.4.1-1.el10_2

update to 2026.4.1

• vaultwarden-web-2026.4.1-1.el10_3

update to 2026.4.1

• vaultwarden-web-2026.4.1-1.fc43

update to 2026.4.1

• vaultwarden-web-2026.4.1-1.fc44

update to 2026.4.1

• vaultwarden-web-2026.4.1-1.el9

update to 2026.4.1

• perl-Archive-Tar-3.04-522.fc43

Fixed CVE-2026-42496 - Path traversal via crafted symlinks allows arbitrary file access Backported from 3.08

• php-extras-8.3.31-1.el10_2

PHP version 8.3.31 (07 May 2026)

PDO_Firebird:

• Fixed GHSA-w476-322c-wpvm (SQL injection via NUL bytes in quoted strings). (CVE-2025-14179) (SakiTakamachi)

• php-extras-8.3.31-1.el10_3

PHP version 8.3.31 (07 May 2026)

PDO_Firebird:

• Fixed GHSA-w476-322c-wpvm (SQL injection via NUL bytes in quoted strings). (CVE-2025-14179) (SakiTakamachi)

• php8.4-extras-8.4.21-1.el10_3

PHP version 8.4.21 (07 May 2026)

PDO_Firebird:

• Fixed GHSA-w476-322c-wpvm (SQL injection via NUL bytes in quoted strings). (CVE-2025-14179) (SakiTakamachi)