Fedora Security Advisories

FEDORA-2026-49dc95b509 Packages in this update:

• evince-48.1-2.fc42

Update description:

Fix command injection CVE-2026-46529

FEDORA-2026-aea94fcc1c Packages in this update:

• evince-48.1-5.fc44

Update description:

Fix command injection CVE-2026-46529

FEDORA-2026-d29bd1ad07 Packages in this update:

• evince-48.1-2.fc43

Update description:

Fix command injection CVE-2026-46529

FEDORA-2026-93281f2f96 Packages in this update:

• rrdtool-1.9.0-8.fc42

Update description:

This is an update backporting some safety checks from the rrdtool-1.10.0.

FEDORA-2026-111ad9560f Packages in this update:

• rrdtool-1.9.0-8.fc43

Update description:

This is an update backporting some safety checks from the rrdtool-1.10.0.

FEDORA-2026-87a8048005 Packages in this update:

• rrdtool-1.9.0-11.fc44

Update description:

This is an update backporting some safety checks from the rrdtool-1.10.0.

FEDORA-2026-37298d3095 Packages in this update:

• libsoup3-3.6.6-3.fc43

Update description:

Patch for CVE-2026-5119

FEDORA-EPEL-2026-f6cbd2d252 Packages in this update:

• rust-astral_async_http_range_reader-0.11.0-2.el10_3
• rust-astral_async_zip-0.0.18~rc4-2.el10_3
• rust-astral-tokio-tar-0.6.2-1.el10_3
• uv-0.11.15-1.el10_3

Update description:

Update uv to 0.11.5, fixing GHSA-3cv2-h65g-fgmm and GHSA-4gg8-gxpx-9rph.

FEDORA-2026-f8487121bd Packages in this update:

• python-uv-build-0.11.15-1.fc43
• rust-astral_async_http_range_reader-0.11.0-2.fc43
• rust-astral_async_zip-0.0.18~rc4-2.fc43
• rust-astral-tokio-tar-0.6.2-1.fc43
• uv-0.11.15-1.fc43

Update description:

Update uv and python-uv-build to 0.11.5, fixing GHSA-3cv2-h65g-fgmm and GHSA-4gg8-gxpx-9rph.

FEDORA-2026-0b1aaac651 Packages in this update:

• python-uv-build-0.11.15-1.fc44
• rust-astral_async_http_range_reader-0.11.0-2.fc44
• rust-astral_async_zip-0.0.18~rc4-2.fc44
• rust-astral-tokio-tar-0.6.2-1.fc44
• uv-0.11.15-1.fc44

Update description:

Update uv and python-uv-build to 0.11.5, fixing GHSA-3cv2-h65g-fgmm and GHSA-4gg8-gxpx-9rph.

FEDORA-2026-588c639071 Packages in this update:

• python-uv-build-0.11.15-1.fc45
• rust-astral_async_http_range_reader-0.11.0-2.fc45
• rust-astral_async_zip-0.0.18~rc4-2.fc45
• uv-0.11.15-1.fc45

Update description:

Update uv and python-uv-build to 0.11.5, fixing ee GHSA-3cv2-h65g-fgmm and GHSA-4gg8-gxpx-9rph.

FEDORA-2026-63ab4e8283 Packages in this update:

• perl-Imager-1.031-1.fc44

Update description:

Imager 1.031 - GIF: fix a heap buffer overflow with attacker controlled data CVE-2026-8454 Imager 1.030 - addtag(): store non-"int" numbers as strings - addtag: improve the regexp used to decide if a value can be stored as an int. - API: i_tags_get_int() - now fails if the value is stored as a string and is out of range for an int.

FEDORA-2026-db3618772b Packages in this update:

• kernel-6.19.14-106.fc42

Update description:

The 6.19.14-106 kernel build contains additional mitigations for new code paths in fragnesia, and a couple of other security updates without fancy names or CVEs assigned yet.

FEDORA-2026-346fbec5d5 Packages in this update:

• kernel-7.0.9-202.fc44

Update description:

The 7.0.9-102/202 stable kernel builds contain additional mitigations for new code paths in fragnesia, and a couple of other security updates without fancy names or CVEs assigned yet.

The 7.0.9 stable kernel update contains a number of important fixes across the tree.

FEDORA-2026-88a1fb9418 Packages in this update:

• kernel-7.0.9-102.fc43

Update description:

The 7.0.9-102/202 stable kernel builds contain additional mitigations for new code paths in fragnesia, and a couple of other security updates without fancy names or CVEs assigned yet.

The 7.0.9 stable kernel update contains a number of important fixes across the tree.

FEDORA-EPEL-2026-11687f6ef5 Packages in this update:

• rust-astral-tokio-tar-0.6.2-1.el9

Update description:

Update to version 0.6.2; Fixes RHBZ#2479647; Fixes GHSA-3cv2-h65g-fgmm

FEDORA-2026-b1d51e524d Packages in this update:

• postfix-3.9.11-1.fc42

Update description:

This is an update fixing CVE-2026-43964.

FEDORA-2026-e9fc21d7e2 Packages in this update:

• postfix-3.10.10-1.fc43

Update description:

This is an update fixing CVE-2026-43964.

FEDORA-2026-5cf8cc5f32 Packages in this update:

• postfix-3.10.10-1.fc44

Update description:

This is an update fixing CVE-2026-43964.

FEDORA-2026-a5176717a9 Packages in this update:

• pcs-0.12.2-2.fc45

Update description:

Automatic update for pcs-0.12.2-2.fc45.

Changelog * Fri May 15 2026 Michal Pospíšil <mpospisi@redhat.com> - 0.12.2-2 - Updated standalone web UI and HA Cluster Management Cockpit application to pcs-web-ui 0.1.24.3 (see CHANGELOG_WUI.md) Resolves: rhbz#2454042 - Fixed a crash when running pcs resource|stonith list Resolves: rhbz#2458608 - Fixed order of resources in sets when listing configuration of constraints Resolves: rhbz#2461143