Fedora Security Advisories

• rust-cargo-deny-0.19.9-5.fc45

Rebuild with updated versions of the zstd / zstd-safe crates that address multiple security issues (advisories RUSTSEC-2026-0391, RUSTSEC-2026-0392, RUSTSEC-2026-0393, RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399, RUSTSEC-2026-0400, RUSTSEC-2026-0401, RUSTSEC-2026-0402, RUSTSEC-2026-0403, RUSTSEC-2026-0404, RUSTSEC-2026-0405, RUSTSEC-2026-0406).

• rust-cargo-deny-0.19.9-5.fc43

Rebuild with updated versions of the zstd / zstd-safe crates that address multiple security issues (advisories RUSTSEC-2026-0391, RUSTSEC-2026-0392, RUSTSEC-2026-0393, RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399, RUSTSEC-2026-0400, RUSTSEC-2026-0401, RUSTSEC-2026-0402, RUSTSEC-2026-0403, RUSTSEC-2026-0404, RUSTSEC-2026-0405, RUSTSEC-2026-0406).

• rust-cargo-deny-0.19.9-5.fc44

Rebuild with updated versions of the zstd / zstd-safe crates that address multiple security issues (advisories RUSTSEC-2026-0391, RUSTSEC-2026-0392, RUSTSEC-2026-0393, RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399, RUSTSEC-2026-0400, RUSTSEC-2026-0401, RUSTSEC-2026-0402, RUSTSEC-2026-0403, RUSTSEC-2026-0404, RUSTSEC-2026-0405, RUSTSEC-2026-0406).

• rust-onefetch-2.28.1-6.el10_4

Rebuilt with zstd 0.13.4 for multiple security advisories

• rust-libcramjam0.8-0.8.0-12.fc44

Rebuild to address multiple security advisories in zstd / zstd-safe

• rust-onefetch-2.28.1-6.fc43

Rebuilt with zstd 0.13.4 for multiple security advisories

• rust-libcramjam0.8-0.8.0-12.fc45

Rebuild to address multiple security advisories in zstd / zstd-safe

Work around ppc64 vectorization bug in LLVM 23, fixing failure to build from source.

• rust-onefetch-2.28.1-6.fc44

Rebuilt with zstd 0.13.4 for multiple security advisories

• below-0.11.0-5.fc45

Rebuilt with zstd 0.13.4 for multiple security advisories

• rust-onefetch-2.28.1-6.fc45

Rebuilt with zstd 0.13.4 for multiple security advisories

• afflib-3.7.23-2.fc43

Update to 3.7.23

• afflib-3.7.23-2.fc45

Update to 3.7.23

• afflib-3.7.23-2.fc44

Update to 3.7.23

• python-h5io-0.2.6-1.el9

Update to 0.2.6 upstream release

This release fixes GHSA-vwvw-f6v4-w737 / CVE-2026-120499: read_hdf5 could execute arbitrary code when reading a crafted HDF5 file.

As part of the fix, loading files containing classes, objects written with use_state=True, or pandas DataFrame/Series objects is disabled by default and will now raise a ValueError; see the release notes for details.

• freerdp-3.33.0-3.fc44

Enable the XDG AAD authentication helper.

Update to 3.33.0

• freerdp-3.33.0-3.fc43

Enable the XDG AAD authentication helper.

Update to 3.33.0

• proftpd-1.3.9e-3.el10_2

This update fixes a couple of issues in mod_copy, which is not enabled by default.

• <Limit READ> configurations were not honored by SITE COPY as they should be
• Fix write restriction bypass via symlink following in mod_copy (CVE-2026-119364)

• proftpd-1.3.9e-3.el10_4

This update fixes a couple of issues in mod_copy, which is not enabled by default.

• <Limit READ> configurations were not honored by SITE COPY as they should be
• Fix write restriction bypass via symlink following in mod_copy (CVE-2026-119364)

• proftpd-1.3.9e-3.fc44

This update fixes a couple of issues in mod_copy, which is not enabled by default.

• <Limit READ> configurations were not honored by SITE COPY as they should be
• Fix write restriction bypass via symlink following in mod_copy (CVE-2026-119364)

• proftpd-1.3.9e-3.el10_3

This update fixes a couple of issues in mod_copy, which is not enabled by default.

• <Limit READ> configurations were not honored by SITE COPY as they should be
• Fix write restriction bypass via symlink following in mod_copy (CVE-2026-119364)