Fedora Security Advisories

FEDORA-2026-7bf2937528 Packages in this update:

• mingw-glib2-2.88.2-2.fc44

Update description:

Backport fix for CVE-2026-58016.

Update to glib-2.88.2.

FEDORA-2026-8e39f35701 Packages in this update:

• mingw-glib2-2.86.5-2.fc43

Update description:

Backport fix for CVE-2026-58016.

Update to glib-2.86.5.

FEDORA-2026-9fdda5018f Packages in this update:

• perl-DBI-1.650-1.fc44

Update description:

1.650 bump - Fix CVE-2026-14739, CVE-2026-14740 and CVE-2026-14380

FEDORA-2026-71d7e4d1da Packages in this update:

• perl-DBI-1.650-1.fc43

Update description:

1.650 bump - Fix CVE-2026-14739, CVE-2026-14740 and CVE-2026-14380

FEDORA-2026-46c4892063 Packages in this update:

• python-pillow-12.3.0-1.fc44

Update description:

Fix CVE-2026-55380, CVE-2026-54060, CVE-2026-54059, CVE-2026-55379, CVE-2026-55798

FEDORA-2026-d86f55c21a Packages in this update:

• python-pillow-11.3.0-9.fc43

Update description:

Fix CVE-2026-55380, CVE-2026-54060, CVE-2026-54059, CVE-2026-55379, CVE-2026-55798

FEDORA-2026-377015b34b Packages in this update:

• pam-1.7.2-2.fc44

Update description:

pam_userdb: fix password comparison timing leak

FEDORA-2026-9db41d0ada Packages in this update:

• python-safetensors-0.8.0-2.fc45
• rust-safetensors-0.8.0-1.fc45

Update description:

Update safetensors to 0.8.0 and build the Python extension using PyO3 0.29, which fixes RUSTSEC-2026-0176 and RUSTSEC-2026-0177.

FEDORA-2026-18ea3f47f8 Packages in this update:

• libXfont2-2.0.8-1.fc43

Update description:

libXfont2 2.0.8 (CVE-2026-56001, CVE-2026-56002, CVE-2026-56003)

FEDORA-2026-43652cd5e8 Packages in this update:

• libXfont2-2.0.8-1.fc44

Update description:

libXfont2 2.0.8 (CVE-2026-56001, CVE-2026-56002, CVE-2026-56003)

FEDORA-2026-28b7854014 Packages in this update:

• xorg-x11-server-21.1.24-1.fc44

Update description:

Update to xserver 21.1.24, fixes for: CVE-2026-55999, CVE-2025-56000

FEDORA-2026-6a00d3109f Packages in this update:

• xorg-x11-server-Xwayland-24.1.13-1.fc43

Update description:

Update to xwayland 24.1.13, fixes for: CVE-2026-55999, CVE-2026-56000

FEDORA-2026-a3d32667b8 Packages in this update:

• xorg-x11-server-Xwayland-24.1.13-1.fc44

Update description:

Update to xwayland 24.1.13, fixes for: CVE-2026-55999, CVE-2026-56000

FEDORA-EPEL-2026-2e6fb1faee Packages in this update:

• ansible-collection-ansible-posix-1.6.2-1.el8

Update description:

• Update to 1.6.2.
• Mitigates CVE-2026-11837 (rhbz#2487432)

FEDORA-EPEL-2026-6904308b23 Packages in this update:

• ansible-collection-ansible-posix-1.6.2-1.el9

Update description:

• Update to 1.6.2.
• Mitigates CVE-2026-11837 (rhbz#2487432)

FEDORA-EPEL-2026-fd494b923d Packages in this update:

• ansible-collection-ansible-posix-2.2.1-1.el10_2

Update description:

• Update to 2.2.1. Fixes rhbz#2479556.
• Mitigates CVE-2026-11837 (rhbz#2487430, rhbz#2487431, rhbz#2487432)

FEDORA-2026-0f941ecaa6 Packages in this update:

• ansible-collection-ansible-posix-2.2.1-1.fc44

Update description:

• Update to 2.2.1. Fixes rhbz#2479556.
• Mitigates CVE-2026-11837 (rhbz#2487430, rhbz#2487431, rhbz#2487432)

FEDORA-2026-50e5126be4 Packages in this update:

• ansible-collection-ansible-posix-2.2.1-1.fc43

Update description:

• Update to 2.2.1. Fixes rhbz#2479556.
• Mitigates CVE-2026-11837 (rhbz#2487430, rhbz#2487431, rhbz#2487432)

FEDORA-EPEL-2026-9f99d1a591 Packages in this update:

• ansible-collection-ansible-posix-2.2.1-1.el10_3

Update description:

• Update to 2.2.1. Fixes rhbz#2479556.
• Mitigates CVE-2026-11837 (rhbz#2487430, rhbz#2487431, rhbz#2487432)

FEDORA-2026-4a0c61a43f Packages in this update:

• ansible-collection-ansible-posix-2.2.1-1.fc45

Update description:

Automatic update for ansible-collection-ansible-posix-2.2.1-1.fc45.

Changelog * Wed Jul 8 2026 Maxwell G <maxwell@gtmx.me> - 2.2.1-1 - Update to 2.2.1. Fixes rhbz#2479556. - Mitigates CVE-2026-11837 (rhbz#2487430, rhbz#2487431, rhbz#2487432)