Fedora Security Advisories

• rust-rpm-sequoia-1.10.2-2.fc43
• rust-sequoia-chameleon-gnupg-0.13.1-12.fc43
• rust-sequoia-git-0.6.0-2.fc43
• rust-sequoia-keystore-server-0.2.0-7.fc43
• rust-sequoia-octopus-librnp-1.11.1-6.fc43
• rust-sequoia-openpgp-2.3.0-1.fc43
• rust-sequoia-sop-0.37.3-3.fc43
• rust-sequoia-sq-1.3.1-11.fc43
• rust-sequoia-sqv-1.3.0-6.fc43

Update sequoia-openpgp to version 2.3.0.

This includes three security relevant fixes (assigned CVE-2026-42783, CVE-2026-42784, and CVE-not-assigned-yet), see "Notable fixes" in the release notes: https://gitlab.com/sequoia-pgp/sequoia/-/raw/openpgp/v2.3.0/openpgp/NEWS

This update includes rebuilds of all affected applications to pick up the fixes for these issues.

• rust-podman-sequoia-0.3.2-2.fc44
• rust-rpm-sequoia-1.10.2-2.fc44
• rust-sequoia-chameleon-gnupg-0.13.1-12.fc44
• rust-sequoia-git-0.6.0-2.fc44
• rust-sequoia-keystore-server-0.2.0-7.fc44
• rust-sequoia-octopus-librnp-1.11.1-6.fc44
• rust-sequoia-openpgp-2.3.0-1.fc44
• rust-sequoia-sop-0.37.3-3.fc44
• rust-sequoia-sq-1.3.1-11.fc44
• rust-sequoia-sqv-1.3.0-6.fc44

Update sequoia-openpgp to version 2.3.0.

This includes three security relevant fixes (assigned CVE-2026-42783, CVE-2026-42784, and CVE-not-assigned-yet), see "Notable fixes" in the release notes: https://gitlab.com/sequoia-pgp/sequoia/-/raw/openpgp/v2.3.0/openpgp/NEWS

This update includes rebuilds of all affected applications to pick up the fixes for these issues.

• rust-podman-sequoia-0.3.2-2.fc45
• rust-rpm-sequoia-1.10.2-2.fc45
• rust-sequoia-chameleon-gnupg-0.13.1-12.fc45
• rust-sequoia-git-0.6.0-2.fc45
• rust-sequoia-keystore-server-0.2.0-7.fc45
• rust-sequoia-octopus-librnp-1.11.1-6.fc45
• rust-sequoia-openpgp-2.3.0-1.fc45
• rust-sequoia-sop-0.37.3-3.fc45
• rust-sequoia-sq-1.3.1-11.fc45
• rust-sequoia-sqv-1.3.0-6.fc45

Update sequoia-openpgp to version 2.3.0.

This includes three security relevant fixes (assigned CVE-2026-42783, CVE-2026-42784, and CVE-not-assigned-yet), see "Notable fixes" in the release notes: https://gitlab.com/sequoia-pgp/sequoia/-/raw/openpgp/v2.3.0/openpgp/NEWS

This update includes rebuilds of all affected applications to pick up the fixes for these issues.

• uriparser-1.0.2-1.fc43

Update to uriparser-1.0.2.

Update to uriparser-1.0.1.

• poppler-25.07.0-5.fc43

This update fixes CVE-2025-52885

• poppler-25.02.0-6.fc42

This update fixes CVE-2025-52885 and CVE-2025-43718

• editorconfig-0.12.11-1.fc42

Update to 0.12.11: security fix for CVE-2026-40489.

• editorconfig-0.12.11-1.fc43

Update to 0.12.11: security fix for CVE-2026-40489.

• editorconfig-0.12.11-1.fc44

Update to 0.12.11: security fix for CVE-2026-40489.

• curl-8.15.0-7.fc43

• fix Out of bounds read for cookie path (CVE-2025-9086)

• perl-Net-CIDR-Lite-0.24-1.el10_1

This update addresses some input validation issues:

• Reject Unicode digits and trailing newlines in parser inputs (CVE-2026-45190)
• Reject zero-padded CIDR masks (CVE-2026-45191)

• perl-Net-CIDR-Lite-0.24-1.fc43

This update addresses some input validation issues:

• Reject Unicode digits and trailing newlines in parser inputs (CVE-2026-45190)
• Reject zero-padded CIDR masks (CVE-2026-45191)

• perl-Net-CIDR-Lite-0.24-1.fc44

This update addresses some input validation issues:

• Reject Unicode digits and trailing newlines in parser inputs (CVE-2026-45190)
• Reject zero-padded CIDR masks (CVE-2026-45191)

• perl-Net-CIDR-Lite-0.24-1.el10_2

This update addresses some input validation issues:

• Reject Unicode digits and trailing newlines in parser inputs (CVE-2026-45190)
• Reject zero-padded CIDR masks (CVE-2026-45191)

• perl-Net-CIDR-Lite-0.24-1.el10_3

This update addresses some input validation issues:

• Reject Unicode digits and trailing newlines in parser inputs (CVE-2026-45190)
• Reject zero-padded CIDR masks (CVE-2026-45191)

• perl-Net-CIDR-Lite-0.24-1.el8

This update addresses some input validation issues:

• Reject Unicode digits and trailing newlines in parser inputs (CVE-2026-45190)
• Reject zero-padded CIDR masks (CVE-2026-45191)

• python-pysam-0.24.0-1.fc44

Update pysam

Resolves CVE issues

• freerdp-3.26.0-4.fc43

Update to 3.26.0

• freerdp-3.26.0-4.fc44

Update to 3.26.0

• chromium-148.0.7778.96-1.el10_1

Update to 148.0.7778.96

• CVE-2026-7896: Integer overflow in Blink
• CVE-2026-7897: Use after free in Mobile
• CVE-2026-7898: Use after free in Chromoting
• CVE-2026-7899: Out of bounds read and write in V8
• CVE-2026-7900: Heap buffer overflow in ANGLE
• CVE-2026-7901: Use after free in ANGLE
• CVE-2026-7902: Out of bounds memory access in V8
• CVE-2026-7903: Integer overflow in ANGLE
• CVE-2026-7904: Out of bounds read in Fonts
• CVE-2026-7905: Insufficient validation of untrusted input in Media
• CVE-2026-7906: Use after free in SVG
• CVE-2026-7907: Use after free in DOM
• CVE-2026-7908: Use after free in Fullscreen
• CVE-2026-7909: Inappropriate implementation in ServiceWorker
• CVE-2026-7910: Use after free in Views
• CVE-2026-7911: Use after free in Aura
• CVE-2026-7912: Integer overflow in GPU
• CVE-2026-7913: Insufficient policy enforcement in DevTools
• CVE-2026-7914: Type Confusion in Accessibility
• CVE-2026-7915: Insufficient data validation in DevTools
• CVE-2026-7916: Insufficient data validation in InterestGroups
• CVE-2026-7917: Use after free in Fullscreen
• CVE-2026-7918: Use after free in GPU
• CVE-2026-7919: Use after free in Aura
• CVE-2026-7920: Use after free in Skia
• CVE-2026-7921: Use after free in Passwords
• CVE-2026-7922: Use after free in ServiceWorker
• CVE-2026-7923: Out of bounds write in Skia
• CVE-2026-7924: Uninitialized Use in Dawn
• CVE-2026-7925: Use after free in Chromoting
• CVE-2026-7926: Use after free in PresentationAPI
• CVE-2026-7927: Type Confusion in Runtime
• CVE-2026-7928: Use after free in WebRTC
• CVE-2026-7929: Use after free in MediaRecording
• CVE-2026-7930: Insufficient validation of untrusted input in Cookies
• CVE-2026-7931: Insufficient validation of untrusted input in iOS
• CVE-2026-7932: Insufficient policy enforcement in Downloads
• CVE-2026-7933: Out of bounds read in WebCodecs
• CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
• CVE-2026-7935: Inappropriate implementation in Speech
• CVE-2026-7936: Object lifecycle issue in V8
• CVE-2026-7937: Insufficient policy enforcement in DevTools
• CVE-2026-7938: Use after free in CSS
• CVE-2026-7939: Inappropriate implementation in SanitizerAPI
• CVE-2026-7940: Use after free in V8
• CVE-2026-7941: Insufficient validation of untrusted input in Mobile
• CVE-2026-7942: Integer overflow in ANGLE
• CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
• CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
• CVE-2026-7945: Insufficient validation of untrusted input in COOP
• CVE-2026-7946: Insufficient policy enforcement in WebUI
• CVE-2026-7947: Insufficient validation of untrusted input in Network
• CVE-2026-7948: Race in Chromoting
• CVE-2026-7949: Out of bounds read in Skia
• CVE-2026-7950: Out of bounds read and write in GFX
• CVE-2026-7951: Out of bounds write in WebRTC
• CVE-2026-7952: Insufficient policy enforcement in Extensions
• CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
• CVE-2026-7954: Race in Shared Storage
• CVE-2026-7955: Uninitialized Use in GPU
• CVE-2026-7956: Use after free in Navigation
• CVE-2026-7957: Out of bounds write in Media
• CVE-2026-7958: Inappropriate implementation in ServiceWorker
• CVE-2026-7959: Inappropriate implementation in Navigation
• CVE-2026-7960: Race in Speech
• CVE-2026-7961: Insufficient validation of untrusted input in Permissions
• CVE-2026-7962: Insufficient policy enforcement in DirectSockets
• CVE-2026-7963: Inappropriate implementation in ServiceWorker
• CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
• CVE-2026-7965: Insufficient validation of untrusted input in DevTools
• CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
• CVE-2026-7967: Insufficient validation of untrusted input in Navigation
• CVE-2026-7968: Insufficient validation of untrusted input in CORS
• CVE-2026-7969: Integer overflow in Network
• CVE-2026-7970: Use after free in TopChrome
• CVE-2026-7971: Inappropriate implementation in ORB
• CVE-2026-7972: Uninitialized Use in GPU
• CVE-2026-7973: Integer overflow in Dawn
• CVE-2026-7974: Use after free in Blink
• CVE-2026-7975: Use after free in DevTools
• CVE-2026-7976: Use after free in Views
• CVE-2026-7977: Inappropriate implementation in Canvas
• CVE-2026-7978: Inappropriate implementation in Companion
• CVE-2026-7979: Inappropriate implementation in Media
• CVE-2026-7980: Use after free in WebAudio
• CVE-2026-7981: Out of bounds read in Codecs
• CVE-2026-7982: Uninitialized Use in WebCodecs
• CVE-2026-7983: Out of bounds read in Dawn
• CVE-2026-7984: Use after free in ReadingMode
• CVE-2026-7985: Use after free in GPU
• CVE-2026-7986: Insufficient policy enforcement in Autofill
• CVE-2026-7987: Use after free in WebRTC
• CVE-2026-7988: Type Confusion in WebRTC
• CVE-2026-7989: Insufficient data validation in DataTransfer
• CVE-2026-7990: Insufficient validation of untrusted input in Updater
• CVE-2026-7991: Use after free in UI
• CVE-2026-7992: Insufficient validation of untrusted input in UI
• CVE-2026-7993: Insufficient validation of untrusted input in Payments
• CVE-2026-7994: Inappropriate implementation in Chromoting
• CVE-2026-7995: Out of bounds read in AdFilter
• CVE-2026-7996: Insufficient validation of untrusted input in SSL
• CVE-2026-7997: Insufficient validation of untrusted input in Updater
• CVE-2026-7998: Insufficient validation of untrusted input in Dialog
• CVE-2026-7999: Inappropriate implementation in V8
• CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
• CVE-2026-8001: Use after free in Printing
• CVE-2026-8002: Use after free in Audio
• CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
• CVE-2026-8004: Insufficient policy enforcement in DevTools
• CVE-2026-8005: Insufficient validation of untrusted input in Cast
• CVE-2026-8006: Insufficient policy enforcement in DevTools
• CVE-2026-8007: Insufficient validation of untrusted input in Cast
• CVE-2026-8008: Inappropriate implementation in DevTools
• CVE-2026-8009: Inappropriate implementation in Cast
• CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
• CVE-2026-8011: Insufficient policy enforcement in Search
• CVE-2026-8012: Inappropriate implementation in MHTML
• CVE-2026-8013: Insufficient validation of untrusted input in FedCM
• CVE-2026-8014: Inappropriate implementation in Preload
• CVE-2026-8015: Inappropriate implementation in Media
• CVE-2026-8016: Use after free in WebRTC
• CVE-2026-8017: Side-channel information leakage in Media
• CVE-2026-8018: Insufficient policy enforcement in DevTools
• CVE-2026-8019: Insufficient policy enforcement in WebApp
• CVE-2026-8020: Uninitialized Use in GPU
• CVE-2026-8021: Script injection in UI
• CVE-2026-8022: Inappropriate implementation in MHTML