Fedora Security Advisories

• rust-rustls-webpki-0.103.13-1.fc42

Update to version 0.103.13. Addresses RUSTSEC-2026-0098, RUSTSEC-2026-0099, RUSTSEC-2026-0104.

• nodejs20-20.20.2-3.fc43

Update to version 20.20.2

• nodejs20-20.20.2-3.fc44

Update to version 20.20.2

Automatic update for nodejs20-20.20.0-7.fc44.

• PackageKit-1.3.4-3.fc42

Backport fix for race condition leading to root compromise (GHSA-f55j-vvr9-69xv)

• PackageKit-1.3.4-3.fc43

Backport fix for race condition leading to root compromise (GHSA-f55j-vvr9-69xv)

• PackageKit-1.3.4-3.fc44

Backport fix for race condition leading to root compromise (GHSA-f55j-vvr9-69xv)

• jfrog-cli-2.98.0-1.el9

Upstream 2.98.0 release. https://github.com/jfrog/jfrog-cli/releases/tag/v2.98.0

• jfrog-cli-2.98.0-1.fc44

Upstream release 2.98.0. https://github.com/jfrog/jfrog-cli/releases/tag/v2.98.0

Resolves the following security issues: CVE-2025-11579 CVE-2025-66564 CVE-2026-23831 CVE-2026-23991 CVE-2026-23992 CVE-2026-24117 CVE-2026-24137 CVE-2026-24686 CVE-2026-32285 CVE-2026-33762 CVE-2026-34165 CVE-2026-34986

• openbao-2.5.3-1.el10_2

Update to upstream 2.5.3, fix CVE-2026-34986, CVE-2026-39388, CVE-2026-39396, CVE-2026-40264

• openbao-2.5.3-1.el9

Update to upstream 2.5.3, fix CVE-2026-34986, CVE-2026-39388, CVE-2026-39396, CVE-2026-40264

• openbao-2.5.3-1.el10_1

Update to upstream 2.5.3, fix CVE-2026-34986, CVE-2026-39388, CVE-2026-39396, CVE-2026-40264

• openbao-2.5.3-1.fc44

Update to upstream 2.5.3, fix CVE-2026-34986, CVE-2026-39388, CVE-2026-39396, CVE-2026-40264

• openbao-2.5.3-1.fc42

Update to upstream 2.5.3, fix CVE-2026-34986, CVE-2026-39388, CVE-2026-39396, CVE-2026-40264

• openbao-2.5.3-1.fc43

Update to upstream 2.5.3, fix CVE-2026-34986, CVE-2026-39388, CVE-2026-39396, CVE-2026-40264

• openbao-2.5.3-1.el10_3

Update to upstream 2.5.3, fix CVE-2026-34986, CVE-2026-39388, CVE-2026-39396, CVE-2026-40264

• openbao-2.5.3-1.el8

Update to upstream 2.5.3, fix CVE-2026-34986, CVE-2026-39388, CVE-2026-39396, CVE-2026-40264

• pyp2spec-0.14.1-1.fc44

Added sanitization of inputs of the metadata fields.

• pyp2spec-0.14.1-1.fc43

Added sanitization of inputs of the metadata fields.

• dotnet9.0-9.0.116-1.fc44

Update to .NET SDK 9.0.116 and Runtime 9.0.15

Fixes: CVE-2026-26171, CVE-2026-32178, CVE-2026-32203, CVE-2026-33116

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.15/9.0.116.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.15/9.0.15.md

• dotnet9.0-9.0.116-1.fc43

Update to .NET SDK 9.0.116 and Runtime 9.0.15

Fixes: CVE-2026-26171, CVE-2026-32178, CVE-2026-32203, CVE-2026-33116

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.15/9.0.116.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.15/9.0.15.md