Fedora Security Advisories

FEDORA-EPEL-2026-4301c99549 Packages in this update:

• openbao-2.6.3-1.el9

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-EPEL-2026-498661c28b Packages in this update:

• openbao-2.6.3-1.el8

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-2026-b4dd4dc37c Packages in this update:

• openbao-2.6.3-1.fc43

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-2026-3688145aba Packages in this update:

• openbao-2.6.3-1.fc44

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-EPEL-2026-982c090cff Packages in this update:

• openbao-2.6.3-1.el10_3

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-2026-84fde70eed Packages in this update:

• erlang-26.2.5.21-8.fc44

Update description:

Backported fixes for CVE-2026-65634, CVE-2026-68956, CVE-2026-89422

FEDORA-2026-d47f327121 Packages in this update:

• erlang-26.2.5.21-8.fc43

Update description:

Backported fixes for CVE-2026-65634, CVE-2026-68956, CVE-2026-89422

FEDORA-2026-8604c8d63b Packages in this update:

• emacs-31.1-4.fc45

Update description:

Prevent arbitrary code execution in flymake.

FEDORA-2026-0a7abaa716 Packages in this update:

• asterisk-23.5.0-5.fc45

Update description:

Fix for CVE-2026-84975

FEDORA-2026-9ff25022c1 Packages in this update:

• cockpit-368-1.fc43

Update description:

Automatic update for cockpit-368-1.fc43.

FEDORA-2026-61b2a3477a Packages in this update:

• cockpit-368-1.fc44

Update description:

Automatic update for cockpit-368-1.fc44.

Changelog for cockpit * Wed Sep 23 2026 Packit <hello@packit.dev> - 368-1 - Limit concurrent connections CVE-2026-91149 - Harden cockpit-ws against trailing slash CVE-2026-91147 - Sanitize URLs from PackageKit CVE-2026-91148 - Interactive file chooser for SSH keys - Bug fixes and translation updates - Resolves RHEL-263070, RHEL-262891, RHEL-253609 for rhel-10.4 - Resolves RHEL-263066 for rhel-9.10

FEDORA-2026-d375ea9e79 Packages in this update:

• cockpit-368-1.fc45

Update description:

Automatic update for cockpit-368-1.fc45.

Changelog for cockpit * Wed Sep 23 2026 Packit <hello@packit.dev> - 368-1 - Limit concurrent connections CVE-2026-91149 - Harden cockpit-ws against trailing slash CVE-2026-91147 - Sanitize URLs from PackageKit CVE-2026-91148 - Interactive file chooser for SSH keys - Bug fixes and translation updates - Resolves RHEL-263070, RHEL-262891, RHEL-253609 for rhel-10.4 - Resolves RHEL-263066 for rhel-9.10

FEDORA-2026-4923296720 Packages in this update:

• cockpit-machines-357-1.fc43

Update description:

Automatic update for cockpit-machines-357-1.fc43.

Changelog for cockpit-machines * Wed Sep 23 2026 Packit <hello@packit.dev> - 357-1 - Harden against local attacks from accessing sensitive data CVE-2026-92768, CVE-2026-92747, CVE-2026-92745 - Resolves RHEL-263125, RHEL-263121, RHEL-263122 for rhel-10.4 - Resolves RHEL-263116, RHEL-263119, RHEL-263126 for rhel-9.10

FEDORA-2026-57e39fc2fa Packages in this update:

• cockpit-machines-357-1.fc44

Update description:

Automatic update for cockpit-machines-357-1.fc44.

Changelog for cockpit-machines * Wed Sep 23 2026 Packit <hello@packit.dev> - 357-1 - Harden against local attacks from accessing sensitive data CVE-2026-92768, CVE-2026-92747, CVE-2026-92745 - Resolves RHEL-263125, RHEL-263121, RHEL-263122 for rhel-10.4 - Resolves RHEL-263116, RHEL-263119, RHEL-263126 for rhel-9.10

FEDORA-2026-2afda0f514 Packages in this update:

• cockpit-machines-357-1.fc45

Update description:

Automatic update for cockpit-machines-357-1.fc45.

Changelog for cockpit-machines * Wed Sep 23 2026 Packit <hello@packit.dev> - 357-1 - Harden against local attacks from accessing sensitive data CVE-2026-92768, CVE-2026-92747, CVE-2026-92745 - Resolves RHEL-263125, RHEL-263121, RHEL-263122 for rhel-10.4 - Resolves RHEL-263116, RHEL-263119, RHEL-263126 for rhel-9.10

FEDORA-2026-f41fd82fcf Packages in this update:

• cockpit-files-45-1.fc45

Update description:

Automatic update for cockpit-files-45-1.fc45.

FEDORA-2026-a643ae21d6 Packages in this update:

• cockpit-files-45-1.fc43

Update description:

Automatic update for cockpit-files-45-1.fc43.

Changelog for cockpit-files * Wed Sep 23 2026 Packit <hello@packit.dev> - 45-1 - Fixes CVE-2026-91202, CVE-2026-91203, CVE-2026-91205 - Resolves RHEL-263138, RHEL-263139, RHEL-263144 for rhel-10.4 - Resolves RHEL-263135, RHEL-263137, RHEL-263145 for rhel-9.10

FEDORA-2026-b3367f2111 Packages in this update:

• emacs-31.1-4.fc46

Update description:

Automatic update for emacs-31.1-4.fc46.

Changelog * Wed Sep 23 2026 Peter Oliver <git@mavit.org.uk> - 1:31.1-4 - Prevent arbitrary code execution in flymake (rhbz#2537390).

FEDORA-2026-d2c4c4794c Packages in this update:

• openvpn-2.6.23-1.fc43

Update description:

Update to upstream OpenVPN 2.6.23

FEDORA-2026-59a4f90bc0 Packages in this update:

• hplip-3.26.6-1.fc43

Update description:

3.26.6, fixes CVE-2026-91105,CVE-2026-91103,CVE-2026-91102,CVE-2026-91101,

CVE-2026-91100,CVE-2026-91099,CVE-2026-91098,CVE-2026-91097