Fedora Security Advisories

• xorg-x11-server-Xwayland-24.1.11-1.fc42

Update to xwayland 24.1.11

Update to xwayland 24.1.10, CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003

• mbedtls-3.6.6-1.el10_3

• Update to 3.6.6

Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.6

• mbedtls-3.6.6-1.el10_2

• Update to 3.6.6

Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.6

• mbedtls-3.6.6-1.el10_1

• Update to 3.6.6

Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.6

• libgcrypt-1.11.1-4.fc43

Fix CVE-2026-41989 (#2461782)

• libgcrypt-1.12.2-1.fc44

New upstream release (#2458643) fixing CVE-2026-41989 (#2461782)

• pdns-5.0.4-1.el9

• Update to 5.0.4

Release notes: https://doc.powerdns.com/authoritative/changelog/5.0.html#change-5.0.4 Security advisory: https://docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-05.html

• pdns-5.0.4-1.el10_3

• Update to 5.0.4

Release notes: https://doc.powerdns.com/authoritative/changelog/5.0.html#change-5.0.4 Security advisory: https://docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-05.html

• pdns-5.0.4-1.el10_2

• Update to 5.0.4

Release notes: https://doc.powerdns.com/authoritative/changelog/5.0.html#change-5.0.4 Security advisory: https://docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-05.html

• pdns-5.0.4-1.el10_1

• Update to 5.0.4

Release notes: https://doc.powerdns.com/authoritative/changelog/5.0.html#change-5.0.4 Security advisory: https://docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-05.html

• pdns-5.0.4-1.fc44

• Update to 5.0.4

Release notes: https://doc.powerdns.com/authoritative/changelog/5.0.html#change-5.0.4 Security advisory: https://docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-05.html

• pdns-5.0.4-1.fc43

• Update to 5.0.4

Release notes: https://doc.powerdns.com/authoritative/changelog/5.0.html#change-5.0.4 Security advisory: https://docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-05.html

• pdns-5.0.4-1.fc42

• Update to 5.0.4

Release notes: https://doc.powerdns.com/authoritative/changelog/5.0.html#change-5.0.4 Security advisory: https://docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-05.html

• live555-2026.04.22-1.fc45
• vlc-3.0.23-11.fc45

Latest upstream release. Adds protection against the use of a 'stolen' authenticated RTSP session id to send RTSP server's "PLAY", "PAUSE", "TEARDOWN", and "SET_PARAMETER" commands.

• rust-rpm-sequoia-1.10.2-1.fc43

Update to version 1.10.2. Addresses CVE-2026-2625.

• rust-rpm-sequoia-1.10.2-1.fc44

Update to version 1.10.2. Addresses CVE-2026-2625.

• rust-rpm-sequoia-1.10.2-1.fc42

Update to version 1.10.2. Addresses CVE-2026-2625.

• rust-sequoia-git-0.6.0-1.fc42

Update to version 0.6.0. Addresses RUSTSEC-2026-0109.

• rust-sequoia-git-0.6.0-1.fc43

Update to version 0.6.0. Addresses RUSTSEC-2026-0109.

• rust-sequoia-git-0.6.0-1.fc44

Update to version 0.6.0. Addresses RUSTSEC-2026-0109.