Fedora Security Advisories

FEDORA-2026-31601794bf Packages in this update:

• firefox-159.0-1.fc44

Update description:

• Updated to latest upstream (159.0)

FEDORA-2026-b2f81db711 Packages in this update:

• rply-1.1.4-11.fc45

Update description:

Fix for CVE-2026-115722

FEDORA-2026-aa0bdade09 Packages in this update:

• rply-1.1.4-11.fc44

Update description:

Fix for CVE-2026-115722

FEDORA-2026-5079b4320a Packages in this update:

• rply-1.1.4-11.fc43

Update description:

Fix for CVE-2026-115722

FEDORA-2026-3a8a4802f0 Packages in this update:

• glib-networking-2.90.1-1.fc45

Update description:

Upstream release consisting mostly of CVE fixes, one of which is high severity (CVE-2026-103963)

FEDORA-2026-bfd4fcb0d6 Packages in this update:

• sofia-sip-1.13.18-2.fc44

Update description:

Patch for out-of-bounds read in msg_multipart_parse().

FEDORA-2026-93bd58baf7 Packages in this update:

• sofia-sip-1.13.18-2.fc45

Update description:

Patch for out-of-bounds read in msg_multipart_parse().

FEDORA-2026-22482dbc27 Packages in this update:

• sofia-sip-1.13.18-2.fc43

Update description:

Patch for out-of-bounds read in msg_multipart_parse().

FEDORA-EPEL-2026-79badfe46e Packages in this update:

• sofia-sip-1.13.17-2.el9

Update description:

Patch for out-of-bounds read in msg_multipart_parse().

FEDORA-2026-4157a13c05 Packages in this update:

• sofia-sip-1.13.18-2.fc46

Update description:

Automatic update for sofia-sip-1.13.18-2.fc46.

Changelog * Tue Oct 27 2026 Tomi Lähteenmäki <lihis@lihis.net> - 1.13.18-2 - Patch for oversized MIME boundary (fedora#2554363)

FEDORA-EPEL-2026-264057b632 Packages in this update:

• python-nh3-0.2.21-2.el10_3
• rust-ammonia-4.1.8-1.el10_3

Update description:

Update ammonia to version 4.1.8 and rebuild python-nh3 to address several security vulnerabilities.

FEDORA-EPEL-2026-9722adf177 Packages in this update:

• python-nh3-0.2.21-2.el10_4
• rust-ammonia-4.1.8-1.el10_4

Update description:

Update ammonia to version 4.1.8 and rebuild python-nh3 to address several security vulnerabilities.

FEDORA-2026-d470ba3df9 Packages in this update:

• python-lxml-html-clean-0.4.6-1.fc44

Update description:

Fixes three high severity ReDOS flaws.

FEDORA-2026-768edcd81d Packages in this update:

• python-lxml-html-clean-0.4.6-1.fc43

Update description:

Fixes three high severity ReDOS flaws.

FEDORA-2026-7c58252e69 Packages in this update:

• python-lxml-html-clean-0.4.6-1.fc45

Update description:

Fixes three high severity ReDOS flaws.

FEDORA-2026-183d3c32a6 Packages in this update:

• markdownlint-cli2-0.24.0-1.fc43

Update description:

Update

FEDORA-2026-6215800886 Packages in this update:

• markdownlint-cli2-0.24.0-1.fc44

Update description:

Update

FEDORA-2026-8f8cd892e5 Packages in this update:

• markdownlint-cli2-0.24.0-1.fc45

Update description:

Update

FEDORA-2026-36bc6490a3 Packages in this update:

• jackson-bom-2.21.8-1.fc46
• jackson-core-2.21.8-1.fc46
• jackson-databind-2.21.8-1.fc46
• jackson-modules-base-2.21.8-1.fc46

Update description:

Fix CVE-2026-89407 CVE-2026-89425 CVE-2026-68497 CVE-2026-83557 CVE-2026-19032 CVE-2026-91777 across aligned packages

FEDORA-2026-4f056db42e Packages in this update:

• python3.15-3.15.2-1.fc44

Update description:

• Update to Python 3.15.2
• CVE 2026-114583: tar filter allows writing outside destination via empty-named symlink
• CVE 2026-115557: Distrust compromised intermediate certificates in ssl module

Python 3.15.1 bugfix release.