Fedora Security Advisories

• maradns-3.5.0039-1.fc44

update to 3.5.0039 MaraDNS 3.5.0039 has been released. In addition to revamping how the cryptographic secure pseudo random number generator is seeded to be more secure and no longer generate Valgrind warnings, adding better IPv6 support to the askmara tool, updating the compile process to be more future-proof (by freezing things at C99), etc. it fixes two minor security problems: * It was possible to perform a denial of service to disable Deadwood’s DNS-over-TCP feature. (DNS-over-UDP was not affected and DNS-over-TCP is disabled by default) * RFC8482 replies made public 19 bytes of memory in the heap in Deadwood. There does not appear to be any vulnerable private data leaked.

• libzip-1.12.1-1.fc45

• Protect against denial of service attack (advisory GHSA-m3wq-j48p-jxwh, actually fixed in 1.12).
• Fix compile issues.
• Fix adding and replacing files in torrentzip archives.
• Fix error handling in zip_source_filep_create().

• jupyterlab-4.6.3-1.fc45
• python-jupyter-builder-1.2.3-1.fc45
• python-nbdime-4.0.4-7.fc45
• python-notebook-7.6.2-1.fc45

New releases of packages in Jupyter stack fixing various CVEs.

• knot-resolver-5.7.8-2.fc45

New upstream release.

• knot-resolver-5.7.8-1.fc44

New upstream release.

• clevis-pin-trustee-0.1.1-2.fc44

Merge #6 Rebuild for CVE-2026-93600

• clevis-pin-trustee-0.1.1-2.fc45

Merge #5 Rebuild for CVE-2026-93600

• freerdp-3.32.2-1.fc43

Update to 3.32.2

• freerdp-3.32.2-1.fc44

Update to 3.32.2

• freerdp-3.32.2-1.fc45

Update to 3.32.2

• python-cairosvg-2.9.1-1.el10_3

Update to 2.9.1 (CVE-2026-107378)

• python-cairosvg-2.9.1-1.el10_2

Update to 2.9.1 (CVE-2026-107378)

• python-cairosvg-2.9.1-1.el10_4

Update to 2.9.1 (CVE-2026-107378)