Fedora Security Advisories

• cpp-httplib-0.30.1-5.fc42

https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-h934-98h4-j43q

• cpp-httplib-0.30.1-5.fc43

• Denial of service (DOS) using zip bomb (CVE-2026-22776)
• CRLF injection in http headers (CVE-2026-21428)
• Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP Trust (CVE-2025-66577)

https://github.com/yhirose/cpp-httplib/releases/tag/v0.30.1

• firefox-147.0-1.fc43

• New upstream release (147.0)

• firefox-147.0-1.fc42

• New upstream release (147.0)

• mingw-python3-3.11.14-5.fc43

Backport proposed fix for CVE-2025-13836.

• mingw-python3-3.11.14-5.fc42

Backport proposed fix for CVE-2025-13836.

• mingw-libxslt-1.1.43-4.fc42

Backport fix for CVE-2025-11731 and proposed fix for CVE-2025-10911

• mingw-libxslt-1.1.43-4.fc43

Backport fix for CVE-2025-11731 and proposed fix for CVE-2025-10911

• mingw-libtasn1-4.21.0-1.fc42

Update to 4.21.0, fixes CVE-2025-13151.

• mingw-libtasn1-4.21.0-1.fc43

Update to 4.21.0, fixes CVE-2025-13151.

• mariadb11.8-11.8.5-1.fc42

MariaDB 11.8.5

• mariadb11.8-11.8.5-1.fc43

MariaDB 11.8.5

• libicu67-67.1-10.1.el10_2

Backport upstream fix for CVE-2025-5222.

• python3.11-3.11.14-3.fc42

Security fix for CVE-2025-12084

• python3.11-3.11.14-3.fc43

Security fix for CVE-2025-12084

• gpsd-3.26.1-6.fc43

Security fixes for CVE-2025-67268 and CVE-2025-67269.

• gpsd-3.25-17.fc42

Security fixes for CVE-2025-67268 and CVE-2025-67269.

• cef-143.0.13^chromium143.0.7499.192-1.fc43

Update to 143.0.7499.192 [rhbz#2427842] * High CVE-2026-0628: Insufficient policy enforcement in WebView tag

• cef-143.0.13^chromium143.0.7499.192-1.fc42

Update to 143.0.7499.192 [rhbz#2427842] * High CVE-2026-0628: Insufficient policy enforcement in WebView tag

• golang-github-tetratelabs-wazero-1.11.0-1.fc42

• Update to 1.11.0 upstream release
• Resolves: rhbz#2413614