Fedora Security Advisories

FEDORA-2026-87b103f151 Packages in this update:

• alertmanager-0.33.0-1.fc44

Update description:

Update to 0.33.0

FEDORA-2026-1ad4561f49 Packages in this update:

• alertmanager-0.33.0-1.fc43

Update description:

Update to 0.33.0

FEDORA-EPEL-2026-1931ffa07c Packages in this update:

• alertmanager-0.33.0-1.el9

Update description:

Update to 0.33.0

FEDORA-EPEL-2026-931db5ab37 Packages in this update:

• alertmanager-0.33.0-1.el10_3

Update description:

Update to 0.33.0

FEDORA-EPEL-2026-b31b7ed1a3 Packages in this update:

• alertmanager-0.33.0-1.el10_2

Update description:

Update to 0.33.0

FEDORA-2026-24b84f97af Packages in this update:

• xen-4.21.1-4.fc44

Update description:

x86 HVM I/O port list traversal [XSA-491, CVE-2026-42487] domctl lock open to abuse [XSA-492, CVE-2026-42489, CVE-2026-42490] Arm: Completion of memory accesses not guaranteed by completion of a TLBI [XSA-493, CVE-2025-10263] x86: mismatched mapcache metadata [XSA-494, CVE-2026-42488]

FEDORA-2026-0544eff1d8 Packages in this update:

• kubernetes1.35-1.35.6-1.fc43

Update description:

• Update to release v1.35.6
• Resolves: rhbz#2467606
• Upstream fixes

FEDORA-2026-b56d6f4b79 Packages in this update:

• kubernetes1.35-1.35.6-1.fc44

Update description:

• Update to release v1.35.6
• Resolves: rhbz#2467606
• Upstream fixes

FEDORA-2026-88ab77d111 Packages in this update:

• kubernetes1.34-1.34.9-1.fc43

Update description:

• Update to release v1.34.9
• Resolves: rhbz#2467605
• Upstream fixes

FEDORA-2026-c2a89ccca5 Packages in this update:

• kubernetes1.33-1.33.13-1.fc43

Update description:

• Update to release 1.33.13
• Resolves: rhbz#2467604
• Upstream fix

FEDORA-2026-da02662d41 Packages in this update:

• kubernetes1.33-1.33.13-1.fc44

Update description:

• Update to release 1.33.13
• Resolves: rhbz#2467604
• Upstream fix

FEDORA-2026-eee09dc43b Packages in this update:

• kubernetes1.34-1.34.9-1.fc44

Update description:

• Update to release v1.34.9
• Resolves: rhbz#2467605
• Upstream fixes

FEDORA-2026-f8b0e6c297 Packages in this update:

• kubernetes1.35-1.35.6-1.fc45

Update description:

Automatic update for kubernetes1.35-1.35.6-1.fc45.

Changelog * Fri Jun 12 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 1.35.6-1 - Update to release v1.35.6 - Resolves: rhbz#2467606 - Upstream fixes

FEDORA-2026-18d1f457ba Packages in this update:

• kubernetes1.34-1.34.9-1.fc45

Update description:

Automatic update for kubernetes1.34-1.34.9-1.fc45.

Changelog * Fri Jun 12 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.9-1 - Update to release v1.34.9 - Resolves: rhbz#2467605 - Upstream fixes

FEDORA-2026-05251d4863 Packages in this update:

• kubernetes1.33-1.33.13-1.fc45

Update description:

Automatic update for kubernetes1.33-1.33.13-1.fc45.

Changelog * Fri Jun 12 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.13-1 - Update to release 1.33.13 - Resolves: rhbz#2467604 - Upstream fix

FEDORA-2026-bc38ebdf4c Packages in this update:

• mingw-SDL2_image-2.8.12-1.fc43

Update description:

Update to SDL2_image 2.8.12, fixes CVE-2026-35444.

FEDORA-2026-6f328b5020 Packages in this update:

• mingw-SDL2_image-2.8.12-1.fc44

Update description:

Update to SDL2_image 2.8.12, fixes CVE-2026-35444.

FEDORA-EPEL-2026-bc7538a3d7 Packages in this update:

• ImageMagick-6.9.13.50-1.el8

Update description:

Update to 6.9.13.50

Summary

This update fixes several security vulnerabilities, including multiple high-severity CVEs: Security fixes

• CVE-2026-33901 (High) — Heap buffer overflow in the MVG decoder that could result in an out-of-bounds write when processing a crafted image.
• CVE-2026-33908 (High) — Recursive DestroyXMLTree() call with no depth limit causes stack exhaustion when processing deeply nested XML structures, resulting in a Denial of Service (DoS).
• CVE-2026-40310 (High) — Heap out-of-bounds write in the JP2 encoder triggered when a user specifies an invalid sampling index.

Additional security and bug fixes are included in the upstream releases between 6.9.13.25 and 6.9.13.49. See the upstream release history at: https://github.com/ImageMagick/ImageMagick6/releases

FEDORA-EPEL-2026-49c3a0ffa2 Packages in this update:

• ImageMagick-6.9.13.50-1.el9

Update description:

Update to 6.9.13.50

Summary

This update fixes several security vulnerabilities, including multiple high-severity CVEs: Security fixes

• CVE-2026-33901 (High) — Heap buffer overflow in the MVG decoder that could result in an out-of-bounds write when processing a crafted image.
• CVE-2026-33908 (High) — Recursive DestroyXMLTree() call with no depth limit causes stack exhaustion when processing deeply nested XML structures, resulting in a Denial of Service (DoS).
• CVE-2026-40310 (High) — Heap out-of-bounds write in the JP2 encoder triggered when a user specifies an invalid sampling index.

Additional security and bug fixes are included in the upstream releases between 6.9.13.25 and 6.9.13.49. See the upstream release history at: https://github.com/ImageMagick/ImageMagick6/releases

FEDORA-2026-2aa86d411f Packages in this update:

• erlang-cowboy-2.16.1-1.fc43
• erlang-cowlib-2.17.1-1.fc43
• erlang-gun-2.4.1-1.fc43

Update description:

Gun ver. 2.4.1 and its dependencies

New erlang-gun