Fedora Security Advisories

FEDORA-2026-054c0e22d1 Packages in this update:

• polkit-127-2.fc44.2

Update description:

CVE-2026-4897 aisle.com fix of unsanitized getline

FEDORA-2026-387a47c82b Packages in this update:

• polkit-126-6.fc43.2

Update description:

CVE-2026-4897 aisle.com fix of unsanitized getline

FEDORA-2026-1774635f74 Packages in this update:

• polkit-126-3.fc42.2

Update description:

CVE-2026-4897 aisle.com fix of unsanitized getline

FEDORA-2026-fe96f3532b Packages in this update:

• mingw-binutils-2.43.1-6.fc42

Update description:

Backport fixes for multiple CVEs.

FEDORA-2026-9174e6ea37 Packages in this update:

• mingw-binutils-2.45.1-2.fc43

Update description:

Backport fixes for multiple CVEs.

FEDORA-2026-f04da48123 Packages in this update:

• xen-4.19.5-1.fc42

Update description:

update to xen 4.19.5

Use after free of paging structures in EPT [XSA-480, CVE-2026-23554] Xenstored DoS by unprivileged domain [XSA-481, CVE-2026-23555]

FEDORA-2026-e6d8e9fd49 Packages in this update:

• mingw-gstreamer1-1.26.11-1.fc43
• mingw-gstreamer1-plugins-bad-free-1.26.11-1.fc43
• mingw-gstreamer1-plugins-base-1.26.11-1.fc43
• mingw-gstreamer1-plugins-good-1.26.11-1.fc43

Update description:

Update to gstreamer-1.26.11.

FEDORA-2026-3cc99e7d09 Packages in this update:

• mingw-gstreamer1-1.26.11-1.fc42
• mingw-gstreamer1-plugins-bad-free-1.26.11-1.fc42
• mingw-gstreamer1-plugins-base-1.26.11-1.fc42
• mingw-gstreamer1-plugins-good-1.26.11-1.fc42

Update description:

Update to gstreamer-1.26.11.

FEDORA-2026-ff5da930eb Packages in this update:

• mingw-python3-3.11.15-2.fc42

Update description:

Update to python-3.11.15, backport fixes for CVE-2026-4519, CVE-2026-3644, CVE-2026-4224, CVE-2026-2297

FEDORA-2026-3d13d52f58 Packages in this update:

• mingw-python3-3.11.15-2.fc44

Update description:

Update to python-3.11.15, backport fixes for CVE-2026-4519, CVE-2026-3644, CVE-2026-4224, CVE-2026-2297

FEDORA-2026-22d8c9f967 Packages in this update:

• mingw-python3-3.11.15-2.fc43

Update description:

Update to python-3.11.15, backport fixes for CVE-2026-4519, CVE-2026-3644, CVE-2026-4224, CVE-2026-2297

FEDORA-2026-6d7e0a8b45 Packages in this update:

• mapserver-8.4.1-3.fc43

Update description:

Backport fix for CVE-2026-33721.

FEDORA-2026-178c482e71 Packages in this update:

• mapserver-8.4.1-3.fc42

Update description:

Backport fix for CVE-2026-33721.

FEDORA-2026-b5a2da2c73 Packages in this update:

• mapserver-8.6.1-1.fc44

Update description:

Update to mapserver 8.6.1.

FEDORA-EPEL-2026-43ec22fd0e Packages in this update:

• mapserver-8.6.1-1.el9

Update description:

Update to mapserver 8.6.1.

FEDORA-2026-7576b56379 Packages in this update:

• mingw-libpng-1.6.56-1.fc43

Update description:

Update to libpng-1.6.56.

FEDORA-2026-c33aec93da Packages in this update:

• mingw-libpng-1.6.56-1.fc44

Update description:

Update to libpng-1.6.56.

FEDORA-2026-f911c124c2 Packages in this update:

• mingw-libpng-1.6.56-1.fc42

Update description:

Update to libpng-1.6.56.

FEDORA-2026-6c010af7be Packages in this update:

• python-cryptography-46.0.6-1.fc43

Update description:

Update to v46.0.6

This includes a single fix for security issue: * **SECURITY ISSUE**: Fixed a bug where name constraints were not applied to peer names during verification when the leaf certificate contains a wildcard DNS SAN. Ordinary X.509 topologies are not affected by this bug, including those used by the Web PKI. Credit to **Oleh Konko (1seal)** for reporting the issue. **CVE-2026-34073**

FEDORA-2026-1a816eeca2 Packages in this update:

• python3.6-3.6.15-55.fc43

Update description:

Security fix for CVE-2026-4519.