Fedora Security Advisories

FEDORA-2026-70d51c6891 Packages in this update:

• mupdf-1.28.2-4.fc46

Update description:

Automatic update for mupdf-1.28.2-4.fc46.

Changelog * Fri Oct 23 2026 Michael J Gruber <mjg@fedoraproject.org> - 1.28.2-4 - fix CVE-2026-112036 (rhbz#2558213)

FEDORA-EPEL-2026-f35a7b3a9d Packages in this update:

• rust-webpki-root-certs-1.0.11-1.el9
• rust-webpki-roots-1.0.11-1.el9

Update description:

Update webpki-roots / webpki-root-certs to version 1.0.11. These releases contain a followup fix for the eMudhra Intermediate CA Compromise.

FEDORA-EPEL-2026-a60c39573c Packages in this update:

• rust-webpki-roots-1.0.11-1.el10_2

Update description:

Update webpki-roots to version 1.0.11. These release contains a followup fix for the eMudhra Intermediate CA Compromise.

FEDORA-EPEL-2026-da8dff2fef Packages in this update:

• rust-webpki-root-certs-1.0.11-1.el10_3
• rust-webpki-roots-1.0.11-1.el10_3

Update description:

Update webpki-roots / webpki-root-certs to version 1.0.11. These releases contain a followup fix for the eMudhra Intermediate CA Compromise.

FEDORA-2026-03caed4282 Packages in this update:

• openscap-1.4.6-1.fc43

Update description:

Update to the latest upstream release

Vulnerability fix

• CVE-2026-85518: Fix path traversal when dumping SDS components

Maintenance, bug fix

• Lock test_file for all_python.sh
• Serialize the filehash DoS tests
• Free the TestResult of an evaluation that names an unknown rule
• Evaluate OVAL state with no entities as true
• Ship oscap-run-sce-script with the SCE engine

FEDORA-2026-521f61f684 Packages in this update:

• openscap-1.4.6-1.fc44

Update description:

Update to the latest upstream release

Vulnerability fix

• CVE-2026-85518: Fix path traversal when dumping SDS components

Maintenance, bug fix

• Lock test_file for all_python.sh
• Serialize the filehash DoS tests
• Free the TestResult of an evaluation that names an unknown rule
• Evaluate OVAL state with no entities as true
• Ship oscap-run-sce-script with the SCE engine

FEDORA-EPEL-2026-2c4415114f Packages in this update:

• rust-webpki-root-certs-1.0.11-1.el10_4
• rust-webpki-roots-1.0.11-1.el10_4

Update description:

Update webpki-roots / webpki-root-certs to version 1.0.11. These releases contain a followup fix for the eMudhra Intermediate CA Compromise.

FEDORA-EPEL-2026-64af19d782 Packages in this update:

• atuin-18.12.1-5.el9

Update description:

Rebuilt with updated rustls and webpki dependencies, including updated CA certificates for the eMudhra intermediate CA compromise.

FEDORA-2026-eb6ed8d276 Packages in this update:

• rust-webpki-root-certs-1.0.11-1.fc43
• rust-webpki-roots-1.0.11-1.fc43

Update description:

Update webpki-roots / webpki-root-certs to version 1.0.11. These releases contain a followup fix for the eMudhra Intermediate CA Compromise.

FEDORA-2026-6ceed7409a Packages in this update:

• rust-webpki-root-certs-1.0.11-1.fc44
• rust-webpki-roots-1.0.11-1.fc44

Update description:

Update webpki-roots / webpki-root-certs to version 1.0.11. These releases contain a followup fix for the eMudhra Intermediate CA Compromise.

FEDORA-2026-3c5a339682 Packages in this update:

• mingw-expat-2.9.0-1.fc45

Update description:

Update to expat-2.9.0.

Update to expat-2.8.5.

FEDORA-2026-86ef30a678 Packages in this update:

• mingw-expat-2.9.0-1.fc44

Update description:

Update to expat-2.9.0.

Update to expat-2.8.5.

FEDORA-2026-88e8f36e7b Packages in this update:

• openscap-1.4.6-1.fc46

Update description:

Automatic update for openscap-1.4.6-1.fc46.

Changelog * Fri Oct 23 2026 Jan Černý <jcerny@redhat.com> - 1:1.4.6-1 - Upgrade to the latest upstream release - CVE-2026-85518: Fix path traversal when dumping SDS components (RHBZ#2558499)

FEDORA-2026-3dc7e56d1e Packages in this update:

• pcre2-10.49-1.fc45

Update description:

Update pcre2 to 10.49, fixing security issues (CVE-2026-86145, CVE-2026-89156, CVE-2026-89157, CVE-2026-89158, CVE-2026-89160, CVE-2026-89161, CVE-2026-89162, CVE-2026-103111)

Release notes: https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.49 https://github.com/PCRE2Project/pcre2/releases#release-pcre2-10.48

ABI changes were checked between 10.47 and 10.49 and were not found to be significant, the updates are primarily focused on fixing security vulnerabilities.

FEDORA-2026-450395b11f Packages in this update:

• pcre2-10.49-1.fc44

Update description:

Update pcre2 to 10.49, fixing security issues (CVE-2026-86145, CVE-2026-89156, CVE-2026-89157, CVE-2026-89158, CVE-2026-89160, CVE-2026-89161, CVE-2026-89162, CVE-2026-103111)

Release notes: https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.49 https://github.com/PCRE2Project/pcre2/releases#release-pcre2-10.48

ABI changes were checked between 10.47 and 10.49 and were not found to be significant, the updates are primarily focused on fixing security vulnerabilities.

FEDORA-EPEL-2026-3df73ac751 Packages in this update:

• atuin-18.12.1-2.el10_3

Update description:

Rebuilt with updated rustls and webpki dependencies, including updated CA certificates for the eMudhra intermediate CA compromise.

FEDORA-2026-c38cc5881e Packages in this update:

• chromium-156.0.8078.47-1.fc45

Update description:

Update to 156.0.8078.47, include 353 security fixes: CVE-2026-112992 - CVE-2026-113344

FEDORA-EPEL-2026-d74ce5e482 Packages in this update:

• chromium-156.0.8078.47-1.el10_3

Update description:

Update to 156.0.8078.47, include 353 security fixes: CVE-2026-112992 - CVE-2026-113344

FEDORA-EPEL-2026-11316455f2 Packages in this update:

• chromium-156.0.8078.47-1.el9

Update description:

Update to 156.0.8078.47, include 353 security fixes: CVE-2026-112992 - CVE-2026-113344

FEDORA-EPEL-2026-5f3e283077 Packages in this update:

• chromium-156.0.8078.47-1.el10_4

Update description:

Update to 156.0.8078.47, include 353 security fixes: CVE-2026-112992 - CVE-2026-113344