Fedora Security Advisories

FEDORA-2026-535a408db5 Packages in this update:

• openssh-10.0p1-12.fc43

Update description:

Fix CVE-2026-59995 OpenSSH: sftp client allows attacker to control downloaded

FEDORA-EPEL-2026-f45034028f Packages in this update:

• opkssh-0.16.0-2.el10_3

Update description:

Update the bundled github.com/go-chi/chi/v5 to v5.3.1, which is outside the range affected by CVE-2026-72815, CVE-2026-72816 and CVE-2026-72817 (IP spoofing via chi's RealIP middleware).

opkssh bundles only chi's root router package and never the affected middleware package, so the vulnerable code was not actually shipped in any opkssh build.

FEDORA-EPEL-2026-8d8aa891da Packages in this update:

• opkssh-0.16.0-2.el10_2

Update description:

Update the bundled github.com/go-chi/chi/v5 to v5.3.1, which is outside the range affected by CVE-2026-72815, CVE-2026-72816 and CVE-2026-72817 (IP spoofing via chi's RealIP middleware).

opkssh bundles only chi's root router package and never the affected middleware package, so the vulnerable code was not actually shipped in any opkssh build.

FEDORA-2026-8d9ba295e0 Packages in this update:

• opkssh-0.16.0-2.fc43

Update description:

Update the bundled github.com/go-chi/chi/v5 to v5.3.1, which is outside the range affected by CVE-2026-72815, CVE-2026-72816 and CVE-2026-72817 (IP spoofing via chi's RealIP middleware).

opkssh bundles only chi's root router package and never the affected middleware package, so the vulnerable code was not actually shipped in any opkssh build.

FEDORA-2026-f5a5073561 Packages in this update:

• opkssh-0.16.0-2.fc44

Update description:

Update the bundled github.com/go-chi/chi/v5 to v5.3.1, which is outside the range affected by CVE-2026-72815, CVE-2026-72816 and CVE-2026-72817 (IP spoofing via chi's RealIP middleware).

opkssh bundles only chi's root router package and never the affected middleware package, so the vulnerable code was not actually shipped in any opkssh build.

FEDORA-2026-fc11919789 Packages in this update:

• firefox-154.0-3.fc44

Update description:

Implement buffer stride support for PipeWire camera.

• Update to latest upstream (154.0)
• Enabled Wayland session restore on KDE.

FEDORA-EPEL-2026-f78a6b3cf2 Packages in this update:

• openbao-2.6.2-1.el8

Update description:

Update to upstream 2.6.2, including security fixes for GHSA-rh46-vc3j-w2w3 and GHSA-g892-p242-8g86.

FEDORA-EPEL-2026-0194a75a00 Packages in this update:

• openbao-2.6.2-1.el10_3

Update description:

Update to upstream 2.6.2, including security fixes for GHSA-rh46-vc3j-w2w3 and GHSA-g892-p242-8g86.

FEDORA-2026-73f5dc988f Packages in this update:

• openbao-2.6.2-1.fc44

Update description:

Update to upstream 2.6.2, including security fixes for GHSA-rh46-vc3j-w2w3 and GHSA-g892-p242-8g86.

FEDORA-EPEL-2026-56bfe89982 Packages in this update:

• openbao-2.6.2-1.el10_2

Update description:

Update to upstream 2.6.2, including security fixes for GHSA-rh46-vc3j-w2w3 and GHSA-g892-p242-8g86.

FEDORA-2026-ba51600ab3 Packages in this update:

• openbao-2.6.2-1.fc43

Update description:

Update to upstream 2.6.2, including security fixes for GHSA-rh46-vc3j-w2w3 and GHSA-g892-p242-8g86.

FEDORA-EPEL-2026-cba2df79a1 Packages in this update:

• openbao-2.6.2-1.el9

Update description:

Update to upstream 2.6.2, including security fixes for GHSA-rh46-vc3j-w2w3 and GHSA-g892-p242-8g86.

FEDORA-2026-4857ca6db8 Packages in this update:

• knot-3.4.11-1.fc43

Update description:

New upstream release with security fixes.

FEDORA-2026-85369e2e3a Packages in this update:

• knot-3.5.7-1.fc44

Update description:

New upstream release with security fixes.

FEDORA-2026-6a1526575a Packages in this update:

• libkcapi-1.5.1-1.fc46

Update description:

Automatic update for libkcapi-1.5.1-1.fc46.

Changelog * Tue Aug 18 2026 Ondrej Mosnáček <omosnacek@gmail.com> - 1.5.1-1 - Update to version 1.5.1 (fedora#2512793) - Fix CVE-2026-71225 (fedora#2511445) - Fix CVE-2026-71226 (fedora#2511484) - Fix CVE-2026-71227 (fedora#2511487)

FEDORA-2026-4ba4b4f139 Packages in this update:

• libkcapi-1.5.1-1.fc45

Update description:

Automatic update for libkcapi-1.5.1-1.fc45.

Changelog * Tue Aug 18 2026 Ondrej Mosnáček <omosnacek@gmail.com> - 1.5.1-1 - Update to version 1.5.1 (fedora#2512793) - Fix CVE-2026-71225 (fedora#2511445) - Fix CVE-2026-71226 (fedora#2511484) - Fix CVE-2026-71227 (fedora#2511487)

FEDORA-2026-65aea3d269 Packages in this update:

• perl-CGI-Session-4.49-1.fc45

Update description:

Automatic update for perl-CGI-Session-4.49-1.fc45.

Changelog * Tue Aug 18 2026 Jitka Plesnikova <jplesnik@redhat.com> - 4.49-1 - 4.49 bump (rhbz#2510691) - Fix CVE-2026-56016 (rhbz#2495886)

FEDORA-2026-f073efe2f3 Packages in this update:

• proftpd-1.3.9d-1.fc44

Update description:

Current upstream maintenance release, with a handful of potentially security-related bugfixes.

FEDORA-2026-0abbe10cdc Packages in this update:

• proftpd-1.3.9d-1.fc43

Update description:

Current upstream maintenance release, with a handful of potentially security-related bugfixes.

FEDORA-EPEL-2026-e41f65b848 Packages in this update:

• proftpd-1.3.9d-1.el10_2

Update description:

Current upstream maintenance release, with a handful of potentially security-related bugfixes.