Fedora Security Advisories

FEDORA-2026-a971aa459f Packages in this update:

• ffmpeg-9.0.2-4.fc46
• openapv-1.1.3.0-1.fc46

Update description:

Latest OpenAPV release. Changes: https://github.com/AcademySoftwareFoundation/openapv/releases/tag/v1.1.3.0 . Includes FFmpeg rebuild against the new ABI.

Fixes CVE-2026-79113 .

FEDORA-EPEL-2026-7928c100bf Packages in this update:

• perl-SQL-Abstract-2.000003-1.el10_4

Update description:

Update to perl-SQL-Abstact v2.000003.

In particular this addresses: CVE-2026-121265.

FEDORA-EPEL-2026-2411b76275 Packages in this update:

• perl-SQL-Abstract-2.000003-1.el9

Update description:

Update to perl-SQL-Abstact v2.000003.

In particular this addresses: CVE-2026-121265.

FEDORA-EPEL-2026-df17a88ba1 Packages in this update:

• perl-SQL-Abstract-2.000003-1.el10_3

Update description:

Update to perl-SQL-Abstact v2.000003.

In particular this addresses: CVE-2026-121265.

FEDORA-EPEL-2026-c542d5caff Packages in this update:

• perl-SQL-Abstract-2.000003-1.el10_2

Update description:

Update to perl-SQL-Abstact v2.000003.

In particular this addresses: CVE-2026-121265.

FEDORA-2026-d015d281d3 Packages in this update:

• sgx-pccs-1.27-2.fc43

Update description:

Update to 1.27 release, and update NPM module dependencies

FEDORA-2026-bf0e682c10 Packages in this update:

• strongswan-6.1.0-2.fc43

Update description:

Update to 6.1.0 for CVE-2026-78123, CVE-2026-78124, CVE-2026-78126, CVE-2026-78127, CVE-2026-78129, CVE-2026-78130, CVE-2026-78131, CVE-2026-78132, CVE-2026-78133, CVE-2026-78134 and CVE-2026-78135

FEDORA-2026-357d4a65d4 Packages in this update:

• strongswan-6.1.0-1.fc44

Update description:

Update to 6.1.0 for CVE-2026-78123, CVE-2026-78124, CVE-2026-78126, CVE-2026-78127, CVE-2026-78129, CVE-2026-78130, CVE-2026-78131, CVE-2026-78132, CVE-2026-78133, CVE-2026-78134 and CVE-2026-78135

FEDORA-2026-7277fc13ac Packages in this update:

• sgx-pccs-1.27-2.fc44

Update description:

Update to 1.27 release, and update NPM module dependencies

FEDORA-2026-069bc15d81 Packages in this update:

• sgx-pccs-1.27-2.fc45

Update description:

Update to 1.27 release, and update NPM module dependencies

FEDORA-EPEL-2026-090b14f20e Packages in this update:

• afflib-3.7.23-2.el10_3

Update description:

Update to 3.7.23

FEDORA-EPEL-2026-471da89f6b Packages in this update:

• afflib-3.7.23-2.el9

Update description:

Update to 3.7.23

FEDORA-EPEL-2026-5e143948c7 Packages in this update:

• afflib-3.7.23-2.el10_2

Update description:

Update to 3.7.23

FEDORA-2026-23ca9c3b2f Packages in this update:

• mingw-gstreamer1-1.28.9-1.fc44
• mingw-gstreamer1-plugins-bad-free-1.28.9-1.fc44
• mingw-gstreamer1-plugins-base-1.28.9-1.fc44
• mingw-gstreamer1-plugins-good-1.28.9-1.fc44

Update description:

Update to gstreamer-1.28.9.

FEDORA-2026-e7fefff936 Packages in this update:

• fluxbox-1.3.7-31.20261104git9aeb2a8e.fc43

Update description:

Fixes CVE-2026-123784: OS command injection via style backgrounds (CWE-78) (rhbz#2568284)

FEDORA-EPEL-2026-d6ca430c93 Packages in this update:

• fluxbox-1.3.7-31.20261104git9aeb2a8e.el8

Update description:

Fixes CVE-2026-123784: OS command injection via style backgrounds (CWE-78) (rhbz#2568284)

FEDORA-2026-add58dcae1 Packages in this update:

• fluxbox-1.3.7-31.20261104git9aeb2a8e.fc45

Update description:

Fixes CVE-2026-123784: OS command injection via style backgrounds (CWE-78) (rhbz#2568284)

FEDORA-2026-c9f492f989 Packages in this update:

• fluxbox-1.3.7-31.20261104git9aeb2a8e.fc44

Update description:

Fixes CVE-2026-123784: OS command injection via style backgrounds (CWE-78) (rhbz#2568284)

FEDORA-2026-c0681b6157 Packages in this update:

• python-httplib2-0.32.1-1.fc46

Update description:

Automatic update for python-httplib2-0.32.1-1.fc46.

Changelog * Sun Nov 8 2026 Kevin Fenzi <kevin@scrye.com> - 0.32.1-1 - Update to 0.32.1. Fixes rhbz#2391904 - Drop cacert.txt doc file to avoid confusion ( rhbz#2563344 )

FEDORA-2026-f3f8679e02 Packages in this update:

• python-pymdown-extensions-12.3-2.fc44

Update description:

Update to 12.3 and fixes some CVEs.