Fedora Security Advisories

FEDORA-2026-2857104379 Packages in this update:

• rubygems-4.0.20-1.fc44

Update description:

Update rubygems to 4.0.20. Additionally, several security issues were found in resolv gem bundled in rubygems. This update resolves these issues by updating resolv to 0.7.2.

FEDORA-2026-9831a751e2 Packages in this update:

• rubygems-4.0.20-1.fc45

Update description:

Update rubygems to 4.0.20. Additionally, several security issues were found in resolv gem bundled in rubygems. This update resolves these issues by updating resolv to 0.7.2.

FEDORA-2026-c77b963cc9 Packages in this update:

• rubygems-4.0.20-1.fc46

Update description:

Automatic update for rubygems-4.0.20-1.fc46.

Changelog * Thu Sep 3 2026 Mamoru TASAKA <mtasaka@fedoraproject.org> - 4.0.20-1 - Update to RubyGems 4.0.20 - Backport ruby upstream patch to update resolv to 0.7.2 - Resolves: CVE-2026-80212 (rhbz#2527309) - Resolves: CVE-2026-80213 (rhbz#2527311)

FEDORA-2026-8b8efbd2b8 Packages in this update:

• dovecot-2.4.5-1.fc45

Update description:

• updated to 2.4.5, many security fixes

FEDORA-2026-2e6b786570 Packages in this update:

• dovecot-2.4.5-1.fc44

Update description:

• updated to 2.4.5, many security fixes

FEDORA-2026-e8a6485109 Packages in this update:

• dovecot-2.4.5-1.fc43

Update description:

• updated to 2.4.5, many security fixes

FEDORA-EPEL-2026-d8f2957095 Packages in this update:

• GitPython-3.1.62-1.el9

Update description:

Update to 3.1.62 (close RHBZ#2529282)

• Fixes GHSA-hmq2-w58f-27jc

FEDORA-2026-301e6e2983 Packages in this update:

• python-django5-5.2.17-2.fc44

Update description:

Update python-django5 to the latest 5.x release (5.2.17)

• Fixes CVE-2026-15307 [high]: Server-side file-write and request forgery via spatial lookups
• Fixes CVE-2026-15337 [low]: Potential denial-of-service vulnerability in check_for_language()
• Fixes CVE-2026-15830 [moderate]: Potential denial-of-service vulnerability via nested geometry collections
• Fixes CVE-2026-15920 [moderate]: Potential cross-site scripting via URLField values in the admin

FEDORA-2026-6b28b4e483 Packages in this update:

• python-django5-5.2.17-2.fc43

Update description:

Update python-django5 to the latest 5.x release (5.2.17)

• Fixes CVE-2026-15307 [high]: Server-side file-write and request forgery via spatial lookups
• Fixes CVE-2026-15337 [low]: Potential denial-of-service vulnerability in check_for_language()
• Fixes CVE-2026-15830 [moderate]: Potential denial-of-service vulnerability via nested geometry collections
• Fixes CVE-2026-15920 [moderate]: Potential cross-site scripting via URLField values in the admin

FEDORA-2026-950089270f Packages in this update:

• python-django5-5.2.17-2.fc45

Update description:

Update python-django5 to the latest 5.x release (5.2.17)

• Fixes CVE-2026-15307 [high]: Server-side file-write and request forgery via spatial lookups
• Fixes CVE-2026-15337 [low]: Potential denial-of-service vulnerability in check_for_language()
• Fixes CVE-2026-15830 [moderate]: Potential denial-of-service vulnerability via nested geometry collections
• Fixes CVE-2026-15920 [moderate]: Potential cross-site scripting via URLField values in the admin

FEDORA-2026-ee1eb89e7b Packages in this update:

• tar-1.35-10.fc45

Update description:

Fix CVE-2026-5704, CVE-2026-18508, CVE-2026-18477, and a regression in the fix for CVE-2025-45582.

FEDORA-2026-c8b1bb0c97 Packages in this update:

• gnatcoll-26.0.0-5.fc45

Update description:

Patched the vulnerabilities GNATCOLL-CORE-0162 and GNATCOLL-CORE-0164 in a way that avoids interface changes.

FEDORA-2026-6ed52ea50e Packages in this update:

• bluez-5.87+1.git8750129efca8-1.fc43

Update description:

This update fixes a number of security issues.

FEDORA-2026-d4156b5fc5 Packages in this update:

• bluez-5.87+1.git8750129efca8-1.fc44

Update description:

This update fixes a number of security issues.

FEDORA-2026-9e011ac6ed Packages in this update:

• bluez-5.87+1.git8750129efca8-1.fc45

Update description:

This update fixes a number of security issues.

FEDORA-2026-11f44e3c2c Packages in this update:

• gnatcoll-26.0.0-4.fc44

Update description:

Patched the vulnerabilities GNATCOLL-CORE-0162 and GNATCOLL-CORE-0164 in a way that avoids interface changes.

FEDORA-2026-d5c7f91202 Packages in this update:

• gnatcoll-25.0.0-6.fc43

Update description:

Patched the vulnerabilities GNATCOLL-CORE-0162 and GNATCOLL-CORE-0164 in a way that avoids interface changes.

FEDORA-2026-fe1549bec3 Packages in this update:

• sblim-cmpi-base-1.6.4-31.fc43

Update description:

Use mktemp for temporary files in provider registration script (CVE-2026-73585)

FEDORA-2026-67f78e732b Packages in this update:

• nodejs-undici-7.29.0-3.fc43

Update description:

Update to version 7.29.0.

Contains fix for CVE-2026-18149.

FEDORA-2026-90bb0fcd50 Packages in this update:

• nodejs-undici-7.29.0-3.fc44

Update description:

Update to version 7.29.0.

Contains fix for CVE-2026-18149.