Fedora Security Advisories

• corosync-3.1.10-5.fc44

Security fix for CVE-2026-35091 and CVE-2026-35092

• yarnpkg-1.22.22-18.fc44

Refresh vendor bundle, fixes CVE-2026-4800.

• yarnpkg-1.22.22-18.el10_3

Refresh vendor bundle, fixes CVE-2026-4800.

• yarnpkg-1.22.22-18.fc42

Refresh vendor bundle, fixes CVE-2026-4800.

• yarnpkg-1.22.22-18.el9

Refresh vendor bundle, fixes CVE-2026-4800.

• yarnpkg-1.22.22-18.fc43

Refresh vendor bundle, fixes CVE-2026-4800.

Update vendor bundle.

• mingw-exiv2-0.28.8-1.fc43

Update to exiv2-0.28.8.

• mingw-exiv2-0.28.8-1.fc42

Update to exiv2-0.28.8.

• mingw-exiv2-0.28.8-1.fc44

Update to exiv2-0.28.8.

• mingw-python3-3.11.15-1.fc44

Update to python-3.11.15.

• mingw-python3-3.11.15-1.fc43

Update to python-3.11.15.

• mingw-python3-3.11.15-1.fc42

Update to python-3.11.15.

• mingw-openexr-3.4.8-1.fc44

Update to 3.4.8.

• vim-9.2.280-1.fc42

Security fix for CVE-2026-34714

• vim-9.2.280-1.fc43

patchlevel 280

Security fix for CVE-2026-34714

• libmicrohttpd-1.0.3-1.fc42

Update to 1.0.3-1

• libmicrohttpd-1.0.3-1.fc43

Update to 1.0.3-1

• libmicrohttpd-1.0.3-1.fc44

Update to 1.0.3-1

• vim-9.2.272-1.fc43

Security fix for CVE-2026-34714

• libinput-1.31.1-1.fc44

libinput 1.31.1, fixes Lua plugin sandbox escape (CVE-2026-35093, CVE-2026-35094)