Fedora Security Advisories

FEDORA-EPEL-2026-bc4e39e819 Packages in this update:

• openbao-2.6.3-1.el10_2

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-EPEL-2026-fcd0d6efe7 Packages in this update:

• openbao-2.6.3-1.el10_4

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-2026-ea3b447e05 Packages in this update:

• openbao-2.6.3-1.fc45

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-EPEL-2026-4301c99549 Packages in this update:

• openbao-2.6.3-1.el9

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-EPEL-2026-498661c28b Packages in this update:

• openbao-2.6.3-1.el8

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-2026-b4dd4dc37c Packages in this update:

• openbao-2.6.3-1.fc43

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-2026-3688145aba Packages in this update:

• openbao-2.6.3-1.fc44

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-EPEL-2026-982c090cff Packages in this update:

• openbao-2.6.3-1.el10_3

Update description:

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-2026-84fde70eed Packages in this update:

• erlang-26.2.5.21-8.fc44

Update description:

Backported fixes for CVE-2026-65634, CVE-2026-68956, CVE-2026-89422

FEDORA-2026-d47f327121 Packages in this update:

• erlang-26.2.5.21-8.fc43

Update description:

Backported fixes for CVE-2026-65634, CVE-2026-68956, CVE-2026-89422

FEDORA-2026-8604c8d63b Packages in this update:

• emacs-31.1-4.fc45

Update description:

Prevent arbitrary code execution in flymake.

FEDORA-2026-0a7abaa716 Packages in this update:

• asterisk-23.5.0-5.fc45

Update description:

Fix for CVE-2026-84975

FEDORA-2026-9ff25022c1 Packages in this update:

• cockpit-368-1.fc43

Update description:

Automatic update for cockpit-368-1.fc43.

FEDORA-2026-61b2a3477a Packages in this update:

• cockpit-368-1.fc44

Update description:

Automatic update for cockpit-368-1.fc44.

Changelog for cockpit * Wed Sep 23 2026 Packit <hello@packit.dev> - 368-1 - Limit concurrent connections CVE-2026-91149 - Harden cockpit-ws against trailing slash CVE-2026-91147 - Sanitize URLs from PackageKit CVE-2026-91148 - Interactive file chooser for SSH keys - Bug fixes and translation updates - Resolves RHEL-263070, RHEL-262891, RHEL-253609 for rhel-10.4 - Resolves RHEL-263066 for rhel-9.10

FEDORA-2026-d375ea9e79 Packages in this update:

• cockpit-368-1.fc45

Update description:

Automatic update for cockpit-368-1.fc45.

Changelog for cockpit * Wed Sep 23 2026 Packit <hello@packit.dev> - 368-1 - Limit concurrent connections CVE-2026-91149 - Harden cockpit-ws against trailing slash CVE-2026-91147 - Sanitize URLs from PackageKit CVE-2026-91148 - Interactive file chooser for SSH keys - Bug fixes and translation updates - Resolves RHEL-263070, RHEL-262891, RHEL-253609 for rhel-10.4 - Resolves RHEL-263066 for rhel-9.10

FEDORA-2026-4923296720 Packages in this update:

• cockpit-machines-357-1.fc43

Update description:

Automatic update for cockpit-machines-357-1.fc43.

Changelog for cockpit-machines * Wed Sep 23 2026 Packit <hello@packit.dev> - 357-1 - Harden against local attacks from accessing sensitive data CVE-2026-92768, CVE-2026-92747, CVE-2026-92745 - Resolves RHEL-263125, RHEL-263121, RHEL-263122 for rhel-10.4 - Resolves RHEL-263116, RHEL-263119, RHEL-263126 for rhel-9.10

FEDORA-2026-57e39fc2fa Packages in this update:

• cockpit-machines-357-1.fc44

Update description:

Automatic update for cockpit-machines-357-1.fc44.

Changelog for cockpit-machines * Wed Sep 23 2026 Packit <hello@packit.dev> - 357-1 - Harden against local attacks from accessing sensitive data CVE-2026-92768, CVE-2026-92747, CVE-2026-92745 - Resolves RHEL-263125, RHEL-263121, RHEL-263122 for rhel-10.4 - Resolves RHEL-263116, RHEL-263119, RHEL-263126 for rhel-9.10

FEDORA-2026-2afda0f514 Packages in this update:

• cockpit-machines-357-1.fc45

Update description:

Automatic update for cockpit-machines-357-1.fc45.

Changelog for cockpit-machines * Wed Sep 23 2026 Packit <hello@packit.dev> - 357-1 - Harden against local attacks from accessing sensitive data CVE-2026-92768, CVE-2026-92747, CVE-2026-92745 - Resolves RHEL-263125, RHEL-263121, RHEL-263122 for rhel-10.4 - Resolves RHEL-263116, RHEL-263119, RHEL-263126 for rhel-9.10

FEDORA-2026-f41fd82fcf Packages in this update:

• cockpit-files-45-1.fc45

Update description:

Automatic update for cockpit-files-45-1.fc45.

FEDORA-2026-a643ae21d6 Packages in this update:

• cockpit-files-45-1.fc43

Update description:

Automatic update for cockpit-files-45-1.fc43.

Changelog for cockpit-files * Wed Sep 23 2026 Packit <hello@packit.dev> - 45-1 - Fixes CVE-2026-91202, CVE-2026-91203, CVE-2026-91205 - Resolves RHEL-263138, RHEL-263139, RHEL-263144 for rhel-10.4 - Resolves RHEL-263135, RHEL-263137, RHEL-263145 for rhel-9.10