Fedora Security Advisories

• mingw-qt5-qtdeclarative-5.15.18-4.fc44

Backport fix for CVE-2025-12385.

• mingw-qt5-qtdeclarative-5.15.18-4.fc43

Backport fix for CVE-2025-12385.

• mingw-qt5-qtdeclarative-5.15.18-4.fc45

Backport fix for CVE-2025-12385.

• mingw-qt5-qtbase-5.15.18-5.fc44

Backport fixes for CVE-2026-101021 and CVE-2026-107157.

Backport fixes for CVE-2026-19248 and CVE-2026-11573

• mingw-qt5-qtbase-5.15.18-5.fc43

Backport fixes for CVE-2026-101021 and CVE-2026-107157.

• mingw-qt5-qtbase-5.15.18-5.fc45

Backport fixes for CVE-2026-101021 and CVE-2026-107157.

Backport fixes for CVE-2026-19248 and CVE-2026-11573

• suricata-8.0.8-1.fc45

Upstream bugfix/security release.

• grafana-10.2.6-23.fc43

Rebuild with Go 1.26.10 to fix Go standard library vulnerabilities.

The previous build (grafana-10.2.6-22.fc43) was compiled with go1.25.4 and contained 48 known Go standard library issues. golang 1.26.10 is now the F43 buildroot toolchain and fixes all of them, so this is a pure rebuild with no source, spec logic or vendored dependency changes.

Not addressed by this update: the bundled Go modules (golang.org/x/net, go-jose, kin-openapi) and the prebuilt frontend bundle, which need separate vendor/frontend regeneration.

• mingw-cfitsio-4.6.4-3.fc43

Backport fix for CVE-2026-115504.

• mingw-harfbuzz-11.5.1-3.fc43

Backport fix for CVE-2026-113679.

• mingw-freetype-2.13.3-4.fc43

Backport fix for CVE-2026-49919.

• mingw-qt5-qtwebkit-5.212.0-0.46.alpha4.fc43

Backport fix for CVE-2206-111497.

• mingw-qt6-qtbase-6.10.3-2.fc43

Backport fix for CVE-2026-107157, CVE-2026-19248, CVE-2026-76151

• mingw-expat-2.9.0-1.fc43

Update to 2.9.0, fixes CVE-2026-115506.

• mingw-glib-networking-2.80.1-5.fc44

Backport fix for CVE-2206.103963.

• mingw-glib-networking-2.80.1-5.fc43

Backport fix for CVE-2206.103963.

• grafana-pcp-5.3.0-4.fc43

Rebuild with golang >= 1.25.2 to fix Go standard library vulnerabilities: CVE-2025-58189 (crypto/tls), CVE-2025-61723 (encoding/pem), CVE-2025-58185 (encoding/asn1), CVE-2025-58188 (crypto/x509).

• nodejs-pnpm12-12.17.0-1.fc45

Update to version 12.17.0

• rccl-7.2.0-5.el10_4

CVE-2026-43598

• python-pillow-11.3.0-14.fc43

• Security fix for CVE-2026-112900
• Security fix for CVE-2026-112403
• Security fix for CVE-2026-112393
• Security fix for CVE-2026-112892