Fedora Security Advisories

moby-engine-29.4.0-1.fc42

2 hours 17 minutes ago
FEDORA-2026-49fd0d9636 Packages in this update:
  • moby-engine-29.4.0-1.fc42
Update description:
  • Update to release v29.4.0
  • Resolves: rhbz#2455894
  • Resolves CVE-2026-34986: rhbz#2455665
  • Upstream new features and fixes

moby-engine-29.4.0-1.fc43

2 hours 55 minutes ago
FEDORA-2026-a5015b57b9 Packages in this update:
  • moby-engine-29.4.0-1.fc43
Update description:
  • Update to release v29.4.0
  • Resolves: rhbz#2455894
  • Resolves CVE-2026-34986: rhbz#2455665
  • Upstream new features and fixes

moby-engine-29.4.0-1.fc44

3 hours 12 minutes ago
FEDORA-2026-853a2fa7e5 Packages in this update:
  • moby-engine-29.4.0-1.fc44
Update description:
  • Update to release v29.4.0
  • Resolves: rhbz#2455894
  • Resolves CVE-2026-34986: rhbz#2455665
  • Upstream new features and fixes

moby-engine-29.4.0-1.fc45

4 hours 3 minutes ago
FEDORA-2026-e520168745 Packages in this update:
  • moby-engine-29.4.0-1.fc45
Update description:

Automatic update for moby-engine-29.4.0-1.fc45.

Changelog * Tue Apr 7 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 29.4.0-1 - Update to release v29.4.0 - Resolves: rhbz#2455894 - Resolves CVE-2026-34986: rhbz#2455665 - Upstream new features and fixes

libpng-1.6.56-1.fc44

18 hours 28 minutes ago
FEDORA-2026-c6c617fe35 Packages in this update:
  • libpng-1.6.56-1.fc44
Update description:

1.6.56 is release fixes for the following two security vulnerabilities:

  • CVE-2026-33416 (high severity): Use-after-free memory bug in the transparency and palette-handling code. Similar to its predecessor CVE-2026-25646, this latent bug has existed for 25 years. Both Halil Oktay and Ryo Shimada discovered it within days of one another.

  • CVE-2026-33636 (high severity): Out-of-bounds read and write vulnerability in the ARM Neon palette-expansion code. This one was found and fixed by Taegu Ha and has existed since 1.6.36.

The images that trigger these bugs are valid. Users are encouraged to update immediately.

libpng-1.6.56-1.fc43

18 hours 28 minutes ago
FEDORA-2026-67c20bfb74 Packages in this update:
  • libpng-1.6.56-1.fc43
Update description:

1.6.56 is release fixes for the following two security vulnerabilities:

  • CVE-2026-33416 (high severity): Use-after-free memory bug in the transparency and palette-handling code. Similar to its predecessor CVE-2026-25646, this latent bug has existed for 25 years. Both Halil Oktay and Ryo Shimada discovered it within days of one another.

  • CVE-2026-33636 (high severity): Out-of-bounds read and write vulnerability in the ARM Neon palette-expansion code. This one was found and fixed by Taegu Ha and has existed since 1.6.36.

The images that trigger these bugs are valid. Users are encouraged to update immediately.

libpng-1.6.56-1.fc42

18 hours 29 minutes ago
FEDORA-2026-ba18a54554 Packages in this update:
  • libpng-1.6.56-1.fc42
Update description:

1.6.56 is release fixes for the following two security vulnerabilities:

  • CVE-2026-33416 (high severity): Use-after-free memory bug in the transparency and palette-handling code. Similar to its predecessor CVE-2026-25646, this latent bug has existed for 25 years. Both Halil Oktay and Ryo Shimada discovered it within days of one another.

  • CVE-2026-33636 (high severity): Out-of-bounds read and write vulnerability in the ARM Neon palette-expansion code. This one was found and fixed by Taegu Ha and has existed since 1.6.36.

The images that trigger these bugs are valid. Users are encouraged to update immediately.

usd-26.03-2.fc45

1 day 10 hours ago
FEDORA-2026-abd4c1829d Packages in this update:
  • usd-26.03-2.fc45
Update description:

Automatic update for usd-26.03-2.fc45.

Changelog * Mon Apr 6 2026 Benjamin A. Beasley <code@musicinmybrain.net> - 26.03-2 - Backport fix for CVE-2026-34544 in OpenEXRCore - Fixes RHBZ#2454226
Checked
15 minutes 31 seconds ago