Fedora Security Advisories

• editorconfig-0.12.11-1.el8

Update to 0.12.11: security fix for CVE-2026-40489.

• editorconfig-0.12.11-1.el9

Update to 0.12.11: security fix for CVE-2026-40489.

• rust-sequoia-keystore-server-0.2.0-7.el9
• rust-sequoia-openpgp-2.3.0-1.el9
• rust-sequoia-sq-1.3.1-11.el9

Update sequoia-openpgp to version 2.3.0.

This includes three security relevant fixes (assigned CVE-2026-42783, CVE-2026-42784, and CVE-not-assigned-yet), see "Notable fixes" in the release notes: https://gitlab.com/sequoia-pgp/sequoia/-/raw/openpgp/v2.3.0/openpgp/NEWS

This update includes rebuilds of all affected applications to pick up the fixes for these issues.

• rust-sequoia-openpgp-2.3.0-1.el10_2

Update sequoia-openpgp to version 2.3.0.

This includes three security relevant fixes (assigned CVE-2026-42783, CVE-2026-42784, and CVE-not-assigned-yet), see "Notable fixes" in the release notes: https://gitlab.com/sequoia-pgp/sequoia/-/raw/openpgp/v2.3.0/openpgp/NEWS

• rust-sequoia-openpgp-2.3.0-1.el10_3

Update sequoia-openpgp to version 2.3.0.

This includes three security relevant fixes (assigned CVE-2026-42783, CVE-2026-42784, and CVE-not-assigned-yet), see "Notable fixes" in the release notes: https://gitlab.com/sequoia-pgp/sequoia/-/raw/openpgp/v2.3.0/openpgp/NEWS

• rust-rpm-sequoia-1.10.2-2.fc42
• rust-sequoia-chameleon-gnupg-0.13.1-12.fc42
• rust-sequoia-git-0.6.0-2.fc42
• rust-sequoia-keystore-server-0.2.0-7.fc42
• rust-sequoia-octopus-librnp-1.11.1-6.fc42
• rust-sequoia-openpgp-2.3.0-1.fc42
• rust-sequoia-sop-0.37.3-3.fc42
• rust-sequoia-sq-1.3.1-11.fc42
• rust-sequoia-sqv-1.3.0-6.fc42

Update sequoia-openpgp to version 2.3.0.

This includes three security relevant fixes (assigned CVE-2026-42783, CVE-2026-42784, and CVE-not-assigned-yet), see "Notable fixes" in the release notes: https://gitlab.com/sequoia-pgp/sequoia/-/raw/openpgp/v2.3.0/openpgp/NEWS

This update includes rebuilds of all affected applications to pick up the fixes for these issues.

Update to version 1.10.2. Addresses CVE-2026-2625.

• rust-rpm-sequoia-1.10.2-2.fc43
• rust-sequoia-chameleon-gnupg-0.13.1-12.fc43
• rust-sequoia-git-0.6.0-2.fc43
• rust-sequoia-keystore-server-0.2.0-7.fc43
• rust-sequoia-octopus-librnp-1.11.1-6.fc43
• rust-sequoia-openpgp-2.3.0-1.fc43
• rust-sequoia-sop-0.37.3-3.fc43
• rust-sequoia-sq-1.3.1-11.fc43
• rust-sequoia-sqv-1.3.0-6.fc43

Update sequoia-openpgp to version 2.3.0.

This includes three security relevant fixes (assigned CVE-2026-42783, CVE-2026-42784, and CVE-not-assigned-yet), see "Notable fixes" in the release notes: https://gitlab.com/sequoia-pgp/sequoia/-/raw/openpgp/v2.3.0/openpgp/NEWS

This update includes rebuilds of all affected applications to pick up the fixes for these issues.

• rust-podman-sequoia-0.3.2-2.fc44
• rust-rpm-sequoia-1.10.2-2.fc44
• rust-sequoia-chameleon-gnupg-0.13.1-12.fc44
• rust-sequoia-git-0.6.0-2.fc44
• rust-sequoia-keystore-server-0.2.0-7.fc44
• rust-sequoia-octopus-librnp-1.11.1-6.fc44
• rust-sequoia-openpgp-2.3.0-1.fc44
• rust-sequoia-sop-0.37.3-3.fc44
• rust-sequoia-sq-1.3.1-11.fc44
• rust-sequoia-sqv-1.3.0-6.fc44

Update sequoia-openpgp to version 2.3.0.

This includes three security relevant fixes (assigned CVE-2026-42783, CVE-2026-42784, and CVE-not-assigned-yet), see "Notable fixes" in the release notes: https://gitlab.com/sequoia-pgp/sequoia/-/raw/openpgp/v2.3.0/openpgp/NEWS

This update includes rebuilds of all affected applications to pick up the fixes for these issues.

• rust-podman-sequoia-0.3.2-2.fc45
• rust-rpm-sequoia-1.10.2-2.fc45
• rust-sequoia-chameleon-gnupg-0.13.1-12.fc45
• rust-sequoia-git-0.6.0-2.fc45
• rust-sequoia-keystore-server-0.2.0-7.fc45
• rust-sequoia-octopus-librnp-1.11.1-6.fc45
• rust-sequoia-openpgp-2.3.0-1.fc45
• rust-sequoia-sop-0.37.3-3.fc45
• rust-sequoia-sq-1.3.1-11.fc45
• rust-sequoia-sqv-1.3.0-6.fc45

Update sequoia-openpgp to version 2.3.0.

This includes three security relevant fixes (assigned CVE-2026-42783, CVE-2026-42784, and CVE-not-assigned-yet), see "Notable fixes" in the release notes: https://gitlab.com/sequoia-pgp/sequoia/-/raw/openpgp/v2.3.0/openpgp/NEWS

This update includes rebuilds of all affected applications to pick up the fixes for these issues.

• uriparser-1.0.2-1.fc43

Update to uriparser-1.0.2.

Update to uriparser-1.0.1.

• poppler-25.07.0-5.fc43

This update fixes CVE-2025-52885

• poppler-25.02.0-6.fc42

This update fixes CVE-2025-52885 and CVE-2025-43718

• editorconfig-0.12.11-1.fc42

Update to 0.12.11: security fix for CVE-2026-40489.

• editorconfig-0.12.11-1.fc43

Update to 0.12.11: security fix for CVE-2026-40489.

• editorconfig-0.12.11-1.fc44

Update to 0.12.11: security fix for CVE-2026-40489.

• curl-8.15.0-7.fc43

• fix Out of bounds read for cookie path (CVE-2025-9086)

• perl-Net-CIDR-Lite-0.24-1.el10_1

This update addresses some input validation issues:

• Reject Unicode digits and trailing newlines in parser inputs (CVE-2026-45190)
• Reject zero-padded CIDR masks (CVE-2026-45191)

• perl-Net-CIDR-Lite-0.24-1.fc43

This update addresses some input validation issues:

• Reject Unicode digits and trailing newlines in parser inputs (CVE-2026-45190)
• Reject zero-padded CIDR masks (CVE-2026-45191)

• perl-Net-CIDR-Lite-0.24-1.fc44

This update addresses some input validation issues:

• Reject Unicode digits and trailing newlines in parser inputs (CVE-2026-45190)
• Reject zero-padded CIDR masks (CVE-2026-45191)

• perl-Net-CIDR-Lite-0.24-1.el10_2

This update addresses some input validation issues:

• Reject Unicode digits and trailing newlines in parser inputs (CVE-2026-45190)
• Reject zero-padded CIDR masks (CVE-2026-45191)