Fedora 42, 43, and 44 recently received a coordinated security update that touches several key packages across the operating system. The ActivityWatch ecosystem including nodejs-aw-webui, awatcher, and aw-server-rust got refreshed with OpenSSL rebuilds or minor version bumps to maintain dependency stability. BIND and its LDAP plugin saw more extensive changes in Fedora 44 as developers patched multiple critical vulnerabilities like unbounded recursion loops and memory leaks while also smoothing out performance hiccups.

Fedora 42 Update: nodejs-aw-webui-0^20260516.8d9a7f8-1.fc42
Fedora 42 Update: awatcher-0.3.3-2.fc42
Fedora 42 Update: aw-server-rust-0.14.0^20260516.gitdf49b3d-1.fc42
Fedora 43 Update: aw-server-rust-0.14.0^20260516.gitdf49b3d-1.fc43
Fedora 43 Update: nodejs-aw-webui-0^20260516.8d9a7f8-1.fc43
Fedora 43 Update: awatcher-0.3.3-2.fc43
Fedora 44 Update: bind-dyndb-ldap-11.11-15.fc44
Fedora 44 Update: bind-9.18.49-1.fc44
Fedora 44 Update: aw-server-rust-0.14.0^20260516.gitdf49b3d-1.fc44
Fedora 44 Update: awatcher-0.3.3-2.fc44
Fedora 44 Update: nodejs-aw-webui-0^20260516.8d9a7f8-1.fc44

[SECURITY] Fedora 42 Update: nodejs-aw-webui-0^20260516.8d9a7f8-1.fc42

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-7047e2fec5
2026-05-25 01:19:23.900958+00:00
--------------------------------------------------------------------------------

Name : nodejs-aw-webui
Product : Fedora 42
Version : 0^20260516.8d9a7f8
Release : 1.fc42
URL : https://github.com/ActivityWatch/aw-webui
Summary : A web-based UI for ActivityWatch, built with Vue.js
Description :
A web-based UI for ActivityWatch, built with Vue.js

--------------------------------------------------------------------------------
Update Information:

Rebuilt with openssl 0.10.79
--------------------------------------------------------------------------------
ChangeLog:

* Sat May 16 2026 ??ukasz Wojni??owicz [lukasz.wojnilowicz@gmail.com] - 0^20260516.8d9a7f8-1
- Update to 8d9a7f8
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-7047e2fec5' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

[SECURITY] Fedora 42 Update: awatcher-0.3.3-2.fc42

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-7047e2fec5
2026-05-25 01:19:23.900958+00:00
--------------------------------------------------------------------------------

Name : awatcher
Product : Fedora 42
Version : 0.3.3
Release : 2.fc42
URL : https://github.com/2e3s/awatcher
Summary : A window activity and idle watcher
Description :
A window activity and idle watcher.

--------------------------------------------------------------------------------
Update Information:

Rebuilt with openssl 0.10.79
--------------------------------------------------------------------------------
ChangeLog:

* Sat May 16 2026 ??ukasz Wojni??owicz [lukasz.wojnilowicz@gmail.com] - 0.3.3-2
- Rebuilt with openssl 0.10.79
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-7047e2fec5' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

[SECURITY] Fedora 42 Update: aw-server-rust-0.14.0^20260516.gitdf49b3d-1.fc42

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-7047e2fec5
2026-05-25 01:19:23.900958+00:00
--------------------------------------------------------------------------------

Name : aw-server-rust
Product : Fedora 42
Version : 0.14.0^20260516.gitdf49b3d
Release : 1.fc42
URL : https://github.com/ActivityWatch/aw-server-rust
Summary : A re-implementation of aw-server in Rust
Description :
A re-implementation of aw-server in Rust

--------------------------------------------------------------------------------
Update Information:

Rebuilt with openssl 0.10.79
--------------------------------------------------------------------------------
ChangeLog:

* Sat May 16 2026 ??ukasz Wojni??owicz [lukasz.wojnilowicz@gmail.com] - 0.14.0^20260516.gitdf49b3d-1
- Update to df49b3d
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-7047e2fec5' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

[SECURITY] Fedora 43 Update: aw-server-rust-0.14.0^20260516.gitdf49b3d-1.fc43

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-c9d4e8b9a4
2026-05-25 01:02:08.675171+00:00
--------------------------------------------------------------------------------

Name : aw-server-rust
Product : Fedora 43
Version : 0.14.0^20260516.gitdf49b3d
Release : 1.fc43
URL : https://github.com/ActivityWatch/aw-server-rust
Summary : A re-implementation of aw-server in Rust
Description :
A re-implementation of aw-server in Rust

--------------------------------------------------------------------------------
Update Information:

Rebuilt with openssl 0.10.79
--------------------------------------------------------------------------------
ChangeLog:

* Sat May 16 2026 ??ukasz Wojni??owicz [lukasz.wojnilowicz@gmail.com] - 0.14.0^20260516.gitdf49b3d-1
- Update to df49b3d
* Wed Mar 18 2026 ??ukasz Wojni??owicz [lukasz.wojnilowicz@gmail.com] - 0.13.1^20260309.git9a8802a-3
- Disable build on ppc64le
* Wed Mar 18 2026 ??ukasz Wojni??owicz [lukasz.wojnilowicz@gmail.com] - 0.13.1^20260309.git9a8802a-2
- Fix build on ppc64le
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-c9d4e8b9a4' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

[SECURITY] Fedora 43 Update: nodejs-aw-webui-0^20260516.8d9a7f8-1.fc43

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-c9d4e8b9a4
2026-05-25 01:02:08.675171+00:00
--------------------------------------------------------------------------------

Name : nodejs-aw-webui
Product : Fedora 43
Version : 0^20260516.8d9a7f8
Release : 1.fc43
URL : https://github.com/ActivityWatch/aw-webui
Summary : A web-based UI for ActivityWatch, built with Vue.js
Description :
A web-based UI for ActivityWatch, built with Vue.js

--------------------------------------------------------------------------------
Update Information:

Rebuilt with openssl 0.10.79
--------------------------------------------------------------------------------
ChangeLog:

* Sat May 16 2026 ??ukasz Wojni??owicz [lukasz.wojnilowicz@gmail.com] - 0^20260516.8d9a7f8-1
- Update to 8d9a7f8
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-c9d4e8b9a4' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

[SECURITY] Fedora 43 Update: awatcher-0.3.3-2.fc43

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-c9d4e8b9a4
2026-05-25 01:02:08.675171+00:00
--------------------------------------------------------------------------------

Name : awatcher
Product : Fedora 43
Version : 0.3.3
Release : 2.fc43
URL : https://github.com/2e3s/awatcher
Summary : A window activity and idle watcher
Description :
A window activity and idle watcher.

--------------------------------------------------------------------------------
Update Information:

Rebuilt with openssl 0.10.79
--------------------------------------------------------------------------------
ChangeLog:

* Sat May 16 2026 ??ukasz Wojni??owicz [lukasz.wojnilowicz@gmail.com] - 0.3.3-2
- Rebuilt with openssl 0.10.79
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-c9d4e8b9a4' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

[SECURITY] Fedora 44 Update: bind-dyndb-ldap-11.11-15.fc44

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-411248c8d9
2026-05-25 00:51:12.500445+00:00
--------------------------------------------------------------------------------

Name : bind-dyndb-ldap
Product : Fedora 44
Version : 11.11
Release : 15.fc44
URL : https://releases.pagure.org/bind-dyndb-ldap
Summary : LDAP back-end plug-in for BIND
Description :
This package provides an LDAP back-end plug-in for BIND. It features
support for dynamic updates and internal caching, to lift the load
off of your LDAP server.

--------------------------------------------------------------------------------
Update Information:

Update to 9.18.49 (rhbz#2480121)
Security Fixes:
Limit resolver server list size. (CVE-2026-3592)
Fix GSS-API resource leak. (CVE-2026-3039)
Disable recursion, UPDATE, and NOTIFY for non-IN views. (CVE-2026-5946)
Avoid unbounded recursion loop. (CVE-2026-5950)
Fix outgoing zone transfers' quota issue.
Feature Changes:
Fix CPU spikes and slow queries when cache approaches memory limit.
Bug Fixes:
Fix named crash when processing SIG records in dynamic updates.
Fix rndc modzone behavior for a zone in named.conf.
Fix zone verification of NSEC3 signed zones.
Prevent a crash when using both dns64 and filter-aaaa.
Fixed an assertion failure when processing catalog zones.
Prevent malicious DNSSEC zones from exhausting validator CPU.
Fix rndc-confgen aborting on HMAC-SHA-384/512 keys above 512 bits.
Prevent crafted queries from degrading RRL performance.
Fix a bug in allow-query/allow-transfer catalog zone custom properties.
Fix a memory leak issue in catalog zones.
Fix suppressed missing-glue check in named-checkzone.
Reject record sets too large to serve in DNS.
Source:
https://downloads.isc.org/isc/bind9/9.18.49/doc/arm/html/notes.html#notes-for-
bind-9-18-49
--------------------------------------------------------------------------------
ChangeLog:

* Wed May 20 2026 Petr Men????k [pemensik@redhat.com] - 11.11-15
- Rebuilt for BIND 9.18.49 (rhbz#2480121)
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2480121 - bind-9.18.49 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2480121
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-411248c8d9' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

[SECURITY] Fedora 44 Update: bind-9.18.49-1.fc44

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-411248c8d9
2026-05-25 00:51:12.500445+00:00
--------------------------------------------------------------------------------

Name : bind
Product : Fedora 44
Version : 9.18.49
Release : 1.fc44
URL : https://www.isc.org/downloads/bind/
Summary : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
Description :
BIND (Berkeley Internet Name Domain) is an implementation of the DNS
(Domain Name System) protocols. BIND includes a DNS server (named),
which resolves host names to IP addresses; a resolver library
(routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating properly.

--------------------------------------------------------------------------------
Update Information:

Update to 9.18.49 (rhbz#2480121)
Security Fixes:
Limit resolver server list size. (CVE-2026-3592)
Fix GSS-API resource leak. (CVE-2026-3039)
Disable recursion, UPDATE, and NOTIFY for non-IN views. (CVE-2026-5946)
Avoid unbounded recursion loop. (CVE-2026-5950)
Fix outgoing zone transfers' quota issue.
Feature Changes:
Fix CPU spikes and slow queries when cache approaches memory limit.
Bug Fixes:
Fix named crash when processing SIG records in dynamic updates.
Fix rndc modzone behavior for a zone in named.conf.
Fix zone verification of NSEC3 signed zones.
Prevent a crash when using both dns64 and filter-aaaa.
Fixed an assertion failure when processing catalog zones.
Prevent malicious DNSSEC zones from exhausting validator CPU.
Fix rndc-confgen aborting on HMAC-SHA-384/512 keys above 512 bits.
Prevent crafted queries from degrading RRL performance.
Fix a bug in allow-query/allow-transfer catalog zone custom properties.
Fix a memory leak issue in catalog zones.
Fix suppressed missing-glue check in named-checkzone.
Reject record sets too large to serve in DNS.
Source:
https://downloads.isc.org/isc/bind9/9.18.49/doc/arm/html/notes.html#notes-for-
bind-9-18-49
--------------------------------------------------------------------------------
ChangeLog:

* Wed May 20 2026 Petr Men????k [pemensik@redhat.com] - 32:9.18.49-1
- Update to 9.18.49 (rhbz#2480121)
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2480121 - bind-9.18.49 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2480121
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-411248c8d9' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

[SECURITY] Fedora 44 Update: aw-server-rust-0.14.0^20260516.gitdf49b3d-1.fc44

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-f4ddcfa64b
2026-05-25 00:51:12.500434+00:00
--------------------------------------------------------------------------------

Name : aw-server-rust
Product : Fedora 44
Version : 0.14.0^20260516.gitdf49b3d
Release : 1.fc44
URL : https://github.com/ActivityWatch/aw-server-rust
Summary : A re-implementation of aw-server in Rust
Description :
A re-implementation of aw-server in Rust

--------------------------------------------------------------------------------
Update Information:

Rebuilt with openssl 0.10.79
--------------------------------------------------------------------------------
ChangeLog:

* Sat May 16 2026 ??ukasz Wojni??owicz [lukasz.wojnilowicz@gmail.com] - 0.14.0^20260516.gitdf49b3d-1
- Update to df49b3d
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-f4ddcfa64b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

[SECURITY] Fedora 44 Update: awatcher-0.3.3-2.fc44

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-f4ddcfa64b
2026-05-25 00:51:12.500434+00:00
--------------------------------------------------------------------------------

Name : awatcher
Product : Fedora 44
Version : 0.3.3
Release : 2.fc44
URL : https://github.com/2e3s/awatcher
Summary : A window activity and idle watcher
Description :
A window activity and idle watcher.

--------------------------------------------------------------------------------
Update Information:

Rebuilt with openssl 0.10.79
--------------------------------------------------------------------------------
ChangeLog:

* Sat May 16 2026 ??ukasz Wojni??owicz [lukasz.wojnilowicz@gmail.com] - 0.3.3-2
- Rebuilt with openssl 0.10.79
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-f4ddcfa64b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

[SECURITY] Fedora 44 Update: nodejs-aw-webui-0^20260516.8d9a7f8-1.fc44

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-f4ddcfa64b
2026-05-25 00:51:12.500434+00:00
--------------------------------------------------------------------------------

Name : nodejs-aw-webui
Product : Fedora 44
Version : 0^20260516.8d9a7f8
Release : 1.fc44
URL : https://github.com/ActivityWatch/aw-webui
Summary : A web-based UI for ActivityWatch, built with Vue.js
Description :
A web-based UI for ActivityWatch, built with Vue.js

--------------------------------------------------------------------------------
Update Information:

Rebuilt with openssl 0.10.79
--------------------------------------------------------------------------------
ChangeLog:

* Sat May 16 2026 ??ukasz Wojni??owicz [lukasz.wojnilowicz@gmail.com] - 0^20260516.8d9a7f8-1
- Update to 8d9a7f8
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-f4ddcfa64b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------