Fedora 43 Update: firefox-148.0-1.fc43
Fedora 43 Update: opentofu-1.11.5-1.fc43
Fedora 43 Update: 389-ds-base-3.1.4-7.fc43
Fedora 43 Update: vim-9.2.045-1.fc43
Fedora 43 Update: munge-0.5.18-1.fc43
Fedora 43 Update: python3.14-3.14.3-1.fc43
Fedora 43 Update: python3-docs-3.14.3-1.fc43
Fedora 42 Update: vim-9.2.045-1.fc42
Fedora 42 Update: munge-0.5.18-1.fc42
Fedora 42 Update: chromium-145.0.7632.109-1.fc42
[SECURITY] Fedora 43 Update: firefox-148.0-1.fc43
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-766e3a6ec8
2026-02-26 01:08:36.076736+00:00
--------------------------------------------------------------------------------
Name : firefox
Product : Fedora 43
Version : 148.0
Release : 1.fc43
URL : https://www.mozilla.org/firefox/
Summary : Mozilla Firefox Web browser
Description :
Mozilla Firefox is an open-source web browser, designed for standards
compliance, performance and portability.
--------------------------------------------------------------------------------
Update Information:
New upstream release (148.0)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 23 2026 Bojan Smojver [bojan@rexursive.com] - 148.0-1
- Add patch for dstdint compilation problem
* Mon Feb 23 2026 Martin Stransky [stransky@redhat.com] - 148.0-1
- Update to latest upstream (148.0)
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-766e3a6ec8' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 43 Update: opentofu-1.11.5-1.fc43
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-49b5d5c5e6
2026-02-26 01:08:36.076695+00:00
--------------------------------------------------------------------------------
Name : opentofu
Product : Fedora 43
Version : 1.11.5
Release : 1.fc43
URL : https://github.com/opentofu/opentofu
Summary : OpenTofu lets you declaratively manage your cloud infrastructure
Description :
OpenTofu lets you declaratively manage your cloud infrastructure.
--------------------------------------------------------------------------------
Update Information:
Update to 1.11.5
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 12 2026 Packit [hello@packit.dev] - 1.11.5-1
- Update to 1.11.5 upstream release
- Resolves: rhbz#2439332
* Tue Feb 3 2026 Maxwell G [maxwell@gtmx.me] - 1.11.4-2
- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26
* Wed Jan 21 2026 Packit [hello@packit.dev] - 1.11.4-1
- Update to 1.11.4 upstream release
- Resolves: rhbz#2429160
* Fri Jan 16 2026 Fedora Release Engineering [releng@fedoraproject.org] - 1.11.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2412594 - CVE-2025-58183 opentofu: Unbounded allocation when parsing GNU sparse map [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2412594
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-49b5d5c5e6' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 43 Update: 389-ds-base-3.1.4-7.fc43
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-27ce708600
2026-02-26 01:08:36.076630+00:00
--------------------------------------------------------------------------------
Name : 389-ds-base
Product : Fedora 43
Version : 3.1.4
Release : 7.fc43
URL : https://www.port389.org
Summary : 389 Directory Server (base)
Description :
389 Directory Server is an LDAPv3 compliant server. The base package includes
the LDAP server and command line utilities for server administration.
--------------------------------------------------------------------------------
Update Information:
New minor version of the Python interpreter, bringing also security fixes.
389-ds-base: Fix system index configuration issues
389-ds-base: Fix AttributeError: 'CustomHelpFormatter' object has no attribute
'_format_actions_usage'
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 13 2026 Viktor Ashirov [vashirov@redhat.com] - 3.1.4-7
- Issue 7253 - ipa-backup broken with python3-libs-3.14.3-1.fc43
* Wed Feb 11 2026 Viktor Ashirov [vashirov@redhat.com] - 3.1.4-6
- Add missing upgrade steps to %post
* Tue Feb 10 2026 Viktor Ashirov [vashirov@redhat.com] - 3.1.4-5
- Fix system index configuration issues
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2424574 - 389-ds-base fails to build with Python 3.15: AttributeError: 'CustomHelpFormatter' object has no attribute '_format_actions_usage'
https://bugzilla.redhat.com/show_bug.cgi?id=2424574
[ 2 ] Bug #2431825 - CVE-2025-11468 python3.14: Missing character filtering in Python [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2431825
[ 3 ] Bug #2431837 - CVE-2026-0672 python3.14: Header injection in http.cookies.Morsel in Python [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2431837
[ 4 ] Bug #2431838 - CVE-2026-0865 python3.14: wsgiref.headers.Headers allows header newline injection in Python [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2431838
[ 5 ] Bug #2431851 - CVE-2025-15282 python3.14: Header injection via newlines in data URL mediatype in Python [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2431851
[ 6 ] Bug #2433829 - CVE-2026-1299 python3.14: email header injection due to unquoted newlines [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2433829
[ 7 ] Bug #2436933 - ipa-healthcheck claims that system indexes are missing or incorrect
https://bugzilla.redhat.com/show_bug.cgi?id=2436933
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-27ce708600' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 43 Update: vim-9.2.045-1.fc43
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-120874f63c
2026-02-26 01:08:36.076709+00:00
--------------------------------------------------------------------------------
Name : vim
Product : Fedora 43
Version : 9.2.045
Release : 1.fc43
URL : https://www.vim.org/
Summary : The VIM editor
Description :
VIM (VIsual editor iMproved) is an updated and improved version of the
vi editor. Vi was the first real screen-based editor for UNIX, and is
still very popular. VIM improves on vi by adding new features:
multiple windows, multi-level undo, block highlighting and more.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2026-26269
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 24 2026 Zdenek Dohnal [zdohnal@redhat.com] - 2:9.2.045-1
- patchlevel 045
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2439755 - CVE-2026-26269 vim: Netbeans specialKeys stack buffer overflow
https://bugzilla.redhat.com/show_bug.cgi?id=2439755
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-120874f63c' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 43 Update: munge-0.5.18-1.fc43
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-ec8baadd48
2026-02-26 01:08:36.076651+00:00
--------------------------------------------------------------------------------
Name : munge
Product : Fedora 43
Version : 0.5.18
Release : 1.fc43
URL : https://dun.github.io/munge/
Summary : Enables uid & gid authentication across a host cluster
Description :
MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating
and validating credentials. It is designed to be highly scalable for use
in an HPC cluster environment.
It allows a process to authenticate the UID and GID of another local or
remote process within a group of hosts having common users and groups.
These hosts form a security realm that is defined by a shared cryptographic
key. Clients within this security realm can create and validate credentials
without the use of root privileges, reserved ports, or platform-specific
methods.
--------------------------------------------------------------------------------
Update Information:
Update to 0.5.18, resolve CVE-2026-25506
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 13 2026 Michal Schmidt [mschmidt@redhat.com] - 0.5.18-1
- Update to 0.5.18
* Fri Jan 16 2026 Fedora Release Engineering [releng@fedoraproject.org] - 0.5.16-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2414773 - munge-0.5.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2414773
[ 2 ] Bug #2438833 - CVE-2026-25506 munge: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2438833
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-ec8baadd48' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 43 Update: python3.14-3.14.3-1.fc43
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-27ce708600
2026-02-26 01:08:36.076630+00:00
--------------------------------------------------------------------------------
Name : python3.14
Product : Fedora 43
Version : 3.14.3
Release : 1.fc43
URL : https://www.python.org/
Summary : Version 3.14 of the Python interpreter
Description :
Python 3.14 is an accessible, high-level, dynamically typed, interpreted
programming language, designed with an emphasis on code readability.
It includes an extensive standard library, and has a vast ecosystem of
third-party libraries.
--------------------------------------------------------------------------------
Update Information:
New minor version of the Python interpreter, bringing also security fixes.
389-ds-base: Fix system index configuration issues
389-ds-base: Fix AttributeError: 'CustomHelpFormatter' object has no attribute
'_format_actions_usage'
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 4 2026 Karolina Surma [ksurma@redhat.com] - 3.14.3-1
- Update to Python 3.14.3
- Fix CVE-2025-15366, CVE-2025-15367
* Sat Jan 17 2026 Fedora Release Engineering [releng@fedoraproject.org] - 3.14.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Tue Jan 6 2026 Karolina Surma [ksurma@redhat.com] - 3.14.2-2
- Require at least the same expat version as used during the build time
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2424574 - 389-ds-base fails to build with Python 3.15: AttributeError: 'CustomHelpFormatter' object has no attribute '_format_actions_usage'
https://bugzilla.redhat.com/show_bug.cgi?id=2424574
[ 2 ] Bug #2431825 - CVE-2025-11468 python3.14: Missing character filtering in Python [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2431825
[ 3 ] Bug #2431837 - CVE-2026-0672 python3.14: Header injection in http.cookies.Morsel in Python [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2431837
[ 4 ] Bug #2431838 - CVE-2026-0865 python3.14: wsgiref.headers.Headers allows header newline injection in Python [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2431838
[ 5 ] Bug #2431851 - CVE-2025-15282 python3.14: Header injection via newlines in data URL mediatype in Python [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2431851
[ 6 ] Bug #2433829 - CVE-2026-1299 python3.14: email header injection due to unquoted newlines [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2433829
[ 7 ] Bug #2436933 - ipa-healthcheck claims that system indexes are missing or incorrect
https://bugzilla.redhat.com/show_bug.cgi?id=2436933
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-27ce708600' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 43 Update: python3-docs-3.14.3-1.fc43
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-27ce708600
2026-02-26 01:08:36.076630+00:00
--------------------------------------------------------------------------------
Name : python3-docs
Product : Fedora 43
Version : 3.14.3
Release : 1.fc43
URL : https://www.python.org/
Summary : Documentation for the Python 3 programming language
Description :
The python3-docs package contains documentation on the Python 3
programming language and interpreter.
--------------------------------------------------------------------------------
Update Information:
New minor version of the Python interpreter, bringing also security fixes.
389-ds-base: Fix system index configuration issues
389-ds-base: Fix AttributeError: 'CustomHelpFormatter' object has no attribute
'_format_actions_usage'
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 4 2026 Karolina Surma [ksurma@redhat.com] - 3.14.3-1
- Update to Python 3.14.3
* Sat Jan 17 2026 Fedora Release Engineering [releng@fedoraproject.org] - 3.14.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2424574 - 389-ds-base fails to build with Python 3.15: AttributeError: 'CustomHelpFormatter' object has no attribute '_format_actions_usage'
https://bugzilla.redhat.com/show_bug.cgi?id=2424574
[ 2 ] Bug #2431825 - CVE-2025-11468 python3.14: Missing character filtering in Python [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2431825
[ 3 ] Bug #2431837 - CVE-2026-0672 python3.14: Header injection in http.cookies.Morsel in Python [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2431837
[ 4 ] Bug #2431838 - CVE-2026-0865 python3.14: wsgiref.headers.Headers allows header newline injection in Python [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2431838
[ 5 ] Bug #2431851 - CVE-2025-15282 python3.14: Header injection via newlines in data URL mediatype in Python [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2431851
[ 6 ] Bug #2433829 - CVE-2026-1299 python3.14: email header injection due to unquoted newlines [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2433829
[ 7 ] Bug #2436933 - ipa-healthcheck claims that system indexes are missing or incorrect
https://bugzilla.redhat.com/show_bug.cgi?id=2436933
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-27ce708600' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 42 Update: vim-9.2.045-1.fc42
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-fea53fa4da
2026-02-26 00:55:51.093590+00:00
--------------------------------------------------------------------------------
Name : vim
Product : Fedora 42
Version : 9.2.045
Release : 1.fc42
URL : https://www.vim.org/
Summary : The VIM editor
Description :
VIM (VIsual editor iMproved) is an updated and improved version of the
vi editor. Vi was the first real screen-based editor for UNIX, and is
still very popular. VIM improves on vi by adding new features:
multiple windows, multi-level undo, block highlighting and more.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2026-26269
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 24 2026 Zdenek Dohnal [zdohnal@redhat.com] - 2:9.2.045-1
- patchlevel 045
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2439755 - CVE-2026-26269 vim: Netbeans specialKeys stack buffer overflow
https://bugzilla.redhat.com/show_bug.cgi?id=2439755
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-fea53fa4da' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 42 Update: munge-0.5.18-1.fc42
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-ebf9437c9e
2026-02-26 00:55:51.093543+00:00
--------------------------------------------------------------------------------
Name : munge
Product : Fedora 42
Version : 0.5.18
Release : 1.fc42
URL : https://dun.github.io/munge/
Summary : Enables uid & gid authentication across a host cluster
Description :
MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating
and validating credentials. It is designed to be highly scalable for use
in an HPC cluster environment.
It allows a process to authenticate the UID and GID of another local or
remote process within a group of hosts having common users and groups.
These hosts form a security realm that is defined by a shared cryptographic
key. Clients within this security realm can create and validate credentials
without the use of root privileges, reserved ports, or platform-specific
methods.
--------------------------------------------------------------------------------
Update Information:
update to 0.5.18, resolve CVE-2026-25506
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 13 2026 Michal Schmidt [mschmidt@redhat.com] - 0.5.18-1
- Update to 0.5.18
* Fri Jan 16 2026 Fedora Release Engineering [releng@fedoraproject.org] - 0.5.16-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Thu Jul 24 2025 Fedora Release Engineering [releng@fedoraproject.org] - 0.5.16-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2414773 - munge-0.5.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2414773
[ 2 ] Bug #2438832 - CVE-2026-25506 munge: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2438832
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-ebf9437c9e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 42 Update: chromium-145.0.7632.109-1.fc42
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-7ba8ba6dff
2026-02-26 00:55:51.093588+00:00
--------------------------------------------------------------------------------
Name : chromium
Product : Fedora 42
Version : 145.0.7632.109
Release : 1.fc42
URL : http://www.chromium.org/Home
Summary : A WebKit (Blink) powered web browser that Google doesn't want you to use
Description :
Chromium is an open-source web browser, powered by WebKit (Blink).
--------------------------------------------------------------------------------
Update Information:
Update to 145.0.7632.109
* CVE-2026-2648: Heap buffer overflow in PDFium
* CVE-2026-2649: Integer overflow in V8
* CVE-2026-2650: Heap buffer overflow in Media
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 23 2026 Than Ngo [than@redhat.com] - 145.0.7632.109-1
- Update to 145.0.7632.109
* CVE-2026-2648: Heap buffer overflow in PDFium
* CVE-2026-2649: Integer overflow in V8
* CVE-2026-2650: Heap buffer overflow in Media
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-7ba8ba6dff' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
