Fedora Linux 9427 Published by

Fedora released security and maintenance updates on July 24, 2026, targeting both the Fedora 43 and Fedora 44 distributions. The patch set closes seventeen documented vulnerabilities in dotnet8.0 and dotnet9.0, while also shipping python-black, python-lsp-black, and python-pytokens with fixes for CVE-2026-31900 and CVE-2026-32274. Mozilla Firefox moves to version 153.0 on Fedora 44, bringing new upstream features alongside temporary disables for the IPC forkserver and PGO optimization builds. Cryptlib advances to version 3.4.9.3 across both releases to prepare developers for upcoming algorithm deprecations in the forthcoming 3.5 release.

Fedora 43 Update: dotnet9.0-9.0.119-1.fc43
Fedora 43 Update: dotnet8.0-8.0.129-2.fc43
Fedora 43 Update: cryptlib-3.4.9.3-1.fc43
Fedora 44 Update: firefox-153.0-3.fc44
Fedora 44 Update: dotnet8.0-8.0.129-2.fc44
Fedora 44 Update: dotnet9.0-9.0.119-1.fc44
Fedora 44 Update: cryptlib-3.4.9.3-1.fc44
Fedora 44 Update: python-lsp-black-2.0.0-17.fc44
Fedora 44 Update: python-black-26.5.1-1.fc44
Fedora 44 Update: python-pytokens-0.4.1-4.fc44




[SECURITY] Fedora 43 Update: dotnet9.0-9.0.119-1.fc43


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-3afd9d89f4
2026-07-24 01:12:11.053086+00:00
--------------------------------------------------------------------------------

Name : dotnet9.0
Product : Fedora 43
Version : 9.0.119
Release : 1.fc43
URL : https://github.com/dotnet/
Summary : .NET Runtime and SDK
Description :
.NET is a fast, lightweight and modular platform for creating
cross platform applications that work on Linux, macOS and Windows.

It particularly focuses on creating console applications, web
applications and micro-services.

.NET contains a runtime conforming to .NET Standards a set of
framework libraries, an SDK containing compilers and a 'dotnet'
application to drive everything.

--------------------------------------------------------------------------------
Update Information:

Update to .NET SDK 9.0.119 and Runtime 9.0.18
Fixes: CVE-2026-47300,CVE-2026-47302,CVE-2026-47303,CVE-2026-47304,CVE-2026-
50524,CVE-2026-50525,CVE-2026-50526,CVE-2026-50527,CVE-2026-50528,CVE-2026-
50646,CVE-2026-50648,CVE-2026-50649,CVE-2026-50650,CVE-2026-50651,CVE-2026-
50659,CVE-2026-56158,CVE-2026-57108
Release Notes:
SDK: https://github.com/dotnet/core/blob/main/release-
notes/9.0/9.0.18/9.0.119.md
Runtime: https://github.com/dotnet/core/blob/main/release-
notes/9.0/9.0.18/9.0.18.md
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jul 14 2026 Omair Majid [omajid@redhat.com] - 9.0.119-1
- Update to .NET SDK 9.0.119 and Runtime 9.0.18
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-3afd9d89f4' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new



[SECURITY] Fedora 43 Update: dotnet8.0-8.0.129-2.fc43


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-da44c3870f
2026-07-24 01:12:11.053089+00:00
--------------------------------------------------------------------------------

Name : dotnet8.0
Product : Fedora 43
Version : 8.0.129
Release : 2.fc43
URL : https://github.com/dotnet/
Summary : .NET Runtime and SDK
Description :
.NET is a fast, lightweight and modular platform for creating
cross platform applications that work on Linux, macOS and Windows.

It particularly focuses on creating console applications, web
applications and micro-services.

.NET contains a runtime conforming to .NET Standards a set of
framework libraries, an SDK containing compilers and a 'dotnet'
application to drive everything.

--------------------------------------------------------------------------------
Update Information:

Update to .NET SDK 8.0.129 and Runtime 8.0.29
Fixes: CVE-2026-47300,CVE-2026-47302,CVE-2026-47303,CVE-2026-47304,CVE-2026-
50524,CVE-2026-50525,CVE-2026-50526,CVE-2026-50527,CVE-2026-50528,CVE-2026-
50646,CVE-2026-50648,CVE-2026-50649,CVE-2026-50650,CVE-2026-50651,CVE-2026-
50659,CVE-2026-56158,CVE-2026-57108
Release Notes:
SDK: https://github.com/dotnet/core/blob/main/release-
notes/8.0/8.0.29/8.0.129.md
Runtime: https://github.com/dotnet/core/blob/main/release-
notes/8.0/8.0.29/8.0.29.md
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jul 20 2026 Omair Majid [omajid@redhat.com] - 8.0.129-1
- Update to .NET SDK 8.0.129 and Runtime 8.0.29
* Wed Jul 15 2026 Fedora Release Engineering [releng@fedoraproject.org] - 8.0.128-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-da44c3870f' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new



[SECURITY] Fedora 43 Update: cryptlib-3.4.9.3-1.fc43


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-47575c76a5
2026-07-24 01:12:11.053075+00:00
--------------------------------------------------------------------------------

Name : cryptlib
Product : Fedora 43
Version : 3.4.9.3
Release : 1.fc43
URL : https://github.com/cryptlib/cryptlib
Summary : Security library and toolkit for encryption and authentication services
Description :
Cryptlib is a powerful security toolkit that allows even inexperienced crypto
programmers to easily add encryption and authentication services to their
software. The high-level interface provides anyone with the ability to add
strong security capabilities to an application in as little as half an hour,
without needing to know any of the low-level details that make the encryption
or authentication work. Because of this, cryptlib dramatically reduces the
cost involved in adding security to new or existing applications.

At the highest level, cryptlib provides implementations of complete security
services such as S/MIME and PGP/OpenPGP secure enveloping, SSL/TLS and
SSH secure sessions, CA services such as CMP, SCEP, RTCS, and OCSP, and other
security operations such as secure time-stamping. Since cryptlib uses
industry-standard X.509, S/MIME, PGP/OpenPGP, and SSH/SSL/TLS data formats,
the resulting encrypted or signed data can be easily transported to other
systems and processed there, and cryptlib itself runs on virtually any
operating system - cryptlib doesn't tie you to a single system.
This allows email, files and EDI transactions to be authenticated with
digital signatures and encrypted in an industry-standard format.

--------------------------------------------------------------------------------
Update Information:

A third update after 3.4.9 to prepare for deprecation of obsolete algorithms and
attributes in the upcoming 3.5 release.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jul 14 2026 Ralf Senderek [innovation@senderek.ie] 3.4.9.3-1
- Update Cryptlib to version 3.4.9.3
* Sat Jun 27 2026 Ralf Senderek [innovation@senderek.ie] 3.4.9.2-2
- Add cltls version 1.0 to the cryptlib tools
* Wed Jun 10 2026 Ralf Senderek [innovation@senderek.ie] 3.4.9.2-1
- update Cryptlib to version 3.4.9.2
* Wed Jun 3 2026 Python Maint - 3.4.9.1-2
- Rebuilt for Python 3.15
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-47575c76a5' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new



[SECURITY] Fedora 44 Update: firefox-153.0-3.fc44


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-7d71f89d7e
2026-07-24 00:56:22.694832+00:00
--------------------------------------------------------------------------------

Name : firefox
Product : Fedora 44
Version : 153.0
Release : 3.fc44
URL : https://www.mozilla.org/firefox/
Summary : Mozilla Firefox Web browser
Description :
Mozilla Firefox is an open-source web browser, designed for standards
compliance, performance and portability.

--------------------------------------------------------------------------------
Update Information:

Update to latest upstream (153.0)
New upstream release (153.0)
Updated to latest upstream (153.0)
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jul 22 2026 Martin Stransky [stransky@redhat.com] - 153.0-3
- Disabled dom.ipc.forkserver.enable due to mzbz#2056004.
* Tue Jul 21 2026 Martin Stransky [stransky@redhat.com] - 153.0-2
- Temporary disable PGO
* Thu Jul 16 2026 Martin Stransky [stransky@redhat.com] - 153.0-1
- Updated to latest upstream (153.0)
* Wed Jul 15 2026 Fedora Release Engineering [releng@fedoraproject.org] - 152.0.6-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-7d71f89d7e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new



[SECURITY] Fedora 44 Update: dotnet8.0-8.0.129-2.fc44


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-9aef53fa96
2026-07-24 00:56:22.694809+00:00
--------------------------------------------------------------------------------

Name : dotnet8.0
Product : Fedora 44
Version : 8.0.129
Release : 2.fc44
URL : https://github.com/dotnet/
Summary : .NET Runtime and SDK
Description :
.NET is a fast, lightweight and modular platform for creating
cross platform applications that work on Linux, macOS and Windows.

It particularly focuses on creating console applications, web
applications and micro-services.

.NET contains a runtime conforming to .NET Standards a set of
framework libraries, an SDK containing compilers and a 'dotnet'
application to drive everything.

--------------------------------------------------------------------------------
Update Information:

Update to .NET SDK 8.0.129 and Runtime 8.0.29
Fixes: CVE-2026-47300,CVE-2026-47302,CVE-2026-47303,CVE-2026-47304,CVE-2026-
50524,CVE-2026-50525,CVE-2026-50526,CVE-2026-50527,CVE-2026-50528,CVE-2026-
50646,CVE-2026-50648,CVE-2026-50649,CVE-2026-50650,CVE-2026-50651,CVE-2026-
50659,CVE-2026-56158,CVE-2026-57108
Release Notes:
SDK: https://github.com/dotnet/core/blob/main/release-
notes/8.0/8.0.29/8.0.129.md
Runtime: https://github.com/dotnet/core/blob/main/release-
notes/8.0/8.0.29/8.0.29.md
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jul 20 2026 Omair Majid [omajid@redhat.com] - 8.0.129-1
- Update to .NET SDK 8.0.129 and Runtime 8.0.29
* Wed Jul 15 2026 Fedora Release Engineering [releng@fedoraproject.org] - 8.0.128-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-9aef53fa96' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new



[SECURITY] Fedora 44 Update: dotnet9.0-9.0.119-1.fc44


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-d6b061ad69
2026-07-24 00:56:22.694806+00:00
--------------------------------------------------------------------------------

Name : dotnet9.0
Product : Fedora 44
Version : 9.0.119
Release : 1.fc44
URL : https://github.com/dotnet/
Summary : .NET Runtime and SDK
Description :
.NET is a fast, lightweight and modular platform for creating
cross platform applications that work on Linux, macOS and Windows.

It particularly focuses on creating console applications, web
applications and micro-services.

.NET contains a runtime conforming to .NET Standards a set of
framework libraries, an SDK containing compilers and a 'dotnet'
application to drive everything.

--------------------------------------------------------------------------------
Update Information:

Update to .NET SDK 9.0.119 and Runtime 9.0.18
Fixes: CVE-2026-47300,CVE-2026-47302,CVE-2026-47303,CVE-2026-47304,CVE-2026-
50524,CVE-2026-50525,CVE-2026-50526,CVE-2026-50527,CVE-2026-50528,CVE-2026-
50646,CVE-2026-50648,CVE-2026-50649,CVE-2026-50650,CVE-2026-50651,CVE-2026-
50659,CVE-2026-56158,CVE-2026-57108
Release Notes:
SDK: https://github.com/dotnet/core/blob/main/release-
notes/9.0/9.0.18/9.0.119.md
Runtime: https://github.com/dotnet/core/blob/main/release-
notes/9.0/9.0.18/9.0.18.md
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jul 14 2026 Omair Majid [omajid@redhat.com] - 9.0.119-1
- Update to .NET SDK 9.0.119 and Runtime 9.0.18
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-d6b061ad69' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new



[SECURITY] Fedora 44 Update: cryptlib-3.4.9.3-1.fc44


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-e4349a03b1
2026-07-24 00:56:22.694797+00:00
--------------------------------------------------------------------------------

Name : cryptlib
Product : Fedora 44
Version : 3.4.9.3
Release : 1.fc44
URL : https://github.com/cryptlib/cryptlib
Summary : Security library and toolkit for encryption and authentication services
Description :
Cryptlib is a powerful security toolkit that allows even inexperienced crypto
programmers to easily add encryption and authentication services to their
software. The high-level interface provides anyone with the ability to add
strong security capabilities to an application in as little as half an hour,
without needing to know any of the low-level details that make the encryption
or authentication work. Because of this, cryptlib dramatically reduces the
cost involved in adding security to new or existing applications.

At the highest level, cryptlib provides implementations of complete security
services such as S/MIME and PGP/OpenPGP secure enveloping, SSL/TLS and
SSH secure sessions, CA services such as CMP, SCEP, RTCS, and OCSP, and other
security operations such as secure time-stamping. Since cryptlib uses
industry-standard X.509, S/MIME, PGP/OpenPGP, and SSH/SSL/TLS data formats,
the resulting encrypted or signed data can be easily transported to other
systems and processed there, and cryptlib itself runs on virtually any
operating system - cryptlib doesn't tie you to a single system.
This allows email, files and EDI transactions to be authenticated with
digital signatures and encrypted in an industry-standard format.

--------------------------------------------------------------------------------
Update Information:

A third update after 3.4.9 to prepare for deprecation of obsolete algorithms and
attributes in the upcoming 3.5 release.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jul 14 2026 Ralf Senderek [innovation@senderek.ie] 3.4.9.3-1
- Update Cryptlib to version 3.4.9.3
* Sat Jun 27 2026 Ralf Senderek [innovation@senderek.ie] 3.4.9.2-2
- Add cltls version 1.0 to the cryptlib tools
* Wed Jun 10 2026 Ralf Senderek [innovation@senderek.ie] 3.4.9.2-1
- update Cryptlib to version 3.4.9.2
* Wed Jun 3 2026 Python Maint - 3.4.9.1-2
- Rebuilt for Python 3.15
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-e4349a03b1' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new



[SECURITY] Fedora 44 Update: python-lsp-black-2.0.0-17.fc44


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-3805ba3721
2026-07-24 00:56:22.694785+00:00
--------------------------------------------------------------------------------

Name : python-lsp-black
Product : Fedora 44
Version : 2.0.0
Release : 17.fc44
URL : https://github.com/python-lsp/python-lsp-black
Summary : A python-lsp-server plugin that adds support to black autoformatter
Description :
lsp-black is a python-lsp-server plugin that adds support to black
autoformatter. This is forked from pyls-black to be compatible wth
community maintained language-server (python-lsp-server).

--------------------------------------------------------------------------------
Update Information:

Upgrade to 26.5.1, solves serious vulnerabilities such as:
CVE-2026-31900
CVE-2026-32274
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jul 14 2026 Benjamin A. Beasley [code@musicinmybrain.net] - 2.0.0-17
- Fix compatibility with black≥26.5 (fixes RHBZ#2485891)
* Tue Jul 14 2026 Benjamin A. Beasley [code@musicinmybrain.net] - 2.0.0-16
- Patch for pkg_resources removal from setuptools
* Tue Jul 14 2026 Tomáš Hrnčiar [thrnciar@redhat.com] - 2.0.0-15
- Fix invalid extras in %pyproject_buildrequires -x
* Tue Jun 16 2026 Python Maint - 2.0.0-14
- Rebuilt for Python 3.15
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-3805ba3721' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------



[SECURITY] Fedora 44 Update: python-black-26.5.1-1.fc44


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-3805ba3721
2026-07-24 00:56:22.694785+00:00
--------------------------------------------------------------------------------

Name : python-black
Product : Fedora 44
Version : 26.5.1
Release : 1.fc44
URL : https://github.com/psf/black
Summary : The uncompromising code formatter
Description :
Black is the uncompromising Python code formatter. By using it, you agree to
cease control over minutiae of hand-formatting. In return, Black gives you
speed, determinism, and freedom from pycodestyle nagging about formatting.
You will save time and mental energy for more important matters.

--------------------------------------------------------------------------------
Update Information:

Upgrade to 26.5.1, solves serious vulnerabilities such as:
CVE-2026-31900
CVE-2026-32274
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jul 9 2026 Simone Tollardo [dev@tollsimy.net] - 26.5.1-1
- Update python-black to 26.5.1
- Fixes: rhbz#2396612
* Thu Jun 4 2026 Python Maint - 25.1.0-9
- Rebuilt for Python 3.15
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-3805ba3721' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new



[SECURITY] Fedora 44 Update: python-pytokens-0.4.1-4.fc44


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-3805ba3721
2026-07-24 00:56:22.694785+00:00
--------------------------------------------------------------------------------

Name : python-pytokens
Product : Fedora 44
Version : 0.4.1
Release : 4.fc44
URL : https://github.com/tusharsadhwani/pytokens
Summary : A fast, spec compliant Python 3.14+ tokenizer
Description :
A Fast, spec compliant Python 3.14+ tokenizer that runs on older Pythons.

--------------------------------------------------------------------------------
Update Information:

Upgrade to 26.5.1, solves serious vulnerabilities such as:
CVE-2026-31900
CVE-2026-32274
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jul 8 2026 Simone Tollardo [dev@tollsimy.net] - 0.4.1-4
- spec: add newline EOF
* Wed Jul 8 2026 Simone Tollardo [dev@tollsimy.net] - 0.4.1-3
- ignore: ignore local build folder, match all pytokens tar versions
* Wed Jul 8 2026 Simone Tollardo [dev@tollsimy.net] - 0.4.1-2
- Add rpmlintrc
* Wed Jul 8 2026 Simone Tollardo [dev@tollsimy.net] - 0.4.1-1
- Initial import (fedora#2497706).
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-3805ba3721' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new