Fedora 43 Update: cri-o1.34-1.34.11-1.fc43
Fedora 43 Update: vaultwarden-1.37.1-1.fc43
Fedora 44 Update: sqlite-3.51.2-2.fc44
Fedora 44 Update: linux-firmware-20260810-1.fc44
Fedora 44 Update: apr-util-1.6.5-1.fc44
Fedora 44 Update: libcupsfilters-2.1.1-9.fc44
Fedora 44 Update: cri-o1.34-1.34.11-1.fc44
Fedora 44 Update: vaultwarden-1.37.1-1.fc44
[SECURITY] Fedora 43 Update: cri-o1.34-1.34.11-1.fc43
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-7e85920dc5
2026-08-13 01:03:50.780717+00:00
--------------------------------------------------------------------------------
Name : cri-o1.34
Product : Fedora 43
Version : 1.34.11
Release : 1.fc43
URL : https://github.com/cri-o/cri-o
Summary : Open Container Initiative-based implementation of Kubernetes Container Runtime Interface
Description :
Open Container Initiative-based implementation of Kubernetes Container Runtime
Interface.
--------------------------------------------------------------------------------
Update Information:
Update to release v1.34.11
Resolves: rhbz#2510870
Resolves CVE-2026-34986: rhbz#2455652
Upstream fixes
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 4 2026 Bradley G Smith [bradley.g.smith@gmail.com] - 1.34.11-1
- Update to release v1.34.11
- Resolves: rhbz#2510870
- Resolves CVE-2026-34986: rhbz#2455652
- Upstream fixes
* Wed Jul 15 2026 Fedora Release Engineering [releng@fedoraproject.org] - 1.34.10-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2455652 - CVE-2026-34986 cri-o1.34: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2455652
[ 2 ] Bug #2510870 - cri-o-1.36.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2510870
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-7e85920dc5' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 43 Update: vaultwarden-1.37.1-1.fc43
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-84a39c58c9
2026-08-13 01:03:50.780681+00:00
--------------------------------------------------------------------------------
Name : vaultwarden
Product : Fedora 43
Version : 1.37.1
Release : 1.fc43
URL : https://github.com/dani-garcia/vaultwarden
Summary : Unofficial Bitwarden compatible server
Description :
Unofficial Bitwarden compatible server.
--------------------------------------------------------------------------------
Update Information:
update to 1.37.1
fixes several cves, and some undisclosed vulnerabilities patched by upstream
that will be published later
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 3 2026 Jonathan Wright [jonathan@almalinux.org] - 1.37.1-1
- update to 1.37.1 rhbz#2510094
- Fix CVE-2026-31812 vaultwarden: quinn-proto: Denial of Service via crafted QUIC Initial packet rhbz#2446376
- Fix 8 cited but yet-to-be-listed medium-severity vulnerabilities
* Fri Jul 17 2026 Fedora Release Engineering [releng@fedoraproject.org] - 1.36.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
* Sat Jun 13 2026 Yaakov Selkowitz [yselkowi@redhat.com] - 1.36.0-2
- Rebuilt for openssl 4.0
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-84a39c58c9' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 44 Update: sqlite-3.51.2-2.fc44
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-4bc86fb6d0
2026-08-13 00:55:32.113993+00:00
--------------------------------------------------------------------------------
Name : sqlite
Product : Fedora 44
Version : 3.51.2
Release : 2.fc44
URL : http://www.sqlite.org/
Summary : Library that implements an embeddable SQL database engine
Description :
SQLite is a C library that implements an SQL database engine. A large
subset of SQL92 is supported. A complete database is stored in a
single disk file. The API is designed for convenience and ease of use.
Applications that link against SQLite can enjoy the power and
flexibility of an SQL database without the administrative hassles of
supporting a separate database server. Version 2 and version 3 binaries
are named to permit each to be installed on a single host
SQLite is built with some non-default settings:
- Additional APIs for table's and query's metadata are enabled
(SQLITE_ENABLE_COLUMN_METADATA)
- Directory syncs are disabled (SQLITE_DISABLE_DIRSYNC)
- `secure_delete` defaults to 'on', so deleted content is overwritten
with zeros (SQLITE_SECURE_DELETE)
- `sqlite3_unlock_notify()` is enabled - this feature allows to register a
callback that's invoked when lock is removed (SQLITE_ENABLE_UNLOCK_NOTIFY)
- `dbstat` virtual table with disk space usage is enabled
- `dbpage` virtual table providing direct access to underlying database file
is enabled (SQLITE_ENABLE_DBPAGE_VTAB)
- Threadsafe mode is set to 1 - Serialized, so it is safe to use in a
multithreaded environment (SQLITE_THREADSAFE=1)
- FTS3, FTS4 and FTS5 are enabled so versions 3 to 5 of the full-text search
engine are available (SQLITE_ENABLE_FTS3, SQLITE_ENABLE_FTS4,
SQLITE_ENABLE_FTS5)
- Pattern parser in FTS3 extension supports nested parenthesis and operators
`AND`, `OR` (SQLITE_ENABLE_FTS3_PARENTHESIS)
- R*Tree index extension is enabled (SQLITE_ENABLE_RTREE)
- Extension loading is enabled
- Sessions (sqlite-session feature) is enabled
- Preupdate hook is enabled
It is also important to note that shell has some extensions as its dependencies,
so some extensions are enabled by default in SQLite shell, but not in the system
libraries. Only the aforementioned extensions are available in the libraries:
FTS3, FTS4, FTS5, R*Tree
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2026-11822 and CVE-2026-11824
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 10 2026 Petr Khartskhaev [pkhartsk@redhat.com] - 3.51.2-2
- Fix CVE-2026-11822 and CVE-2026-11824
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2508047 - CVE-2026-11822 sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2508047
[ 2 ] Bug #2508058 - CVE-2026-11824 sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2508058
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-4bc86fb6d0' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 44 Update: linux-firmware-20260810-1.fc44
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-c53019ed4f
2026-08-13 00:55:32.113990+00:00
--------------------------------------------------------------------------------
Name : linux-firmware
Product : Fedora 44
Version : 20260810
Release : 1.fc44
URL : http://www.kernel.org/
Summary : Firmware files used by the Linux kernel
Description :
This package includes firmware files required for some devices to
operate.
--------------------------------------------------------------------------------
Update Information:
Update to 20260810:
amdgpu: numerous firmware updates
update firmware for MT7922 WiFi device
morsemicro: add firmware for mm8108 support
ath10k: WCN3990 hw1.0: update board-2.bin
Update firmware for an8811hb 2.5G ethernet phy
xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S
mediatek MT7922: update bluetooth firmware to 20260724143815
airoha: update AN7583 NPU firmwares to version 0.5
qcom: Add gpu firmwares for Eliza chipset
cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops
rtw89: 8922d: add fw 0.35.113.2
qcom: venus-5.4: fix vp9 decoder assertion failure
qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters
qcom: Update qdsp6sw firmware for shikra platform
amdgpu: DMCUB updates for various ASICs
intel_vpu: Update NPU firmware
qcom: Update DSP firmware for qcs8300 platform
tas2783: Add firmware for new soundwire devices
rtw88: add firmware v41.0.0 for RTL8723B
Update AMD cpu microcode
Add firmware file for Intel BlazarIW
Update firmware file for Intel BlazarI/BlazarU/Scorpius core
amdgpu: DMCUB updates for various ASICs
qcom: add ADSP firmware for hawi platform
powervr: add firmware for Imagination Technologies BXM-4-64 GPU
qcom: Update DSP firmware for sa8775p platform
xe: Release GuC firmware for NVL-S
cirrus: cs35l56: Update firmware for the ASUS UX5406SA
qcom: vpu: add Gen2 firmware binary for Purwa
cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
iwlwifi: add Bz/Sc/Hr/Gf FW for core24.60-33 release
iwlwifi: update ty/So/Ma/cc/Qu/QuZ firmwares for core24.60-33 release
cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
ueagle-atm: sadly drop unlicensed files
qcom: sync audioreach firmwares from v1.0.4 build
QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
amdgpu: DMCUB updates for various ASICs
tas2781: Add firmware for new HP projects
rtw89: 8852a: add TX power track R34
Update AMD SEV firmware
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 11 2026 Peter Robinson [pbrobinson@fedoraproject.org] - 20260810-1
- Update to 20260810
- amdgpu: numerous firmware updates
- update firmware for MT7922 WiFi device
- morsemicro: add firmware for mm8108 support
- ath10k: WCN3990 hw1.0: update board-2.bin
- Update firmware for an8811hb 2.5G ethernet phy
- xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S
- mediatek MT7922: update bluetooth firmware to 20260724143815
- airoha: update AN7583 NPU firmwares to version 0.5
- qcom: Add gpu firmwares for Eliza chipset
- cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops
- rtw89: 8922d: add fw 0.35.113.2
- qcom: venus-5.4: fix vp9 decoder assertion failure
- qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters
- qcom: Update qdsp6sw firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- intel_vpu: Update NPU firmware
- qcom: Update DSP firmware for qcs8300 platform
- tas2783: Add firmware for new soundwire devices
- rtw88: add firmware v41.0.0 for RTL8723B
- Update AMD cpu microcode
- Add firmware file for Intel BlazarIW
- Update firmware file for Intel BlazarI/BlazarU/Scorpius core
- amdgpu: DMCUB updates for various ASICs
- qcom: add ADSP firmware for hawi platform
- powervr: add firmware for Imagination Technologies BXM-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc/Hr/Gf FW for core24.60-33 release
- iwlwifi: update ty/So/Ma/cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- ueagle-atm: sadly drop unlicensed files
- qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- tas2781: Add firmware for new HP projects
- rtw89: 8852a: add TX power track R34
- Update AMD SEV firmware
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-c53019ed4f' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 44 Update: apr-util-1.6.5-1.fc44
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-edfb6293ee
2026-08-13 00:55:32.113984+00:00
--------------------------------------------------------------------------------
Name : apr-util
Product : Fedora 44
Version : 1.6.5
Release : 1.fc44
URL : https://apr.apache.org/
Summary : Apache Portable Runtime Utility library
Description :
The mission of the Apache Portable Runtime (APR) is to provide a
free library of C data structures and routines. This library
contains additional utility interfaces for APR; including support
for XML, LDAP, database interfaces, URI parsing and more.
--------------------------------------------------------------------------------
Update Information:
new version 1.6.5
security fixes
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 10 2026 Luboš Uhliarik [luhliari@redhat.com] - 1.6.5-1
- new version 1.6.5
* Wed Jul 15 2026 Fedora Release Engineering [releng@fedoraproject.org] - 1.6.3-29
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
* Fri Jun 12 2026 Yaakov Selkowitz [yselkowi@redhat.com] - 1.6.3-28
- Rebuilt for openssl 4.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2511996 - apr-util-1.6.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id%11996
[ 2 ] Bug #2513051 - CVE-2026-32327 apr-util: APR-util: Denial of Service via XML stack recursion attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id%13051
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-edfb6293ee' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
[SECURITY] Fedora 44 Update: libcupsfilters-2.1.1-9.fc44
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-f77201a75e
2026-08-13 00:55:32.113981+00:00
--------------------------------------------------------------------------------
Name : libcupsfilters
Product : Fedora 44
Version : 2.1.1
Release : 9.fc44
URL : https://github.com/OpenPrinting/libcupsfilters
Summary : Library for developing printing filters
Description :
Libcupsfilters provides a library, which implements common functions used
in cups-browsed daemon and printing filters, and additional files
as banner templates and character sets. The filters are used in CUPS daemon
and in printer applications.
--------------------------------------------------------------------------------
Update Information:
Security fixes for CVE-2026-64611, CVE-2026-64612
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 5 2026 Zdenek Dohnal [zdohnal@redhat.com] - 1:2.1.1-9
- fixes CVE-2026-64611 and CVE-2026-64612 (fedora#2506364)
* Thu Jul 16 2026 Fedora Release Engineering [releng@fedoraproject.org] - 1:2.1.1-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2502799 - CVE-2026-64611 libcupsfilters: cups-filters: libcupsfilters: CPU exhaustion via infinite loop in cfIEEE1284NormalizeMakeModel()
https://bugzilla.redhat.com/show_bug.cgi?id=2502799
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-f77201a75e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 44 Update: cri-o1.34-1.34.11-1.fc44
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-8ce4ffda9c
2026-08-13 00:55:32.113936+00:00
--------------------------------------------------------------------------------
Name : cri-o1.34
Product : Fedora 44
Version : 1.34.11
Release : 1.fc44
URL : https://github.com/cri-o/cri-o
Summary : Open Container Initiative-based implementation of Kubernetes Container Runtime Interface
Description :
Open Container Initiative-based implementation of Kubernetes Container Runtime
Interface.
--------------------------------------------------------------------------------
Update Information:
Update to release v1.34.11
Resolves: rhbz#2510870
Resolves CVE-2026-34986: rhbz#2455652
Upstream fixes
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 4 2026 Bradley G Smith [bradley.g.smith@gmail.com] - 1.34.11-1
- Update to release v1.34.11
- Resolves: rhbz#2510870
- Resolves CVE-2026-34986: rhbz#2455652
- Upstream fixes
* Wed Jul 15 2026 Fedora Release Engineering [releng@fedoraproject.org] - 1.34.10-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2455652 - CVE-2026-34986 cri-o1.34: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2455652
[ 2 ] Bug #2510870 - cri-o-1.36.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2510870
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-8ce4ffda9c' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[SECURITY] Fedora 44 Update: vaultwarden-1.37.1-1.fc44
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-c28185613c
2026-08-13 00:55:32.113883+00:00
--------------------------------------------------------------------------------
Name : vaultwarden
Product : Fedora 44
Version : 1.37.1
Release : 1.fc44
URL : https://github.com/dani-garcia/vaultwarden
Summary : Unofficial Bitwarden compatible server
Description :
Unofficial Bitwarden compatible server.
--------------------------------------------------------------------------------
Update Information:
update to 1.37.1
fixes several cves, and some undisclosed vulnerabilities patched by upstream
that will be published later
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 3 2026 Jonathan Wright [jonathan@almalinux.org] - 1.37.1-1
- update to 1.37.1 rhbz#2510094
- Fix CVE-2026-31812 vaultwarden: quinn-proto: Denial of Service via crafted QUIC Initial packet rhbz#2446376
- Fix 8 cited but yet-to-be-listed medium-severity vulnerabilities
* Fri Jul 17 2026 Fedora Release Engineering [releng@fedoraproject.org] - 1.36.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
* Sat Jun 13 2026 Yaakov Selkowitz [yselkowi@redhat.com] - 1.36.0-2
- Rebuilt for openssl 4.0
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-c28185613c' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
