Fedora 43 and Fedora 44 users need to apply a series of security updates that were released. Many of these advisories address critical vulnerabilities within packages such as python-cryptography, vim, and mingw-expat that could allow attackers to execute code or cause denial of service. Specific fixes include correcting name constraint issues during certificate verification and removing unsafe dead code from bundled dependencies like ply. System administrators can install the necessary patches by using the dnf upgrade program with the specific advisory identifiers listed in each notification.

Fedora 43 Update: python-cryptography-46.0.6-1.fc43
Fedora 43 Update: mingw-expat-2.7.5-1.fc43
Fedora 43 Update: php-phpseclib3-3.0.50-1.fc43
Fedora 43 Update: pypy3.11-7.3.21-3.3.11.fc43
Fedora 44 Update: python-cryptography-46.0.6-1.fc44
Fedora 44 Update: python-pycparser-2.22-8.fc44
Fedora 44 Update: vim-9.2.240-1.fc44
Fedora 44 Update: mingw-expat-2.7.5-1.fc44
Fedora 44 Update: mingw-freetype-2.14.2-1.fc44
Fedora 44 Update: pypy3.11-7.3.21-3.3.11.fc44
Fedora 44 Update: libsoup3-3.6.6-6.fc44
Fedora 44 Update: libtasn1-4.21.0-1.fc44

[SECURITY] Fedora 43 Update: python-cryptography-46.0.6-1.fc43

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-6c010af7be
2026-03-30 00:53:25.964755+00:00
--------------------------------------------------------------------------------

Name : python-cryptography
Product : Fedora 43
Version : 46.0.6
Release : 1.fc43
URL : https://cryptography.io/en/latest/
Summary : PyCA's cryptography library
Description :
cryptography is a package designed to expose cryptographic primitives and
recipes to Python developers.

--------------------------------------------------------------------------------
Update Information:

Update to v46.0.6
This includes a single fix for security issue:
* **SECURITY ISSUE**: Fixed a bug where name constraints were not applied
to peer names during verification when the leaf certificate contains a
wildcard DNS SAN. Ordinary X.509 topologies are not affected by this bug,
including those used by the Web PKI. Credit to **Oleh Konko (1seal)** for
reporting the issue. **CVE-2026-34073**
--------------------------------------------------------------------------------
ChangeLog:

* Thu Mar 26 2026 Jeremy Cline [jeremycline@microsoft.com] - 46.0.6-1
- Update to v46.0.6
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2451584 - python-cryptography-46.0.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2451584
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-6c010af7be' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new

[SECURITY] Fedora 43 Update: mingw-expat-2.7.5-1.fc43

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-e70c1919fe
2026-03-30 00:53:25.964749+00:00
--------------------------------------------------------------------------------

Name : mingw-expat
Product : Fedora 43
Version : 2.7.5
Release : 1.fc43
URL : http://www.libexpat.org/
Summary : MinGW Windows port of expat XML parser library
Description :
This is expat, the C library for parsing XML, written by James Clark. Expat
is a stream oriented XML parser. This means that you register handlers with
the parser prior to starting the parse. These handlers are called when the
parser discovers the associated structures in the document being parsed. A
start tag is an example of the kind of structures for which you may
register handlers.

--------------------------------------------------------------------------------
Update Information:

Update to 2.7.5.
--------------------------------------------------------------------------------
ChangeLog:

* Sat Mar 21 2026 Sandro Mani [manisandro@gmail.com] - 2.7.5-1
- Update to 2.7.5
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2447973 - CVE-2026-32777 mingw-expat: libexpat: Denial of Service via infinite loop in DTD content parsing [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2447973
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-e70c1919fe' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new

[SECURITY] Fedora 43 Update: php-phpseclib3-3.0.50-1.fc43

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-b7d9416ec4
2026-03-30 00:53:25.964738+00:00
--------------------------------------------------------------------------------

Name : php-phpseclib3
Product : Fedora 43
Version : 3.0.50
Release : 1.fc43
URL : https://github.com/phpseclib/phpseclib
Summary : PHP Secure Communications Library
Description :
MIT-licensed pure-PHP implementations of an arbitrary-precision integer
arithmetic library, fully PKCS#1 (v2.1) compliant RSA, DES, 3DES, RC4,
Rijndael, AES, Blowfish, Twofish, SSH-1, SSH-2, SFTP, and X.509

--------------------------------------------------------------------------------
Update Information:

Update to v3.0.50; contains fix for CVE-2026-32935
--------------------------------------------------------------------------------
ChangeLog:

* Sat Mar 21 2026 Artur Frenszek-Iwicki [fedora@svgames.pl] - 3.0.50-1
- Update to v3.0.50
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2448961 - php-phpseclib3-3.0.50 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2448961
[ 2 ] Bug #2449637 - CVE-2026-32935 php-phpseclib3: phpseclib: Information disclosure via padding oracle timing attack when using AES in CBC mode [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2449637
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-b7d9416ec4' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new

[SECURITY] Fedora 43 Update: pypy3.11-7.3.21-3.3.11.fc43

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-85a7950dd4
2026-03-30 00:53:25.964693+00:00
--------------------------------------------------------------------------------

Name : pypy3.11
Product : Fedora 43
Version : 7.3.21
Release : 3.3.11.fc43
URL : https://www.pypy.org/
Summary : Python 3.11 implementation with a Just-In-Time compiler
Description :
PyPy's implementation of Python 3.11, featuring a Just-In-Time compiler
on some CPU architectures, and various optimized implementations
of the standard types (strings, dictionaries, etc.).

This build of PyPy has JIT-compilation enabled.

--------------------------------------------------------------------------------
Update Information:

Fix jit backend for ppc64le and s390x
--------------------------------------------------------------------------------
ChangeLog:

* Thu Mar 19 2026 Charalampos Stratakis [cstratak@redhat.com] - 7.3.21-2
- Fix CVE-2025-56005 via removing no-longer used bundled ply
- Fixes: rhbz#2431978
* Thu Mar 19 2026 Charalampos Stratakis [cstratak@redhat.com] - 7.3.21-1
- Update to 7.3.21
- Fixes: rhbz#2447285
* Sat Jan 17 2026 Fedora Release Engineering [releng@fedoraproject.org] - 7.3.20-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Tue Jan 6 2026 Miro Hron??ok [miro@hroncok.cz] - 7.3.20-5
- Enable JIT on riscv64
* Mon Jan 5 2026 Miro Hron??ok [miro@hroncok.cz] - 7.3.20-4
- Inject SBOM into the installed wheels (when using the bundled ones)
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2431978 - CVE-2025-56005 pypy3.11: From CVEorg collector [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2431978
[ 2 ] Bug #2447285 - pypy3.11-7.3.21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2447285
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-85a7950dd4' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

[SECURITY] Fedora 44 Update: python-cryptography-46.0.6-1.fc44

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-2423902e8b
2026-03-30 00:14:59.309380+00:00
--------------------------------------------------------------------------------

Name : python-cryptography
Product : Fedora 44
Version : 46.0.6
Release : 1.fc44
URL : https://cryptography.io/en/latest/
Summary : PyCA's cryptography library
Description :
cryptography is a package designed to expose cryptographic primitives and
recipes to Python developers.

--------------------------------------------------------------------------------
Update Information:

Update to v46.0.6
This includes a single fix for security issue:
* **SECURITY ISSUE**: Fixed a bug where name constraints were not applied
to peer names during verification when the leaf certificate contains a
wildcard DNS SAN. Ordinary X.509 topologies are not affected by this bug,
including those used by the Web PKI. Credit to **Oleh Konko (1seal)** for
reporting the issue. **CVE-2026-34073**
--------------------------------------------------------------------------------
ChangeLog:

* Thu Mar 26 2026 Jeremy Cline [jeremycline@microsoft.com] - 46.0.6-1
- Update to v46.0.6
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2433650 - python-cryptography-46.0.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2433650
[ 2 ] Bug #2451584 - python-cryptography-46.0.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2451584
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-2423902e8b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new

[SECURITY] Fedora 44 Update: python-pycparser-2.22-8.fc44

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-1594a9755b
2026-03-30 00:14:59.309373+00:00
--------------------------------------------------------------------------------

Name : python-pycparser
Product : Fedora 44
Version : 2.22
Release : 8.fc44
URL : http://github.com/eliben/pycparser
Summary : C parser and AST generator written in Python
Description :
pycparser is a complete parser for the C language, written in pure Python.
It is a module designed to be easily integrated into applications that
need to parse C source code.

--------------------------------------------------------------------------------
Update Information:

Remove unsafe dead code (CVE-2025-56005) from the bundled ply
--------------------------------------------------------------------------------
ChangeLog:

* Wed Mar 25 2026 Charalampos Stratakis [cstratak@redhat.com] - 2.22-8
- Remove unsafe dead code (CVE-2025-56005) from the bundled ply
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-1594a9755b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new

[SECURITY] Fedora 44 Update: vim-9.2.240-1.fc44

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-a218db2573
2026-03-30 00:14:59.309364+00:00
--------------------------------------------------------------------------------

Name : vim
Product : Fedora 44
Version : 9.2.240
Release : 1.fc44
URL : https://www.vim.org/
Summary : The VIM editor
Description :
VIM (VIsual editor iMproved) is an updated and improved version of the
vi editor. Vi was the first real screen-based editor for UNIX, and is
still very popular. VIM improves on vi by adding new features:
multiple windows, multi-level undo, block highlighting and more.

--------------------------------------------------------------------------------
Update Information:

patchlevel 240
--------------------------------------------------------------------------------
ChangeLog:

* Wed Mar 25 2026 Zdenek Dohnal [zdohnal@redhat.com] - 2:9.2.240-1
- patchlevel 240
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2450907 - CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function
https://bugzilla.redhat.com/show_bug.cgi?id=2450907
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-a218db2573' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new

[SECURITY] Fedora 44 Update: mingw-expat-2.7.5-1.fc44

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-cf814a1a06
2026-03-30 00:14:59.309316+00:00
--------------------------------------------------------------------------------

Name : mingw-expat
Product : Fedora 44
Version : 2.7.5
Release : 1.fc44
URL : http://www.libexpat.org/
Summary : MinGW Windows port of expat XML parser library
Description :
This is expat, the C library for parsing XML, written by James Clark. Expat
is a stream oriented XML parser. This means that you register handlers with
the parser prior to starting the parse. These handlers are called when the
parser discovers the associated structures in the document being parsed. A
start tag is an example of the kind of structures for which you may
register handlers.

--------------------------------------------------------------------------------
Update Information:

Update to 2.7.5.
--------------------------------------------------------------------------------
ChangeLog:

* Sat Mar 21 2026 Sandro Mani [manisandro@gmail.com] - 2.7.5-1
- Update to 2.7.5
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2447973 - CVE-2026-32777 mingw-expat: libexpat: Denial of Service via infinite loop in DTD content parsing [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2447973
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-cf814a1a06' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new

[SECURITY] Fedora 44 Update: mingw-freetype-2.14.2-1.fc44

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-0e9d55a05c
2026-03-30 00:14:59.309312+00:00
--------------------------------------------------------------------------------

Name : mingw-freetype
Product : Fedora 44
Version : 2.14.2
Release : 1.fc44
URL : http://www.freetype.org
Summary : Free and portable font rendering engine
Description :
MinGW Windows Freetype library.

--------------------------------------------------------------------------------
Update Information:

Update to 2.14.2.
--------------------------------------------------------------------------------
ChangeLog:

* Sat Mar 21 2026 Sandro Mani [manisandro@gmail.com] - 2.14.2-1
- Update to 2.14.2
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2447948 - CVE-2026-23865 mingw-freetype: Freetype: Information disclosure or denial of service via specially crafted font files [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2447948
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-0e9d55a05c' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new

[SECURITY] Fedora 44 Update: pypy3.11-7.3.21-3.3.11.fc44

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-8199b7452a
2026-03-30 00:14:59.309237+00:00
--------------------------------------------------------------------------------

Name : pypy3.11
Product : Fedora 44
Version : 7.3.21
Release : 3.3.11.fc44
URL : https://www.pypy.org/
Summary : Python 3.11 implementation with a Just-In-Time compiler
Description :
PyPy's implementation of Python 3.11, featuring a Just-In-Time compiler
on some CPU architectures, and various optimized implementations
of the standard types (strings, dictionaries, etc.).

This build of PyPy has JIT-compilation enabled.

--------------------------------------------------------------------------------
Update Information:

Fix jit backend for ppc64le and s390x
--------------------------------------------------------------------------------
ChangeLog:

* Thu Mar 19 2026 Charalampos Stratakis [cstratak@redhat.com] - 7.3.21-2
- Fix CVE-2025-56005 via removing no-longer used bundled ply
- Fixes: rhbz#2431978
* Thu Mar 19 2026 Charalampos Stratakis [cstratak@redhat.com] - 7.3.21-1
- Update to 7.3.21
- Fixes: rhbz#2447285
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2431978 - CVE-2025-56005 pypy3.11: From CVEorg collector [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2431978
[ 2 ] Bug #2447285 - pypy3.11-7.3.21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2447285
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-8199b7452a' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new

[SECURITY] Fedora 44 Update: libsoup3-3.6.6-6.fc44

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-55dabf3975
2026-03-30 00:14:59.309220+00:00
--------------------------------------------------------------------------------

Name : libsoup3
Product : Fedora 44
Version : 3.6.6
Release : 6.fc44
URL : https://wiki.gnome.org/Projects/libsoup
Summary : Soup, an HTTP library implementation
Description :
Libsoup is an HTTP library implementation in C. It was originally part
of a SOAP (Simple Object Access Protocol) implementation called Soup, but
the SOAP and non-SOAP parts have now been split into separate packages.

libsoup uses the Glib main loop and is designed to work well with GTK
applications. This enables GNOME applications to access HTTP servers
on the network in a completely asynchronous fashion, very similar to
the Gtk+ programming model (a synchronous operation mode is also
supported for those who want it), but the SOAP parts were removed
long ago.

--------------------------------------------------------------------------------
Update Information:

Add patch for CVE-2026-1539 (Also remove Proxy-Authorization header on cross
origin redirect)
--------------------------------------------------------------------------------
ChangeLog:

* Thu Mar 19 2026 Milan Crha [mcrha@redhat.com] - 3.6.6-6
- Add patch for CVE-2026-1539 (Also remove Proxy-Authorization header on
cross origin redirect)
- Resolves: rhbz#2433867
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2433867 - CVE-2026-1539 libsoup3: libsoup: Credential leakage via HTTP redirects [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2433867
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-55dabf3975' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new

[SECURITY] Fedora 44 Update: libtasn1-4.21.0-1.fc44

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-48a302496d
2026-03-30 00:14:59.309160+00:00
--------------------------------------------------------------------------------

Name : libtasn1
Product : Fedora 44
Version : 4.21.0
Release : 1.fc44
URL : https://www.gnu.org/software/libtasn1/
Summary : The ASN.1 library used in GNUTLS
Description :
A library that provides Abstract Syntax Notation One (ASN.1, as specified
by the X.680 ITU-T recommendation) parsing and structures management, and
Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

--------------------------------------------------------------------------------
Update Information:

Update to 4.21.0; fixes CVE-2025-13151
--------------------------------------------------------------------------------
ChangeLog:

* Fri Mar 13 2026 Alexander Sosedkin [asosedkin@redhat.com] - 4.21.0-1
- Update to 4.21.0; fixes CVE-2025-13151
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-48a302496d' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new