Fedora 43 and 44 systems require immediate attention due to new security advisories. The xmlstarlet package receives a critical patch to resolve an XML external entity vulnerability that could compromise document processing. Rust developers also get a major version jump to 1.96.0, which introduces new range types and addresses two Cargo registry CVEs. Meanwhile, the Apache httpd server upgrades to version 2.4.68 to close multiple security gaps and improve overall web infrastructure stability.

Fedora 43 Update: xmlstarlet-1.6.1-30.fc43
Fedora 43 Update: rust-1.96.0-1.fc43
Fedora 44 Update: httpd-2.4.68-1.fc44
Fedora 44 Update: xmlstarlet-1.6.1-30.fc44

[SECURITY] Fedora 43 Update: xmlstarlet-1.6.1-30.fc43

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-3c78c99467
2026-06-11 01:08:40.189444+00:00
--------------------------------------------------------------------------------

Name : xmlstarlet
Product : Fedora 43
Version : 1.6.1
Release : 30.fc43
URL : http://xmlstar.sourceforge.net/
Summary : Command Line XML Toolkit
Description :
XMLStarlet is a set of command line utilities which can be used
to transform, query, validate, and edit XML documents and files
using simple set of shell commands in similar way it is done for
plain text files using UNIX grep, sed, awk, diff, patch, join, etc
commands.

--------------------------------------------------------------------------------
Update Information:

Fixes XML external entity vulnerability. For more information, refer to
https://src.fedoraproject.org/rpms/xmlstarlet/pull-request/4.
--------------------------------------------------------------------------------
ChangeLog:

* Wed May 27 2026 Vitezslav Crhonek [vcrhonek@redhat.com] - 1.6.1-30
- Fix XXE (XML External Entity) vulnerability
* Sat Jan 17 2026 Fedora Release Engineering [releng@fedoraproject.org] - 1.6.1-29
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-3c78c99467' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new

[SECURITY] Fedora 43 Update: rust-1.96.0-1.fc43

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-d7436d12ae
2026-06-11 01:08:40.189427+00:00
--------------------------------------------------------------------------------

Name : rust
Product : Fedora 43
Version : 1.96.0
Release : 1.fc43
URL : https://www.rust-lang.org
Summary : The Rust Programming Language
Description :
Rust is a systems programming language that runs blazingly fast, prevents
segfaults, and guarantees thread safety.

This package includes the Rust compiler and documentation generator.

--------------------------------------------------------------------------------
Update Information:

Update to Rust 1.96.0:
New Range* types
Assert matching patterns
Changes to WebAssembly targets
Stabilized APIs
Cargo CVE-2026-5222 and CVE-2026-5223 for third-party registries.
See the blog post and release notes for more details.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jun 1 2026 Josh Stone [jistone@redhat.com] - 1.96.0-1
- Update to Rust 1.96.0
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2458926 - rust-1.96.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2458926
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-d7436d12ae' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new

[SECURITY] Fedora 44 Update: httpd-2.4.68-1.fc44

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-d4136fe979
2026-06-11 00:54:51.286493+00:00
--------------------------------------------------------------------------------

Name : httpd
Product : Fedora 44
Version : 2.4.68
Release : 1.fc44
URL : https://httpd.apache.org/
Summary : Apache HTTP Server
Description :
The Apache HTTP Server is a powerful, efficient, and extensible
web server.

--------------------------------------------------------------------------------
Update Information:

new version 2.4.68
fixes various security issues
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jun 9 2026 Lubo?? Uhliarik [luhliari@redhat.com] - 2.4.68-1
- new version 2.4.68
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2486351 - httpd-2.4.68 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2486351
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-d4136fe979' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

[SECURITY] Fedora 44 Update: xmlstarlet-1.6.1-30.fc44

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-dbf44e0b72
2026-06-11 00:54:51.286484+00:00
--------------------------------------------------------------------------------

Name : xmlstarlet
Product : Fedora 44
Version : 1.6.1
Release : 30.fc44
URL : http://xmlstar.sourceforge.net/
Summary : Command Line XML Toolkit
Description :
XMLStarlet is a set of command line utilities which can be used
to transform, query, validate, and edit XML documents and files
using simple set of shell commands in similar way it is done for
plain text files using UNIX grep, sed, awk, diff, patch, join, etc
commands.

--------------------------------------------------------------------------------
Update Information:

Fixes XML external entity vulnerability. For more information, refer to
https://src.fedoraproject.org/rpms/xmlstarlet/pull-request/4.
--------------------------------------------------------------------------------
ChangeLog:

* Wed May 27 2026 Vitezslav Crhonek [vcrhonek@redhat.com] - 1.6.1-30
- Fix XXE (XML External Entity) vulnerability
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-dbf44e0b72' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new