package-announce April 2026

package-announce@lists.fedoraproject.org

1 participants
4649 discussions

Fedora 43 Update: rust-sigul-pesign-bridge-0.10.0-1.fc43
by updates＠fedoraproject.org 29 Apr '26

29 Apr '26

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-8fe66d85c2 2026-04-30 01:19:30.574309+00:00 -------------------------------------------------------------------------------- Name : rust-sigul-pesign-bridge Product : Fedora 43 Version : 0.10.0 Release : 1.fc43 URL : https://crates.io/crates/sigul-pesign-bridge Summary : Bridge pesign-client requests to a Sigul signing server Description : Drop-in replacement for pesign's daemon that bridges pesign-client requests to a Sigul server. -------------------------------------------------------------------------------- Update Information: Update to v0.10.0 All requests to sigul are retried, rather than just those that fail due to I/O or timeouts -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 20 2026 Jeremy Cline <jeremycline(a)microsoft.com> - 0.10.0-1 - Update to v0.10.0 - All requests to sigul are retried, rather than just those that fail due to I/O or timeouts * Mon Apr 20 2026 Jeremy Cline <jeremycline(a)microsoft.com> - 0.9.0-1 - Update to 0.9.0 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-8fe66d85c2' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 43 Update: open62541-1.5.4-1.fc43
by updates＠fedoraproject.org 29 Apr '26

29 Apr '26

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-71f81297f2 2026-04-30 01:19:30.574301+00:00 -------------------------------------------------------------------------------- Name : open62541 Product : Fedora 43 Version : 1.5.4 Release : 1.fc43 URL : http://open62541.org Summary : OPC UA implementation Description : open62541 is a C-based library (linking with C++ projects is possible) with all necessary tools to implement dedicated OPC UA clients and servers, or to integrate OPC UA-based communication into existing applications. -------------------------------------------------------------------------------- Update Information: Update to 1.5.4 -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 20 2026 Peter Robinson <pbrobinson(a)fedoraproject.org> - 1.5.4-1 - Update to 1.5.4 * Thu Feb 19 2026 Peter Robinson <pbrobinson(a)fedoraproject.org> - 1.5.1-1 - Update to 1.5.1 * Sun Feb 8 2026 Peter Robinson <pbrobinson(a)fedoraproject.org> - 1.5.0-1 - Update to 1.5.0 * Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.14-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2398494 - open62541-1.5.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2398494 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-71f81297f2' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 43 Update: python3.9-3.9.25-9.fc43
by updates＠fedoraproject.org 29 Apr '26

29 Apr '26

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-7986d7f994 2026-04-30 01:19:30.574307+00:00 -------------------------------------------------------------------------------- Name : python3.9 Product : Fedora 43 Version : 3.9.25 Release : 9.fc43 URL : https://www.python.org/ Summary : Version 3.9 of the Python interpreter Description : Python 3.9 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.9, see other distributions that support it, such as CentOS or RHEL or older Fedora releases. -------------------------------------------------------------------------------- Update Information: Security fixes for CVE-2026-4786 and CVE-2026-6100 -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 17 2026 Charalampos Stratakis <cstratak(a)redhat.com> - 3.9.25-9 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: rhbz#2458019, rhbz#2458227 * Sat Apr 11 2026 Miro Hrončok <mhroncok(a)redhat.com> - 3.9.25-8 - Explicitly build with OpenSSL 3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2458019 - CVE-2026-6100 python3.9: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2458019 [ 2 ] Bug #2458227 - CVE-2026-4786 python3.9: Python: Arbitrary code execution via command injection in webbrowser.open() API [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2458227 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-7986d7f994' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 43 Update: dokuwiki-20250514b-3.fc43
by updates＠fedoraproject.org 29 Apr '26

29 Apr '26

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-511c8bd939 2026-04-30 01:19:30.574304+00:00 -------------------------------------------------------------------------------- Name : dokuwiki Product : Fedora 43 Version : 20250514b Release : 3.fc43 URL : https://www.dokuwiki.org/dokuwiki Summary : Standards compliant simple to use wiki Description : DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creating documentation of any kind. It has a simple but powerful syntax which makes sure the data-files remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no database is required. -------------------------------------------------------------------------------- Update Information: Add a patch for CVE-2026-26477 -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 20 2026 Artur Frenszek-Iwicki <fedora(a)svgames.pl> - 20250514b-3 - Add a patch for CVE-2026-26477 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2454794 - CVE-2026-26477 dokuwiki: Dokuwiki: Denial of Service via media_upload_xhr() function [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2454794 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-511c8bd939' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 43 Update: binaryen-126-1.fc43
by updates＠fedoraproject.org 29 Apr '26

29 Apr '26

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-fb3e461878 2026-04-30 01:19:30.574296+00:00 -------------------------------------------------------------------------------- Name : binaryen Product : Fedora 43 Version : 126 Release : 1.fc43 URL : https://github.com/WebAssembly/binaryen Summary : Compiler and toolchain infrastructure library for WebAssembly Description : Binaryen is a compiler and toolchain infrastructure library for WebAssembly, written in C++. It aims to make compiling to WebAssembly easy, fast, and effective: * Easy: Binaryen has a simple C API in a single header, and can also be used from JavaScript. It accepts input in WebAssembly-like form but also accepts a general control flow graph for compilers that prefer that. * Fast: Binaryen's internal IR uses compact data structures and is designed for completely parallel codegen and optimization, using all available CPU cores. Binaryen's IR also compiles down to WebAssembly extremely easily and quickly because it is essentially a subset of WebAssembly. * Effective: Binaryen's optimizer has many passes that can improve code very significantly (e.g. local coloring to coalesce local variables; dead code elimination; precomputing expressions when possible at compile time; etc.). These optimizations aim to make Binaryen powerful enough to be used as a compiler backend by itself. One specific area of focus is on WebAssembly-specific optimizations (that general-purpose compilers might not do), which you can think of as wasm minification , similar to minification for JavaScript, CSS, etc., all of which are language-specific (an example of such an optimization is block return value generation in SimplifyLocals). -------------------------------------------------------------------------------- Update Information: Fixes CVE-2025-14956 . -------------------------------------------------------------------------------- ChangeLog: * Sun Feb 22 2026 Dominik Mierzejewski <dominik(a)greysector.net> - 126-1 - update to 126 (resolves rhbz#2439791) - backport upstream fix for https://github.com/WebAssembly/binaryen/issues/8360 * Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 125-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 125-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2429127 - CVE-2025-14956 binaryen: heap-based buffer overflow in WasmBinaryReader::readExpression() when parsing a malformed WebAssembly binary [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2429127 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-fb3e461878' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 43 Update: lemonldap-ng-2.22.3-1.fc43
by updates＠fedoraproject.org 29 Apr '26

29 Apr '26

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-38914f4e04 2026-04-30 01:19:30.574299+00:00 -------------------------------------------------------------------------------- Name : lemonldap-ng Product : Fedora 43 Version : 2.22.3 Release : 1.fc43 URL : https://lemonldap-ng.org Summary : Web Single Sign On (SSO) and Access Management Description : LemonLdap::NG is a modular Web-SSO based on Apache::Session modules. It simplifies the build of a protected area with a few changes in the application. It manages both authentication and authorization and provides headers for accounting. So you can have a full AAA protection for your web space as described below. -------------------------------------------------------------------------------- Update Information: Update to 2.22.3 https://projects.ow2.org/view/lemonldap-ng/lemonldap-ng-2-22-3-is-out/ -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 20 2026 Clement Oudot <clement.oudot(a)worteks.com> - 2.22.3-1 - Update to 2.22.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2459684 - lemonldap-ng-2.22.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2459684 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-38914f4e04' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 43 Update: python-astropy-iers-data-0.2026.4.20.0.58.15-1.fc43
by updates＠fedoraproject.org 29 Apr '26

29 Apr '26

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-8e2c5f251b 2026-04-30 01:19:30.574291+00:00 -------------------------------------------------------------------------------- Name : python-astropy-iers-data Product : Fedora 43 Version : 0.2026.4.20.0.58.15 Release : 1.fc43 URL : https://github.com/astropy/astropy-iers-data Summary : IERS Earth Rotation and Leap Second tables for the astropy core package Description : This package provides IERS Earth Rotation and Leap Second tables for the astropy.utils.iers package. There the following IERS data products are included: * Bulletin A (IERS_A) is updated weekly and has historical data starting from 1973 and predictive data for 1 year into the future. It contains Earth orientation parameters x/y pole, UT1-UTC and their errors at daily intervals. * Bulletin B (IERS_B) is updated monthly and has data from 1962 up to the time when it is generated. This file contains Earth’s orientation in the IERS Reference System including Universal Time, coordinates of the terrestrial pole, and celestial pole offsets. The package also provides leap second data. Note: This package is not currently meant to be used directly by users, and only meant to be used from the core Astropy package. -------------------------------------------------------------------------------- Update Information: Automatic update for python-astropy-iers-data-0.2026.4.20.0.58.15-1.fc43. -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 20 2026 Packit <hello(a)packit.dev> - 0.2026.4.20.0.58.15-1 - Update to 0.2026.4.20.0.58.15 upstream release - Resolves: rhbz#2457724 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-8e2c5f251b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 43 Update: usbguard-1.1.4-1.fc43
by updates＠fedoraproject.org 29 Apr '26

29 Apr '26

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-cc7522b85e 2026-04-30 01:19:30.574289+00:00 -------------------------------------------------------------------------------- Name : usbguard Product : Fedora 43 Version : 1.1.4 Release : 1.fc43 URL : https://usbguard.github.io/ Summary : A tool for implementing USB device usage policy Description : The USBGuard software framework helps to protect your computer against rogue USB devices by implementing basic whitelisting/blacklisting capabilities based on USB device attributes. -------------------------------------------------------------------------------- Update Information: Update usbguard to 1.1.4. -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 15 2026 Attila Lakatos <alakatos(a)redhat.com> - 1.1.4-1 - Rebase to 1.1.4 - Drop patches merged upstream: tmpfiles-v1, tmpfiles-v2, uninstall-ignore-error, ipc-privileges, protobuf-3.0, catch2-support, disable-catch - Add SELinux policy fix for systemd-homed stream connect Resolves: rhbz#2380396 Resolves: rhbz#2376283 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2376283 - SELinux is preventing usbguard-daemon from 'connectto' accesses on the unix_stream_socket /run/systemd/userdb/io.systemd.Home. https://bugzilla.redhat.com/show_bug.cgi?id=2376283 [ 2 ] Bug #2380396 - usbguard-1.1.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2380396 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-cc7522b85e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora 43 Update: miniupnpd-2.3.10-1.fc43
by updates＠fedoraproject.org 29 Apr '26

29 Apr '26

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-5f908cb040 2026-04-30 01:19:30.574294+00:00 -------------------------------------------------------------------------------- Name : miniupnpd Product : Fedora 43 Version : 2.3.10 Release : 1.fc43 URL : https://miniupnp.tuxfamily.org/ Summary : Lightweight UPnP IGD & PCP/NAT-PMP daemon Description : The MiniUPnP daemon is an UPnP IGD & PCP/NAT-PMP daemon for gateway routers. UPnP IGD & PCP/NAT-PMP are used to improve internet connectivity for devices behind a NAT router. Any peer to peer network application such as games, IM, etc. can benefit from a NAT router supporting UPnP IGD & PCP/NAT-PMP. -------------------------------------------------------------------------------- Update Information: 2026/03/24: fix missing fclose and potential double free in option file parsing 2026/03/23: upnphttp.c: fix removal of quotes in ParseHttpHeaders() minixml.c: fix buffer read overflow 2026/02/05: Rewrite permission line parser 2025/05/26: Fix false negative filtered STUN CGNAT test result for unsupported servers #825 2025/05/24: Fix Mac OS X 10.9 build 2025/05/15: build: teststun executable 2025/04/28: pf: fix delete_pinhole for openbsd. Was broken since miniupnpd 2.3.7 2025/04/26 Fix parsing of interfaces names starting with a digit nftables: add counter for DNAT rule (ENABLE_NFT_RULE_COUNTER in config.h) nftables: improve scripts to support already existing tables -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 20 2026 - Michael Cronenworth <mike(a)cchtml.com> - 2.3.10-1 - Version update * Fri Jan 16 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.9-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2459688 - CVE-2026-5720 miniupnpd: miniupnpd: Denial of service or information disclosure due to integer underflow in SOAPAction header parsing. [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2459688 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-5f908cb040' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora 43 Update: perl-Finance-Quote-1.6900-1.fc43
by updates＠fedoraproject.org 29 Apr '26

29 Apr '26

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-f287c9a54c 2026-04-30 01:19:30.574284+00:00 -------------------------------------------------------------------------------- Name : perl-Finance-Quote Product : Fedora 43 Version : 1.6900 Release : 1.fc43 URL : https://metacpan.org/release/Finance-Quote Summary : A Perl module that retrieves stock and mutual fund quotes Description : This module retrieves stock and mutual fund quotes from various exchanges using various source. -------------------------------------------------------------------------------- Update Information: Current upstream maintenance release, with fixes for changes in various quite sources, -------------------------------------------------------------------------------- ChangeLog: * Sun Apr 19 2026 Paul Howarth <paul(a)city-fan.org> - 1.6900-1 - Update to 1.69 - Sinvestor.pm: Trim whitespace before parsing date and price - XETRA.pm: Trim whitespace from date-time before extracting the actual date value (GH#557) - Modified Stooq.pm to send cookies - Stooq requires European visitors to their website to accept cookies - Cookies are set using JavaScript - Current version of module hard codes these cookies gleaned from a browser session - Added CurrencyRates/TwelveData.pm * Sat Jan 17 2026 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6800-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-f287c9a54c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

← Newer
1
2
3
4
5
6
7
8
9
...
465
Older →

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

package-announce April 2026