The following Fedora 43 Security updates need testing: Age URL 38 https://bodhi.fedoraproject.org/updates/FEDORA-2026-5ac414ddcd 389-ds-base-3.1.4-11.fc43 19 https://bodhi.fedoraproject.org/updates/FEDORA-2026-5ddd0941a8 haveged-1.9.26-1.fc43 10 https://bodhi.fedoraproject.org/updates/FEDORA-2026-31a8569c4b log4cxx-1.7.0-2.fc43 7 https://bodhi.fedoraproject.org/updates/FEDORA-2026-659cb50390 rust-fern-0.7.1-6.fc43 rust-routinator-0.15.2-1.fc43 rust-rpki-0.19.3-2.fc43 rust-syslog-7.0.0-2.fc43 6 https://bodhi.fedoraproject.org/updates/FEDORA-2026-50e5126be4 ansible-collection-ansible-posix-2.2.1-1.fc43 6 https://bodhi.fedoraproject.org/updates/FEDORA-2026-d86f55c21a python-pillow-11.3.0-9.fc43 6 https://bodhi.fedoraproject.org/updates/FEDORA-2026-71d7e4d1da perl-DBI-1.650-1.fc43 6 https://bodhi.fedoraproject.org/updates/FEDORA-2026-8e39f35701 mingw-glib2-2.86.5-2.fc43 6 https://bodhi.fedoraproject.org/updates/FEDORA-2026-5e3ab17662 rust-opendal-0.55.0-2.fc43 6 https://bodhi.fedoraproject.org/updates/FEDORA-2026-6d5a7be3b9 rust-cargo-rpmstatus-0.2.5-2.fc43 4 https://bodhi.fedoraproject.org/updates/FEDORA-2026-75a8969e55 proftpd-1.3.9c-1.fc43 4 https://bodhi.fedoraproject.org/updates/FEDORA-2026-7b7c2b373e ruby-3.4.10-31.fc43 4 https://bodhi.fedoraproject.org/updates/FEDORA-2026-9ab663dcd4 sssd-2.12.0-3.fc43 3 https://bodhi.fedoraproject.org/updates/FEDORA-2026-adc8ddbeaa pam-1.7.1-5.fc43 3 https://bodhi.fedoraproject.org/updates/FEDORA-2026-6215e65f6c python-idna-3.18-1.fc43 3 https://bodhi.fedoraproject.org/updates/FEDORA-2026-ec8e535c6e webkitgtk-2.52.5-1.fc43 3 https://bodhi.fedoraproject.org/updates/FEDORA-2026-8893ec1aeb python-uv-build-0.11.28-1.fc43 rust-astral_async_zip-0.0.20-1.fc43 uv-0.11.28-1.fc43 3 https://bodhi.fedoraproject.org/updates/FEDORA-2026-566791181a p11-kit-0.26.4-1.fc43 3 https://bodhi.fedoraproject.org/updates/FEDORA-2026-c8f1a4ee05 python-orjson-3.11.9-3.fc43 3 https://bodhi.fedoraproject.org/updates/FEDORA-2026-d70d93fcd7 c-ares-1.34.8-1.fc43 3 https://bodhi.fedoraproject.org/updates/FEDORA-2026-965be97ac0 erlang-26.2.5.21-4.fc43 3 https://bodhi.fedoraproject.org/updates/FEDORA-2026-fb48505840 opam-2.5.2-1.fc43 3 https://bodhi.fedoraproject.org/updates/FEDORA-2026-d9ca28a7b8 antlr4-project-4.13.2-14.fc43 2 https://bodhi.fedoraproject.org/updates/FEDORA-2026-0bb141710c mbedtls-3.6.7-1.fc43 2 https://bodhi.fedoraproject.org/updates/FEDORA-2026-8a232fdbef node-exporter-1.12.0-1.fc43 2 https://bodhi.fedoraproject.org/updates/FEDORA-2026-574496d9ae python-asyncssh-2.23.1-1.fc43 2 https://bodhi.fedoraproject.org/updates/FEDORA-2026-9dbf4d0ca8 mingw-python-idna-3.18-1.fc43 2 https://bodhi.fedoraproject.org/updates/FEDORA-2026-71562f8836 mingw-python-pip-26.1.2-1.fc43 1 https://bodhi.fedoraproject.org/updates/FEDORA-2026-7b98f6d033 perl-Crypt-OpenSSL-X509-2.1.3-1.fc43 1 https://bodhi.fedoraproject.org/updates/FEDORA-2026-d61fcb86ed gpsd-3.26.1-7.fc43 1 https://bodhi.fedoraproject.org/updates/FEDORA-2026-d36ca2dd19 nuclei-3.11.0-1.fc43
The following Fedora 43 Critical Path updates have yet to be approved: Age URL 96 https://bodhi.fedoraproject.org/updates/FEDORA-2026-2d9fd8a532 binutils-2.45.1-5.fc43 38 https://bodhi.fedoraproject.org/updates/FEDORA-2026-5ac414ddcd 389-ds-base-3.1.4-11.fc43 12 https://bodhi.fedoraproject.org/updates/FEDORA-2026-2e0d10e515 gnome-session-49.3-1.fc43 11 https://bodhi.fedoraproject.org/updates/FEDORA-2026-31fa61234f erofs-utils-1.9.2-2.fc43 11 https://bodhi.fedoraproject.org/updates/FEDORA-2026-d386299e58 qatzip-1.3.2-1.fc43 7 https://bodhi.fedoraproject.org/updates/FEDORA-2026-deb41f64e5 enchant2-2.8.18-1.fc43 6 https://bodhi.fedoraproject.org/updates/FEDORA-2026-b36702e89a less-704-2.fc43 6 https://bodhi.fedoraproject.org/updates/FEDORA-2026-958c511ff2 rust-buffered-reader-1.4.1-1.fc43 rust-ossl-1.5.2-1.fc43 rust-rpm-sequoia-1.10.2-4.fc43 rust-sequoia-chameleon-gnupg-0.13.1-15.fc43 rust-sequoia-git-0.6.0-4.fc43 rust-sequoia-ipc-0.36.1-2.fc43 rust-sequoia-keystore-server-0.2.1-1.fc43 rust-sequoia-octopus-librnp-1.11.1-9.fc43 rust-sequoia-openpgp-2.4.0-1.fc43 rust-sequoia-policy-config-0.8.2-1.fc43 rust-sequoia-sop-0.38.0-1.fc43 rust-sequoia-sq-1.4.0-1.fc43 rust-sequoia-sqv-1.5.0-1.fc43 6 https://bodhi.fedoraproject.org/updates/FEDORA-2026-71dc9da392 edk2-20260508-5.fc43 6 https://bodhi.fedoraproject.org/updates/FEDORA-2026-d86f55c21a python-pillow-11.3.0-9.fc43 4 https://bodhi.fedoraproject.org/updates/FEDORA-2026-9ab663dcd4 sssd-2.12.0-3.fc43 3 https://bodhi.fedoraproject.org/updates/FEDORA-2026-d70d93fcd7 c-ares-1.34.8-1.fc43 3 https://bodhi.fedoraproject.org/updates/FEDORA-2026-566791181a p11-kit-0.26.4-1.fc43 3 https://bodhi.fedoraproject.org/updates/FEDORA-2026-ec8e535c6e webkitgtk-2.52.5-1.fc43 3 https://bodhi.fedoraproject.org/updates/FEDORA-2026-f218bce1f9 file-5.48-1.fc43 3 https://bodhi.fedoraproject.org/updates/FEDORA-2026-6215e65f6c python-idna-3.18-1.fc43 3 https://bodhi.fedoraproject.org/updates/FEDORA-2026-e9a4f24242 tomcat-10.1.57-1.fc43 3 https://bodhi.fedoraproject.org/updates/FEDORA-2026-adc8ddbeaa pam-1.7.1-5.fc43 2 https://bodhi.fedoraproject.org/updates/FEDORA-2026-850945a613 mariadb-connector-c-3.4.9-2.fc43 2 https://bodhi.fedoraproject.org/updates/FEDORA-2026-0bb141710c mbedtls-3.6.7-1.fc43 1 https://bodhi.fedoraproject.org/updates/FEDORA-2026-d61fcb86ed gpsd-3.26.1-7.fc43
The following builds have been pushed to Fedora 43 updates-testing
ImageMagick-7.1.2.27-1.fc43 collectl-4.3.20.3-1.fc43 fedrq-1.7.0-1.fc43 m17n-db-1.8.14-1.fc43 mingw-json-glib-1.10.8-1.fc43 openbao-2.6.0-1.fc43 osbuild-composer-176-1.fc43 perl-HTTP-Date-6.08-1.fc43 perl-Test-Inter-1.13-1.fc43 perl-YAML-Syck-1.47-1.fc43 php-splitbrain-php-archive-1.4.2-1.fc43 php-splitbrain-php-cli-1.3.5-1.fc43 php-splitbrain-slika-1.2.1-1.fc43 python-boto3-1.43.47-1.fc43 python-botocore-1.43.47-1.fc43 python-rich-toolkit-0.20.3-1.fc43 qatengine-2.2.0-1.fc43 runc-1.5.1-1.fc43 rust-cxx-1.0.197-1.fc43 rust-cxx-build-1.0.197-1.fc43 rust-cxx-gen-0.7.197-1.fc43 rust-cxxbridge-cmd-1.0.197-1.fc43 rust-cxxbridge-flags-1.0.197-1.fc43 rust-cxxbridge-macro-1.0.197-1.fc43 rust-fastbloom-0.17.0-2.fc43 rust-fax-0.2.7-1.fc43 rust-http-body-1.1.0-1.fc43 rust-http-body-util-0.1.4-1.fc43 rust-mio-1.2.2-1.fc43 rust-quick-junit-0.6.1-1.fc43 rust-quinn-0.11.11-1.fc43 rust-quinn-proto-0.11.16-1.fc43 rust-quinn-udp-0.5.15-1.fc43 rust-reqwest-0.13.4-1.fc43 rust-rustls-0.23.42-1.fc43 rust-winnow-1.0.4-1.fc43 spoofdpi-1.5.3-2.fc43 tklib-0.5-42.fc43 ttyplot-1.7.6-1.fc43 yq-4.53.3-1.fc43
Details about builds:
================================================================================ ImageMagick-7.1.2.27-1.fc43 (FEDORA-2026-63fca288d6) An X application for displaying and manipulating images -------------------------------------------------------------------------------- Update Information:
Update to 7.1.2.27 -------------------------------------------------------------------------------- ChangeLog:
-------------------------------------------------------------------------------- References:
[ 1 ] Bug #2379980 - CVE-2025-53101 ImageMagick: ImageMagick Stack Buffer Overflow [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2379980 [ 2 ] Bug #2379981 - CVE-2025-53015 ImageMagick: ImageMagick unbounded loop [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2379981 [ 3 ] Bug #2379982 - CVE-2025-53019 ImageMagick: ImageMagick Memory Leak [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2379982 [ 4 ] Bug #2388308 - CVE-2025-55160 ImageMagick: ImageMagick: Undefined Behavior [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2388308 [ 5 ] Bug #2388309 - CVE-2025-55005 ImageMagick: ImageMagick: heap-buffer overflow [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2388309 [ 6 ] Bug #2388311 - CVE-2025-55154 ImageMagick: ImageMagick: integer overflows in MNG magnification [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2388311 [ 7 ] Bug #2388312 - CVE-2025-55004 ImageMagick: ImageMagick: heap-buffer overflow [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2388312 [ 8 ] Bug #2391120 - CVE-2025-55298 ImageMagick: ImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code execution [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2391120 --------------------------------------------------------------------------------
================================================================================ collectl-4.3.20.3-1.fc43 (FEDORA-2026-e2b3dd1ec0) A utility to collect various Linux performance data -------------------------------------------------------------------------------- Update Information:
handle insecure code properly in colmux -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Dan Horák <dan[at]danny.cz> - 4.3.20.3-1 - upgrade to upstream version 4.3.20.3 (rhbz#2438007) * Fri Feb 6 2026 Carl George carlwgeorge@fedoraproject.org - 4.3.20.1-1 - Update to version 4.3.20.1 rhbz#2149728 * Fri Jan 16 2026 Fedora Release Engineering releng@fedoraproject.org - 4.3.5-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jan 16 2026 Fedora Release Engineering releng@fedoraproject.org - 4.3.5-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2438007 - collectl-4.3.20.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2438007 --------------------------------------------------------------------------------
================================================================================ fedrq-1.7.0-1.fc43 (FEDORA-2026-37377f7459) A tool to query the Fedora and EPEL repositories -------------------------------------------------------------------------------- Update Information:
https://fedrq.gtmx.me/News EPEL 10 branch -------------------------------------------------------------------------------- ChangeLog:
* Mon Jul 13 2026 Maxwell G maxwell@gtmx.me - 1.7.0-1 - Update to 1.7.0. - Switch upstream to forge.fedoraproject.org. * Thu Jun 4 2026 Python Maint python-maint@redhat.com - 1.6.0-2 - Rebuilt for Python 3.15 --------------------------------------------------------------------------------
================================================================================ m17n-db-1.8.14-1.fc43 (FEDORA-2026-4d09727824) Multilingualization datafiles for m17n-lib -------------------------------------------------------------------------------- Update Information:
Update to 1.8.14 - am-sera.mim: Fix Ethiopic Swap between ፙ and ፘ, and Add ጟ (Resolves: https://savannah.nongnu.org/bugs/index.php?item_id=67879) -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Mike FABIAN mfabian@redhat.com - 1.8.14-1 - Update to 1.8.14 - am-sera.mim: Fix Ethiopic Swap between ፙ and ፘ, and Add ጟ (Resolves: https://savannah.nongnu.org/bugs/index.php?item_id=67879) --------------------------------------------------------------------------------
================================================================================ mingw-json-glib-1.10.8-1.fc43 (FEDORA-2026-bcef9d9aa7) MinGW compiled library for JavaScript Object Notation format -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Mon Jul 13 2026 Elliott Sales de Andrade quantum.analyst@gmail.com - 1.10.8-1 - Update to latest version * Mon Jul 13 2026 Elliott Sales de Andrade quantum.analyst@gmail.com - 1.6.6-14 - Add Packit configuration * Wed Apr 15 2026 Sandro Mani manisandro@gmail.com - 1.6.6-13 - Rebuild (mingw-gettext) * Fri Jan 16 2026 Fedora Release Engineering releng@fedoraproject.org - 1.6.6-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ openbao-2.6.0-1.fc43 (FEDORA-2026-9e3c2444ac) A tool for securely accessing secrets -------------------------------------------------------------------------------- Update Information:
Update to upstream 2.6.0 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Dave Dykstra 2129743+DrDaveD@users.noreply.github.com - 2.6.0-1 - update to 2.6.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2491576 - openbao-2.6.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2491576 --------------------------------------------------------------------------------
================================================================================ osbuild-composer-176-1.fc43 (FEDORA-2026-5be4e90289) An image building service based on osbuild -------------------------------------------------------------------------------- Update Information:
Automatic update for osbuild-composer-176-1.fc43. Changelog for osbuild-composer * Wed Jul 08 2026 Packit hello@packit.dev - 176-1 Changes with 176 ---------------- - Update import paths for image-builder [HMS-10853] (#5185) - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Sanne Raymaekers - Update snapshots to 20260705 (#5197) - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger - test/data/repositories/rhel-9.9: disable gpg check (HMS-10929) (#5192) - Author: Sanne Raymaekers, Reviewers: Anna Vítová, Simon Steinbeiß — Somewhere on the Internet, 2026-07-08 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 8 2026 Packit hello@packit.dev - 176-1 Changes with 176 ---------------- - Update import paths for image-builder [HMS-10853] (#5185) - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Sanne Raymaekers - Update snapshots to 20260705 (#5197) - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger - test/data/repositories/rhel-9.9: disable gpg check (HMS-10929) (#5192) - Author: Sanne Raymaekers, Reviewers: Anna Vítová, Simon Steinbeiß
— Somewhere on the Internet, 2026-07-08 --------------------------------------------------------------------------------
================================================================================ perl-HTTP-Date-6.08-1.fc43 (FEDORA-2026-b1bdb7c518) Date conversion routines -------------------------------------------------------------------------------- Update Information:
Changes: 6.08 2026-07-09 02:04:21Z - [SECURITY] Reject input longer than 64 characters in parse_date() to prevent quadratic regex backtracking (a denial of service) on hostile date strings. Fixes CVE-2026-14741. (Olaf Alders) 6.07 2026-06-25 15:12:09Z - Add test with Time::Zone (GH#25) (Michal Josef Špaček) - Add test with bad Time::Zone string (GH#26) (Michal Josef Špaček) - Add tests with negative time (GH#26) (Michal Josef Špaček) - Replace all instances of \d with [0-9] in regular expressions to reject non-ASCII Unicode digits, with a regression test (GH#27) (Robert Rothenberg) - Reject malformed ISO 8601 timezones with a doubled colon (GH#31) (Olaf Alders) - Document day/month/year ordering for numeric dates (GH#32) (Olaf Alders) -------------------------------------------------------------------------------- ChangeLog:
* Mon Jul 13 2026 Michal Josef Špaček mspacek@redhat.com - 6.08-1 - 6.08 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2492991 - perl-HTTP-Date-6.08 is available https://bugzilla.redhat.com/show_bug.cgi?id=2492991 --------------------------------------------------------------------------------
================================================================================ perl-Test-Inter-1.13-1.fc43 (FEDORA-2026-5075801379) Framework for more readable interactive test scripts -------------------------------------------------------------------------------- Update Information:
Changes: 1.13 2026-07-09 Removed all references to the cpan.org email which is no longer supported. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Michal Josef Špaček mspacek@redhat.com - 1.13-1 - 1.13 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2498565 - perl-Test-Inter-1.13 is available https://bugzilla.redhat.com/show_bug.cgi?id=2498565 --------------------------------------------------------------------------------
================================================================================ perl-YAML-Syck-1.47-1.fc43 (FEDORA-2026-c8484f1afb) Fast, lightweight YAML loader and dumper -------------------------------------------------------------------------------- Update Information:
This update addresses four libsyck memory-safety CVEs reachable from the default YAML::Syck::Load() path on untrusted input with no special flags: CVE-2026-57075 (CWE-125): Out-of-bounds read in the base64 decoder caused by signed-char indexing of the decode table on !!binary input CVE-2026-57076 (CWE-416): Use-after-free of an anchor key string shared between the node and the anchors table CVE-2026-57077 (CWE-125): One-byte out-of-bounds read in the lexer newline scan during block-scalar parsing (incomplete-fix follow-on to CVE-2025-11683) CVE-2026-13713 (CWE-416/CWE-415): Use-after-free / double-free of an anchor node on anchor redefinition, a remote-crash DoS from a 7-byte input There are also a few other bug-fixes included. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Paul Howarth paul@city-fan.org - 1.47-1 - Update to 1.47 Security: - Fix four libsyck memory-safety CVEs reachable from the default YAML::Syck::Load() path on untrusted input with no special flags (GH#213) - CVE-2026-57075 (CWE-125): Out-of-bounds read in the base64 decoder caused by signed-char indexing of the decode table on !!binary input - CVE-2026-57076 (CWE-416): Use-after-free of an anchor key string shared between the node and the anchors table - CVE-2026-57077 (CWE-125): One-byte out-of-bounds read in the lexer newline scan during block-scalar parsing (incomplete-fix follow-on to CVE-2025-11683) - CVE-2026-13713 (CWE-416/CWE-415): Use-after-free / double-free of an anchor node on anchor redefinition, a remote-crash DoS from a 7-byte input - Harden syck_base64dec() to bounds-check each read so it cannot run past a non-NUL-terminated input buffer (defense-in-depth for callers passing raw buffers; GH#213) Bug Fixes: - Fix: Enforce $MaxDepth on Load to prevent C-stack exhaustion from deeply nested YAML/JSON input; YAML::Syck and JSON::Syck Load now default to 512, matching Dump (GH#204) - Fix: Emit YAML canonical forms (.nan, .inf, -.inf) for NaN/Inf values in Dump so they roundtrip with ImplicitTyping instead of reloading as plain strings (GH#201) Maintenance: - CI: add an AddressSanitizer job that builds the XS with -fsanitize=address and runs the suite plus the CVE trigger inputs to catch libsyck memory-safety defects; de-pin the libasan version so it tracks the runner's GCC (GH#213) * Mon May 25 2026 Paul Howarth paul@city-fan.org - 1.46-1 - Update to 1.46 Bug Fixes: - Preserve string nature of numeric-looking values in Dump; pure strings (POK only, no IOK/NOK) are now quoted to maintain roundtrip fidelity (GH#199, GH#200) - Accept trailing commas in flow sequences and mappings ([a, b,] and {a: 1,}), valid per YAML 1.0/1.1/1.2 spec (GH#195, GH#196) Maintenance: - CI: upgrade install-with-cpm to v2 for compatibility with Perl versions prior to 5.24 in perldocker containers (GH#197, GH#198) - Clean up MANIFEST.SKIP: add #!include_default, remove redundant entries, exclude .claude/ from distribution --------------------------------------------------------------------------------
================================================================================ php-splitbrain-php-archive-1.4.2-1.fc43 (FEDORA-2026-120665a2bc) Pure-PHP implementation to read and write TAR and ZIP archives -------------------------------------------------------------------------------- Update Information:
Update to v1.4.2 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Artur Frenszek-Iwicki fedora@svgames.pl - 1.4.2-1 - Update to v1.4.2 --------------------------------------------------------------------------------
================================================================================ php-splitbrain-php-cli-1.3.5-1.fc43 (FEDORA-2026-77fb0ceb29) PHP library to build command line tools -------------------------------------------------------------------------------- Update Information:
Update to v1.3.5 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Artur Frenszek-Iwicki fedora@svgames.pl - 1.3.5-1 - Update to v1.3.5 --------------------------------------------------------------------------------
================================================================================ php-splitbrain-slika-1.2.1-1.fc43 (FEDORA-2026-621ae7d552) Image handling library for PHP -------------------------------------------------------------------------------- Update Information:
Update to v1.2.1 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Artur Frenszek-Iwicki fedora@svgames.pl - 1.2.1-1 - Update to v1.2.1 --------------------------------------------------------------------------------
================================================================================ python-boto3-1.43.47-1.fc43 (FEDORA-2026-ccaae7e00f) The AWS SDK for Python -------------------------------------------------------------------------------- Update Information:
Latest updates. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Gwyn Ciesla gwync@protonmail.com - 1.43.47-1 - 1.43.47 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2500548 - python-botocore-1.43.48 is available https://bugzilla.redhat.com/show_bug.cgi?id=2500548 [ 2 ] Bug #2500555 - python-boto3-1.43.48 is available https://bugzilla.redhat.com/show_bug.cgi?id=2500555 --------------------------------------------------------------------------------
================================================================================ python-botocore-1.43.47-1.fc43 (FEDORA-2026-ccaae7e00f) Low-level, data-driven core of boto 3 -------------------------------------------------------------------------------- Update Information:
Latest updates. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Gwyn Ciesla gwync@protonmail.com - 1.43.47-1 - 1.43.47 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2500548 - python-botocore-1.43.48 is available https://bugzilla.redhat.com/show_bug.cgi?id=2500548 [ 2 ] Bug #2500555 - python-boto3-1.43.48 is available https://bugzilla.redhat.com/show_bug.cgi?id=2500555 --------------------------------------------------------------------------------
================================================================================ python-rich-toolkit-0.20.3-1.fc43 (FEDORA-2026-78a2b12583) Rich toolkit for building command-line applications -------------------------------------------------------------------------------- Update Information:
0.20.3 - 2026-07-13 This release keeps updated progress titles visible when logs are preserved. For progress displays with inline preserved logs, assigning to progress.title now also updates the displayed message unless progress.current_message was changed explicitly. 0.20.2 - 2026-07-13 This release preserves progress logs automatically in CI and non-interactive output. In these environments, every progress.log() message appears in the output once without line breaks inserted at the terminal width. Interactive terminals continue to use the live progress display. Pass preserve_progress_logs=True or preserve_progress_logs=False to RichToolkit to override the behavior globally. Individual progress displays can override it with preserve_logs. -------------------------------------------------------------------------------- ChangeLog:
* Mon Jul 13 2026 Packit hello@packit.dev - 0.20.3-1 - Update to 0.20.3 upstream release - Resolves: rhbz#2499712 * Mon Jul 13 2026 Packit hello@packit.dev - 0.20.2-1 - Update to 0.20.2 upstream release - Resolves: rhbz#2499712 * Mon Jul 13 2026 Packit hello@packit.dev - 0.20.3-1 - Update to 0.20.3 upstream release - Resolves: rhbz#2499712 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2499712 - python-rich-toolkit-0.20.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2499712 --------------------------------------------------------------------------------
================================================================================ qatengine-2.2.0-1.fc43 (FEDORA-2026-ab31b4884e) Intel QuickAssist Technology (QAT) OpenSSL Provider -------------------------------------------------------------------------------- Update Information:
Support for OpenSSL v3.6 and v4.0 is available with this package. -------------------------------------------------------------------------------- ChangeLog:
* Sat Jun 13 2026 Sharanakumar sharanakumar@intel.com - 2.2.0-1 - Update to qatengine v2.2.0 --------------------------------------------------------------------------------
================================================================================ runc-1.5.1-1.fc43 (FEDORA-2026-f9bbfdf385) CLI tool for spawning and running containers according to the OCI specification -------------------------------------------------------------------------------- Update Information:
Automatic update for runc-1.5.1-1.fc43. Changelog for runc * Tue Jul 14 2026 Packit hello@packit.dev - 2:1.5.1-1 - Update to 1.5.1 upstream release - Resolves: rhbz#2499881 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Packit hello@packit.dev - 2:1.5.1-1 - Update to 1.5.1 upstream release - Resolves: rhbz#2499881 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2499881 - runc-1.5.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2499881 --------------------------------------------------------------------------------
================================================================================ rust-cxx-1.0.197-1.fc43 (FEDORA-2026-970bdec672) Safe interop between Rust and C++ -------------------------------------------------------------------------------- Update Information:
Update cxx to version 1.0.197. This includes fixes for RUSTSEC-2026-0202. The rebuilds of dependent applications (if necessary) are tracked here: https://forge.fedoraproject.org/rust/backlog/issues/36 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Fabio Valentini decathorpe@gmail.com - 1.0.197-1 - Update to version 1.0.197; Fixes RHBZ#2497094 --------------------------------------------------------------------------------
================================================================================ rust-cxx-build-1.0.197-1.fc43 (FEDORA-2026-970bdec672) C++ code generator for integrating cxx crate into a Cargo build -------------------------------------------------------------------------------- Update Information:
Update cxx to version 1.0.197. This includes fixes for RUSTSEC-2026-0202. The rebuilds of dependent applications (if necessary) are tracked here: https://forge.fedoraproject.org/rust/backlog/issues/36 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Fabio Valentini decathorpe@gmail.com - 1.0.197-1 - Update to version 1.0.197; Fixes RHBZ#2497092 --------------------------------------------------------------------------------
================================================================================ rust-cxx-gen-0.7.197-1.fc43 (FEDORA-2026-970bdec672) C++ code generator for integrating cxx crate into higher level tools -------------------------------------------------------------------------------- Update Information:
Update cxx to version 1.0.197. This includes fixes for RUSTSEC-2026-0202. The rebuilds of dependent applications (if necessary) are tracked here: https://forge.fedoraproject.org/rust/backlog/issues/36 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Fabio Valentini decathorpe@gmail.com - 0.7.197-1 - Update to version 0.7.197; Fixes RHBZ#2497096 --------------------------------------------------------------------------------
================================================================================ rust-cxxbridge-cmd-1.0.197-1.fc43 (FEDORA-2026-970bdec672) C++ code generator for integrating cxx crate into a non-Cargo build -------------------------------------------------------------------------------- Update Information:
Update cxx to version 1.0.197. This includes fixes for RUSTSEC-2026-0202. The rebuilds of dependent applications (if necessary) are tracked here: https://forge.fedoraproject.org/rust/backlog/issues/36 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Fabio Valentini decathorpe@gmail.com - 1.0.197-1 - Update to version 1.0.197; Fixes RHBZ#2497093 --------------------------------------------------------------------------------
================================================================================ rust-cxxbridge-flags-1.0.197-1.fc43 (FEDORA-2026-970bdec672) Compiler configuration of the cxx crate (implementation detail) -------------------------------------------------------------------------------- Update Information:
Update cxx to version 1.0.197. This includes fixes for RUSTSEC-2026-0202. The rebuilds of dependent applications (if necessary) are tracked here: https://forge.fedoraproject.org/rust/backlog/issues/36 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Fabio Valentini decathorpe@gmail.com - 1.0.197-1 - Update to version 1.0.197; Fixes RHBZ#2497091 --------------------------------------------------------------------------------
================================================================================ rust-cxxbridge-macro-1.0.197-1.fc43 (FEDORA-2026-970bdec672) Implementation detail of the cxx crate -------------------------------------------------------------------------------- Update Information:
Update cxx to version 1.0.197. This includes fixes for RUSTSEC-2026-0202. The rebuilds of dependent applications (if necessary) are tracked here: https://forge.fedoraproject.org/rust/backlog/issues/36 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Fabio Valentini decathorpe@gmail.com - 1.0.197-1 - Update to version 1.0.197; Fixes RHBZ#2497095 --------------------------------------------------------------------------------
================================================================================ rust-fastbloom-0.17.0-2.fc43 (FEDORA-2026-1eec216066) Fastest Bloom filter in Rust -------------------------------------------------------------------------------- Update Information:
Update the quinn crate to version 0.11.11. Update the quinn-udp crate to version 0.5.15. Update the quinn-proto crate to version 0.11.16. Update the fastbloom crate to version 0.17.0. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Fabio Valentini decathorpe@gmail.com - 0.17.0-2 - Skip a test that fails on 32-bit architectures * Tue Jul 14 2026 Fabio Valentini decathorpe@gmail.com - 0.17.0-1 - Update to version 0.17.0; Fixes RHBZ#2439656 * Sat Jan 17 2026 Fedora Release Engineering releng@fedoraproject.org - 0.14.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ rust-fax-0.2.7-1.fc43 (FEDORA-2026-07ba269d93) Decoder and Encoder for CCITT Group 3 and 4 bi-level image encodings -------------------------------------------------------------------------------- Update Information:
Update to version 0.2.7 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Benjamin A. Beasley code@musicinmybrain.net - 0.2.7-1 - Update to version 0.2.7 * Sat Jan 17 2026 Fedora Release Engineering releng@fedoraproject.org - 0.2.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ rust-http-body-1.1.0-1.fc43 (FEDORA-2026-9db75c64e5) Trait representing an asynchronous, streaming, HTTP request or response body -------------------------------------------------------------------------------- Update Information:
Update to version 1.1.0. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Fabio Valentini decathorpe@gmail.com - 1.1.0-1 - Update to version 1.1.0; Fixes RHBZ#2499733 * Sat Jan 17 2026 Fedora Release Engineering releng@fedoraproject.org - 1.0.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ rust-http-body-util-0.1.4-1.fc43 (FEDORA-2026-dc44437f88) Combinators and adapters for HTTP request or response bodies -------------------------------------------------------------------------------- Update Information:
Update to version 0.1.4. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Fabio Valentini decathorpe@gmail.com - 0.1.4-1 - Update to version 0.1.4; Fixes RHBZ#2499768 * Sat Jan 17 2026 Fedora Release Engineering releng@fedoraproject.org - 0.1.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ rust-mio-1.2.2-1.fc43 (FEDORA-2026-5e8f6ba77d) Lightweight non-blocking I/O -------------------------------------------------------------------------------- Update Information:
Update to version 1.2.2. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Fabio Valentini decathorpe@gmail.com - 1.2.2-1 - Update to version 1.2.2; Fixes RHBZ#2499735 --------------------------------------------------------------------------------
================================================================================ rust-quick-junit-0.6.1-1.fc43 (FEDORA-2026-4479732277) Data model, serializer, and deserializer for JUnit/XUnit XML -------------------------------------------------------------------------------- Update Information:
Update to version 0.6.1. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Fabio Valentini decathorpe@gmail.com - 0.6.1-1 - Update to version 0.6.1; Fixes RHBZ#2496725 --------------------------------------------------------------------------------
================================================================================ rust-quinn-0.11.11-1.fc43 (FEDORA-2026-1eec216066) Versatile QUIC transport protocol implementation -------------------------------------------------------------------------------- Update Information:
Update the quinn crate to version 0.11.11. Update the quinn-udp crate to version 0.5.15. Update the quinn-proto crate to version 0.11.16. Update the fastbloom crate to version 0.17.0. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Fabio Valentini decathorpe@gmail.com - 0.11.11-1 - Update to version 0.11.11; Fixes RHBZ#2491310 * Sat Jan 17 2026 Fedora Release Engineering releng@fedoraproject.org - 0.11.9-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ rust-quinn-proto-0.11.16-1.fc43 (FEDORA-2026-1eec216066) State machine for the QUIC transport protocol -------------------------------------------------------------------------------- Update Information:
Update the quinn crate to version 0.11.11. Update the quinn-udp crate to version 0.5.15. Update the quinn-proto crate to version 0.11.16. Update the fastbloom crate to version 0.17.0. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Fabio Valentini decathorpe@gmail.com - 0.11.16-1 - Update to version 0.11.16; Fixes RHBZ#2491309 --------------------------------------------------------------------------------
================================================================================ rust-quinn-udp-0.5.15-1.fc43 (FEDORA-2026-1eec216066) UDP sockets with ECN information for the QUIC transport protocol -------------------------------------------------------------------------------- Update Information:
Update the quinn crate to version 0.11.11. Update the quinn-udp crate to version 0.5.15. Update the quinn-proto crate to version 0.11.16. Update the fastbloom crate to version 0.17.0. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Fabio Valentini decathorpe@gmail.com - 0.5.15-1 - Update to version 0.5.15 * Sat Jan 17 2026 Fedora Release Engineering releng@fedoraproject.org - 0.5.14-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ rust-reqwest-0.13.4-1.fc43 (FEDORA-2026-24b5679168) Higher level HTTP client library -------------------------------------------------------------------------------- Update Information:
Update to version 0.13.4. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Fabio Valentini decathorpe@gmail.com - 0.13.4-1 - Update to version 0.13.4; Fixes RHBZ#2437422 --------------------------------------------------------------------------------
================================================================================ rust-rustls-0.23.42-1.fc43 (FEDORA-2026-63b604671c) Rustls is a modern TLS library written in Rust -------------------------------------------------------------------------------- Update Information:
Update to version 0.23.42. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Fabio Valentini decathorpe@gmail.com - 0.23.42-1 - Update to version 0.23.42 --------------------------------------------------------------------------------
================================================================================ rust-winnow-1.0.4-1.fc43 (FEDORA-2026-069d1cc6fd) Byte-oriented, zero-copy, parser combinators library -------------------------------------------------------------------------------- Update Information:
Update to version 1.0.4. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Fabio Valentini decathorpe@gmail.com - 1.0.4-1 - Update to version 1.0.4; Fixes RHBZ#2499714 --------------------------------------------------------------------------------
================================================================================ spoofdpi-1.5.3-2.fc43 (FEDORA-2026-77f23c0bc4) Simple and fast anti-censorship tool written in Go -------------------------------------------------------------------------------- Update Information:
Fix Go version requirement for F43 build compatibility -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Emir Akdag infraw.linux@proton.me - 1.5.3-2 - Fix Go version requirement for F43 build compatibility * Tue Jul 14 2026 Emir Akdag infraw.linux@proton.me - 1.5.3-1 - Update spoofdpi to 1.5.3 - Update to 1.5.3 to fix CVE-2026-27145 - Add missing license for go-localereader - Fix build directory case sensitivity issue - Resolves: rhbz#2494220, rhbz#2494389 * Tue Feb 3 2026 Maxwell G maxwell@gtmx.me - 1.2.1-3 - Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26 * Sat Jan 17 2026 Fedora Release Engineering releng@fedoraproject.org - 1.2.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ tklib-0.5-42.fc43 (FEDORA-2026-eb77e95931) Collection of widgets and other packages for Tk -------------------------------------------------------------------------------- Update Information:
Fix FTBFS -------------------------------------------------------------------------------- ChangeLog:
* Mon Jul 13 2026 Filipe Rosset filiperosset@fedoraproject.org - 0.5-34 - fixes FTBFS on rawhide rhbz#2435153 and rhbz#2385698 * Sat Jan 17 2026 Fedora Release Engineering releng@fedoraproject.org - 0.5-33 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jul 25 2025 Fedora Release Engineering releng@fedoraproject.org - 0.5-32 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2385698 - tklib: FTBFS in Fedora rawhide/f43 https://bugzilla.redhat.com/show_bug.cgi?id=2385698 --------------------------------------------------------------------------------
================================================================================ ttyplot-1.7.6-1.fc43 (FEDORA-2026-bdb7c1bbf0) Real-time plotting utility for the terminal -------------------------------------------------------------------------------- Update Information:
Update to v1.7.6 (with aalib support) -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Artur Frenszek-Iwicki fedora@svgames.pl - 1.7.6-1 - Update to v1.7.6 (with aalib support) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2499899 - ttyplot-1.7.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2499899 --------------------------------------------------------------------------------
================================================================================ yq-4.53.3-1.fc43 (FEDORA-2026-990cdd8329) Yq is a portable command-line YAML, JSON, XML, CSV, TOML, HCL and properties processor -------------------------------------------------------------------------------- Update Information:
Update to 4.53.3 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 14 2026 Mikel Olasagasti Uranga mikel@olasagasti.info - 4.53.3-1 - Update to 4.53.3 and add packit integration * Tue Feb 3 2026 Maxwell G maxwell@gtmx.me - 4.47.1-5 - Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26 * Sat Jan 17 2026 Fedora Release Engineering releng@fedoraproject.org - 4.47.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Oct 10 2025 Alejandro Sáez asm@redhat.com - 4.47.1-3 - rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2495328 - CVE-2026-25681 yq: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2495328 --------------------------------------------------------------------------------
test-reports@lists.fedoraproject.org
-
updates＠fedoraproject.org