Fedora 42

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Fedora 42 📖 ~4 min read  •  Source: Fedora update FEDORA-2026-76f57efeef Related CVEs: CVE-2026-41676 CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 Upstream summary: Update the openssl crate to version 0.10.78 and the openssl-sys crate to version 0.9.114. Release notes: – openssl 0.10.77 / openssl-sys 0.9.113: https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.77 […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Fedora 42 📖 ~4 min read  •  Source: Fedora update FEDORA-2026-11d7d4d8f3 Related CVEs: CVE-2026-39881 Upstream summary: Security fix for CVE-2026-39881 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Fedora 42 📖 ~4 min read  •  Source: Fedora update FEDORA-2026-f04c228c78 Related CVEs: CVE-2026-32105 CVE-2026-32107 CVE-2026-32623 CVE-2026-32624 CVE-2026-33145 CVE-2026-33516 CVE-2026-33689 CVE-2026-35512 Upstream summary: Security fixes – CVE-2026-32105 – CVE-2026-32107 – CVE-2026-32623 – CVE-2026-32624 – CVE-2026-33145 – CVE-2026-33516 – CVE-2026-33689 – CVE-2026-35512 New […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Fedora 42 📖 ~4 min read  •  Source: Fedora update FEDORA-2026-739d341ab8 Related CVEs: CVE-2026-42167 Upstream summary: Cumulative bug-fix release from upstream. Includes fix for a possible SQL-injection issue via `mod_sql` (CVE-2026-42167). Note that `mod_sql` is not enabled by default. Table of contents […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Fedora 42 📖 ~4 min read  •  Source: Fedora update FEDORA-2026-c1ca370c1a Related CVEs: CVE-2026-4786 CVE-2026-6100 Upstream summary: – Security fixes for CVE-2026-4786, CVE-2026-6100 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Fedora 42 📖 ~4 min read  •  Source: Fedora update FEDORA-2026-b9548393aa Related CVEs: CVE-2026-5766 CVE-2026-35192 CVE-2026-6907 CVE-2026-3902 CVE-2026-4277 CVE-2026-4292 CVE-2026-33033 CVE-2026-33034  +1 more Upstream summary: – Fixes CVE-2026-5766: Potential denial-of-service vulnerability in ASGI requests via file upload limit bypass – Fixes CVE-2026-35192: […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Fedora 42 📖 ~4 min read  •  Source: Fedora update FEDORA-2026-8d8aee6aaf Upstream summary: Update `uv` and `python-uv-build` to [0.11.11](https://github.com/astral-sh/uv/blob/0.11.11/CHANGELOG.md). Update the `astral-tokio-tar` Rust crate to 0.6.1, fixing security advisories [GHSA-xx64-wwv2-hcqq](https://github.com/astral-sh/tokio-tar/security/advisories/GHSA-xx64-wwv2-hcqq) and [GHSA-fp55-jw48-c537](https://github.com/astral-sh/tokio-tar/security/advisories/GHSA-fp55-jw48-c537). Table of contents Symptom & Impact Environment & Reproduction Root […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Fedora 42 📖 ~4 min read  •  Source: Fedora update FEDORA-2026-b1a2f623e7 Related CVEs: CVE-2026-32175 CVE-2026-32177 CVE-2026-35433 CVE-2026-42899 CVE-2026-26171 CVE-2026-32178 CVE-2026-32203 CVE-2026-33116 Upstream summary: Update to .NET SDK 8.0.127 and Runtime 8.0.27 Fixes: CVE-2026-32175,CVE-2026-32177,CVE-2026-35433,CVE-2026-42899 Release Notes: – SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.27/8.0.127.md – Runtime: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.27/8.0.27.md Table […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Fedora 42 📖 ~4 min read  •  Source: Fedora update FEDORA-2026-793b55138d Related CVEs: CVE-2025-69873 CVE-2026-0540 CVE-2026-3449 CVE-2026-4800 CVE-2026-6321 CVE-2026-41240 Upstream summary: This update contains upgrades to various npm packages used during the build to address CVEs, namely: – CVE-2025-69873 (ajv) – CVE-2026-0540 […]