This update switches the currency symbol for Bulgaria to the Euro.
Furthermore, it addresses several security vulnerabilities:
wordexp is used with WRDE_REUSE (CVE-2025-15281)getnetbyaddr is called for the zero address (CVE-2026-0915)memalign and related functions if they are called with out-of-bounds size/alignment combinations (CVE-2026-0861)LD_PROFILE is now ignored with a warning if LD_PROFILE_OUTPUT is not specified, rather than using the insecure /var/tmp default.The changes updates from the upstream stable release branch are applied:
Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:
sudo dnf upgrade --refresh --advisory=FEDORA-2026-a2f3af8a86
Please log in to add feedback.
This update has been submitted for testing by fberat.
This update's test gating status has been changed to 'waiting'.
This update's test gating status has been changed to 'waiting'.
This update's test gating status has been changed to 'passed'.
Seems OK on 42 also.
This update has been pushed to testing.
This update's test gating status has been changed to 'failed'.
This update's test gating status has been changed to 'waiting'.
This update's test gating status has been changed to 'passed'.
fweimer edited this update.
New build(s):
Removed build(s):
Karma has been reset.
This update has been submitted for testing by fweimer.
This update has been pushed to testing.
New release seems to be working just fine here.
Works
This update can be pushed to stable now if the maintainer wishes
This update has been submitted for stable by fweimer.
This update has been pushed to stable.