Linux · Fedora · Security advisory · July 16, 2026

FEDORA-2026-A9F0D5370E: Security update for 39 packages

FEDORA-2026-A9F0D5370E, released July 16, 2026, fixes 2 CVEs across 39 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
2
None rated Critical
Exploited
0
None reported
Highest CVSS
5.5
Base score, 0 to 10
Highest EPSS
0.0057
47th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 0 Routine 2

Fixed package versions

ProductReleaseFixed in
python3-rpmFedora 436.0.2-1.fc43
python3-rpm-debuginfoFedora 436.0.2-1.fc43
rpmFedora 436.0.2-1.fc43
rpm-apidocsFedora 436.0.2-1.fc43
rpm-buildFedora 436.0.2-1.fc43
rpm-build-debuginfoFedora 436.0.2-1.fc43
rpm-build-libsFedora 436.0.2-1.fc43
rpm-build-libs-debuginfoFedora 436.0.2-1.fc43
rpm-cronFedora 436.0.2-1.fc43
rpm-debuginfoFedora 436.0.2-1.fc43
rpm-debugsourceFedora 436.0.2-1.fc43
rpm-develFedora 436.0.2-1.fc43
rpm-devel-debuginfoFedora 436.0.2-1.fc43
rpm-libsFedora 436.0.2-1.fc43
rpm-libs-debuginfoFedora 436.0.2-1.fc43
rpm-plugin-auditFedora 436.0.2-1.fc43
rpm-plugin-audit-debuginfoFedora 436.0.2-1.fc43
rpm-plugin-dbus-announceFedora 436.0.2-1.fc43
rpm-plugin-dbus-announce-debuginfoFedora 436.0.2-1.fc43
rpm-plugin-fapolicydFedora 436.0.2-1.fc43
rpm-plugin-fapolicyd-debuginfoFedora 436.0.2-1.fc43
rpm-plugin-fsverityFedora 436.0.2-1.fc43
rpm-plugin-fsverity-debuginfoFedora 436.0.2-1.fc43
rpm-plugin-imaFedora 436.0.2-1.fc43
rpm-plugin-ima-debuginfoFedora 436.0.2-1.fc43
rpm-plugin-prioresetFedora 436.0.2-1.fc43
rpm-plugin-prioreset-debuginfoFedora 436.0.2-1.fc43
rpm-plugin-selinuxFedora 436.0.2-1.fc43
rpm-plugin-selinux-debuginfoFedora 436.0.2-1.fc43
rpm-plugin-syslogFedora 436.0.2-1.fc43
rpm-plugin-syslog-debuginfoFedora 436.0.2-1.fc43
rpm-plugin-systemd-inhibitFedora 436.0.2-1.fc43
rpm-plugin-systemd-inhibit-debuginfoFedora 436.0.2-1.fc43
rpm-plugin-unshareFedora 436.0.2-1.fc43
rpm-plugin-unshare-debuginfoFedora 436.0.2-1.fc43
rpm-signFedora 436.0.2-1.fc43
rpm-sign-debuginfoFedora 436.0.2-1.fc43
rpm-sign-libsFedora 436.0.2-1.fc43
rpm-sign-libs-debuginfoFedora 436.0.2-1.fc43

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2026-44604 python-rpm: This update for rpm fixes the following issues: Changes in rpm: - split imaevmsign plugin into a multibuild flavor...n/a 0.0057 None reported
Routine CVE-2026-44605 Rpm: heap buffer overflow in ndb slot table parsing5.5 0.0018 None reported
Showing 1 to 2 of 2 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.