Aggregator

python-pillow-12.3.0-7.fc44

4 days 4 hours ago
FEDORA-2026-719fffc96a Packages in this update:
  • python-pillow-12.3.0-7.fc44
Update description:

Backport fix for CVE-2026-112900.

Backport fix for CVE-2026-112398

Backport fix for CVE-2026-112393.

python-pillow-12.3.0-7.fc45

4 days 4 hours ago
FEDORA-2026-be73b9861d Packages in this update:
  • python-pillow-12.3.0-7.fc45
Update description:

Backport fix for CVE-2026-112900.

Backport fix for CVE-2026-112398

Backport fix for CVE-2026-112393.

Backport fix for CVE-2026-112892.

tpm2-tss-4.1.5-1.fc44

4 days 4 hours ago
FEDORA-2026-efb1f85550 Packages in this update:
  • tpm2-tss-4.1.5-1.fc44
Update description:

Security

GHSA-h664-qxhh-gx3w CVE-2026-109545 GHSA-2q8j-chww-3pcq CVE-ID requested GHSA-5mqr-9575-x89w CVE-ID requested GHSA-rjg6-phr3-3rxw CVE-ID requested GHSA-g73j-fj87-wmqq CVE-ID requested GHSA-v965-wr7f-xw6w CVE-ID requested GHSA-5p93-qmch-h65j CVE-ID requested GHSA-x33j-3x4g-f32j CVE-ID requested GHSA-xvmm-58jj-c6gf CVE-ID requested

Fixes

MAINTAINERS: add Moritz TCTI: validate the response header length TCTI: add missing size checks for response buffers FAPI: fix quoting of empty event logs FAPI: check the number of branches for policy lists FAPI: validate key size before extracting the public key FAPI: add a missing bounds check on PCR_Select deserialization FAPI: check buffer size in RSASSA and RSAPSS signature conversion FAPI: reject eventlog entries with an empty template value FAPI: bound eventlog entry name reads by the template size FAPI: verify the eventlog digest window fits the template buffer FAPI: fix file leak on read error FAPI: fix tests failing with physical TPMs FAPI: fix buffer overflow in ifapi_set_auth_primary ESYS: fix compilation without SM4 support ESYS: fix OpenSSL 3.X engine context handling for internal crypto SYS: harden the response size checks SYS: validate the length of no-session responses SYS: validate the length of encrypted parameter responses SYS: validate the length of response authorization parameters SYS: use response size instead of buffer size during unmarshalling MU: bound subtype unmarshalling to the TPM2B size field IO: retry poll calls on EINTR and EAGAIN