Fedora Security Advisories

• radsecproxy-1.11.5-1.el10_3

• Fix vendor attribute rewrite checks (GHSA-mf4w-p52g-j253)
• Fix dynamic lookup config merge for TLS-PSK (GHSA-4pv5-j49w-wfpp)
• Fix some configuration values from dynamic lookup command ignored
• Fix config file issues with string quotation at end of file
• Fix startup fails when using address-sanitizer

• radsecproxy-1.11.5-1.fc44

• Fix vendor attribute rewrite checks (GHSA-mf4w-p52g-j253)
• Fix dynamic lookup config merge for TLS-PSK (GHSA-4pv5-j49w-wfpp)
• Fix some configuration values from dynamic lookup command ignored
• Fix config file issues with string quotation at end of file
• Fix startup fails when using address-sanitizer

• radsecproxy-1.11.5-1.fc45

• Fix vendor attribute rewrite checks (GHSA-mf4w-p52g-j253)
• Fix dynamic lookup config merge for TLS-PSK (GHSA-4pv5-j49w-wfpp)
• Fix some configuration values from dynamic lookup command ignored
• Fix config file issues with string quotation at end of file
• Fix startup fails when using address-sanitizer

• radsecproxy-1.11.5-1.el10_4

• Fix vendor attribute rewrite checks (GHSA-mf4w-p52g-j253)
• Fix dynamic lookup config merge for TLS-PSK (GHSA-4pv5-j49w-wfpp)
• Fix some configuration values from dynamic lookup command ignored
• Fix config file issues with string quotation at end of file
• Fix startup fails when using address-sanitizer

• radsecproxy-1.11.5-1.el8

• Fix vendor attribute rewrite checks (GHSA-mf4w-p52g-j253)
• Fix dynamic lookup config merge for TLS-PSK (GHSA-4pv5-j49w-wfpp)
• Fix some configuration values from dynamic lookup command ignored
• Fix config file issues with string quotation at end of file
• Fix startup fails when using address-sanitizer

• radsecproxy-1.11.5-1.el9

• Fix vendor attribute rewrite checks (GHSA-mf4w-p52g-j253)
• Fix dynamic lookup config merge for TLS-PSK (GHSA-4pv5-j49w-wfpp)
• Fix some configuration values from dynamic lookup command ignored
• Fix config file issues with string quotation at end of file
• Fix startup fails when using address-sanitizer

• radsecproxy-1.11.5-1.fc43

• Fix vendor attribute rewrite checks (GHSA-mf4w-p52g-j253)
• Fix dynamic lookup config merge for TLS-PSK (GHSA-4pv5-j49w-wfpp)
• Fix some configuration values from dynamic lookup command ignored
• Fix config file issues with string quotation at end of file
• Fix startup fails when using address-sanitizer

• xfsprogs-6.15.0-3.fc43.1

xfs_admin lacks user-controlled input validation for its parameters, this can lead to OS command injection or, depending on how xfs_admin is being executed, to a local privilege escalation.

• xfsprogs-7.1.1-1.fc44.1

xfs_admin lacks user-controlled input validation for its parameters, this can lead to OS command injection or, depending on how xfs_admin is being executed, to a local privilege escalation.

• mingw-poppler-26.01.0-3.fc45

Apply fixes for CVE-2026-102621, CVE-2026-102620, CVE-2026-107705, CVE-2026-93653

• mingw-poppler-26.01.0-3.fc44

Apply fixes for CVE-2026-102621, CVE-2026-102620, CVE-2026-107705, CVE-2026-93653

• dash-0.5.13.6-1.fc45

Update to 0.5.13.6

• dash-0.5.13.6-2.el10_3

Update to 0.5.13.6

• dash-0.5.13.6-1.fc43

Update to 0.5.13.6

• dash-0.5.13.6-2.el10_4

Update to 0.5.13.6

• dash-0.5.13.6-1.fc44

Update to 0.5.13.6

• xfsprogs-7.1.1-1.fc45.1

CVE-2026-108472 xfsprogs: xfsprogs: Local privilege escalation via command injection in xfs_admin

• python-pydantic-settings-2.15.0-2.fc43

Backport a security fix: prevent SecretsSettingsSource from following symlinks outside secrets_dir.

• python-pydantic-settings-2.15.0-2.fc44

Backport a security fix: prevent SecretsSettingsSource from following symlinks outside secrets_dir.

• python-pydantic-settings-2.15.0-2.fc45

Backport a security fix: prevent SecretsSettingsSource from following symlinks outside secrets_dir.