Fedora Security Advisories

• gdk-pixbuf2-2.44.6^really2.44.4-3.fc44

Fixes https://access.redhat.com/security/cve/CVE-2026-81893

• gdk-pixbuf2-2.44.6^really2.44.4-3.fc43

Fixes https://access.redhat.com/security/cve/CVE-2026-81893

Fixes CVE-2026-16768: https://access.redhat.com/security/cve/CVE-2026-16768

• gdk-pixbuf2-2.44.8-3.fc45

Fixes https://access.redhat.com/security/cve/CVE-2026-81893

Fixes CVE-2026-16768: https://access.redhat.com/security/cve/CVE-2026-16768

• chirp-0.4.0^20260828-1.fc43

New version fixing arbitrary code execution via crafted Kenwood CSV data.

• chirp-0.4.0^20260828-1.fc44

New version fixing arbitrary code execution via crafted Kenwood CSV data.

• chirp-0.4.0^20260828-1.fc45

New version fixing arbitrary code execution via crafted Kenwood CSV data.

• python-pip-25.1.1-19.fc43

Security fixes for CVE-2026-13346 and CVE-2026-8643

• exiv2-0.28.9-1.fc45

Exiv2 0.28.9 bugfix release.

• exiv2-0.28.9-1.fc43

Exiv2 0.28.9 bugfix release.

• baresip-4.11.0-1.el8
• libre-4.11.0-1.el8

• core: cleanup stream_rtp_h ignore handling
• audio: increase RTP timestamp also for underruns
• aubuf: remove adaptive mode
• webrtc_aec: fix system cmake include
• call: avoid call progress if media is inactive
• conf: remove unused conf_aubuf_adaptive()
• audio: reuse mbuf for telephony events
• call: add callback for incoming SIP INFO
• test: check fixture error and fix call progress
• aureceiver: fix return on error case in aurecv_start_player()
• audio: fix warning() %d format in encode_rtp_send()
• opus,aureceiver: fix PLC/FEC handling
• l16: refactor NR_CODECS by RE_ARRAY_SIZE
• config: remove unused config option audio_silence
• echo: refactor call_event_handler closed with bevent

• libre's HTTP Basic auth verifier accept empty or prefix credential blindly
• libre allows one spoofed UDP packet forges RTCP control messages
• btrace: optimize addr2line handling
• aubuf: remove adaptive mode
• httpauth/basic: fix mem_seccmp cmp length
• srtcp: fix/add AES-GCM no encryption flag auth
• mem_pool: fix mem_pool_flush free list handling
• mem/mem_pool: check mem_pool_borrow_extend empty pool param
• json/decode_odict: fix possible container dangling pointer

• baresip-4.11.0-1.el9
• libre-4.11.0-1.el9

• core: cleanup stream_rtp_h ignore handling
• audio: increase RTP timestamp also for underruns
• aubuf: remove adaptive mode
• webrtc_aec: fix system cmake include
• call: avoid call progress if media is inactive
• conf: remove unused conf_aubuf_adaptive()
• audio: reuse mbuf for telephony events
• call: add callback for incoming SIP INFO
• test: check fixture error and fix call progress
• aureceiver: fix return on error case in aurecv_start_player()
• audio: fix warning() %d format in encode_rtp_send()
• opus,aureceiver: fix PLC/FEC handling
• l16: refactor NR_CODECS by RE_ARRAY_SIZE
• config: remove unused config option audio_silence
• echo: refactor call_event_handler closed with bevent

• libre's HTTP Basic auth verifier accept empty or prefix credential blindly
• libre allows one spoofed UDP packet forges RTCP control messages
• btrace: optimize addr2line handling
• aubuf: remove adaptive mode
• httpauth/basic: fix mem_seccmp cmp length
• srtcp: fix/add AES-GCM no encryption flag auth
• mem_pool: fix mem_pool_flush free list handling
• mem/mem_pool: check mem_pool_borrow_extend empty pool param
• json/decode_odict: fix possible container dangling pointer

• baresip-4.11.0-1.el10_2
• libre-4.11.0-1.el10_2

• core: cleanup stream_rtp_h ignore handling
• audio: increase RTP timestamp also for underruns
• aubuf: remove adaptive mode
• webrtc_aec: fix system cmake include
• call: avoid call progress if media is inactive
• conf: remove unused conf_aubuf_adaptive()
• audio: reuse mbuf for telephony events
• call: add callback for incoming SIP INFO
• test: check fixture error and fix call progress
• aureceiver: fix return on error case in aurecv_start_player()
• audio: fix warning() %d format in encode_rtp_send()
• opus,aureceiver: fix PLC/FEC handling
• l16: refactor NR_CODECS by RE_ARRAY_SIZE
• config: remove unused config option audio_silence
• echo: refactor call_event_handler closed with bevent

• libre's HTTP Basic auth verifier accept empty or prefix credential blindly
• libre allows one spoofed UDP packet forges RTCP control messages
• btrace: optimize addr2line handling
• aubuf: remove adaptive mode
• httpauth/basic: fix mem_seccmp cmp length
• srtcp: fix/add AES-GCM no encryption flag auth
• mem_pool: fix mem_pool_flush free list handling
• mem/mem_pool: check mem_pool_borrow_extend empty pool param
• json/decode_odict: fix possible container dangling pointer

• baresip-4.11.0-1.el10_3
• libre-4.11.0-1.el10_3

• core: cleanup stream_rtp_h ignore handling
• audio: increase RTP timestamp also for underruns
• aubuf: remove adaptive mode
• webrtc_aec: fix system cmake include
• call: avoid call progress if media is inactive
• conf: remove unused conf_aubuf_adaptive()
• audio: reuse mbuf for telephony events
• call: add callback for incoming SIP INFO
• test: check fixture error and fix call progress
• aureceiver: fix return on error case in aurecv_start_player()
• audio: fix warning() %d format in encode_rtp_send()
• opus,aureceiver: fix PLC/FEC handling
• l16: refactor NR_CODECS by RE_ARRAY_SIZE
• config: remove unused config option audio_silence
• echo: refactor call_event_handler closed with bevent

• libre's HTTP Basic auth verifier accept empty or prefix credential blindly
• libre allows one spoofed UDP packet forges RTCP control messages
• btrace: optimize addr2line handling
• aubuf: remove adaptive mode
• httpauth/basic: fix mem_seccmp cmp length
• srtcp: fix/add AES-GCM no encryption flag auth
• mem_pool: fix mem_pool_flush free list handling
• mem/mem_pool: check mem_pool_borrow_extend empty pool param
• json/decode_odict: fix possible container dangling pointer

• baresip-4.11.0-1.el10_4
• libre-4.11.0-1.el10_4

• core: cleanup stream_rtp_h ignore handling
• audio: increase RTP timestamp also for underruns
• aubuf: remove adaptive mode
• webrtc_aec: fix system cmake include
• call: avoid call progress if media is inactive
• conf: remove unused conf_aubuf_adaptive()
• audio: reuse mbuf for telephony events
• call: add callback for incoming SIP INFO
• test: check fixture error and fix call progress
• aureceiver: fix return on error case in aurecv_start_player()
• audio: fix warning() %d format in encode_rtp_send()
• opus,aureceiver: fix PLC/FEC handling
• l16: refactor NR_CODECS by RE_ARRAY_SIZE
• config: remove unused config option audio_silence
• echo: refactor call_event_handler closed with bevent

• libre's HTTP Basic auth verifier accept empty or prefix credential blindly
• libre allows one spoofed UDP packet forges RTCP control messages
• btrace: optimize addr2line handling
• aubuf: remove adaptive mode
• httpauth/basic: fix mem_seccmp cmp length
• srtcp: fix/add AES-GCM no encryption flag auth
• mem_pool: fix mem_pool_flush free list handling
• mem/mem_pool: check mem_pool_borrow_extend empty pool param
• json/decode_odict: fix possible container dangling pointer

• baresip-4.11.0-1.fc43
• libre-4.11.0-1.fc43

• core: cleanup stream_rtp_h ignore handling
• audio: increase RTP timestamp also for underruns
• aubuf: remove adaptive mode
• webrtc_aec: fix system cmake include
• call: avoid call progress if media is inactive
• conf: remove unused conf_aubuf_adaptive()
• audio: reuse mbuf for telephony events
• call: add callback for incoming SIP INFO
• test: check fixture error and fix call progress
• aureceiver: fix return on error case in aurecv_start_player()
• audio: fix warning() %d format in encode_rtp_send()
• opus,aureceiver: fix PLC/FEC handling
• l16: refactor NR_CODECS by RE_ARRAY_SIZE
• config: remove unused config option audio_silence
• echo: refactor call_event_handler closed with bevent

• libre's HTTP Basic auth verifier accept empty or prefix credential blindly
• libre allows one spoofed UDP packet forges RTCP control messages
• btrace: optimize addr2line handling
• aubuf: remove adaptive mode
• httpauth/basic: fix mem_seccmp cmp length
• srtcp: fix/add AES-GCM no encryption flag auth
• mem_pool: fix mem_pool_flush free list handling
• mem/mem_pool: check mem_pool_borrow_extend empty pool param
• json/decode_odict: fix possible container dangling pointer

• baresip-4.11.0-1.fc44
• libre-4.11.0-1.fc44

• core: cleanup stream_rtp_h ignore handling
• audio: increase RTP timestamp also for underruns
• aubuf: remove adaptive mode
• webrtc_aec: fix system cmake include
• call: avoid call progress if media is inactive
• conf: remove unused conf_aubuf_adaptive()
• audio: reuse mbuf for telephony events
• call: add callback for incoming SIP INFO
• test: check fixture error and fix call progress
• aureceiver: fix return on error case in aurecv_start_player()
• audio: fix warning() %d format in encode_rtp_send()
• opus,aureceiver: fix PLC/FEC handling
• l16: refactor NR_CODECS by RE_ARRAY_SIZE
• config: remove unused config option audio_silence
• echo: refactor call_event_handler closed with bevent

• libre's HTTP Basic auth verifier accept empty or prefix credential blindly
• libre allows one spoofed UDP packet forges RTCP control messages
• btrace: optimize addr2line handling
• aubuf: remove adaptive mode
• httpauth/basic: fix mem_seccmp cmp length
• srtcp: fix/add AES-GCM no encryption flag auth
• mem_pool: fix mem_pool_flush free list handling
• mem/mem_pool: check mem_pool_borrow_extend empty pool param
• json/decode_odict: fix possible container dangling pointer

• baresip-4.11.0-1.fc45
• libre-4.11.0-1.fc45

• core: cleanup stream_rtp_h ignore handling
• audio: increase RTP timestamp also for underruns
• aubuf: remove adaptive mode
• webrtc_aec: fix system cmake include
• call: avoid call progress if media is inactive
• conf: remove unused conf_aubuf_adaptive()
• audio: reuse mbuf for telephony events
• call: add callback for incoming SIP INFO
• test: check fixture error and fix call progress
• aureceiver: fix return on error case in aurecv_start_player()
• audio: fix warning() %d format in encode_rtp_send()
• opus,aureceiver: fix PLC/FEC handling
• l16: refactor NR_CODECS by RE_ARRAY_SIZE
• config: remove unused config option audio_silence
• echo: refactor call_event_handler closed with bevent

• libre's HTTP Basic auth verifier accept empty or prefix credential blindly
• libre allows one spoofed UDP packet forges RTCP control messages
• btrace: optimize addr2line handling
• aubuf: remove adaptive mode
• httpauth/basic: fix mem_seccmp cmp length
• srtcp: fix/add AES-GCM no encryption flag auth
• mem_pool: fix mem_pool_flush free list handling
• mem/mem_pool: check mem_pool_borrow_extend empty pool param
• json/decode_odict: fix possible container dangling pointer

• baresip-4.11.0-1.fc46
• libre-4.11.0-1.fc46

• core: cleanup stream_rtp_h ignore handling
• audio: increase RTP timestamp also for underruns
• aubuf: remove adaptive mode
• webrtc_aec: fix system cmake include
• call: avoid call progress if media is inactive
• conf: remove unused conf_aubuf_adaptive()
• audio: reuse mbuf for telephony events
• call: add callback for incoming SIP INFO
• test: check fixture error and fix call progress
• aureceiver: fix return on error case in aurecv_start_player()
• audio: fix warning() %d format in encode_rtp_send()
• opus,aureceiver: fix PLC/FEC handling
• l16: refactor NR_CODECS by RE_ARRAY_SIZE
• config: remove unused config option audio_silence
• echo: refactor call_event_handler closed with bevent

• libre's HTTP Basic auth verifier accept empty or prefix credential blindly
• libre allows one spoofed UDP packet forges RTCP control messages
• btrace: optimize addr2line handling
• aubuf: remove adaptive mode
• httpauth/basic: fix mem_seccmp cmp length
• srtcp: fix/add AES-GCM no encryption flag auth
• mem_pool: fix mem_pool_flush free list handling
• mem/mem_pool: check mem_pool_borrow_extend empty pool param
• json/decode_odict: fix possible container dangling pointer

• gegl04-0.4.70-5.fc43

This update fixes an overflow in parsing RGBE/HDR image files.

• gegl04-0.4.70-5.fc45

This update fixes an overflow in parsing RGBE/HDR image files.