Fedora Security Advisories

• xen-4.21.2-7.fc45

AMD IOMMU Out-of-Bounds Device Table Read [XSA-524, CVE-2024-21963] x86: Transient Scheduler Attacks (update) [XSA-525, CVE-2024-36350, CVE-2024-36357, CVE-2026-0004] update to xen-4.21.2

• passwordsafe-1.26.1-1.fc45

• Security: Random seed generation for Mac and BSD-derived system (e.g., FreeBSD, OpenBSD, NetBSD) is improved. If you're using a database created on one of these operating systems, you should open and then save it with this version (or later), and delete all backups.
• When dragging an entry with a named password policy between instances (drag & drop), the named policy is now added correctly to the receiver.
• It's now possible to remove a malformed filter that's stored in the database by clicking on "No" in the error message.
• Notes no longer scroll to the bottom when an entry is opened with "Show Notes in Edit" enabled.

• passwordsafe-1.26.1-1.fc44

• Security: Random seed generation for Mac and BSD-derived system (e.g., FreeBSD, OpenBSD, NetBSD) is improved. If you're using a database created on one of these operating systems, you should open and then save it with this version (or later), and delete all backups.
• When dragging an entry with a named password policy between instances (drag & drop), the named policy is now added correctly to the receiver.
• It's now possible to remove a malformed filter that's stored in the database by clicking on "No" in the error message.
• Notes no longer scroll to the bottom when an entry is opened with "Show Notes in Edit" enabled.

• firefox-160.0-1.fc45

• Updated to latest upstream (160.0)

• firefox-160.0-1.fc44

• Updated to latest upstream (160.0)

• firefox-160.0-1.fc43

• Updated to latest upstream (160.0)

• libosmocore-1.14.2-2.fc43

This is an update fixing CVE-2026-104591, CVE-2026-104592, CVE-2026-104594, CVE-2026-104596, CVE-2026-104597.

• libosmocore-1.14.2-2.fc44

This is an update fixing CVE-2026-104591, CVE-2026-104592, CVE-2026-104594, CVE-2026-104596, CVE-2026-104597.

• libosmocore-1.14.2-2.fc45

This is an update fixing CVE-2026-104591, CVE-2026-104592, CVE-2026-104594, CVE-2026-104596, CVE-2026-104597.

• xorg-x11-server-Xwayland-24.1.15-1.fc43

Update to xwayland 24.1.15 CVE fix for: CVE-2026-109092, CVE-2026-109093, CVE-2026-109904, CVE-2026-109094, CVE-2026-109095, CVE-2026-109096, CVE-2026-109903

• msedit-1.2.0^1.e16b4ab-8.el10_3

Rebuild to address multiple security advisories in zstd / zstd-safe

• xorg-x11-server-Xwayland-24.1.15-1.fc44

Update to xwayland 24.1.15 CVE fix for: CVE-2026-109092, CVE-2026-109093, CVE-2026-109904, CVE-2026-109094, CVE-2026-109095, CVE-2026-109096, CVE-2026-109903

• xorg-x11-server-Xwayland-24.1.15-1.fc45

Update to xwayland 24.1.15 CVE fix for: CVE-2026-109092, CVE-2026-109093, CVE-2026-109904, CVE-2026-109094, CVE-2026-109095, CVE-2026-109096, CVE-2026-109903

• msedit-1.2.0^1.e16b4ab-8.el10_4

Rebuild to address multiple security advisories in zstd / zstd-safe

• poppler-25.07.0-6.fc43

This update fixes several CVEs: CVE-2026-102621, CVE-2026-102620 and CVE-2026-93653.

• poppler-26.08.0-2.fc45

This update fixes several CVEs: CVE-2026-102621, CVE-2026-102620, CVE-2026-107705 and CVE-2026-93653.

• poppler-26.01.0-6.fc44

This update fixes several CVEs: CVE-2026-102621, CVE-2026-102620, CVE-2026-107705 and CVE-2026-93653.

• msedit-1.2.0^1.e16b4ab-8.fc43

Rebuild to address multiple security advisories in zstd / zstd-safe

• xorg-x11-server-21.1.26-1.fc43

Update to xserver 21.1.26 CVE fix for: CVE-2026-109091, CVE-2026-109092, CVE-2026-109093, CVE-2026-109904, CVE-2026-109094, CVE-2026-109095, CVE-2026-109096, CVE-2026-109903

• xorg-x11-server-21.1.26-1.fc44

Update to xserver 21.1.26 CVE fix for: CVE-2026-109091, CVE-2026-109092, CVE-2026-109093, CVE-2026-109904, CVE-2026-109094, CVE-2026-109095, CVE-2026-109096, CVE-2026-109903