Fedora Security Advisories

• libosmocore-1.14.2-2.fc43

This is an update fixing CVE-2026-104591, CVE-2026-104592, CVE-2026-104594, CVE-2026-104596, CVE-2026-104597.

• libosmocore-1.14.2-2.fc44

This is an update fixing CVE-2026-104591, CVE-2026-104592, CVE-2026-104594, CVE-2026-104596, CVE-2026-104597.

• libosmocore-1.14.2-2.fc45

This is an update fixing CVE-2026-104591, CVE-2026-104592, CVE-2026-104594, CVE-2026-104596, CVE-2026-104597.

• xorg-x11-server-Xwayland-24.1.15-1.fc43

Update to xwayland 24.1.15 CVE fix for: CVE-2026-109092, CVE-2026-109093, CVE-2026-109904, CVE-2026-109094, CVE-2026-109095, CVE-2026-109096, CVE-2026-109903

• msedit-1.2.0^1.e16b4ab-8.el10_3

Rebuild to address multiple security advisories in zstd / zstd-safe

• xorg-x11-server-Xwayland-24.1.15-1.fc44

Update to xwayland 24.1.15 CVE fix for: CVE-2026-109092, CVE-2026-109093, CVE-2026-109904, CVE-2026-109094, CVE-2026-109095, CVE-2026-109096, CVE-2026-109903

• xorg-x11-server-Xwayland-24.1.15-1.fc45

Update to xwayland 24.1.15 CVE fix for: CVE-2026-109092, CVE-2026-109093, CVE-2026-109904, CVE-2026-109094, CVE-2026-109095, CVE-2026-109096, CVE-2026-109903

• msedit-1.2.0^1.e16b4ab-8.el10_4

Rebuild to address multiple security advisories in zstd / zstd-safe

• poppler-25.07.0-6.fc43

This update fixes several CVEs: CVE-2026-102621, CVE-2026-102620 and CVE-2026-93653.

• poppler-26.08.0-2.fc45

This update fixes several CVEs: CVE-2026-102621, CVE-2026-102620, CVE-2026-107705 and CVE-2026-93653.

• poppler-26.01.0-6.fc44

This update fixes several CVEs: CVE-2026-102621, CVE-2026-102620, CVE-2026-107705 and CVE-2026-93653.

• msedit-1.2.0^1.e16b4ab-8.fc43

Rebuild to address multiple security advisories in zstd / zstd-safe

• xorg-x11-server-21.1.26-1.fc43

Update to xserver 21.1.26 CVE fix for: CVE-2026-109091, CVE-2026-109092, CVE-2026-109093, CVE-2026-109904, CVE-2026-109094, CVE-2026-109095, CVE-2026-109096, CVE-2026-109903

• xorg-x11-server-21.1.26-1.fc44

Update to xserver 21.1.26 CVE fix for: CVE-2026-109091, CVE-2026-109092, CVE-2026-109093, CVE-2026-109904, CVE-2026-109094, CVE-2026-109095, CVE-2026-109096, CVE-2026-109903

• proftpd-1.3.8d-5.el9

This update addresses a number of security issues (albeit not ones that would affect the default configuration), plus a file descriptor leak in mod_sftp.

• xorg-x11-server-21.1.26-1.fc45

Update to xserver 21.1.26 CVE fix for: CVE-2026-109091, CVE-2026-109092, CVE-2026-109093, CVE-2026-109904, CVE-2026-109094, CVE-2026-109095, CVE-2026-109096, CVE-2026-109903

• msedit-1.2.0^1.e16b4ab-8.fc44

Rebuild to address multiple security advisories in zstd / zstd-safe

• msedit-1.2.0^1.e16b4ab-8.fc45

Rebuild to address multiple security advisories in zstd / zstd-safe

• ffmpeg-8.1.3-3.fc44
• openapv-1.1.3.0-1.fc44

Latest OpenAPV release. Changes: https://github.com/AcademySoftwareFoundation/openapv/releases/tag/v1.1.3.0 . Includes FFmpeg rebuild against the new ABI.

Fixes CVE-2026-79113 .

• ffmpeg-9.0.2-4.fc45
• openapv-1.1.3.0-1.fc45

Latest OpenAPV release. Changes: https://github.com/AcademySoftwareFoundation/openapv/releases/tag/v1.1.3.0 . Includes FFmpeg rebuild against the new ABI.

Fixes CVE-2026-79113 .