Fedora Security Advisories

FEDORA-EPEL-2026-4194d9df6f Packages in this update:

• libopenmpt-0.8.10-1.el10_2

Update description: libopenmpt 0.8.10 (2026-10-31)

• [Sec] SymMOD: Potential divison by 0 when trying to decode an embedded IMA ADPCM WAV sample claiming to contain 0 audio channels (r25831).
• [Bug] SymMOD: It was possible that a fact chunk of an embedded WAV file claimed an impossibly big sample length for an IMA ADPCM sample, causing unnecessarily large memory allocations.
• Volume column portamento effect memory was not updated properly during seeking, causing notes to continue playing at the wrong pitch.

libopenmpt 0.8.9 (2026-08-19)

• [Sec] Possible heap out-of-bounds write when loading SymMOD files containing WAV IMA ADPCM samples (r25623, r25645). See also https://github.com/OpenMPT/openmpt/security/advisories/GHSA-fxf7-wc37-p2cx
• [Sec] Possible heap out-of-bounds read when loading custom tunings from MPTM files (r25609, r25615).

libopenmpt 0.8.8 (2026-08-15)

• IT: Due to an Impulse Tracker bug in Compatible Gxx mode, Envelope Carry may not resume the envelope from the correct position when there is both an instrument number and tone portamento next to a note.
• XM: NitroTracker ignores instrument numbers where there is no note next to them, so they are no longer imported. Fixes various NitroTracker-made XMs such as notominous-a19.xm.
• STK: Loosen heuristics a bit to allow STK.CRB-GreatMuzaxs6 to load.

• GT2: Loading file versions 6 and later was broken since libopenmpt 0.8.0.

• mpg123: Update to v1.33.7 (2026-08-03).

• miniz: Update to v3.1.2 (2026-07-01).
• pugixml: Update to v1.16 (2026-06-16).

FEDORA-EPEL-2026-3423413067 Packages in this update:

• libopenmpt-0.8.10-1.el8

Update description: libopenmpt 0.8.10 (2026-10-31)

• [Sec] SymMOD: Potential divison by 0 when trying to decode an embedded IMA ADPCM WAV sample claiming to contain 0 audio channels (r25831).
• [Bug] SymMOD: It was possible that a fact chunk of an embedded WAV file claimed an impossibly big sample length for an IMA ADPCM sample, causing unnecessarily large memory allocations.
• Volume column portamento effect memory was not updated properly during seeking, causing notes to continue playing at the wrong pitch.

libopenmpt 0.8.9 (2026-08-19)

• [Sec] Possible heap out-of-bounds write when loading SymMOD files containing WAV IMA ADPCM samples (r25623, r25645). See also https://github.com/OpenMPT/openmpt/security/advisories/GHSA-fxf7-wc37-p2cx
• [Sec] Possible heap out-of-bounds read when loading custom tunings from MPTM files (r25609, r25615).

libopenmpt 0.8.8 (2026-08-15)

• IT: Due to an Impulse Tracker bug in Compatible Gxx mode, Envelope Carry may not resume the envelope from the correct position when there is both an instrument number and tone portamento next to a note.
• XM: NitroTracker ignores instrument numbers where there is no note next to them, so they are no longer imported. Fixes various NitroTracker-made XMs such as notominous-a19.xm.
• STK: Loosen heuristics a bit to allow STK.CRB-GreatMuzaxs6 to load.

• GT2: Loading file versions 6 and later was broken since libopenmpt 0.8.0.

• mpg123: Update to v1.33.7 (2026-08-03).

• miniz: Update to v3.1.2 (2026-07-01).
• pugixml: Update to v1.16 (2026-06-16).

FEDORA-EPEL-2026-a0734f2f20 Packages in this update:

• libopenmpt-0.8.10-1.el9

Update description: libopenmpt 0.8.10 (2026-10-31)

• [Sec] SymMOD: Potential divison by 0 when trying to decode an embedded IMA ADPCM WAV sample claiming to contain 0 audio channels (r25831).
• [Bug] SymMOD: It was possible that a fact chunk of an embedded WAV file claimed an impossibly big sample length for an IMA ADPCM sample, causing unnecessarily large memory allocations.
• Volume column portamento effect memory was not updated properly during seeking, causing notes to continue playing at the wrong pitch.

libopenmpt 0.8.9 (2026-08-19)

• [Sec] Possible heap out-of-bounds write when loading SymMOD files containing WAV IMA ADPCM samples (r25623, r25645). See also https://github.com/OpenMPT/openmpt/security/advisories/GHSA-fxf7-wc37-p2cx
• [Sec] Possible heap out-of-bounds read when loading custom tunings from MPTM files (r25609, r25615).

libopenmpt 0.8.8 (2026-08-15)

• IT: Due to an Impulse Tracker bug in Compatible Gxx mode, Envelope Carry may not resume the envelope from the correct position when there is both an instrument number and tone portamento next to a note.
• XM: NitroTracker ignores instrument numbers where there is no note next to them, so they are no longer imported. Fixes various NitroTracker-made XMs such as notominous-a19.xm.
• STK: Loosen heuristics a bit to allow STK.CRB-GreatMuzaxs6 to load.

• GT2: Loading file versions 6 and later was broken since libopenmpt 0.8.0.

• mpg123: Update to v1.33.7 (2026-08-03).

• miniz: Update to v3.1.2 (2026-07-01).
• pugixml: Update to v1.16 (2026-06-16).

FEDORA-EPEL-2026-ba693411ed Packages in this update:

• libopenmpt-0.8.10-1.el10_4

Update description: libopenmpt 0.8.10 (2026-10-31)

• [Sec] SymMOD: Potential divison by 0 when trying to decode an embedded IMA ADPCM WAV sample claiming to contain 0 audio channels (r25831).
• [Bug] SymMOD: It was possible that a fact chunk of an embedded WAV file claimed an impossibly big sample length for an IMA ADPCM sample, causing unnecessarily large memory allocations.
• Volume column portamento effect memory was not updated properly during seeking, causing notes to continue playing at the wrong pitch.

libopenmpt 0.8.9 (2026-08-19)

• [Sec] Possible heap out-of-bounds write when loading SymMOD files containing WAV IMA ADPCM samples (r25623, r25645). See also https://github.com/OpenMPT/openmpt/security/advisories/GHSA-fxf7-wc37-p2cx
• [Sec] Possible heap out-of-bounds read when loading custom tunings from MPTM files (r25609, r25615).

libopenmpt 0.8.8 (2026-08-15)

• IT: Due to an Impulse Tracker bug in Compatible Gxx mode, Envelope Carry may not resume the envelope from the correct position when there is both an instrument number and tone portamento next to a note.
• XM: NitroTracker ignores instrument numbers where there is no note next to them, so they are no longer imported. Fixes various NitroTracker-made XMs such as notominous-a19.xm.
• STK: Loosen heuristics a bit to allow STK.CRB-GreatMuzaxs6 to load.

• GT2: Loading file versions 6 and later was broken since libopenmpt 0.8.0.

• mpg123: Update to v1.33.7 (2026-08-03).

• miniz: Update to v3.1.2 (2026-07-01).
• pugixml: Update to v1.16 (2026-06-16).

FEDORA-EPEL-2026-6d0b6ab2fd Packages in this update:

• libopenmpt-0.8.10-1.el10_3

Update description: libopenmpt 0.8.10 (2026-10-31)

• [Sec] SymMOD: Potential divison by 0 when trying to decode an embedded IMA ADPCM WAV sample claiming to contain 0 audio channels (r25831).
• [Bug] SymMOD: It was possible that a fact chunk of an embedded WAV file claimed an impossibly big sample length for an IMA ADPCM sample, causing unnecessarily large memory allocations.
• Volume column portamento effect memory was not updated properly during seeking, causing notes to continue playing at the wrong pitch.

libopenmpt 0.8.9 (2026-08-19)

• [Sec] Possible heap out-of-bounds write when loading SymMOD files containing WAV IMA ADPCM samples (r25623, r25645). See also https://github.com/OpenMPT/openmpt/security/advisories/GHSA-fxf7-wc37-p2cx
• [Sec] Possible heap out-of-bounds read when loading custom tunings from MPTM files (r25609, r25615).

libopenmpt 0.8.8 (2026-08-15)

• IT: Due to an Impulse Tracker bug in Compatible Gxx mode, Envelope Carry may not resume the envelope from the correct position when there is both an instrument number and tone portamento next to a note.
• XM: NitroTracker ignores instrument numbers where there is no note next to them, so they are no longer imported. Fixes various NitroTracker-made XMs such as notominous-a19.xm.
• STK: Loosen heuristics a bit to allow STK.CRB-GreatMuzaxs6 to load.

• GT2: Loading file versions 6 and later was broken since libopenmpt 0.8.0.

• mpg123: Update to v1.33.7 (2026-08-03).

• miniz: Update to v3.1.2 (2026-07-01).
• pugixml: Update to v1.16 (2026-06-16).

FEDORA-EPEL-2026-0892a8382c Packages in this update:

• partclone-0.3.52-1.el10_4

Update description: partclone v0.3.52

• fix(btrfs): deduplicate extents scanned more than once when building the bitmap

partclone v0.3.51

• chore(btrfs): sync with btrfs-progs v6.17.1
• Fix static linking by renaming internal crc32 to pc_crc32
• exfat: clone the last two clusters of a volume
• Add JSON status output for progress monitoring
• Fix/ntfs backup bootsector

FEDORA-2026-f6acaf8756 Packages in this update:

• perl-Net-IDN-Encode-2.600-1.fc45

Update description:

Version 2.600 of Net::IDN::Encode fixes multiple CVEs: * CVE-2026-74766, a heap use-after-free in the XS decode_punycode * CVE-2026-74765, an integer overflow and out-of-bounds read in the XS encode_punycode * CVE-2026-87078, memory leaks when the XS functions reject input * CVE-2026-87079, quadratic decoding of large labels * CVE-2026-87080, the pure-Perl decoder accepting a truncated label * CVE-2026-87081, quadratic encoding of overlong labels in to_ascii * CVE-2026-87082, the XS encode_punycode looping for ever on malformed UTF-8 input

FEDORA-2026-effb380a7c Packages in this update:

• perl-Net-IDN-Encode-2.600-1.fc44

Update description:

Version 2.600 of Net::IDN::Encode fixes multiple CVEs: * CVE-2026-74766, a heap use-after-free in the XS decode_punycode * CVE-2026-74765, an integer overflow and out-of-bounds read in the XS encode_punycode * CVE-2026-87078, memory leaks when the XS functions reject input * CVE-2026-87079, quadratic decoding of large labels * CVE-2026-87080, the pure-Perl decoder accepting a truncated label * CVE-2026-87081, quadratic encoding of overlong labels in to_ascii * CVE-2026-87082, the XS encode_punycode looping for ever on malformed UTF-8 input

FEDORA-2026-3cb8ce0117 Packages in this update:

• perl-Net-IDN-Encode-2.600-1.fc43

Update description:

Version 2.600 of Net::IDN::Encode fixes multiple CVEs: * CVE-2026-74766, a heap use-after-free in the XS decode_punycode * CVE-2026-74765, an integer overflow and out-of-bounds read in the XS encode_punycode * CVE-2026-87078, memory leaks when the XS functions reject input * CVE-2026-87079, quadratic decoding of large labels * CVE-2026-87080, the pure-Perl decoder accepting a truncated label * CVE-2026-87081, quadratic encoding of overlong labels in to_ascii * CVE-2026-87082, the XS encode_punycode looping for ever on malformed UTF-8 input

FEDORA-2026-bd36d053a1 Packages in this update:

• perl-Starlet-0.33-1.fc44

Update description:

Starlet 0.33 fixes several security issues in the Starlet code: * prevent excessive CPU use when parsing malformed chunk-size lines * bound read allocations for large Content-Length values * stream chunk data to the body buffer and limit chunk-size lines to 4096 bytes

FEDORA-2026-7d9cd72397 Packages in this update:

• perl-Starlet-0.33-1.fc45

Update description:

Starlet 0.33 fixes several security issues in the Starlet code: * prevent excessive CPU use when parsing malformed chunk-size lines * bound read allocations for large Content-Length values * stream chunk data to the body buffer and limit chunk-size lines to 4096 bytes

FEDORA-2026-092670ec3e Packages in this update:

• perl-Starlet-0.33-1.fc43

Update description:

Starlet 0.33 fixes several security issues in the Starlet code: * prevent excessive CPU use when parsing malformed chunk-size lines * bound read allocations for large Content-Length values * stream chunk data to the body buffer and limit chunk-size lines to 4096 bytes

FEDORA-EPEL-2026-559c31a5c6 Packages in this update:

• perl-Spreadsheet-XLSX-0.20-1.el10_3

Update description: Spreadsheet::XLSX 0.20

• Security: limit ZIP entry counts and uncompressed sizes; read members incrementally and reject inconsistent size metadata.
• Security: validate number format IDs and escape regex lookups to prevent regex injection from crafted styles.
• Security: reject out-of-range date values to prevent excessive CPU usage.
• Security: validate cell references against XLSX worksheet limits before indexing cell arrays, preventing excessive allocation from invalid rows.
• Improve Readme.

Spreadsheet::XLSX 0.19

• Security: replace string eval of number-format conditions with strict numeric comparisons; invalid conditions use the fallback format section. Prevents arbitrary Perl code execution when parsing crafted XLSX files.
• Add regression tests for numeric conditions and malicious XLSX formats.

FEDORA-EPEL-2026-df61aac489 Packages in this update:

• perl-Spreadsheet-XLSX-0.20-1.el10_4

Update description: Spreadsheet::XLSX 0.20

• Security: limit ZIP entry counts and uncompressed sizes; read members incrementally and reject inconsistent size metadata.
• Security: validate number format IDs and escape regex lookups to prevent regex injection from crafted styles.
• Security: reject out-of-range date values to prevent excessive CPU usage.
• Security: validate cell references against XLSX worksheet limits before indexing cell arrays, preventing excessive allocation from invalid rows.
• Improve Readme.

Spreadsheet::XLSX 0.19

• Security: replace string eval of number-format conditions with strict numeric comparisons; invalid conditions use the fallback format section. Prevents arbitrary Perl code execution when parsing crafted XLSX files.
• Add regression tests for numeric conditions and malicious XLSX formats.

FEDORA-EPEL-2026-f8a8512ba9 Packages in this update:

• perl-Spreadsheet-XLSX-0.20-1.el9

Update description: Spreadsheet::XLSX 0.20

• Security: limit ZIP entry counts and uncompressed sizes; read members incrementally and reject inconsistent size metadata.
• Security: validate number format IDs and escape regex lookups to prevent regex injection from crafted styles.
• Security: reject out-of-range date values to prevent excessive CPU usage.
• Security: validate cell references against XLSX worksheet limits before indexing cell arrays, preventing excessive allocation from invalid rows.
• Improve Readme.

Spreadsheet::XLSX 0.19

• Security: replace string eval of number-format conditions with strict numeric comparisons; invalid conditions use the fallback format section. Prevents arbitrary Perl code execution when parsing crafted XLSX files.
• Add regression tests for numeric conditions and malicious XLSX formats.

FEDORA-2026-31c16b65d1 Packages in this update:

• perl-Spreadsheet-XLSX-0.20-1.fc45

Update description: Spreadsheet::XLSX 0.20

• Security: limit ZIP entry counts and uncompressed sizes; read members incrementally and reject inconsistent size metadata.
• Security: validate number format IDs and escape regex lookups to prevent regex injection from crafted styles.
• Security: reject out-of-range date values to prevent excessive CPU usage.
• Security: validate cell references against XLSX worksheet limits before indexing cell arrays, preventing excessive allocation from invalid rows.
• Improve Readme.

Spreadsheet::XLSX 0.19

• Security: replace string eval of number-format conditions with strict numeric comparisons; invalid conditions use the fallback format section. Prevents arbitrary Perl code execution when parsing crafted XLSX files.
• Add regression tests for numeric conditions and malicious XLSX formats.

FEDORA-EPEL-2026-c5b953f3f4 Packages in this update:

• perl-Spreadsheet-XLSX-0.20-1.el8

Update description: Spreadsheet::XLSX 0.20

• Security: limit ZIP entry counts and uncompressed sizes; read members incrementally and reject inconsistent size metadata.
• Security: validate number format IDs and escape regex lookups to prevent regex injection from crafted styles.
• Security: reject out-of-range date values to prevent excessive CPU usage.
• Security: validate cell references against XLSX worksheet limits before indexing cell arrays, preventing excessive allocation from invalid rows.
• Improve Readme.

Spreadsheet::XLSX 0.19

• Security: replace string eval of number-format conditions with strict numeric comparisons; invalid conditions use the fallback format section. Prevents arbitrary Perl code execution when parsing crafted XLSX files.
• Add regression tests for numeric conditions and malicious XLSX formats.

FEDORA-2026-e5d1978e9d Packages in this update:

• perl-Spreadsheet-XLSX-0.20-1.fc44

Update description: Spreadsheet::XLSX 0.20

• Security: limit ZIP entry counts and uncompressed sizes; read members incrementally and reject inconsistent size metadata.
• Security: validate number format IDs and escape regex lookups to prevent regex injection from crafted styles.
• Security: reject out-of-range date values to prevent excessive CPU usage.
• Security: validate cell references against XLSX worksheet limits before indexing cell arrays, preventing excessive allocation from invalid rows.
• Improve Readme.

Spreadsheet::XLSX 0.19

• Security: replace string eval of number-format conditions with strict numeric comparisons; invalid conditions use the fallback format section. Prevents arbitrary Perl code execution when parsing crafted XLSX files.
• Add regression tests for numeric conditions and malicious XLSX formats.

FEDORA-2026-0942a5b9ea Packages in this update:

• perl-Spreadsheet-XLSX-0.20-1.fc43

Update description: Spreadsheet::XLSX 0.20

• Security: limit ZIP entry counts and uncompressed sizes; read members incrementally and reject inconsistent size metadata.
• Security: validate number format IDs and escape regex lookups to prevent regex injection from crafted styles.
• Security: reject out-of-range date values to prevent excessive CPU usage.
• Security: validate cell references against XLSX worksheet limits before indexing cell arrays, preventing excessive allocation from invalid rows.
• Improve Readme.

Spreadsheet::XLSX 0.19

• Security: replace string eval of number-format conditions with strict numeric comparisons; invalid conditions use the fallback format section. Prevents arbitrary Perl code execution when parsing crafted XLSX files.
• Add regression tests for numeric conditions and malicious XLSX formats.

FEDORA-EPEL-2026-d0dc9bdb00 Packages in this update:

• perl-Spreadsheet-XLSX-0.20-1.el10_2

Update description: Spreadsheet::XLSX 0.20

• Security: limit ZIP entry counts and uncompressed sizes; read members incrementally and reject inconsistent size metadata.
• Security: validate number format IDs and escape regex lookups to prevent regex injection from crafted styles.
• Security: reject out-of-range date values to prevent excessive CPU usage.
• Security: validate cell references against XLSX worksheet limits before indexing cell arrays, preventing excessive allocation from invalid rows.
• Improve Readme.

Spreadsheet::XLSX 0.19

• Security: replace string eval of number-format conditions with strict numeric comparisons; invalid conditions use the fallback format section. Prevents arbitrary Perl code execution when parsing crafted XLSX files.
• Add regression tests for numeric conditions and malicious XLSX formats.