Fedora Security Advisories

• librabbitmq-0.18.1-1.fc44

• Fix heap buffer over-read in amqp_read_message when a content header frame with a non-basic class id is received; AMQP_STATUS_BAD_AMQP_DATA is now returned (found by OSS-Fuzz)

• Add fuzz_read_message OSS-Fuzz fuzzer target for socket message reading

• librabbitmq-0.18.1-1.fc43

• Fix heap buffer over-read in amqp_read_message when a content header frame with a non-basic class id is received; AMQP_STATUS_BAD_AMQP_DATA is now returned (found by OSS-Fuzz)

• Add fuzz_read_message OSS-Fuzz fuzzer target for socket message reading

• librabbitmq-0.18.1-1.fc45

• Fix heap buffer over-read in amqp_read_message when a content header frame with a non-basic class id is received; AMQP_STATUS_BAD_AMQP_DATA is now returned (found by OSS-Fuzz)

• Add fuzz_read_message OSS-Fuzz fuzzer target for socket message reading

• chromium-155.0.8059.39-1.el10_3

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

• chromium-155.0.8059.39-1.el10_4

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

• chromium-155.0.8059.39-1.fc43

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

• chromium-155.0.8059.39-1.fc44

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

• chromium-155.0.8059.39-1.el9

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

• chromium-155.0.8059.39-1.el10_2

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

• chromium-155.0.8059.39-1.fc45

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

• curl-8.18.0-14.fc44

• Fix incomplete mTLS config matching in conn reuse (CVE-2026-8932)
• Fix OpenLDAP SASL authentication bypass (CVE-2026-13608)
• Fix OpenSSL pinning bypass (CVE-2026-80230)

• flare-im-0.22.4-1.fc45

Update to latest upstream security release. Fixes an impersonation vulnerability in libsignal-service-rs. See: https://gitlab.com/schmiddi-on-mobile/flare/-/releases/0.22.4 .

• flare-im-0.22.4-1.fc44

Update to latest upstream security release. Fixes an impersonation vulnerability in libsignal-service-rs. See: https://gitlab.com/schmiddi-on-mobile/flare/-/releases/0.22.4 .

• flare-im-0.22.4-1.fc43

Update to latest upstream security release. Fixes an impersonation vulnerability in libsignal-service-rs. See: https://gitlab.com/schmiddi-on-mobile/flare/-/releases/0.22.4 .

• libpng12-1.2.57-27.fc44

• fixes CVE-2025-64505 and CVE-2026-33416

• libpng12-1.2.57-27.fc45

• fixes CVE-2025-64505 and CVE-2026-33416

• libpng12-1.2.57-27.fc43

• fixes CVE-2025-64505 and CVE-2026-33416

• libpng15-1.5.30-27.fc43

• fixes CVE-2025-64505 and CVE-2026-33416

• libpng15-1.5.30-27.fc44

• fixes CVE-2025-64505 and CVE-2026-33416

• libpng15-1.5.30-27.fc45

• fixes CVE-2025-64505 and CVE-2026-33416