Fedora Security Advisories

FEDORA-2026-2a6ce5b288 Packages in this update:

• janus-1.4.2-1.fc43

Update description:

Update to upstream v1.4.2 (security release).

• Fix AudioBridge recordings bypassing protected folders (PR #3676)
• Fix missing protocol allowlist when using libcurl in Streaming/TextRoom plugins (PR #3677)
• Better enforcement of max publishers in VideoRoom (PR #3678)
• Validate list of usernames in TextRoom batch message (PR #3679)
• Use size_t in strings replace helper (PR #3680)
• Fix removal from wrong hashtable in SIP and NoSIP plugins (PR #3681)
• Add cap to helper threads in Streaming and VideoRoom plugins (PR #3682)
• Fixed memory leaks in loop allocation and ICE agent disposal (PR #3665, PR #3666)
• Fixed rare crash in AudioBridge plugin (PR #3664)
• Fixed one way audio after a long hold in the SIP plugin (PR #3640)
• Bumped API version patch to 11 (JANUS_VERSION_SO 2:11:0)

FEDORA-2026-256bf09e34 Packages in this update:

• janus-1.4.2-1.fc44

Update description:

Update to upstream v1.4.2 (security release).

• Fix AudioBridge recordings bypassing protected folders (PR #3676)
• Fix missing protocol allowlist when using libcurl in Streaming/TextRoom plugins (PR #3677)
• Better enforcement of max publishers in VideoRoom (PR #3678)
• Validate list of usernames in TextRoom batch message (PR #3679)
• Use size_t in strings replace helper (PR #3680)
• Fix removal from wrong hashtable in SIP and NoSIP plugins (PR #3681)
• Add cap to helper threads in Streaming and VideoRoom plugins (PR #3682)
• Fixed memory leaks in loop allocation and ICE agent disposal (PR #3665, PR #3666)
• Fixed rare crash in AudioBridge plugin (PR #3664)
• Fixed one way audio after a long hold in the SIP plugin (PR #3640)
• Bumped API version patch to 11 (JANUS_VERSION_SO 2:11:0)

FEDORA-2026-d58d30885a Packages in this update:

• janus-1.4.2-1.fc45

Update description:

Update to upstream v1.4.2 (security release).

• Fix AudioBridge recordings bypassing protected folders (PR #3676)
• Fix missing protocol allowlist when using libcurl in Streaming/TextRoom plugins (PR #3677)
• Better enforcement of max publishers in VideoRoom (PR #3678)
• Validate list of usernames in TextRoom batch message (PR #3679)
• Use size_t in strings replace helper (PR #3680)
• Fix removal from wrong hashtable in SIP and NoSIP plugins (PR #3681)
• Add cap to helper threads in Streaming and VideoRoom plugins (PR #3682)
• Fixed memory leaks in loop allocation and ICE agent disposal (PR #3665, PR #3666)
• Fixed rare crash in AudioBridge plugin (PR #3664)
• Fixed one way audio after a long hold in the SIP plugin (PR #3640)
• Bumped API version patch to 11 (JANUS_VERSION_SO 2:11:0)

FEDORA-2026-6debf34169 Packages in this update:

• musescore-4.7.5-3.fc44

Update description:

This build adds a patch to fix CVE-2026-61714.

FEDORA-2026-e5a087cb33 Packages in this update:

• musescore-4.7.5-3.fc45

Update description:

This build adds a patch to fix CVE-2026-61714.

FEDORA-EPEL-2026-d688c1b291 Packages in this update:

• djvulibre-3.5.29-1.el10_4

Update description:

Update to 3.5.29 to fix CVE-2025-53367.

FEDORA-2026-203e30f5d8 Packages in this update:

• golang-x-mod-0.27.0-4.fc43

Update description:

Rebuild for security fixes

FEDORA-2026-9626645a48 Packages in this update:

• golang-x-mod-0.28.0-5.fc44

Update description:

Rebuild for security fixes

FEDORA-2026-e1cac11588 Packages in this update:

• xdg-dbus-proxy-0.1.9-1.fc43

Update description:

Update to 0.1.9

FEDORA-2026-93f562a43f Packages in this update:

• xdg-dbus-proxy-0.1.9-1.fc44

Update description:

Update to 0.1.9

FEDORA-2026-f10257ca80 Packages in this update:

• xdg-dbus-proxy-0.1.9-1.fc45

Update description:

Update to 0.1.9

FEDORA-2026-3e109a0c85 Packages in this update:

• ffmpeg-8.1.3-1.fc44

Update description:

Latest upstream bugfix release from 8.1 branch. Changes: https://code.ffmpeg.org/FFmpeg/FFmpeg/src/branch/release/8.1/Changelog .

FEDORA-EPEL-2026-c4d340d432 Packages in this update:

• chromium-154.0.8037.57-1.el10_2

Update description:

Update to 154.0.8037.57

CVE-2026-95274: Improper output encoding in DevTools CVE-2026-95275: Incorrect reference resolution in MediaStream CVE-2026-95276: Improper input validation in Themes CVE-2026-95277: Use after free in Views CVE-2026-95278: Missing authorization in WakeLock CVE-2026-95279: UI misrepresentation in Omnibox CVE-2026-95280: Race condition in V8 CVE-2026-95281: Buffer overflow in ANGLE CVE-2026-95282: Use after free in Platform CVE-2026-95283: Buffer overflow in Tint CVE-2026-95284: Buffer overflow in ANGLE CVE-2026-95285: Missing authorization in WebView CVE-2026-95286: Type confusion in Bindings CVE-2026-95287: Missing authorization in Navigation CVE-2026-95288: UI misrepresentation in Mobile CVE-2026-95289: Incorrect authorization in Scroll CVE-2026-95290: Missing authorization in NFC CVE-2026-95291: UI misrepresentation in SecurityIndicators CVE-2026-95292: Incorrect authorization in Safebrowsing CVE-2026-95293: Uninitialized resource in GPU CVE-2026-95294: UI misrepresentation in Browser CVE-2026-95295: Information leak in Mobile CVE-2026-95296: Missing authorization in Core CVE-2026-95297: Missing authorization in Contextual Tasks CVE-2026-95298: Use after free in Browser CVE-2026-95299: Use after free in GPU CVE-2026-95300: Missing authorization in DevTools CVE-2026-95301: Missing authorization in Extensions CVE-2026-95302: Incorrect authorization in WebAPKs CVE-2026-95303: Incomplete cleanup in SmartCard CVE-2026-95304: Out of bounds write in V8 CVE-2026-95305: UI misrepresentation in Chromoting CVE-2026-95306: Type confusion in V8 CVE-2026-95307: UI misrepresentation in ExtensionsMenu CVE-2026-95308: Integer overflow in Metrics CVE-2026-95309: UI misrepresentation in Mobile CVE-2026-95310: Use after free in AdFilter CVE-2026-95311: Free of non-heap memory in Fonts CVE-2026-95312: Information leak in Passwords CVE-2026-95313: Use after free in Fullscreen CVE-2026-95314: Incorrect authorization in HID CVE-2026-95315: Use after free in Aura CVE-2026-95316: Unchecked return value in Performance CVE-2026-95317: Incorrect authorization in MediaCapture CVE-2026-95318: Buffer overflow in Video CVE-2026-95319: Use after free in Printing CVE-2026-95320: Missing authorization in Navigation CVE-2026-95321: UI misrepresentation in Payments CVE-2026-95322: Out of bounds write in GPU CVE-2026-95323: UI misrepresentation in Chromium CVE-2026-95324: Uninitialized resource in GPU CVE-2026-95325: Use after free in ANGLE CVE-2026-95326: Incomplete cleanup in Bluetooth CVE-2026-95327: Information leak in Networking CVE-2026-95328: Confused deputy in Mobile CVE-2026-95329: Out of bounds write in WebGL CVE-2026-95330: Improper state validation in Downloads CVE-2026-95331: Out of bounds write in ANGLE CVE-2026-95332: Use of uninitialized variable in Tint CVE-2026-95333: Use after free in Metrics CVE-2026-95334: Incorrect reference resolution in WebProtect CVE-2026-95335: Use after free in HID CVE-2026-95336: Information leak in Transactions Platform CVE-2026-95337: UI misrepresentation in Messages CVE-2026-95338: Use after free in PDFium CVE-2026-95339: Use after free in ServiceWorker CVE-2026-95340: Incorrect authorization in PictureInPicture CVE-2026-95341: Improper input validation in Desktop CVE-2026-95342: Missing authorization in V8 CVE-2026-95343: Use after free in WebAudio CVE-2026-95344: Race condition in DevTools CVE-2026-95345: Use after free in Actor CVE-2026-95346: UI misrepresentation in Chromoting CVE-2026-95347: Use after free in Updater CVE-2026-95348: Use after free in Bluetooth CVE-2026-95349: Buffer overflow in WebGL CVE-2026-95350: Buffer overflow in ANGLE CVE-2026-95351: Use after free in Views CVE-2026-95352: Incorrect authorization in DevTools CVE-2026-95353: Use after free in Bindings CVE-2026-95354: Use after free in Verifier CVE-2026-95355: Incorrect authorization in Navigation CVE-2026-95356: Use after free in WindowDialog CVE-2026-95357: Out of bounds write in GPU CVE-2026-95358: Incorrect authorization in Mobile CVE-2026-95359: Uninitialized resource in GPU CVE-2026-95360: Race condition in Editing CVE-2026-95361: Confused deputy in DevTools CVE-2026-95362: Cross-site request forgery in DevTools CVE-2026-95363: UI misrepresentation in FileSystem CVE-2026-95364: Improper input validation in Passwords CVE-2026-95365: Type confusion in IndexedDB CVE-2026-95366: Use of released resource in Core CVE-2026-95367: Information leak in DataTransfer CVE-2026-95368: Incorrect authorization in DevTools CVE-2026-95369: Inappropriate implementation in XML CVE-2026-95370: Inappropriate implementation in NFC CVE-2026-95371: Missing authorization in Views CVE-2026-95372: Use after free in Chromecast CVE-2026-95373: Use after free in DevTools CVE-2026-95374: Incorrect authorization in Network CVE-2026-95375: Incorrect authorization in BrowserTag CVE-2026-95376: Externally controlled reference in DevTools CVE-2026-95380: Type confusion in V8 CVE-2026-95381: Improper input validation in Printing CVE-2026-95382: Improper input validation in Auth CVE-2026-95384: Race condition in Transactions Platform CVE-2026-95385: Inappropriate implementation in PlatformIntegration

FEDORA-EPEL-2026-e47857b934 Packages in this update:

• python-engineio-4.12.3-2.el9
• python-simple-websocket-1.0.0-8.el9

Update description:

Update python-engineio to 4.12.3, which is not the latest version but is the latest version that could be reasonably backported to EPEL9. This required branching a new package for python-simple-websocket 1.0.0 – again, not quite the latest version. Furthermore, this update includes a backport from versions 4.13.2 and 4.13.5 of the fixes for CVE-2026-48802 and CVE-2026-48809.

FEDORA-2026-0025579bc9 Packages in this update:

• cri-o1.36-1.36.6-1.fc43

Update description:

• Update to release v1.36.6
• Resolves: rhbz#2537559
• Resolves CVE-2026-17113: rhbz#2523493
• Resolves: rhbz#2540885

FEDORA-2026-f5c88f763a Packages in this update:

• cri-o1.36-1.36.6-1.fc44

Update description:

• Update to release v1.36.6
• Resolves: rhbz#2537559
• Resolves CVE-2026-17113: rhbz#2523493
• Resolves: rhbz#2540885

FEDORA-2026-77abfa2cdd Packages in this update:

• cri-o1.36-1.36.6-1.fc45

Update description:

• Update to release v1.36.6
• Resolves: rhbz#2537559
• Resolves CVE-2026-17113: rhbz#2523493
• Resolves: rhbz#2540885

FEDORA-2026-05f65b07d7 Packages in this update:

• cri-o1.36-1.36.6-1.fc46

Update description:

Automatic update for cri-o1.36-1.36.6-1.fc46.

Changelog * Sun Sep 27 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 1.36.6-1 - Update to release v1.36.6 - Resolves: rhbz#2537559 - Resolves CVE-2026-17113: rhbz#2523493 - Resolves: rhbz#2540885 * Sun Sep 27 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 1.36.5-2 - Define --pinns_path - pinns_path is set to the libexec path for pinns

FEDORA-2026-77f6cda09a Packages in this update:

• ruff-0.16.9-1.fc46
• rust-salsa-0.28.5-1.fc46
• rust-salsa-macro-rules-0.28.5-1.fc46
• rust-salsa-macros-0.28.5-1.fc46
• ty-0.0.84-1.fc46

Update description:

Update the salsa/salsa-macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA-xc3w-55vh-cw3w.

Update ruff to 0.16.9 and ty to 0.0.84, fixing GHSA-vxvm-j4xq-q7m4, which could result in arbitrary code execution when typechecking untrusted code.

FEDORA-2026-c213ad9471 Packages in this update:

• nagios-plugins-2.5-2.fc45

Update description:

Update to upstream (bz#2453492) check_icmp: host-count overflow leads to heap buffer overflow (bz#2513957) Update 0012-fix-perl-ntp-ipv6.patch to allow uppercase hostnames (bz#2500542) Added perl-Math-BigInt as dependency for nagios-plugins-ssl_validity (bz#2439960)