Fedora Security Advisories

FEDORA-2026-e39b376e66 Packages in this update:

• perl-DBI-1.654-1.fc44

Update description:

1.654 bump

Fix CVE-2026-88815 (DBI::sql_type_cast on IV/NV) Fix CVE-2026-88816 (FetchHashKeyName on IV/NV)

FEDORA-2026-dc85e47244 Packages in this update:

• perl-DBI-1.654-1.fc43

Update description:

1.654 bump

Fix CVE-2026-88815 (DBI::sql_type_cast on IV/NV) Fix CVE-2026-88816 (FetchHashKeyName on IV/NV)

FEDORA-2026-2e78b6b58e Packages in this update:

• perl-DBI-1.654-1.fc45

Update description:

1.654 bump

Fix CVE-2026-88815 (DBI::sql_type_cast on IV/NV) Fix CVE-2026-88816 (FetchHashKeyName on IV/NV)

FEDORA-2026-d51a33b2f5 Packages in this update:

• freerdp-3.32.1-1.fc43

Update description:

Update to 3.32.1

Update to 3.32.0

FEDORA-2026-9aca5215f2 Packages in this update:

• freerdp-3.32.1-1.fc44

Update description:

Update to 3.32.1

Update to 3.32.0

FEDORA-2026-1d8e7b0fd5 Packages in this update:

• freerdp-3.32.1-1.fc45

Update description:

Update to 3.32.1

FEDORA-2026-cf80902877 Packages in this update:

• sos-4.12.0-2.fc45

Update description: Security fix for CVE-2026-79655

Fixes a path traversal vulnerability in sos clean tar extraction where unvalidated symlink and hardlink targets could lead to arbitrary file writes during archive processing.

FEDORA-2026-594e78463a Packages in this update:

• sos-4.12.0-2.fc44

Update description: Security fix for CVE-2026-79655

Fixes a path traversal vulnerability in sos clean tar extraction where unvalidated symlink and hardlink targets could lead to arbitrary file writes during archive processing.

FEDORA-2026-51eb024b20 Packages in this update:

• sos-4.12.0-2.fc43

Update description: Security fix for CVE-2026-79655

Fixes a path traversal vulnerability in sos clean tar extraction where unvalidated symlink and hardlink targets could lead to arbitrary file writes during archive processing.

FEDORA-2026-55bfd55650 Packages in this update:

• sos-4.12.0-2.fc46

Update description:

Automatic update for sos-4.12.0-2.fc46.

Changelog * Tue Sep 29 2026 Sandro Bonazzola <sbonazzo@redhat.com> - 4.12.0-2 - Fix cleaner to refuse out-of-tree tar members - Patches to fix cleaner refuse out of tree tar members on extract {CVE-2026-79655} - Resolves: fedora#2523430

FEDORA-2026-c2e8136fc5 Packages in this update:

• Lmod-9.4.2-1.fc43

Update description:

Update to 9.4.2 (CVE-2026-85013)

FEDORA-2026-969cb69eb4 Packages in this update:

• Lmod-9.4.2-1.fc44

Update description:

Update to 9.4.2 (CVE-2026-85013)

FEDORA-2026-bf8b87b8f5 Packages in this update:

• Lmod-9.4.2-1.fc45

Update description:

Update to 9.4.2 (CVE-2026-85013)

FEDORA-2026-cc5ec6cb1f Packages in this update:

• ImageMagick-7.1.2.32-1.fc45

Update description:

Automatic update for ImageMagick-7.1.2.32-1.fc45.

Changelog for ImageMagick * Mon Sep 28 2026 Luya Tshimbalanga <luya@fedoraproject.org> - 1:7.1.2.32-1 - Update to version 7.1.2.32 - Resolves: rhbz#2542068 * Wed Sep 23 2026 Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 1:7.1.2.31-2 - Rebuilt for libxml-2.15.4

FEDORA-2026-c836eb1b43 Packages in this update:

• cinnamon-6.7.8^unstable-3.fc45
• xdotool-4.20260303.1-1.fc45

Update description:

Rebuild for new libxdo .so version

FEDORA-EPEL-2026-0891129b6b Packages in this update:

• vlc-3.0.24-1.el10_2

Update description:

VLC 3.0.24: https://code.videolan.org/videolan/vlc/-/tags/3.0.24

• Switch GUI to Qt6 (not for EPEL9)
• Re-enable AS-DCP plugin
• Disable RDP plugin
• Disable Real RTSP plugin

FEDORA-2026-5c70f0bfac Packages in this update:

• vlc-3.0.24-1.fc43

Update description:

VLC 3.0.24: https://code.videolan.org/videolan/vlc/-/tags/3.0.24

• Switch GUI to Qt6 (not for EPEL9)
• Re-enable AS-DCP plugin
• Disable RDP plugin
• Disable Real RTSP plugin

FEDORA-EPEL-2026-8ce56f7e4a Packages in this update:

• vlc-3.0.24-1.el10_3

Update description:

VLC 3.0.24: https://code.videolan.org/videolan/vlc/-/tags/3.0.24

• Switch GUI to Qt6 (not for EPEL9)
• Re-enable AS-DCP plugin
• Disable RDP plugin
• Disable Real RTSP plugin

FEDORA-2026-1dc7e0c158 Packages in this update:

• noctalia-5.2.0-1.fc45

Update description:

Update to version 5.2.0.

https://github.com/noctalia-dev/noctalia/releases/tag/v5.2.0

FEDORA-2026-2a6ce5b288 Packages in this update:

• janus-1.4.2-1.fc43

Update description:

Update to upstream v1.4.2 (security release).

• Fix AudioBridge recordings bypassing protected folders (PR #3676)
• Fix missing protocol allowlist when using libcurl in Streaming/TextRoom plugins (PR #3677)
• Better enforcement of max publishers in VideoRoom (PR #3678)
• Validate list of usernames in TextRoom batch message (PR #3679)
• Use size_t in strings replace helper (PR #3680)
• Fix removal from wrong hashtable in SIP and NoSIP plugins (PR #3681)
• Add cap to helper threads in Streaming and VideoRoom plugins (PR #3682)
• Fixed memory leaks in loop allocation and ICE agent disposal (PR #3665, PR #3666)
• Fixed rare crash in AudioBridge plugin (PR #3664)
• Fixed one way audio after a long hold in the SIP plugin (PR #3640)
• Bumped API version patch to 11 (JANUS_VERSION_SO 2:11:0)