Fedora Security Advisories

FEDORA-2026-c079fc3c0b Packages in this update:

• openbao-2.6.4-1.fc44

Update description:

Update to upstream 2.6.4. Includes multiple GHSA security notices, see https://github.com/openbao/openbao/releases/tag/v2.6.4

Update to 2.6.3-2. Fixes privilege problem in the service file and cleans up default configuration file.

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-2026-c0f7a19ee3 Packages in this update:

• openbao-2.6.4-1.fc45

Update description:

Update to upstream 2.6.4. Includes multiple GHSA security notices, see https://github.com/openbao/openbao/releases/tag/v2.6.4

Update to 2.6.3-2. Fixes privilege problem in the service file and cleans up default configuration file.

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

FEDORA-EPEL-2026-be34e6a49a Packages in this update:

• openbao-2.6.4-1.el8

Update description:

Update to upstream 2.6.4. Includes multiple GHSA security notices, see https://github.com/openbao/openbao/releases/tag/v2.6.4

FEDORA-EPEL-2026-c45a714e8d Packages in this update:

• openbao-2.6.4-1.el10_3

Update description:

Update to upstream 2.6.4. Includes multiple GHSA security notices, see https://github.com/openbao/openbao/releases/tag/v2.6.4

FEDORA-EPEL-2026-46350ad475 Packages in this update:

• openbao-2.6.4-1.el9

Update description:

Update to upstream 2.6.4. Includes multiple GHSA security notices, see https://github.com/openbao/openbao/releases/tag/v2.6.4

FEDORA-EPEL-2026-32677c15c7 Packages in this update:

• openbao-2.6.4-1.el10_4

Update description:

Update to upstream 2.6.4. Includes multiple GHSA security notices, see https://github.com/openbao/openbao/releases/tag/v2.6.4

FEDORA-EPEL-2026-96afd3621b Packages in this update:

• openbao-2.6.4-1.el10_2

Update description:

Update to upstream 2.6.4. Includes multiple GHSA security notices, see https://github.com/openbao/openbao/releases/tag/v2.6.4

FEDORA-2026-12caf78d6a Packages in this update:

• openbao-2.6.4-1.fc43

Update description:

Update to upstream 2.6.4. Includes multiple GHSA security notices, see https://github.com/openbao/openbao/releases/tag/v2.6.4

FEDORA-2026-0510f0e866 Packages in this update:

• virt-v2v-2.13.7-1.fc45

Update description:

New upstream development version 2.13.7

FEDORA-2026-d1b26c4745 Packages in this update:

• docker-buildx-0.37.2-1.fc43

Update description:

• Update to release v0.37.2
• Resolves: rhbz#2544198
• Resolves CVE-2026-56855: rhbz#2530594
• resolves CVE-2026-78662: rhbz#2530802
• Upstream fix

FEDORA-2026-af9902ab5e Packages in this update:

• docker-buildx-0.37.2-1.fc44

Update description:

• Update to release v0.37.2
• Resolves: rhbz#2544198
• Resolves CVE-2026-56855: rhbz#2530594
• resolves CVE-2026-78662: rhbz#2530802
• Upstream fix

FEDORA-2026-71df118e18 Packages in this update:

• php-getid3-1.9.27-1.fc44

Update description: Version 1.9.27: [2026-09-22]

• GHSA-c2xw-vp6w-gpph compressed ID3v2 frames max length
• GHSA-j649-xr34-mmmh remove LIBXML_NOENT
• embedded picture in WMA files is corrupt
• silent failure of @libxml_disable_entity_loader() enables XXE

FEDORA-2026-6ef35023a5 Packages in this update:

• php-getid3-1.9.27-1.fc45

Update description: Version 1.9.27: [2026-09-22]

• GHSA-c2xw-vp6w-gpph compressed ID3v2 frames max length
• GHSA-j649-xr34-mmmh remove LIBXML_NOENT
• embedded picture in WMA files is corrupt
• silent failure of @libxml_disable_entity_loader() enables XXE

FEDORA-2026-b9ef1180ce Packages in this update:

• php-getid3-1.9.27-1.fc43

Update description: Version 1.9.27: [2026-09-22]

• GHSA-c2xw-vp6w-gpph compressed ID3v2 frames max length
• GHSA-j649-xr34-mmmh remove LIBXML_NOENT
• embedded picture in WMA files is corrupt
• silent failure of @libxml_disable_entity_loader() enables XXE

FEDORA-EPEL-2026-e0e0737425 Packages in this update:

• GitPython-3.2.0-1.el9

Update description:

Update to 3.2.0

Fixes GHSA-gq48-pqfc-9p58, GHSA-23mf-xhv8-69c2, GHSA-f9j4-qggq-h239, GHSA-w8jc-g24h-crhw, GHSA-m64x-33q8-m5h7, and GHSA-fx3j-rwgx-fr94.

FEDORA-2026-cf9ac55adc Packages in this update:

• dhcpcd-10.5.2-1.fc43

Update description:

• Update to 10.5.2 (rhbz#2511521)

FEDORA-2026-c39845b961 Packages in this update:

• dhcpcd-10.5.2-1.fc44

Update description:

• Update to 10.5.2 (rhbz#2511521)

FEDORA-2026-f6c24b91ee Packages in this update:

• dhcpcd-10.5.2-1.fc45

Update description:

• Update to 10.5.2 (rhbz#2511521)

FEDORA-2026-59c42d53ab Packages in this update:

• docker-buildx-0.37.2-1.fc45

Update description:

• Update to release v0.37.2
• Resolves: rhbz#2544198
• Resolves CVE-2026-56855: rhbz#2530594
• resolves CVE-2026-78662: rhbz#2530802
• Upstream fix

FEDORA-2026-934d570022 Packages in this update:

• docker-buildx-0.37.2-1.fc46

Update description:

Automatic update for docker-buildx-0.37.2-1.fc46.

Changelog * Wed Sep 30 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 0.37.2-1 - Update to release v0.37.2 - Resolves: rhbz#2544198 - Resolves CVE-2026-56855: rhbz#2530594 - resolves CVE-2026-78662: rhbz#2530802 - Upstream fix