Fedora Security Advisories

• freerdp-3.33.1-1.fc45

Update to 3.33.1

Enable the XDG AAD authentication helper.

• freerdp-3.33.1-1.fc44

Update to 3.33.1

Enable the XDG AAD authentication helper.

Update to 3.33.0

• freerdp-3.33.1-1.fc43

Update to 3.33.1

Enable the XDG AAD authentication helper.

Update to 3.33.0

• perl-Imager-1.041-1.fc43

6 CVEs fixed across versions 1.037–1.041: - CVE-2026-124720 (TGA memory leak) - CVE-2026-124721 (PNG file limit checks) - CVE-2026-124722 (PNM file limit checks) - CVE-2026-112202 (GIF malloc buffer read overflow) - CVE-2026-102504 (RAW: out-of-range channel count DoS) - CVE-2026-102505 (heap buffer overflow in paletted image getsamples)

• perl-Imager-1.041-1.fc44

6 CVEs fixed across versions 1.037–1.041: - CVE-2026-124720 (TGA memory leak) - CVE-2026-124721 (PNG file limit checks) - CVE-2026-124722 (PNM file limit checks) - CVE-2026-112202 (GIF malloc buffer read overflow) - CVE-2026-102504 (RAW: out-of-range channel count DoS) - CVE-2026-102505 (heap buffer overflow in paletted image getsamples)

• perl-Imager-1.041-1.fc45

6 CVEs fixed across versions 1.037–1.041: - CVE-2026-124720 (TGA memory leak) - CVE-2026-124721 (PNG file limit checks) - CVE-2026-124722 (PNM file limit checks) - CVE-2026-112202 (GIF malloc buffer read overflow) - CVE-2026-102504 (RAW: out-of-range channel count DoS) - CVE-2026-102505 (heap buffer overflow in paletted image getsamples)

• xen-4.21.2-7.fc45

AMD IOMMU Out-of-Bounds Device Table Read [XSA-524, CVE-2024-21963] x86: Transient Scheduler Attacks (update) [XSA-525, CVE-2024-36350, CVE-2024-36357, CVE-2026-0004] update to xen-4.21.2

• passwordsafe-1.26.1-1.fc45

• Security: Random seed generation for Mac and BSD-derived system (e.g., FreeBSD, OpenBSD, NetBSD) is improved. If you're using a database created on one of these operating systems, you should open and then save it with this version (or later), and delete all backups.
• When dragging an entry with a named password policy between instances (drag & drop), the named policy is now added correctly to the receiver.
• It's now possible to remove a malformed filter that's stored in the database by clicking on "No" in the error message.
• Notes no longer scroll to the bottom when an entry is opened with "Show Notes in Edit" enabled.

• passwordsafe-1.26.1-1.fc44

• Security: Random seed generation for Mac and BSD-derived system (e.g., FreeBSD, OpenBSD, NetBSD) is improved. If you're using a database created on one of these operating systems, you should open and then save it with this version (or later), and delete all backups.
• When dragging an entry with a named password policy between instances (drag & drop), the named policy is now added correctly to the receiver.
• It's now possible to remove a malformed filter that's stored in the database by clicking on "No" in the error message.
• Notes no longer scroll to the bottom when an entry is opened with "Show Notes in Edit" enabled.

• firefox-160.0-1.fc45

• Updated to latest upstream (160.0)

• firefox-160.0-1.fc44

• Updated to latest upstream (160.0)

• firefox-160.0-1.fc43

• Updated to latest upstream (160.0)

• libosmocore-1.14.2-2.fc43

This is an update fixing CVE-2026-104591, CVE-2026-104592, CVE-2026-104594, CVE-2026-104596, CVE-2026-104597.

• libosmocore-1.14.2-2.fc44

This is an update fixing CVE-2026-104591, CVE-2026-104592, CVE-2026-104594, CVE-2026-104596, CVE-2026-104597.

• libosmocore-1.14.2-2.fc45

This is an update fixing CVE-2026-104591, CVE-2026-104592, CVE-2026-104594, CVE-2026-104596, CVE-2026-104597.

• xorg-x11-server-Xwayland-24.1.15-1.fc43

Update to xwayland 24.1.15 CVE fix for: CVE-2026-109092, CVE-2026-109093, CVE-2026-109904, CVE-2026-109094, CVE-2026-109095, CVE-2026-109096, CVE-2026-109903

• msedit-1.2.0^1.e16b4ab-8.el10_3

Rebuild to address multiple security advisories in zstd / zstd-safe

• xorg-x11-server-Xwayland-24.1.15-1.fc44

Update to xwayland 24.1.15 CVE fix for: CVE-2026-109092, CVE-2026-109093, CVE-2026-109904, CVE-2026-109094, CVE-2026-109095, CVE-2026-109096, CVE-2026-109903

• xorg-x11-server-Xwayland-24.1.15-1.fc45

Update to xwayland 24.1.15 CVE fix for: CVE-2026-109092, CVE-2026-109093, CVE-2026-109904, CVE-2026-109094, CVE-2026-109095, CVE-2026-109096, CVE-2026-109903

• msedit-1.2.0^1.e16b4ab-8.el10_4

Rebuild to address multiple security advisories in zstd / zstd-safe