Fedora Security Advisories

aws-26.0.0-5.fc44

Fedora Security Advisories
2 days 17 hours ago
FEDORA-2026-3a9945b706 Packages in this update:
  • aws-26.0.0-5.fc44
Update description:

This is a backported fix for the path traversal vulnerability AWS-0175.

tpm2-tss-4.1.6-1.fc44

Fedora Security Advisories
2 days 20 hours ago
FEDORA-2026-63ebc7d33c Packages in this update:
  • tpm2-tss-4.1.6-1.fc44
Update description:

Security

GHSA-89w7-5q38-fgm3 CVE-ID requested

Fixes

mu: fix offset of NULL in TPMS_EMPTY marshalling ESYS: avoid zero-length VLA in iesys_decrypt_param SAPI: fix alignment of the response parameter pointer FAPI: Prevent count underflow in POLICYNAMEHASH instantiation FAPI: Reject out-of-range PCR indices in policy JSON deserialization TCTI: Reject undersized TPM responses in swtpm receive path FAPI: fix oob access of policy during name hash calculation

tpm2-tss-4.1.6-1.fc43

Fedora Security Advisories
2 days 20 hours ago
FEDORA-2026-5d641a851f Packages in this update:
  • tpm2-tss-4.1.6-1.fc43
Update description:

Security

GHSA-89w7-5q38-fgm3 CVE-ID requested

Fixes

mu: fix offset of NULL in TPMS_EMPTY marshalling ESYS: avoid zero-length VLA in iesys_decrypt_param SAPI: fix alignment of the response parameter pointer FAPI: Prevent count underflow in POLICYNAMEHASH instantiation FAPI: Reject out-of-range PCR indices in policy JSON deserialization TCTI: Reject undersized TPM responses in swtpm receive path FAPI: fix oob access of policy during name hash calculation

tpm2-tss-4.2.2-1.fc45

Fedora Security Advisories
2 days 21 hours ago
FEDORA-2026-0866c99872 Packages in this update:
  • tpm2-tss-4.2.2-1.fc45
Update description:

Security

GHSA-89w7-5q38-fgm3 CVE-ID requested

Fixes

mu: fix offset of NULL in TPMS_EMPTY marshalling ESYS: avoid zero-length VLA in iesys_decrypt_param SAPI: fix alignment of the response parameter pointer FAPI: Reject out-of-range PCR indices in policy JSON deserialization FAPI: Prevent count underflow in POLICYNAMEHASH instantiation TCTI: Reject undersized TPM responses in swtpm receive path FAPI: fix oob access of policy during name hash calculation

roundcubemail-1.6.21-1.fc43

Fedora Security Advisories
3 days ago
FEDORA-2026-8ba6632f4a Packages in this update:
  • roundcubemail-1.6.21-1.fc43
Update description: Release 1.6.21
  • Security: Fix open redirect via IMAP error recovery on attachment get
  • Security: Fix so Received: header includes only trusted hostname and forwarded IP from a trusted proxy
  • Security: Fix bug where some managesieve destructive actions could have been triggered cross-site via GET
  • Security: Fix Sieve script injection via a rule operator
  • Security: Fix Sieve script injection via set/include modifiers
  • Security: Fix bug where resolve_url() ignored trusted host setting
  • Security: Fix mail header injection via a MDN subject
  • Security: Fix HTTP request injection via the spellcheck ATD backend
  • Security: Fix IMAP command injection via CRLF in _uid parameter with messages_cache enabled
  • Security: Fix SSRF in CSS proxy via incomplete is_local_url() nip.io/sslip.io bypass
  • Security: Fix CSRF validation bypass for file-only POST requests
  • Security: Fix disabled_actions restriction bypass by writing '_' instead of '-' in the action name
  • Security: Fix CSRF validation bypass for mail purge/expunge commands
  • Security: Fix passing potentally unsafe attachment content into ImageMagick on image type conversion
  • Security: Fix Unbounded CPU loop/DoS in rcube_session::unserialize() via a negative length token
  • Security: Fix SSRF filter (is_local_url()) bypass via 6to4 (2002::/16) addresses
  • Security: Fix so IMAP host input is validated more strictly

roundcubemail-1.6.21-1.el10_4

Fedora Security Advisories
3 days ago
FEDORA-EPEL-2026-37f5aa14d1 Packages in this update:
  • roundcubemail-1.6.21-1.el10_4
Update description: Release 1.6.21
  • Security: Fix open redirect via IMAP error recovery on attachment get
  • Security: Fix so Received: header includes only trusted hostname and forwarded IP from a trusted proxy
  • Security: Fix bug where some managesieve destructive actions could have been triggered cross-site via GET
  • Security: Fix Sieve script injection via a rule operator
  • Security: Fix Sieve script injection via set/include modifiers
  • Security: Fix bug where resolve_url() ignored trusted host setting
  • Security: Fix mail header injection via a MDN subject
  • Security: Fix HTTP request injection via the spellcheck ATD backend
  • Security: Fix IMAP command injection via CRLF in _uid parameter with messages_cache enabled
  • Security: Fix SSRF in CSS proxy via incomplete is_local_url() nip.io/sslip.io bypass
  • Security: Fix CSRF validation bypass for file-only POST requests
  • Security: Fix disabled_actions restriction bypass by writing '_' instead of '-' in the action name
  • Security: Fix CSRF validation bypass for mail purge/expunge commands
  • Security: Fix passing potentally unsafe attachment content into ImageMagick on image type conversion
  • Security: Fix Unbounded CPU loop/DoS in rcube_session::unserialize() via a negative length token
  • Security: Fix SSRF filter (is_local_url()) bypass via 6to4 (2002::/16) addresses
  • Security: Fix so IMAP host input is validated more strictly

roundcubemail-1.6.21-1.el10_3

Fedora Security Advisories
3 days ago
FEDORA-EPEL-2026-1609fceec6 Packages in this update:
  • roundcubemail-1.6.21-1.el10_3
Update description: Release 1.6.21
  • Security: Fix open redirect via IMAP error recovery on attachment get
  • Security: Fix so Received: header includes only trusted hostname and forwarded IP from a trusted proxy
  • Security: Fix bug where some managesieve destructive actions could have been triggered cross-site via GET
  • Security: Fix Sieve script injection via a rule operator
  • Security: Fix Sieve script injection via set/include modifiers
  • Security: Fix bug where resolve_url() ignored trusted host setting
  • Security: Fix mail header injection via a MDN subject
  • Security: Fix HTTP request injection via the spellcheck ATD backend
  • Security: Fix IMAP command injection via CRLF in _uid parameter with messages_cache enabled
  • Security: Fix SSRF in CSS proxy via incomplete is_local_url() nip.io/sslip.io bypass
  • Security: Fix CSRF validation bypass for file-only POST requests
  • Security: Fix disabled_actions restriction bypass by writing '_' instead of '-' in the action name
  • Security: Fix CSRF validation bypass for mail purge/expunge commands
  • Security: Fix passing potentally unsafe attachment content into ImageMagick on image type conversion
  • Security: Fix Unbounded CPU loop/DoS in rcube_session::unserialize() via a negative length token
  • Security: Fix SSRF filter (is_local_url()) bypass via 6to4 (2002::/16) addresses
  • Security: Fix so IMAP host input is validated more strictly

roundcubemail-1.7.6-1.fc45

Fedora Security Advisories
3 days ago
FEDORA-2026-b6615c7ae7 Packages in this update:
  • roundcubemail-1.7.6-1.fc45
Update description: Release 1.7.6
  • Enable PHP 8.6 support (#10368, #10362)
  • LDAP: Fix TypeError on group members listing with PHP 8 (#10364)
  • Fix/Improve handling of IMAP literal strings
  • Fix fatal error when a SORT/THREAD/SEARCH/ESEARCH command response includes untagged responses (#10361)
  • Fix TypeError when archiving all messages via select-all (#10107)
  • Fix temporary files permissions to 0600 (#10328)
  • Fix refresh interval setting showing "never" when the configured value is not one of the predefined intervals (#10292)
  • Fix installto.sh and update.sh reporting success when an upgrade step fails (#10326)
  • Newmail_notifier: Fix restoring skin favicons defined with rel="icon" (#9575)
  • LDAP: Fix website link including the labeledURI label (#8816)
  • Fix non-ASCII special folder names displayed in UTF7-IMAP encoding when real names are shown (#10375)
  • Security: Fix open redirect via IMAP error recovery on attachment get
  • Security: Fix so Received: header includes only trusted hostname and forwarded IP from a trusted proxy
  • Security: Fix bug where some managesieve destructive actions could have been triggered cross-site via GET
  • Security: Fix Sieve script injection via a rule operator
  • Security: Fix Sieve script injection via set/include modifiers
  • Security: Fix bug where resolve_url() ignored trusted host setting
  • Security: Fix mail header injection via a MDN subject
  • Security: Fix HTTP request injection via the spellcheck ATD backend
  • Security: Fix IMAP command injection via CRLF in _uid parameter with messages_cache enabled
  • Security: Fix SSRF in CSS proxy via incomplete is_local_url() nip.io/sslip.io bypass
  • Security: Fix CSRF validation bypass for file-only POST requests
  • Security: Fix disabled_actions restriction bypass by writing '_' instead of '-' in the action name
  • Security: Fix CSRF validation bypass for mail purge/expunge commands
  • Security: Fix passing potentally unsafe attachment content into ImageMagick on image type conversion
  • Security: Fix Unbounded CPU loop/DoS in rcube_session::unserialize() via a negative length token
  • Security: Fix SSRF filter (is_local_url()) bypass via 6to4 (2002::/16) addresses
  • Security: Fix so IMAP host input is validated more strictly

roundcubemail-1.7.6-1.fc44

Fedora Security Advisories
3 days ago
FEDORA-2026-f67031546e Packages in this update:
  • roundcubemail-1.7.6-1.fc44
Update description: Release 1.7.6
  • Enable PHP 8.6 support (#10368, #10362)
  • LDAP: Fix TypeError on group members listing with PHP 8 (#10364)
  • Fix/Improve handling of IMAP literal strings
  • Fix fatal error when a SORT/THREAD/SEARCH/ESEARCH command response includes untagged responses (#10361)
  • Fix TypeError when archiving all messages via select-all (#10107)
  • Fix temporary files permissions to 0600 (#10328)
  • Fix refresh interval setting showing "never" when the configured value is not one of the predefined intervals (#10292)
  • Fix installto.sh and update.sh reporting success when an upgrade step fails (#10326)
  • Newmail_notifier: Fix restoring skin favicons defined with rel="icon" (#9575)
  • LDAP: Fix website link including the labeledURI label (#8816)
  • Fix non-ASCII special folder names displayed in UTF7-IMAP encoding when real names are shown (#10375)
  • Security: Fix open redirect via IMAP error recovery on attachment get
  • Security: Fix so Received: header includes only trusted hostname and forwarded IP from a trusted proxy
  • Security: Fix bug where some managesieve destructive actions could have been triggered cross-site via GET
  • Security: Fix Sieve script injection via a rule operator
  • Security: Fix Sieve script injection via set/include modifiers
  • Security: Fix bug where resolve_url() ignored trusted host setting
  • Security: Fix mail header injection via a MDN subject
  • Security: Fix HTTP request injection via the spellcheck ATD backend
  • Security: Fix IMAP command injection via CRLF in _uid parameter with messages_cache enabled
  • Security: Fix SSRF in CSS proxy via incomplete is_local_url() nip.io/sslip.io bypass
  • Security: Fix CSRF validation bypass for file-only POST requests
  • Security: Fix disabled_actions restriction bypass by writing '_' instead of '-' in the action name
  • Security: Fix CSRF validation bypass for mail purge/expunge commands
  • Security: Fix passing potentally unsafe attachment content into ImageMagick on image type conversion
  • Security: Fix Unbounded CPU loop/DoS in rcube_session::unserialize() via a negative length token
  • Security: Fix SSRF filter (is_local_url()) bypass via 6to4 (2002::/16) addresses
  • Security: Fix so IMAP host input is validated more strictly
Checked
8 minutes 43 seconds ago
URL
https://bodhi.fedoraproject.org/rss/updates/?type=security