Fedora Security Advisories

• firefox-157.0-1.fc43

• Updated to latest upstream (157.0)

• Update to latest upstream

• openbao-2.6.4-1.fc44

Update to upstream 2.6.4. Includes multiple GHSA security notices, see https://github.com/openbao/openbao/releases/tag/v2.6.4

Update to 2.6.3-2. Fixes privilege problem in the service file and cleans up default configuration file.

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

• openbao-2.6.4-1.fc45

Update to upstream 2.6.4. Includes multiple GHSA security notices, see https://github.com/openbao/openbao/releases/tag/v2.6.4

Update to 2.6.3-2. Fixes privilege problem in the service file and cleans up default configuration file.

Update to 2.6.3. Includes fixes to multiple GHSAs listed at https://github.com/openbao/openbao/releases/tag/v2.6.3.

• openbao-2.6.4-1.el8

Update to upstream 2.6.4. Includes multiple GHSA security notices, see https://github.com/openbao/openbao/releases/tag/v2.6.4

• openbao-2.6.4-1.el10_3

Update to upstream 2.6.4. Includes multiple GHSA security notices, see https://github.com/openbao/openbao/releases/tag/v2.6.4

• openbao-2.6.4-1.el9

Update to upstream 2.6.4. Includes multiple GHSA security notices, see https://github.com/openbao/openbao/releases/tag/v2.6.4

• openbao-2.6.4-1.el10_4

Update to upstream 2.6.4. Includes multiple GHSA security notices, see https://github.com/openbao/openbao/releases/tag/v2.6.4

• openbao-2.6.4-1.el10_2

Update to upstream 2.6.4. Includes multiple GHSA security notices, see https://github.com/openbao/openbao/releases/tag/v2.6.4

• openbao-2.6.4-1.fc43

Update to upstream 2.6.4. Includes multiple GHSA security notices, see https://github.com/openbao/openbao/releases/tag/v2.6.4

• virt-v2v-2.13.7-1.fc45

New upstream development version 2.13.7

• docker-buildx-0.37.2-1.fc43

• Update to release v0.37.2
• Resolves: rhbz#2544198
• Resolves CVE-2026-56855: rhbz#2530594
• resolves CVE-2026-78662: rhbz#2530802
• Upstream fix

• docker-buildx-0.37.2-1.fc44

• Update to release v0.37.2
• Resolves: rhbz#2544198
• Resolves CVE-2026-56855: rhbz#2530594
• resolves CVE-2026-78662: rhbz#2530802
• Upstream fix

• php-getid3-1.9.27-1.fc44

• GHSA-c2xw-vp6w-gpph compressed ID3v2 frames max length
• GHSA-j649-xr34-mmmh remove LIBXML_NOENT
• embedded picture in WMA files is corrupt
• silent failure of @libxml_disable_entity_loader() enables XXE

• php-getid3-1.9.27-1.fc45

• GHSA-c2xw-vp6w-gpph compressed ID3v2 frames max length
• GHSA-j649-xr34-mmmh remove LIBXML_NOENT
• embedded picture in WMA files is corrupt
• silent failure of @libxml_disable_entity_loader() enables XXE

• php-getid3-1.9.27-1.fc43

• GHSA-c2xw-vp6w-gpph compressed ID3v2 frames max length
• GHSA-j649-xr34-mmmh remove LIBXML_NOENT
• embedded picture in WMA files is corrupt
• silent failure of @libxml_disable_entity_loader() enables XXE

• GitPython-3.2.0-1.el9

Update to 3.2.0

Fixes GHSA-gq48-pqfc-9p58, GHSA-23mf-xhv8-69c2, GHSA-f9j4-qggq-h239, GHSA-w8jc-g24h-crhw, GHSA-m64x-33q8-m5h7, and GHSA-fx3j-rwgx-fr94.

• dhcpcd-10.5.2-1.fc43

• Update to 10.5.2 (rhbz#2511521)

• dhcpcd-10.5.2-1.fc44

• Update to 10.5.2 (rhbz#2511521)

• dhcpcd-10.5.2-1.fc45

• Update to 10.5.2 (rhbz#2511521)

• docker-buildx-0.37.2-1.fc45

• Update to release v0.37.2
• Resolves: rhbz#2544198
• Resolves CVE-2026-56855: rhbz#2530594
• resolves CVE-2026-78662: rhbz#2530802
• Upstream fix