Fedora Security Advisories

• baresip-4.11.0-1.el8
• libre-4.11.0-1.el8

• core: cleanup stream_rtp_h ignore handling
• audio: increase RTP timestamp also for underruns
• aubuf: remove adaptive mode
• webrtc_aec: fix system cmake include
• call: avoid call progress if media is inactive
• conf: remove unused conf_aubuf_adaptive()
• audio: reuse mbuf for telephony events
• call: add callback for incoming SIP INFO
• test: check fixture error and fix call progress
• aureceiver: fix return on error case in aurecv_start_player()
• audio: fix warning() %d format in encode_rtp_send()
• opus,aureceiver: fix PLC/FEC handling
• l16: refactor NR_CODECS by RE_ARRAY_SIZE
• config: remove unused config option audio_silence
• echo: refactor call_event_handler closed with bevent

• libre's HTTP Basic auth verifier accept empty or prefix credential blindly
• libre allows one spoofed UDP packet forges RTCP control messages
• btrace: optimize addr2line handling
• aubuf: remove adaptive mode
• httpauth/basic: fix mem_seccmp cmp length
• srtcp: fix/add AES-GCM no encryption flag auth
• mem_pool: fix mem_pool_flush free list handling
• mem/mem_pool: check mem_pool_borrow_extend empty pool param
• json/decode_odict: fix possible container dangling pointer

• baresip-4.11.0-1.el9
• libre-4.11.0-1.el9

• core: cleanup stream_rtp_h ignore handling
• audio: increase RTP timestamp also for underruns
• aubuf: remove adaptive mode
• webrtc_aec: fix system cmake include
• call: avoid call progress if media is inactive
• conf: remove unused conf_aubuf_adaptive()
• audio: reuse mbuf for telephony events
• call: add callback for incoming SIP INFO
• test: check fixture error and fix call progress
• aureceiver: fix return on error case in aurecv_start_player()
• audio: fix warning() %d format in encode_rtp_send()
• opus,aureceiver: fix PLC/FEC handling
• l16: refactor NR_CODECS by RE_ARRAY_SIZE
• config: remove unused config option audio_silence
• echo: refactor call_event_handler closed with bevent

• libre's HTTP Basic auth verifier accept empty or prefix credential blindly
• libre allows one spoofed UDP packet forges RTCP control messages
• btrace: optimize addr2line handling
• aubuf: remove adaptive mode
• httpauth/basic: fix mem_seccmp cmp length
• srtcp: fix/add AES-GCM no encryption flag auth
• mem_pool: fix mem_pool_flush free list handling
• mem/mem_pool: check mem_pool_borrow_extend empty pool param
• json/decode_odict: fix possible container dangling pointer

• baresip-4.11.0-1.el10_2
• libre-4.11.0-1.el10_2

• core: cleanup stream_rtp_h ignore handling
• audio: increase RTP timestamp also for underruns
• aubuf: remove adaptive mode
• webrtc_aec: fix system cmake include
• call: avoid call progress if media is inactive
• conf: remove unused conf_aubuf_adaptive()
• audio: reuse mbuf for telephony events
• call: add callback for incoming SIP INFO
• test: check fixture error and fix call progress
• aureceiver: fix return on error case in aurecv_start_player()
• audio: fix warning() %d format in encode_rtp_send()
• opus,aureceiver: fix PLC/FEC handling
• l16: refactor NR_CODECS by RE_ARRAY_SIZE
• config: remove unused config option audio_silence
• echo: refactor call_event_handler closed with bevent

• libre's HTTP Basic auth verifier accept empty or prefix credential blindly
• libre allows one spoofed UDP packet forges RTCP control messages
• btrace: optimize addr2line handling
• aubuf: remove adaptive mode
• httpauth/basic: fix mem_seccmp cmp length
• srtcp: fix/add AES-GCM no encryption flag auth
• mem_pool: fix mem_pool_flush free list handling
• mem/mem_pool: check mem_pool_borrow_extend empty pool param
• json/decode_odict: fix possible container dangling pointer

• baresip-4.11.0-1.el10_3
• libre-4.11.0-1.el10_3

• core: cleanup stream_rtp_h ignore handling
• audio: increase RTP timestamp also for underruns
• aubuf: remove adaptive mode
• webrtc_aec: fix system cmake include
• call: avoid call progress if media is inactive
• conf: remove unused conf_aubuf_adaptive()
• audio: reuse mbuf for telephony events
• call: add callback for incoming SIP INFO
• test: check fixture error and fix call progress
• aureceiver: fix return on error case in aurecv_start_player()
• audio: fix warning() %d format in encode_rtp_send()
• opus,aureceiver: fix PLC/FEC handling
• l16: refactor NR_CODECS by RE_ARRAY_SIZE
• config: remove unused config option audio_silence
• echo: refactor call_event_handler closed with bevent

• libre's HTTP Basic auth verifier accept empty or prefix credential blindly
• libre allows one spoofed UDP packet forges RTCP control messages
• btrace: optimize addr2line handling
• aubuf: remove adaptive mode
• httpauth/basic: fix mem_seccmp cmp length
• srtcp: fix/add AES-GCM no encryption flag auth
• mem_pool: fix mem_pool_flush free list handling
• mem/mem_pool: check mem_pool_borrow_extend empty pool param
• json/decode_odict: fix possible container dangling pointer

• baresip-4.11.0-1.el10_4
• libre-4.11.0-1.el10_4

• core: cleanup stream_rtp_h ignore handling
• audio: increase RTP timestamp also for underruns
• aubuf: remove adaptive mode
• webrtc_aec: fix system cmake include
• call: avoid call progress if media is inactive
• conf: remove unused conf_aubuf_adaptive()
• audio: reuse mbuf for telephony events
• call: add callback for incoming SIP INFO
• test: check fixture error and fix call progress
• aureceiver: fix return on error case in aurecv_start_player()
• audio: fix warning() %d format in encode_rtp_send()
• opus,aureceiver: fix PLC/FEC handling
• l16: refactor NR_CODECS by RE_ARRAY_SIZE
• config: remove unused config option audio_silence
• echo: refactor call_event_handler closed with bevent

• libre's HTTP Basic auth verifier accept empty or prefix credential blindly
• libre allows one spoofed UDP packet forges RTCP control messages
• btrace: optimize addr2line handling
• aubuf: remove adaptive mode
• httpauth/basic: fix mem_seccmp cmp length
• srtcp: fix/add AES-GCM no encryption flag auth
• mem_pool: fix mem_pool_flush free list handling
• mem/mem_pool: check mem_pool_borrow_extend empty pool param
• json/decode_odict: fix possible container dangling pointer

• baresip-4.11.0-1.fc43
• libre-4.11.0-1.fc43

• core: cleanup stream_rtp_h ignore handling
• audio: increase RTP timestamp also for underruns
• aubuf: remove adaptive mode
• webrtc_aec: fix system cmake include
• call: avoid call progress if media is inactive
• conf: remove unused conf_aubuf_adaptive()
• audio: reuse mbuf for telephony events
• call: add callback for incoming SIP INFO
• test: check fixture error and fix call progress
• aureceiver: fix return on error case in aurecv_start_player()
• audio: fix warning() %d format in encode_rtp_send()
• opus,aureceiver: fix PLC/FEC handling
• l16: refactor NR_CODECS by RE_ARRAY_SIZE
• config: remove unused config option audio_silence
• echo: refactor call_event_handler closed with bevent

• libre's HTTP Basic auth verifier accept empty or prefix credential blindly
• libre allows one spoofed UDP packet forges RTCP control messages
• btrace: optimize addr2line handling
• aubuf: remove adaptive mode
• httpauth/basic: fix mem_seccmp cmp length
• srtcp: fix/add AES-GCM no encryption flag auth
• mem_pool: fix mem_pool_flush free list handling
• mem/mem_pool: check mem_pool_borrow_extend empty pool param
• json/decode_odict: fix possible container dangling pointer

• baresip-4.11.0-1.fc44
• libre-4.11.0-1.fc44

• core: cleanup stream_rtp_h ignore handling
• audio: increase RTP timestamp also for underruns
• aubuf: remove adaptive mode
• webrtc_aec: fix system cmake include
• call: avoid call progress if media is inactive
• conf: remove unused conf_aubuf_adaptive()
• audio: reuse mbuf for telephony events
• call: add callback for incoming SIP INFO
• test: check fixture error and fix call progress
• aureceiver: fix return on error case in aurecv_start_player()
• audio: fix warning() %d format in encode_rtp_send()
• opus,aureceiver: fix PLC/FEC handling
• l16: refactor NR_CODECS by RE_ARRAY_SIZE
• config: remove unused config option audio_silence
• echo: refactor call_event_handler closed with bevent

• libre's HTTP Basic auth verifier accept empty or prefix credential blindly
• libre allows one spoofed UDP packet forges RTCP control messages
• btrace: optimize addr2line handling
• aubuf: remove adaptive mode
• httpauth/basic: fix mem_seccmp cmp length
• srtcp: fix/add AES-GCM no encryption flag auth
• mem_pool: fix mem_pool_flush free list handling
• mem/mem_pool: check mem_pool_borrow_extend empty pool param
• json/decode_odict: fix possible container dangling pointer

• baresip-4.11.0-1.fc45
• libre-4.11.0-1.fc45

• core: cleanup stream_rtp_h ignore handling
• audio: increase RTP timestamp also for underruns
• aubuf: remove adaptive mode
• webrtc_aec: fix system cmake include
• call: avoid call progress if media is inactive
• conf: remove unused conf_aubuf_adaptive()
• audio: reuse mbuf for telephony events
• call: add callback for incoming SIP INFO
• test: check fixture error and fix call progress
• aureceiver: fix return on error case in aurecv_start_player()
• audio: fix warning() %d format in encode_rtp_send()
• opus,aureceiver: fix PLC/FEC handling
• l16: refactor NR_CODECS by RE_ARRAY_SIZE
• config: remove unused config option audio_silence
• echo: refactor call_event_handler closed with bevent

• libre's HTTP Basic auth verifier accept empty or prefix credential blindly
• libre allows one spoofed UDP packet forges RTCP control messages
• btrace: optimize addr2line handling
• aubuf: remove adaptive mode
• httpauth/basic: fix mem_seccmp cmp length
• srtcp: fix/add AES-GCM no encryption flag auth
• mem_pool: fix mem_pool_flush free list handling
• mem/mem_pool: check mem_pool_borrow_extend empty pool param
• json/decode_odict: fix possible container dangling pointer

• baresip-4.11.0-1.fc46
• libre-4.11.0-1.fc46

• core: cleanup stream_rtp_h ignore handling
• audio: increase RTP timestamp also for underruns
• aubuf: remove adaptive mode
• webrtc_aec: fix system cmake include
• call: avoid call progress if media is inactive
• conf: remove unused conf_aubuf_adaptive()
• audio: reuse mbuf for telephony events
• call: add callback for incoming SIP INFO
• test: check fixture error and fix call progress
• aureceiver: fix return on error case in aurecv_start_player()
• audio: fix warning() %d format in encode_rtp_send()
• opus,aureceiver: fix PLC/FEC handling
• l16: refactor NR_CODECS by RE_ARRAY_SIZE
• config: remove unused config option audio_silence
• echo: refactor call_event_handler closed with bevent

• libre's HTTP Basic auth verifier accept empty or prefix credential blindly
• libre allows one spoofed UDP packet forges RTCP control messages
• btrace: optimize addr2line handling
• aubuf: remove adaptive mode
• httpauth/basic: fix mem_seccmp cmp length
• srtcp: fix/add AES-GCM no encryption flag auth
• mem_pool: fix mem_pool_flush free list handling
• mem/mem_pool: check mem_pool_borrow_extend empty pool param
• json/decode_odict: fix possible container dangling pointer

• gegl04-0.4.70-5.fc43

This update fixes an overflow in parsing RGBE/HDR image files.

• gegl04-0.4.70-5.fc45

This update fixes an overflow in parsing RGBE/HDR image files.

• gegl04-0.4.70-5.fc44

This update fixes an overflow in parsing RGBE/HDR image files.

• perl-Net-OAuth-0.33-1.fc44

Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify. This update fixes the issue.

• perl-Net-OAuth-0.33-1.fc43

Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify. This update fixes the issue.

• perl-Net-OAuth-0.33-2.fc45

Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify. This update fixes the issue.

• perl-XML-Bare-0.53-45.fc44

XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes. This packages fixes this issue.

Fixes CVE-2026-57074 and CVE-2026-13401.

• perl-XML-Bare-0.53-44.fc43

XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes. This packages fixes this issue.

Fixes CVE-2026-57074 and CVE-2026-13401.

• perl-XML-Bare-0.53-47.fc45

XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes. This packages fixes this issue.

Fixes CVE-2026-57074 and CVE-2026-13401.

• perl-XML-Bare-0.53-40.el9

XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes. This packages fixes this issue.

Fixes CVE-2026-57074 and CVE-2026-13401.

• emacs-30.2-11.fc43

Fix CVE-2026-79992: Local shell command injection through the user field in emacs tramp