Fedora Security Advisories

• python-cairosvg-2.9.1-1.el10_3

Update to 2.9.1 (CVE-2026-107378)

• python-cairosvg-2.9.1-1.el10_2

Update to 2.9.1 (CVE-2026-107378)

• python-cairosvg-2.9.1-1.el10_4

Update to 2.9.1 (CVE-2026-107378)

• gnome-shell-extension-gsconnect-73-1.fc45

Voici les notes de la release, telles que publiées par daniellandau le 2026-09-23 :

Release GSConnect v73

• Security: fix authenticated path traversal (arbitrary file write) in Share and Notification plugins by @jessedegans in #2163
• Vipinus fix/clipboard handler safety net by @daniellandau in #2177
• Improve CLI support for non-GNOME environment by @JingMatrix in #2157
• Follow XDG Base Directory Specification for .mozilla (fixes #2121) by @Renarde-dev in #2156
• Add TOTP copy button to messages that look like they have a TOTP code and fix undefined in notification by @xethlyx in #2111
• Fix DesktopAppInfo loading by @ferdnyc in #2178
• Fix two issues with the phone number conversion methods, and add tests by @ferdnyc in #2184
• lan: fix IPv6 address parsing and formatting by @ihubanov in #2186
• Keyboard shortcuts without grabbing by @daniellandau in #2037
• Fix 'shortucts' typo error to 'shortcuts' by @mlorier in #2188
• Better conditional GioUnix loading by @ferdnyc in #2189
• GNOME 51 by @DaPigGuy in #2192

• gnome-shell-extension-gsconnect-73-1.fc43

Voici les notes de la release, telles que publiées par daniellandau le 2026-09-23 :

Release GSConnect v73

• Security: fix authenticated path traversal (arbitrary file write) in Share and Notification plugins by @jessedegans in #2163
• Vipinus fix/clipboard handler safety net by @daniellandau in #2177
• Improve CLI support for non-GNOME environment by @JingMatrix in #2157
• Follow XDG Base Directory Specification for .mozilla (fixes #2121) by @Renarde-dev in #2156
• Add TOTP copy button to messages that look like they have a TOTP code and fix undefined in notification by @xethlyx in #2111
• Fix DesktopAppInfo loading by @ferdnyc in #2178
• Fix two issues with the phone number conversion methods, and add tests by @ferdnyc in #2184
• lan: fix IPv6 address parsing and formatting by @ihubanov in #2186
• Keyboard shortcuts without grabbing by @daniellandau in #2037
• Fix 'shortucts' typo error to 'shortcuts' by @mlorier in #2188
• Better conditional GioUnix loading by @ferdnyc in #2189
• GNOME 51 by @DaPigGuy in #2192

• gnome-shell-extension-gsconnect-73-1.fc44

Voici les notes de la release, telles que publiées par daniellandau le 2026-09-23 :

Release GSConnect v73

• Security: fix authenticated path traversal (arbitrary file write) in Share and Notification plugins by @jessedegans in #2163
• Vipinus fix/clipboard handler safety net by @daniellandau in #2177
• Improve CLI support for non-GNOME environment by @JingMatrix in #2157
• Follow XDG Base Directory Specification for .mozilla (fixes #2121) by @Renarde-dev in #2156
• Add TOTP copy button to messages that look like they have a TOTP code and fix undefined in notification by @xethlyx in #2111
• Fix DesktopAppInfo loading by @ferdnyc in #2178
• Fix two issues with the phone number conversion methods, and add tests by @ferdnyc in #2184
• lan: fix IPv6 address parsing and formatting by @ihubanov in #2186
• Keyboard shortcuts without grabbing by @daniellandau in #2037
• Fix 'shortucts' typo error to 'shortcuts' by @mlorier in #2188
• Better conditional GioUnix loading by @ferdnyc in #2189
• GNOME 51 by @DaPigGuy in #2192

• qdigidoc-4.11.1-1.fc44

• Upstream release 4.11.1

• qdigidoc-4.11.1-1.fc43

• Upstream release 4.11.1

• nicotine+-3.3.11-1.fc44

• Added menu items for moving column headers due to broken drag-and-drop in GTK
• Enabled fixed number of upload slots by default
• Show global recommendations for interests when no personalized ones are available
• Only show online status of open chat history users to reduce server traffic
• Expire cached user IP addresses after 30 minutes at the latest
• Removed 'Everyone' permission for receiving files sent via manual upload
• Removed automatic port forwarding from isolated mode (Docker containers)

• Important: Prevent unbounded memory use for large uncompressed network messages
• Important: Prevent file uploads from going through to spoofed users
• Important: Added rate limits for CTCP messages
• Important: Fixed a rare shares database corruption due to similar file names
• Important: Fixed an issue where peers would sometimes receive the wrong username
• Important: Fixed some incorrect behavior in the distributed search network
• Fixed a crash when searching for room files with no chatroom specified
• Fixed a rare crash when opening File Properties dialog
• Fixed rare crashes when starting/quitting the application
• Fixed broken Add Buddy text entry in the buddies sidebar
• Fixed configuration files not being saved when restarting or logging out
• Fixed upload removals when banning an IP address from the Preferences dialog
• Fixed loading a saved shares file list from disk while offline
• Fixed shares not always rescanning on startup when databases were missing/corrupted
• Fixed folder downloads adding files from other users with identical folder paths
• Fixed incorrect average transfer speed when uploading the same file many times
• Fixed transfer list not always updating fully until switching to another tab
• Fixed zero-byte downloads not finishing immediately
• Fixed an issue where the first connection to the server could fail
• Fixed occasional performance issues when responding to search requests
• Fixed incorrect sort order in file lists in some cases
• Fixed inaccurate stuck current folder count during rescan
• Fixed missing shared file count for users with no shared files
• Fixed issues reading audio properties for some files when rescanning shares
• Fixed tabs unexpectedly being marked as read when scrolling through them
• Fixed room list order sometimes changing after restarting
• Fixed removed private rooms not being fully cleaned from lists until reconnecting
• Fixed long usernames not being ellipsized in private chat tabs
• Fixed minor sizing issues with pages context menu on some systems
• Fixed cosmetic issue with invalid folder paths in folder chooser button
• Removed 'Insert Emoji' menu item from text entries that don't accept emoji

• nicotine+-3.3.11-1.fc43

• Added menu items for moving column headers due to broken drag-and-drop in GTK
• Enabled fixed number of upload slots by default
• Show global recommendations for interests when no personalized ones are available
• Only show online status of open chat history users to reduce server traffic
• Expire cached user IP addresses after 30 minutes at the latest
• Removed 'Everyone' permission for receiving files sent via manual upload
• Removed automatic port forwarding from isolated mode (Docker containers)

• Important: Prevent unbounded memory use for large uncompressed network messages
• Important: Prevent file uploads from going through to spoofed users
• Important: Added rate limits for CTCP messages
• Important: Fixed a rare shares database corruption due to similar file names
• Important: Fixed an issue where peers would sometimes receive the wrong username
• Important: Fixed some incorrect behavior in the distributed search network
• Fixed a crash when searching for room files with no chatroom specified
• Fixed a rare crash when opening File Properties dialog
• Fixed rare crashes when starting/quitting the application
• Fixed broken Add Buddy text entry in the buddies sidebar
• Fixed configuration files not being saved when restarting or logging out
• Fixed upload removals when banning an IP address from the Preferences dialog
• Fixed loading a saved shares file list from disk while offline
• Fixed shares not always rescanning on startup when databases were missing/corrupted
• Fixed folder downloads adding files from other users with identical folder paths
• Fixed incorrect average transfer speed when uploading the same file many times
• Fixed transfer list not always updating fully until switching to another tab
• Fixed zero-byte downloads not finishing immediately
• Fixed an issue where the first connection to the server could fail
• Fixed occasional performance issues when responding to search requests
• Fixed incorrect sort order in file lists in some cases
• Fixed inaccurate stuck current folder count during rescan
• Fixed missing shared file count for users with no shared files
• Fixed issues reading audio properties for some files when rescanning shares
• Fixed tabs unexpectedly being marked as read when scrolling through them
• Fixed room list order sometimes changing after restarting
• Fixed removed private rooms not being fully cleaned from lists until reconnecting
• Fixed long usernames not being ellipsized in private chat tabs
• Fixed minor sizing issues with pages context menu on some systems
• Fixed cosmetic issue with invalid folder paths in folder chooser button
• Removed 'Insert Emoji' menu item from text entries that don't accept emoji

• nicotine+-3.3.11-1.fc45

• Added menu items for moving column headers due to broken drag-and-drop in GTK
• Enabled fixed number of upload slots by default
• Show global recommendations for interests when no personalized ones are available
• Only show online status of open chat history users to reduce server traffic
• Expire cached user IP addresses after 30 minutes at the latest
• Removed 'Everyone' permission for receiving files sent via manual upload
• Removed automatic port forwarding from isolated mode (Docker containers)

• Important: Prevent unbounded memory use for large uncompressed network messages
• Important: Prevent file uploads from going through to spoofed users
• Important: Added rate limits for CTCP messages
• Important: Fixed a rare shares database corruption due to similar file names
• Important: Fixed an issue where peers would sometimes receive the wrong username
• Important: Fixed some incorrect behavior in the distributed search network
• Fixed a crash when searching for room files with no chatroom specified
• Fixed a rare crash when opening File Properties dialog
• Fixed rare crashes when starting/quitting the application
• Fixed broken Add Buddy text entry in the buddies sidebar
• Fixed configuration files not being saved when restarting or logging out
• Fixed upload removals when banning an IP address from the Preferences dialog
• Fixed loading a saved shares file list from disk while offline
• Fixed shares not always rescanning on startup when databases were missing/corrupted
• Fixed folder downloads adding files from other users with identical folder paths
• Fixed incorrect average transfer speed when uploading the same file many times
• Fixed transfer list not always updating fully until switching to another tab
• Fixed zero-byte downloads not finishing immediately
• Fixed an issue where the first connection to the server could fail
• Fixed occasional performance issues when responding to search requests
• Fixed incorrect sort order in file lists in some cases
• Fixed inaccurate stuck current folder count during rescan
• Fixed missing shared file count for users with no shared files
• Fixed issues reading audio properties for some files when rescanning shares
• Fixed tabs unexpectedly being marked as read when scrolling through them
• Fixed room list order sometimes changing after restarting
• Fixed removed private rooms not being fully cleaned from lists until reconnecting
• Fixed long usernames not being ellipsized in private chat tabs
• Fixed minor sizing issues with pages context menu on some systems
• Fixed cosmetic issue with invalid folder paths in folder chooser button
• Removed 'Insert Emoji' menu item from text entries that don't accept emoji

• perl-ExtUtils-Typemaps-Default-1.07-1.fc44

• Update to 1.07
• Security fix for CVE-2026-107373
• Security fix for CVE-2026-107794

• perl-ExtUtils-Typemaps-Default-1.07-1.fc45

• Update to 1.07
• Security fix for CVE-2026-107373
• Security fix for CVE-2026-107794

• perl-ExtUtils-Typemaps-Default-1.07-1.fc43

• Update to 1.07
• Security fix for CVE-2026-107373
• Security fix for CVE-2026-107794

• qt5-qtbase-5.15.18-2.el10_2

Fix CVE-2026-19248, denial of Service vulnerability in XML parsing

• qt5-qtbase-5.15.18-2.el10_3

Fix CVE-2026-19248, denial of Service vulnerability in XML parsing

• qt5-qtbase-5.15.18-2.el10_4

Fix CVE-2026-19248, denial of Service vulnerability in XML parsing

• python-cairosvg-2.9.1-1.fc44

Update to 2.9.1 upstream release (CVE-2026-107378)

• python-cairosvg-2.9.1-1.fc45

Update to 2.9.1 upstream release (CVE-2026-107378)

• python-cairosvg-2.9.1-1.fc43

Update to 2.9.1 upstream release (CVE-2026-107378)