Fedora Security Advisories

FEDORA-2026-6c58236667 Packages in this update:

• libmodplug-0.8.9.0-31.fc46

Update description:

Automatic update for libmodplug-0.8.9.0-31.fc46.

Changelog * Tue Oct 20 2026 Karel Volný <kvolny@redhat.com> - 1:0.8.9.0-31 - Fix CVE-2026-75904, OOB read in pat_smplooped() (rhbz#2521959) - Fix CVE-2026-108577, unbounded alloc in abc_add_gchord() (rhbz#2550240) - Bound abc_add_drum() accompaniment, fix divide by zero and OOB read - Fix CVE-2026-111270, OOB write in ReadDSM() (rhbz#2554073) - Backport upstream AMS loader hardening, 1bef4e1..63133e8 - Fix CVE-2026-111271, OOB read in ReadAMS2() (rhbz#2554079)

FEDORA-2026-b7618e98ac Packages in this update:

• linux-firmware-20261019-1.fc45

Update description:

Update to 20261019:

• rockchip: add PCIe3 PHY firmware for snps-pcie3
• Update ADSP firmware for Qualcomm qcs615 platform.
• Revert "amdgpu: update GC 11.0.0 firmware"
• amdgpu: a LOT of updates for various ASICs
• amdgpu: DMCUB updates for various ASICs
• rtw89: init board_elm.bin with stuffs for board ID 1
• rtw89: 8922d: update fw 0.35.119.3 with format suffix -1
• rtw89: 8922d: update fw 0.35.115.2
• wfx: update to firmware 3.18
• nvidia: Update and add missing firmware files for Tegra SoCs
• qcom:Update qdsp6sw firmware for shikra platform
• aic: Add AIC8800D80 Bluetooth and Wi-Fi firmware
• qcom: update HPASS firmware for nord platform
• amdgpu: DMCUB updates for various ASICs
• amdgpu: update gc 11.0.1 and 11.0.4 firmware
• qcom: update LPAICP firmware for shikra platform
• ath12k: WCN7850 hw2.0: update board-2.bin
• panthor: Add initial firmware for Architecture 14.8 Arm Mali GPU
• qcom: update ADSP firmware for glymur platform
• cirrus: cs35l41: Add firmware and tuning for Lenovo Thinkbook laptops
• cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
• cirrus: cs42l45: Add CS42L49 SDCA codec firmware for Dell laptops
• qcom: fix qcs8300 gpdspr.jsn symlink target
• qcom: update ADSP firmware for x1e80100 platform
• Update firmware for Intel Solar/Magnetar/Blazar*/Scorpius/ScorpiusGfp core
• cirrus: cs35l57 cs35l63: Add firmware for some Dell laptops
• WHENCE: add SPDX license references for non-standard license texts
• WHENCE: add initial SPDX identifiers
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for a Dell laptop
• cirrus: cs35l41: Add support for Lenovo Yoga Slim 7 Carbon 14ACN6
• Add ISH firmware files for Intel Nova Lake-H/S platforms
• qcom: add ADSP firmware for eliza platform
• qcom: update ADSP firmware for hawi platform
• QCA: Add QCA2066 Bluetooth firmware hpnv21g.30c
• QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
• Revert "qcom: update ADSP firmware for qcs615 platform"
• qcom: Add gpu firmwares for Hawi and Maili chipsets
• qcom: update Rubik Pi 3 ADSP firmware
• cirrus: cs35l56: Correct firmware instances for 103c8c52 and 103c8c53
• contrib: post the MR comment to the project of the merge request
• qcom: vpu: add Gen2 firmware binary for Hawi/Maili
• Update AMD cpu microcode
• iwlwifi: add Bz/Sc FW for core24.80-41 release
• iwlwifi: Update Bz/Fm firmware for core24.80-41 release
• iwlwifi: Add Hr/Gf firmware for core24.80-41 release
• iwlwifi: update ty/So/Ma firmwares for core24.80-41 release
• iwlwifi: Add cc/Qu/QuZ firmwares for core24.80-41 release
• mwifiex: add IW416 firmware
• ath12k: WCN7850 hw2.0: update board-2.bin
• ath12k: QCC2072 hw1.0: update board-2.bin
• ci: add Qualcomm firmware version diff MR comment job
• qcom: sdx61: add missing firmware version
• qcom: sdx35: add missing firmware version
• qcom: aic100: add missing firmware versions
• qcom: qdu100: add missing firmware versions
• qcom: sdm845: add missing modem firmware version
• qcom: x1e80100: add missing Dell XPS 13 9345 DSP versions
• qcom: add missing Adreno ZAP shader versions
• qca: separate the WCN685x uart firmware revisions
• qca: group the QCA61x4 USB firmware files
• qca: drop duplicate version lines
• qca: fix the version of the QCA6698 Bluetooth firmware
• qca: fix the version of the WCN785x USB firmware
• qcom: fix the version of the a660 GMU firmware
• qcom: fix the version of the Eliza SQE microcode
• qcom: fix the version of the QCS615 ZAP shader
• qcom/shikra: link WiFi firmware from the ath10k subdir
• Revert "amdgpu: update GC 11.0.0 firmware"
• Revert "amdgpu: update GC 11.0.0 firmware"
• amdgpu: DMCUB updates for various ASICs
• intel: Update ibt-00a0-01a1-pci.ddc for BE211 - Whale Peak2 (WhP2)
• ath11k: WCN6855 hw2.0: update board-2.bin
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
• qcom: add CDSP firmware for hawi platform
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
• cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops
• QCA: Update Bluetooth firmware for QCC2072 UART interface: 1.1.0-00340 to 1.1.0-00355

FEDORA-2026-bd021461a8 Packages in this update:

• linux-firmware-20261019-1.fc43

Update description:

Update to 20261019:

• rockchip: add PCIe3 PHY firmware for snps-pcie3
• Update ADSP firmware for Qualcomm qcs615 platform.
• Revert "amdgpu: update GC 11.0.0 firmware"
• amdgpu: a LOT of updates for various ASICs
• amdgpu: DMCUB updates for various ASICs
• rtw89: init board_elm.bin with stuffs for board ID 1
• rtw89: 8922d: update fw 0.35.119.3 with format suffix -1
• rtw89: 8922d: update fw 0.35.115.2
• wfx: update to firmware 3.18
• nvidia: Update and add missing firmware files for Tegra SoCs
• qcom:Update qdsp6sw firmware for shikra platform
• aic: Add AIC8800D80 Bluetooth and Wi-Fi firmware
• qcom: update HPASS firmware for nord platform
• amdgpu: DMCUB updates for various ASICs
• amdgpu: update gc 11.0.1 and 11.0.4 firmware
• qcom: update LPAICP firmware for shikra platform
• ath12k: WCN7850 hw2.0: update board-2.bin
• panthor: Add initial firmware for Architecture 14.8 Arm Mali GPU
• qcom: update ADSP firmware for glymur platform
• cirrus: cs35l41: Add firmware and tuning for Lenovo Thinkbook laptops
• cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
• cirrus: cs42l45: Add CS42L49 SDCA codec firmware for Dell laptops
• qcom: fix qcs8300 gpdspr.jsn symlink target
• qcom: update ADSP firmware for x1e80100 platform
• Update firmware for Intel Solar/Magnetar/Blazar*/Scorpius/ScorpiusGfp core
• cirrus: cs35l57 cs35l63: Add firmware for some Dell laptops
• WHENCE: add SPDX license references for non-standard license texts
• WHENCE: add initial SPDX identifiers
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for a Dell laptop
• cirrus: cs35l41: Add support for Lenovo Yoga Slim 7 Carbon 14ACN6
• Add ISH firmware files for Intel Nova Lake-H/S platforms
• qcom: add ADSP firmware for eliza platform
• qcom: update ADSP firmware for hawi platform
• QCA: Add QCA2066 Bluetooth firmware hpnv21g.30c
• QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
• Revert "qcom: update ADSP firmware for qcs615 platform"
• qcom: Add gpu firmwares for Hawi and Maili chipsets
• qcom: update Rubik Pi 3 ADSP firmware
• cirrus: cs35l56: Correct firmware instances for 103c8c52 and 103c8c53
• contrib: post the MR comment to the project of the merge request
• qcom: vpu: add Gen2 firmware binary for Hawi/Maili
• Update AMD cpu microcode
• iwlwifi: add Bz/Sc FW for core24.80-41 release
• iwlwifi: Update Bz/Fm firmware for core24.80-41 release
• iwlwifi: Add Hr/Gf firmware for core24.80-41 release
• iwlwifi: update ty/So/Ma firmwares for core24.80-41 release
• iwlwifi: Add cc/Qu/QuZ firmwares for core24.80-41 release
• mwifiex: add IW416 firmware
• ath12k: WCN7850 hw2.0: update board-2.bin
• ath12k: QCC2072 hw1.0: update board-2.bin
• ci: add Qualcomm firmware version diff MR comment job
• qcom: sdx61: add missing firmware version
• qcom: sdx35: add missing firmware version
• qcom: aic100: add missing firmware versions
• qcom: qdu100: add missing firmware versions
• qcom: sdm845: add missing modem firmware version
• qcom: x1e80100: add missing Dell XPS 13 9345 DSP versions
• qcom: add missing Adreno ZAP shader versions
• qca: separate the WCN685x uart firmware revisions
• qca: group the QCA61x4 USB firmware files
• qca: drop duplicate version lines
• qca: fix the version of the QCA6698 Bluetooth firmware
• qca: fix the version of the WCN785x USB firmware
• qcom: fix the version of the a660 GMU firmware
• qcom: fix the version of the Eliza SQE microcode
• qcom: fix the version of the QCS615 ZAP shader
• qcom/shikra: link WiFi firmware from the ath10k subdir
• Revert "amdgpu: update GC 11.0.0 firmware"
• Revert "amdgpu: update GC 11.0.0 firmware"
• amdgpu: DMCUB updates for various ASICs
• intel: Update ibt-00a0-01a1-pci.ddc for BE211 - Whale Peak2 (WhP2)
• ath11k: WCN6855 hw2.0: update board-2.bin
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
• qcom: add CDSP firmware for hawi platform
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
• cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops
• QCA: Update Bluetooth firmware for QCC2072 UART interface: 1.1.0-00340 to 1.1.0-00355

FEDORA-2026-546bad4cdb Packages in this update:

• linux-firmware-20261019-1.fc44

Update description:

Update to 20261019:

• rockchip: add PCIe3 PHY firmware for snps-pcie3
• Update ADSP firmware for Qualcomm qcs615 platform.
• Revert "amdgpu: update GC 11.0.0 firmware"
• amdgpu: a LOT of updates for various ASICs
• amdgpu: DMCUB updates for various ASICs
• rtw89: init board_elm.bin with stuffs for board ID 1
• rtw89: 8922d: update fw 0.35.119.3 with format suffix -1
• rtw89: 8922d: update fw 0.35.115.2
• wfx: update to firmware 3.18
• nvidia: Update and add missing firmware files for Tegra SoCs
• qcom:Update qdsp6sw firmware for shikra platform
• aic: Add AIC8800D80 Bluetooth and Wi-Fi firmware
• qcom: update HPASS firmware for nord platform
• amdgpu: DMCUB updates for various ASICs
• amdgpu: update gc 11.0.1 and 11.0.4 firmware
• qcom: update LPAICP firmware for shikra platform
• ath12k: WCN7850 hw2.0: update board-2.bin
• panthor: Add initial firmware for Architecture 14.8 Arm Mali GPU
• qcom: update ADSP firmware for glymur platform
• cirrus: cs35l41: Add firmware and tuning for Lenovo Thinkbook laptops
• cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
• cirrus: cs42l45: Add CS42L49 SDCA codec firmware for Dell laptops
• qcom: fix qcs8300 gpdspr.jsn symlink target
• qcom: update ADSP firmware for x1e80100 platform
• Update firmware for Intel Solar/Magnetar/Blazar*/Scorpius/ScorpiusGfp core
• cirrus: cs35l57 cs35l63: Add firmware for some Dell laptops
• WHENCE: add SPDX license references for non-standard license texts
• WHENCE: add initial SPDX identifiers
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for a Dell laptop
• cirrus: cs35l41: Add support for Lenovo Yoga Slim 7 Carbon 14ACN6
• Add ISH firmware files for Intel Nova Lake-H/S platforms
• qcom: add ADSP firmware for eliza platform
• qcom: update ADSP firmware for hawi platform
• QCA: Add QCA2066 Bluetooth firmware hpnv21g.30c
• QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
• Revert "qcom: update ADSP firmware for qcs615 platform"
• qcom: Add gpu firmwares for Hawi and Maili chipsets
• qcom: update Rubik Pi 3 ADSP firmware
• cirrus: cs35l56: Correct firmware instances for 103c8c52 and 103c8c53
• contrib: post the MR comment to the project of the merge request
• qcom: vpu: add Gen2 firmware binary for Hawi/Maili
• Update AMD cpu microcode
• iwlwifi: add Bz/Sc FW for core24.80-41 release
• iwlwifi: Update Bz/Fm firmware for core24.80-41 release
• iwlwifi: Add Hr/Gf firmware for core24.80-41 release
• iwlwifi: update ty/So/Ma firmwares for core24.80-41 release
• iwlwifi: Add cc/Qu/QuZ firmwares for core24.80-41 release
• mwifiex: add IW416 firmware
• ath12k: WCN7850 hw2.0: update board-2.bin
• ath12k: QCC2072 hw1.0: update board-2.bin
• ci: add Qualcomm firmware version diff MR comment job
• qcom: sdx61: add missing firmware version
• qcom: sdx35: add missing firmware version
• qcom: aic100: add missing firmware versions
• qcom: qdu100: add missing firmware versions
• qcom: sdm845: add missing modem firmware version
• qcom: x1e80100: add missing Dell XPS 13 9345 DSP versions
• qcom: add missing Adreno ZAP shader versions
• qca: separate the WCN685x uart firmware revisions
• qca: group the QCA61x4 USB firmware files
• qca: drop duplicate version lines
• qca: fix the version of the QCA6698 Bluetooth firmware
• qca: fix the version of the WCN785x USB firmware
• qcom: fix the version of the a660 GMU firmware
• qcom: fix the version of the Eliza SQE microcode
• qcom: fix the version of the QCS615 ZAP shader
• qcom/shikra: link WiFi firmware from the ath10k subdir
• Revert "amdgpu: update GC 11.0.0 firmware"
• Revert "amdgpu: update GC 11.0.0 firmware"
• amdgpu: DMCUB updates for various ASICs
• intel: Update ibt-00a0-01a1-pci.ddc for BE211 - Whale Peak2 (WhP2)
• ath11k: WCN6855 hw2.0: update board-2.bin
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
• qcom: add CDSP firmware for hawi platform
• cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
• cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops
• QCA: Update Bluetooth firmware for QCC2072 UART interface: 1.1.0-00340 to 1.1.0-00355

FEDORA-2026-7e84de33a8 Packages in this update:

• containerd-2.4.2-1.fc45

Update description:

• Update to release v2.4.2
• Resolves: rhbz#2535733
• Resolves CVE-2026-41178: rhbz#2515054

FEDORA-2026-2887458a9f Packages in this update:

• containerd-2.4.2-1.fc46

Update description:

Automatic update for containerd-2.4.2-1.fc46.

Changelog * Thu Oct 15 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 2.4.2-1 - Update to release v2.4.2 - Resolves: rhbz#2535733 - Resolves CVE-2026-41178: rhbz#2515054

FEDORA-2026-839be67202 Packages in this update:

• xen-4.21.2-4.fc44

Update description:

x86/AMD: ineffectual Zenbleed workaround [XSA-515, CVE-2026-79608] x86: XPTI may break on huge-memory systems [XSA-516, CVE-2026-79609] grant-table: double version change race [XSA-517, CVE-2026-79610] VMX: VMentry failure with branch tracing and blocked states [XSA-518, CVE-2026-79611] Arm: multiple issues with GNTTABOP_cache_flush [XSA-519, CVE-2026-102699, CVE-2026-102702] gnttab: cache-flush handling may cause page reference leak [XSA-520, CVE-2026-102700]

FEDORA-EPEL-2026-7adf9f32c3 Packages in this update:

• rust-onefetch-2.28.1-5.el9

Update description:

Rebuilt with faster-hex 0.10.1 for RUSTSEC-2026-0306

FEDORA-EPEL-2026-563fcd8d3e Packages in this update:

• rust-onefetch-2.27.1-6.el10_2

Update description:

Rebuilt with faster-hex 0.10.1 for RUSTSEC-2026-0306

FEDORA-2026-ea3ceeda71 Packages in this update:

• mingw-freetype-2.14.3-3.fc45

Update description:

Backport fix for CVE-2026-95512.

FEDORA-2026-ce03acf998 Packages in this update:

• mingw-freetype-2.14.3-3.fc44

Update description:

Backport fix for CVE-2026-95512.

FEDORA-EPEL-2026-e3bf681096 Packages in this update:

• rust-onefetch-2.27.1-11.el10_3

Update description:

Rebuilt with faster-hex 0.10.1 for RUSTSEC-2026-0306

FEDORA-2026-ea9d9f0e38 Packages in this update:

• perl-DBI-1.656-1.fc45

Update description:

Changes for version 1.656 Remove lock file on end of scope Prevent dbi_profile crash (CVE-2026-108518) (Henrik Teichmann) Memory corruption via selectrow_array + SQLite UDF (issue#98) Fix errstr when dbm_updatable_key attribute for DBD::DBM is set to 2 (croak) on Perl versions < v5.13.2. Fix emit warnings when dbm_updatable_key attribute for DBD::DBM is set to 1 (carp) Fix lock file not removed when DBD::DBM check for bad serializer class fails. (CVE-2026-111879) *** WARNING: Next release will require perl-5.14 *** Main reason: Exception handling

FEDORA-2026-a95b9f327e Packages in this update:

• perl-DBI-1.656-1.fc43

Update description:

Changes for version 1.656 Remove lock file on end of scope Prevent dbi_profile crash (CVE-2026-108518) (Henrik Teichmann) Memory corruption via selectrow_array + SQLite UDF (issue#98) Fix errstr when dbm_updatable_key attribute for DBD::DBM is set to 2 (croak) on Perl versions < v5.13.2. Fix emit warnings when dbm_updatable_key attribute for DBD::DBM is set to 1 (carp) Fix lock file not removed when DBD::DBM check for bad serializer class fails. (CVE-2026-111879) *** WARNING: Next release will require perl-5.14 *** Main reason: Exception handling

FEDORA-2026-a7ce91a6a0 Packages in this update:

• perl-DBI-1.656-1.fc44

Update description:

Changes for version 1.656 Remove lock file on end of scope Prevent dbi_profile crash (CVE-2026-108518) (Henrik Teichmann) Memory corruption via selectrow_array + SQLite UDF (issue#98) Fix errstr when dbm_updatable_key attribute for DBD::DBM is set to 2 (croak) on Perl versions < v5.13.2. Fix emit warnings when dbm_updatable_key attribute for DBD::DBM is set to 1 (carp) Fix lock file not removed when DBD::DBM check for bad serializer class fails. (CVE-2026-111879) *** WARNING: Next release will require perl-5.14 *** Main reason: Exception handling

FEDORA-EPEL-2026-6021bc16a0 Packages in this update:

• rust-onefetch-2.28.1-5.el10_4

Update description:

Rebuilt with faster-hex 0.10.1 for RUSTSEC-2026-0306

FEDORA-EPEL-2026-51d9c325a9 Packages in this update:

• libinstpatch-1.1.8-3.el10_2

Update description:

Update to 1.1.8, including fixes for CVE-2026-111136 and for a memory leak.

FEDORA-2026-e308adcdf4 Packages in this update:

• rust-onefetch-2.28.1-5.fc43

Update description:

Rebuilt with faster-hex 0.10.1 for RUSTSEC-2026-0306

FEDORA-EPEL-2026-08bc2acb70 Packages in this update:

• libinstpatch-1.1.8-3.el10_3

Update description:

Update to 1.1.8, including fixes for CVE-2026-111136 and for a memory leak.

FEDORA-2026-b1f189a5b6 Packages in this update:

• mingw-gstreamer1-1.28.8-1.fc45
• mingw-gstreamer1-plugins-bad-free-1.28.8-1.fc45
• mingw-gstreamer1-plugins-base-1.28.8-1.fc45
• mingw-gstreamer1-plugins-good-1.28.8-1.fc45

Update description:

Update to gstreamer-1.28.8.