[SECURITY] Fedora 45 Update: ocaml-cryptokit-1.21.1-3.fc45

The Cryptokit library for Objective Caml provides a variety of cryptographic primitives that can be used to implement cryptographic protocols in security-sensitive applications. The primitives provided include: Symmetric-key cryptography: AES, Chacha20, DES, Triple-DES, Blowfish, ARCfour, in ECB,...

[SECURITY] Fedora 45 Update: ocaml-camomile-2.1.0-1.fc45

Camomile is a Unicode library for ocaml. Camomile provides Unicode character type, UTF-8, UTF-16, UTF-32 strings, conversion to/from about 200 encodings, collation and locale-sensitive case mappings, and more...

[SECURITY] Fedora 45 Update: ocaml-biniou-1.2.2-21.fc45

Biniou pronounced "be new" is a binary data format designed for speed, safety, ease of use and backward compatibility as protocols evolve. Biniou is vastly equivalent to JSON in terms of functionality but allows implementations several times faster 4 times faster than yojson, with 25-35% space...

[SECURITY] Fedora 45 Update: ocaml-bos-0.3.0-5.fc45

Bos provides support for basic and robust interaction with the operating system in OCaml. It has functions to access the process environment, parse command line arguments, interact with the file system and run command line programs. Bos works equally well on POSIX and Windows operating systems...

[SECURITY] Fedora 45 Update: ocaml-calendar-3.0.0-24.fc45

Objective Caml library for managing dates and times...

[SECURITY] Fedora 45 Update: ocaml-b0-0.0.6-3.fc45

WARNING: this package is unstable and a work in progress. Do not depend on i t. B0 describes software construction and deployments using modular and customizable definitions written in OCaml. B0 describes: - Build environments. - Software configuration, build and testing. - Source and binary...

[SECURITY] Fedora 45 Update: not-ocamlfind-0.15-2.fc45

The command not-ocamlfind is a pass-thru to ocamlfind, but adds three new commands: preprocess, reinstall-if-diff and package-graph. - reinstall-if-diff does what it says on the label: only reinstalls remove then install if the file-content of the package has changed. - preprocess produces the...

[SECURITY] Fedora 45 Update: libguestfs-1.61.4-2.fc45

Libguestfs is a library for accessing and modifying virtual machine disk images. http://libguestfs.org Libguestfs uses Linux kernel and qemu code, and can access any type of guest filesystem that Linux and qemu can, including but not limited to: ext2/3/4, btrfs, FAT and NTFS, LVM, many different...

[SECURITY] Fedora 45 Update: nbdkit-1.48.1-2.fc45

NBD is a protocol for accessing block devices hard disks and disk-like things over the network. nbdkit is a toolkit for creating NBD servers. The key features are: Multithreaded NBD server written in C with good performance. Minimal dependencies for the basic server. Liberal license BSD allows...

[SECURITY] Fedora 45 Update: freetennis-0.4.8-69.fc45

Free Tennis is a free software tennis simulation game. The game can be played against an A.I. or human-vs-human via LAN or internet...

[SECURITY] Fedora 45 Update: flocq-4.2.2-7.fc45

Flocq Floats for Rocq is a floating-point formalization for the Rocq system. It provides a comprehensive library of theorems on a multi-radix multi-precision arithmetic. It also supports efficient numerical computations inside Rocq...

[SECURITY] Fedora 45 Update: coccinelle-1.3.3-2.fc45

Coccinelle is a tool to utilize semantic patches for manipulating C code. It was originally designed to ease maintenance of device drivers in the Linux kernel...

[SECURITY] Fedora 45 Update: alt-ergo-2.4.3-5.fc45

Alt-Ergo is an automated theorem prover implemented in OCaml. It is based on CCX - a congruence closure algorithm parameterized by an equational theory X. This algorithm is reminiscent of the Shostak algorithm. Currently CCX is instantiated by the theory of linear arithmetics. Alt-Ergo also...

[SECURITY] Fedora 45 Update: perl-DBI-1.655-1.fc45

DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used...

CVE-2026-104037

A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket. This causes an integer underflow and an out-of-bounds memory read, which can crash the responder process and result in a deni...

CVE-2026-92821

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...

CVE-2026-104037

A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket. This causes an integer underflow and an out-of-bounds memory read, which can crash the responder process and result in a deni...

CVE-2026-104035

A flaw was found in SSSD. An issue in the Kerberos Credential Manager KCM responder allows a local user to cause a Denial of Service DoS by maintaining a persistent connection and repeatedly storing and destroying credentials. Because the service fails to release cached objects from memory when...

CVE-2026-104032

A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of...

CVE-2026-104031

A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated during successful request processing is not released until the client connection terminates. A local attacker can exploit this vulnerability by maintaining an open connection and repeatedly...