[SECURITY] Fedora 45 Update: libxklavier-5.4-32.fc45

libxklavier is a library providing a high-level API for the X Keyboard Extension XKB. This library is intended to support XFree86 and other commercial X servers. It is useful for creating XKB-related software layout indicators etc...

[SECURITY] Fedora 45 Update: libsoup-2.74.3-12.fc45

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

[SECURITY] Fedora 45 Update: liblxi-1.22-6.fc45

The LXI library liblxi is an open source software library for GNU/Linux systems which offers a simple API for communicating with LXI enabled instruments. The API allows applications to easily discover instruments on networks and communicate SCPI commands...

[SECURITY] Fedora 45 Update: libisds-0.11.2-17.fc45

This is a library for accessing ISDS Informa=C4=8Dn=C3=AD syst=C3=A9m datov =C3=BDch schr=C3=A1nek / Data Box Information System SOAP=E2=80=AFservices as defined in Czech ISDS A ct 300/2008 Coll. and implied documents...

[SECURITY] Fedora 45 Update: libguestfs-1.61.3-3.fc45

Libguestfs is a library for accessing and modifying virtual machine disk images. http://libguestfs.org Libguestfs uses Linux kernel and qemu code, and can access any type of guest filesystem that Linux and qemu can, including but not limited to: ext2/3/4, btrfs, FAT and NTFS, LVM, many different...

[SECURITY] Fedora 45 Update: libgsf-1.14.59-2.fc45

A library for reading and writing structured files e.g. MS OLE and Zip...

[SECURITY] Fedora 45 Update: libdatovka-0.7.4-2.fc45

Client library for accessing SOAP services of ISDS Informa=C4=8Dn=C3=AD syst =C3=A9m datov=C3=BDch schr=C3=A1nek / Data Box Information System as defined in Czec h ISDS Act 300/2008 Coll. and implied documents...

[SECURITY] Fedora 45 Update: libcmis-0.6.3-2.fc45

LibCMIS is a C/C++ client library for working with CM content management interfaces. The primary supported interface which gave the library its name is CMIS, which allows applications to connect to any ECM behaving as a CMIS server Alfresco or Nuxeo are examples of open source ones. Another...

[SECURITY] Fedora 45 Update: lasso-2.9.0-11.fc45

Lasso is a library that implements the Liberty Alliance Single Sign On standards, including the SAML and SAML2 specifications. It allows to handle the whole life-cycle of SAML based Federations, and provides bindings for multiple languages...

[SECURITY] Fedora 45 Update: gdcm-3.0.24-24.fc45

Grassroots DiCoM GDCM is a C++ library for DICOM medical files. It supports ACR-NEMA version 1 and 2 huffman compression is not supported, RAW, JPEG, JPEG 2000, JPEG-LS, RLE and deflated transfer syntax. It comes with a super fast scanner implementation to quickly scan hundreds of DICOM files. It...

[SECURITY] Fedora 45 Update: flickcurl-1.26-33.fc45

Flickcurl is a C library for the Flickr API, handling creating the requests, signing, token management, calling the API, marshalling request parameters and decoding responses. It uses libcurl to call the REST web service and libxml2 to manipulate the XML responses. Flickcurl supports all of the A...

[SECURITY] Fedora 45 Update: dicomanonymizer-1-0.22.20210920gitf076264.fc45

A multi-threaded anonymizer for DICOM files implementing most of DICOM PS 3.15 AnnexE. Entries such as uid entries are replaced with hash values. This ensur es that partial runs of a studies DICOM files can be merged afterwards. This project is written in C++ using the gdcm library and multiple...

Attestable Audit: Property-Based Attestation for Proprietary Workloads without Artifact Disclosure

Trusted Execution Environments TEEs prove the integrity of code and data to a remote peer through remote attestation: the TEE issues an attestation report by signing, with a hardware-bound key, its configuration information, including measurements cryptographic digests of the code loaded inside i...

0xble (>=22.0.0, <=23.2.2), 0xsodium (>=0.2.0, <=0.14.0) +14217 more potentially affected by CVE-2026-19481 via @fastify/busboy (>=1.0.0, <=3.2.0)

@fastify/busboy NPM version =1.0.0, =22.0.0, =0.2.0, =0.0.1, =1.0.0, =0.2.0, =0.4.0, =0.1.0, =0.0.1, =1.0.21, =0.6.0, =0.6.2 and more Source cves: CVE-2026-19481 Source advisory: GHSA-X8MW-P69M-V3MX...

@awmottaz/grackle (>=3.0.0, <=3.2.0), @beiguancyc/parse-server (>=9.9.0-ruixiang.1, <=9.10.0-ruixiang.4) +14 more potentially affected by CVE-2026-19484 via @fastify/busboy (>=3.1.1, <=3.2.0)

@fastify/busboy NPM version =3.1.1, =3.0.0, =9.9.0-ruixiang.1, =0.37.0, =0.8.22, =0.9.21, =1.0.4, =1.0.0, =4.5.0-blowfish-pre, =11.1.1-9.0, =6.1.1, =3.31.25, =9.2.8-0, =9.10.0-1, =0.27.0, =4.0.0, =4.2.0 and more Source cves: CVE-2026-19484 Source advisory: GHSA-XJH9-V7X6-24JW...

@a2ui/angular (>=0.9.0-alpha.0, <=0.9.1), @a2ui/lit (>=0.9.1, <=0.9.3) +43 more potentially affected by CVE-2026-10032 via @a2ui/web_core (>=0.9.0, <=0.9.2)

@a2ui/webcore NPM version =0.9.0, =0.9.0-alpha.0, =0.9.1, =0.9.0-alpha.0, =0.0.1-beta.1, =0.0.1-beta.1, =0.0.1-beta.1, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.5.1 and more Source cves: CVE-2026-10032 Source advisory: GHSA-72QQ-P3R5-F7WQ...

@a2ui/angular (>=0.9.0-alpha.0, <=0.9.1), @a2ui/lit (>=0.9.1, <=0.9.3) +43 more potentially affected by CVE-2026-10032 via @a2ui/web_core (>=0.9.0, <=0.9.2)

@a2ui/webcore NPM version =0.9.0, =0.9.0-alpha.0, =0.9.1, =0.9.0-alpha.0, =0.0.1-beta.1, =0.0.1-beta.1, =0.0.1-beta.1, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.5.1 and more Source cves: CVE-2026-10032 Source advisory: OSV:GHSA-72QQ-P3R5-F7WQ...

acmer (>=0.0.1, <=0.0.4), auth-proxy (>=0.0.1, <=0.1.1) +463 more potentially affected by CVE-2026-18140 via aws-smithy-json (>=0.27.0-alpha.1, <=0.56.1)

aws-smithy-json CARGO version =0.27.0-alpha.1, =0.0.1, =0.0.1, =0.2.36, =0.0.18, =0.0.42, =0.0.1, =0.0.22-alpha, =0.0.1, =0.0.24, =0.0.1, =0.1.0, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.34.0 and more Source cves: CVE-2026-18140 Source advisory: GHSA-8FFR-XGWF-XJ56...

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +887 more potentially affected by CVE-2026-104872 via @opentelemetry/instrumentation-oracledb (>=0.27.0, <=0.45.0)

@opentelemetry/instrumentation-oracledb NPM version =0.27.0, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =0.0.53, =0.0.31, =0.8.0, =0.1.0, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =1.0.7, =5.1.1-staging.260347880488, =5.1.1-staging.260347880488, =5.1.1-staging.260347880488,...

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +3244 more potentially affected by CVE-2026-104872 via @opentelemetry/instrumentation-pg (>=0.15.0, <=0.72.0)

@opentelemetry/instrumentation-pg NPM version =0.15.0, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =3.11.1, =0.0.53, =0.0.31, =0.8.0, =0.1.0, =1.0.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.3.702, =0.0.65, =0.2.0, =0.2.0, =0.2.6 and more Source cves: CVE-2026-104872 Source advisory:...