A potential buffer overflow from the use of unsigned integers has been found in the XPM processing library of xorg. https://bugs.freedesktop.org/show_bug.cgi?id=1920 Probably affects FC3, FC2 (none verified)
Fixed in FC3-updates in package openmotif-2.2.3-9.FC3.1 or newer.