Aggregator

It was discovered that Freeglut incorrectly managed memory, resulting in a memory leak. An attacker could possibly use this issue to cause a denial of service.

FEDORA-2025-604e02ca72 Packages in this update:

• cef-142.0.10^chromium142.0.7444.162-2.fc43

Update description:

Update to 142.0.7444.162

• High CVE-2025-12725: Out of bounds write in WebGPU
• High CVE-2025-12726: Inappropriate implementation in Views
• High CVE-2025-12727: Inappropriate implementation in V8
• Medium CVE-2025-12728: Inappropriate implementation in Omnibox
• Medium CVE-2025-12729: Inappropriate implementation in Omnibox
• High CVE-2025-12428: Type Confusion in V8
• High CVE-2025-12429: Inappropriate implementation in V8
• High CVE-2025-12430: Object lifecycle issue in Media
• High CVE-2025-12431: Inappropriate implementation in Extensions
• High CVE-2025-12432: Race in V8
• High CVE-2025-12433: Inappropriate implementation in V8
• High CVE-2025-12036: Inappropriate implementation in V8
• Medium CVE-2025-12434: Race in Storage
• Medium CVE-2025-12435: Incorrect security UI in Omnibox
• Medium CVE-2025-12436: Policy bypass in Extensions
• Medium CVE-2025-12437: Use after free in PageInfo
• Medium CVE-2025-12438: Use after free in Ozone
• Medium CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
• Low CVE-2025-12440: Inappropriate implementation in Autofill
• Medium CVE-2025-12441: Out of bounds read in V8
• Medium CVE-2025-12443: Out of bounds read in WebXR
• Low CVE-2025-12444: Incorrect security UI in Fullscreen UI
• Low CVE-2025-12445: Policy bypass in Extensions
• Low CVE-2025-12446: Incorrect security UI in SplitView
• Low CVE-2025-12447: Incorrect security UI in Omnibox

FEDORA-2025-58193e3850 Packages in this update:

• cef-142.0.14^chromium142.0.7444.162-1.fc42

Update description:

Update to 142.0.7444.162

• High CVE-2025-12725: Out of bounds write in WebGPU
• High CVE-2025-12726: Inappropriate implementation in Views
• High CVE-2025-12727: Inappropriate implementation in V8
• Medium CVE-2025-12728: Inappropriate implementation in Omnibox
• Medium CVE-2025-12729: Inappropriate implementation in Omnibox
• High CVE-2025-12428: Type Confusion in V8
• High CVE-2025-12429: Inappropriate implementation in V8
• High CVE-2025-12430: Object lifecycle issue in Media
• High CVE-2025-12431: Inappropriate implementation in Extensions
• High CVE-2025-12432: Race in V8
• High CVE-2025-12433: Inappropriate implementation in V8
• High CVE-2025-12036: Inappropriate implementation in V8
• Medium CVE-2025-12434: Race in Storage
• Medium CVE-2025-12435: Incorrect security UI in Omnibox
• Medium CVE-2025-12436: Policy bypass in Extensions
• Medium CVE-2025-12437: Use after free in PageInfo
• Medium CVE-2025-12438: Use after free in Ozone
• Medium CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
• Low CVE-2025-12440: Inappropriate implementation in Autofill
• Medium CVE-2025-12441: Out of bounds read in V8
• Medium CVE-2025-12443: Out of bounds read in WebXR
• Low CVE-2025-12444: Incorrect security UI in Fullscreen UI
• Low CVE-2025-12445: Policy bypass in Extensions
• Low CVE-2025-12446: Incorrect security UI in SplitView
• Low CVE-2025-12447: Incorrect security UI in Omnibox

It was discovered that FFmpeg incorrectly handled memory allocation in the ALS audio decoder. If a user was tricked into loading a crafted media file, a remote attacker could possibly use this issue to make FFmpeg crash, resulting in a denial of service.

Version:6.18-rc6 (mainline) Released:2025-11-16 Source:linux-6.18-rc6.tar.gz Patch:full (incremental)

FEDORA-2025-fd56e115c0 Packages in this update:

• k9s-0.50.16-2.fc42

Update description:

Rebuild to fix several CVEs in golang std.

FEDORA-2025-30806907c2 Packages in this update:

• k9s-0.50.16-2.fc43

Update description:

Rebuild to fix several CVEs in golang std.

FEDORA-2025-e282b00383 Packages in this update:

• kubernetes1.33-1.33.6-1.fc41

Update description:

• Update to release v1.33.6
• Resolves: rhbz#2398588, rhbz#2398849, rhbz#2399250, rhbz#2399523
• Resolves: rhbz#2407789, rhbz#2408059, rhbz#2408316, rhbz#2408610
• Resolves: rhbz#2408673, rhbz#2408731, rhbz#2409238, rhbz#2409528
• Resolves: rhbz#2409789, rhbz#2410203, rhbz#2410478, rhbz#2410739
• Resolves: rhbz#2411118, rhbz#2411377, rhbz#2412570, rhbz#2412589
• Resolves: rhbz#2412804
• Upstream fixes

FEDORA-2025-362709ff5e Packages in this update:

• kubernetes1.33-1.33.6-1.fc42

Update description:

• Update to release v1.33.6
• Resolves: rhbz#2398588, rhbz#2398849, rhbz#2399250, rhbz#2399523
• Resolves: rhbz#2407789, rhbz#2408059, rhbz#2408316, rhbz#2408610
• Resolves: rhbz#2408673, rhbz#2408731, rhbz#2409238, rhbz#2409528
• Resolves: rhbz#2409789, rhbz#2410203, rhbz#2410478, rhbz#2410739
• Resolves: rhbz#2411118, rhbz#2411377, rhbz#2412570, rhbz#2412589
• Resolves: rhbz#2412804
• Upstream fixes

FEDORA-2025-355be35bb1 Packages in this update:

• calibre-8.14.0-1.fc43

Update description:

Update to 8.14.0. Fixes rhbz#2413304

FEDORA-2025-298add9246 Packages in this update:

• kubernetes1.33-1.33.6-1.fc43

Update description:

• Update to release v1.33.6
• Resolves: rhbz#2398588, rhbz#2398849, rhbz#2399250, rhbz#2399523
• Resolves: rhbz#2407789, rhbz#2408059, rhbz#2408316, rhbz#2408610
• Resolves: rhbz#2408673, rhbz#2408731, rhbz#2409238, rhbz#2409528
• Resolves: rhbz#2409789, rhbz#2410203, rhbz#2410478, rhbz#2410739
• Resolves: rhbz#2411118, rhbz#2411377, rhbz#2412570, rhbz#2412589
• Resolves: rhbz#2412804
• Upstream fixes

FEDORA-2025-fe1d8025b0 Packages in this update:

• kubernetes1.33-1.33.6-1.fc44

Update description:

Automatic update for kubernetes1.33-1.33.6-1.fc44.

Changelog * Thu Nov 13 2025 Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.6-1 - Update to release v1.33.6 - Resolves: rhbz#2398588, rhbz#2398849, rhbz#2399250, rhbz#2399523 - Resolves: rhbz#2407789, rhbz#2408059, rhbz#2408316, rhbz#2408610 - Resolves: rhbz#2408673, rhbz#2408731, rhbz#2409238, rhbz#2409528 - Resolves: rhbz#2409789, rhbz#2410203, rhbz#2410478, rhbz#2410739 - Resolves: rhbz#2411118, rhbz#2411377, rhbz#2412570, rhbz#2412589 - Resolves: rhbz#2412804 - Upstream fixes

FEDORA-2025-ebce31df24 Packages in this update:

• kubernetes1.34-1.34.2-1.fc41

Update description:

• Update to release v1.34.2
• Resolves: rhbz#2398589, rhbz#2398850, rhbz#2399251, rhbz#2399524
• Resolves: rhbz#2407790, rhbz#2408060, rhbz#2408317, rhbz#2408611
• Resolves: rhbz#2408674, rhbz#2408732, rhbz#2409239, rhbz#2409529
• Resolves: rhbz#2409790, rhbz#2410204, rhbz#2410479, rhbz#2410740
• Resolves: rhbz#2411120, rhbz#2411378, rhbz#2411636 rhbz#2412590
• Resolves: rhbz#2412805
• Upstream fixes

FEDORA-2025-4c576d1bd9 Packages in this update:

• kubernetes1.34-1.34.2-1.fc42

Update description:

• Update to release v1.34.2
• Resolves: rhbz#2398589, rhbz#2398850, rhbz#2399251, rhbz#2399524
• Resolves: rhbz#2407790, rhbz#2408060, rhbz#2408317, rhbz#2408611
• Resolves: rhbz#2408674, rhbz#2408732, rhbz#2409239, rhbz#2409529
• Resolves: rhbz#2409790, rhbz#2410204, rhbz#2410479, rhbz#2410740
• Resolves: rhbz#2411120, rhbz#2411378, rhbz#2411636 rhbz#2412590
• Resolves: rhbz#2412805
• Upstream fixes

FEDORA-2025-f32b1debd8 Packages in this update:

• kubernetes1.34-1.34.2-1.fc43

Update description:

• Update to release v1.34.2
• Resolves: rhbz#2398589, rhbz#2398850, rhbz#2399251, rhbz#2399524
• Resolves: rhbz#2407790, rhbz#2408060, rhbz#2408317, rhbz#2408611
• Resolves: rhbz#2408674, rhbz#2408732, rhbz#2409239, rhbz#2409529
• Resolves: rhbz#2409790, rhbz#2410204, rhbz#2410479, rhbz#2410740
• Resolves: rhbz#2411120, rhbz#2411378, rhbz#2411636 rhbz#2412590
• Resolves: rhbz#2412805
• Upstream fixes

FEDORA-2025-36898b8750 Packages in this update:

• chromium-142.0.7444.162-1.fc43

Update description:

Update to 142.0.7444.162

* High CVE-2025-13042: Inappropriate implementation in V8

FEDORA-2025-c92c2e0d79 Packages in this update:

• chromium-142.0.7444.162-1.fc42

Update description:

Update to 142.0.7444.162

* High CVE-2025-13042: Inappropriate implementation in V8

FEDORA-2025-7c82e2b870 Packages in this update:

• chromium-142.0.7444.162-1.fc41

Update description:

Update to 142.0.7444.162

* High CVE-2025-13042: Inappropriate implementation in V8

FEDORA-EPEL-2025-400842a607 Packages in this update:

• chromium-142.0.7444.162-1.el9

Update description:

Update to 142.0.7444.162

* High CVE-2025-13042: Inappropriate implementation in V8