Aggregator

Version:6.6.116 (longterm) Released:2025-11-02 Source:linux-6.6.116.tar.xz PGP Signature:linux-6.6.116.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.6.116

FEDORA-2025-6c9c483e21 Packages in this update:

• cef-141.0.11^chromium141.0.7390.122-1.fc43

Update description:

Update to 141.0.7390.122

• High CVE-2025-12036 chromium: Inappropriate implementation in V8
• High CVE-2025-11756: Use after free in Safe Browsing
• High CVE-2025-11458: Heap buffer overflow in Sync
• High CVE-2025-11460: Use after free in Storage
• Medium CVE-2025-11211: Out of bounds read in WebCodecs
• High CVE-2025-11205: Heap buffer overflow in WebGPU
• High CVE-2025-11206: Heap buffer overflow in Video
• Medium CVE-2025-11207: Side-channel information leakage in Storage
• Medium CVE-2025-11208: Inappropriate implementation in Media
• Medium CVE-2025-11209: Inappropriate implementation in Omnibox
• Medium CVE-2025-11210: Side-channel information leakage in Tab
• Medium CVE-2025-11211: Out of bounds read in Media
• Medium CVE-2025-11212: Inappropriate implementation in Media
• Medium CVE-2025-11213: Inappropriate implementation in Omnibox
• Medium CVE-2025-11215: Off by one error in V8
• Low CVE-2025-11216: Inappropriate implementation in Storage
• Low CVE-2025-11219: Use after free in V8
• CVE-2025-10890: Side-channel information leakage in V8
• CVE-2025-10891: Integer overflow in V8
• CVE-2025-10892: Integer overflow in V8

FEDORA-2025-313f6d7702 Packages in this update:

• cef-141.0.11^chromium141.0.7390.122-1.fc42

Update description:

Update to 141.0.7390.122

• High CVE-2025-12036 chromium: Inappropriate implementation in V8
• High CVE-2025-11756: Use after free in Safe Browsing
• High CVE-2025-11458: Heap buffer overflow in Sync
• High CVE-2025-11460: Use after free in Storage
• Medium CVE-2025-11211: Out of bounds read in WebCodecs
• High CVE-2025-11205: Heap buffer overflow in WebGPU
• High CVE-2025-11206: Heap buffer overflow in Video
• Medium CVE-2025-11207: Side-channel information leakage in Storage
• Medium CVE-2025-11208: Inappropriate implementation in Media
• Medium CVE-2025-11209: Inappropriate implementation in Omnibox
• Medium CVE-2025-11210: Side-channel information leakage in Tab
• Medium CVE-2025-11211: Out of bounds read in Media
• Medium CVE-2025-11212: Inappropriate implementation in Media
• Medium CVE-2025-11213: Inappropriate implementation in Omnibox
• Medium CVE-2025-11215: Off by one error in V8
• Low CVE-2025-11216: Inappropriate implementation in Storage
• Low CVE-2025-11219: Use after free in V8
• CVE-2025-10890: Side-channel information leakage in V8
• CVE-2025-10891: Integer overflow in V8
• CVE-2025-10892: Integer overflow in V8

FEDORA-2025-ea90f8d03c Packages in this update:

• dolphin-emu-2503a-11.fc43

Update description:

Add CVE and bug fixes to bundled mbedtls in dolphin-emu

FEDORA-2025-cbd9bd51dd Packages in this update:

• dolphin-emu-2503a-4.fc42

Update description:

Add CVE and bug fixes to bundled mbedtls in dolphin-emu

FEDORA-2025-01148de25a Packages in this update:

• skopeo-1.20.0-4.fc42

Update description:

Security fix for CVE-2025-58189 and CVE-2025-61725

FEDORA-2025-af04521261 Packages in this update:

• skopeo-1.20.0-5.fc43

Update description:

Security fix for CVE-2025-58189, CVE-2025-61725

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; - Clock framework and drivers; - GPU drivers; - IIO subsystem; - InfiniBand drivers; - Media drivers; - MemoryStick subsystem; - Network drivers; - NTB driver; - PCI subsystem; - Remote Processor subsystem; - Thermal drivers; - Virtio Host (VHOST) subsystem; - 9P distributed file system; - File systems infrastructure; - JFS file system; - Network file system (NFS) server daemon; - NTFS3 file system; - SMB network file system; - Memory management; - RDMA verbs API; - Kernel fork() syscall; - Tracing infrastructure; - Watch queue notification mechanism; - Asynchronous Transfer Mode (ATM) subsystem; - Networking core; - IPv4 networking; - IPv6 networking; - Netfilter; - Network traffic control; - SCTP protocol; - TLS protocol; - SoC Audio for Freescale CPUs drivers; (CVE-2025-39728, CVE-2025-23136, CVE-2025-22062, CVE-2025-22035, CVE-2025-22020, CVE-2025-22083, CVE-2025-22071, CVE-2025-22060, CVE-2025-22073, CVE-2025-22044, CVE-2025-22063, CVE-2025-22079, CVE-2025-22057, CVE-2025-22095, CVE-2025-39735, CVE-2025-39682, CVE-2025-22058, CVE-2025-22021, CVE-2025-22018, CVE-2025-22056, CVE-2025-22054, CVE-2025-22080, CVE-2025-22039, CVE-2025-22019, CVE-2025-22038, CVE-2025-22028, CVE-2023-53034, CVE-2024-58092, CVE-2025-38637, CVE-2025-22089, CVE-2025-40114, CVE-2025-22068, CVE-2025-37937, CVE-2025-22070, CVE-2025-22072, CVE-2025-22086, CVE-2025-22050, CVE-2025-22040, CVE-2025-22065, CVE-2025-38575, CVE-2025-22064, CVE-2025-22033, CVE-2025-22041, CVE-2025-22090, CVE-2025-22036, CVE-2025-23138, CVE-2025-22047, CVE-2025-38240, CVE-2025-22066, CVE-2025-22042, CVE-2025-38152, CVE-2025-22055, CVE-2025-22081, CVE-2025-22045, CVE-2025-22053, CVE-2025-22075, CVE-2025-22027, CVE-2025-22025, CVE-2025-22097)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - x86 architecture; - ACPI drivers; - Serial ATA and Parallel ATA drivers; - Drivers core; - ATA over ethernet (AOE) driver; - Ublk userspace block driver; - Bus devices; - DMA engine subsystem; - Arm Firmware Framework for ARMv8-A(FFA); - Cirrus firmware drivers; - GPU drivers; - HID subsystem; - Hardware monitoring drivers; - I2C subsystem; - InfiniBand drivers; - Input Device (Miscellaneous) drivers; - Multiple devices driver; - Media drivers; - TI TPS6594 PFSM driver; - MMC subsystem; - MTD block device drivers; - Network drivers; - NVME drivers; - x86 platform drivers; - RapidIO drivers; - Voltage and Current Regulator drivers; - Remote Processor subsystem; - S/390 drivers; - SCSI subsystem; - TCM subsystem; - Trusted Execution Environment drivers; - TTY drivers; - ChipIdea USB driver; - USB Type-C support driver; - Framebuffer layer; - TSM Common Guest driver; - File systems infrastructure; - BTRFS file system; - Ceph distributed file system; - Ext4 file system; - F2FS file system; - JFFS2 file system; - JFS file system; - Network file systems library; - Network file system (NFS) client; - Network file system (NFS) server daemon; - SMB network file system; - Memory Management; - Bluetooth subsystem; - Tracing infrastructure; - io_uring subsystem; - IPC subsystem; - BPF subsystem; - Perf events; - Kernel exit() syscall; - IRQ subsystem; - Scheduler infrastructure; - Maple Tree data structure library; - Memory management; - Asynchronous Transfer Mode (ATM) subsystem; - Ethernet bridge; - Networking core; - IPv6 networking; - MultiProtocol Label Switching driver; - Netfilter; - NFC subsystem; - Rose network layer; - Network traffic control; - Sun RPC protocol; - TIPC protocol; - TLS protocol; - Unix domain sockets; - VMware vSockets driver; - WCD audio codecs; - USB sound devices; (CVE-2025-38339, CVE-2025-38391, CVE-2025-38262, CVE-2025-38345, CVE-2025-38387, CVE-2025-38373, CVE-2025-38395, CVE-2025-38330, CVE-2025-38425, CVE-2025-38210, CVE-2025-38206, CVE-2025-38219, CVE-2025-38245, CVE-2025-38253, CVE-2025-38401, CVE-2025-38410, CVE-2025-38086, CVE-2025-38340, CVE-2025-38368, CVE-2025-38385, CVE-2025-38384, CVE-2025-38326, CVE-2025-38224, CVE-2025-38338, CVE-2025-38191, CVE-2025-39682, CVE-2025-38343, CVE-2025-38090, CVE-2025-38228, CVE-2025-38182, CVE-2025-38231, CVE-2025-38183, CVE-2025-38184, CVE-2025-38237, CVE-2025-38413, CVE-2025-38356, CVE-2025-38246, CVE-2025-38202, CVE-2025-38248, CVE-2025-38254, CVE-2025-38426, CVE-2025-38429, CVE-2025-38364, CVE-2025-38388, CVE-2025-38435, CVE-2025-38403, CVE-2025-38186, CVE-2025-38199, CVE-2025-38402, CVE-2025-38181, CVE-2025-38264, CVE-2025-38362, CVE-2025-38341, CVE-2025-38422, CVE-2025-38331, CVE-2025-38423, CVE-2025-38233, CVE-2025-38337, CVE-2025-38328, CVE-2025-38196, CVE-2025-38412, CVE-2025-38205, CVE-2025-38242, CVE-2025-38324, CVE-2025-38354, CVE-2025-38347, CVE-2025-38217, CVE-2025-38393, CVE-2025-38392, CVE-2025-38390, CVE-2025-38321, CVE-2025-38541, CVE-2025-38363, CVE-2025-38203, CVE-2025-38250, CVE-2025-38418, CVE-2025-38336, CVE-2025-38333, CVE-2025-38194, CVE-2025-38372, CVE-2025-38348, CVE-2025-38370, CVE-2025-38411, CVE-2025-38188, CVE-2025-38365, CVE-2025-38241, CVE-2025-38201, CVE-2025-38259, CVE-2025-38355, CVE-2025-38227, CVE-2025-38225, CVE-2025-38405, CVE-2025-38329, CVE-2025-38232, CVE-2025-38344, CVE-2025-38238, CVE-2025-38239, CVE-2025-38260, CVE-2025-38257, CVE-2025-38399, CVE-2025-38419, CVE-2025-38430, CVE-2025-38251, CVE-2025-38332, CVE-2025-38220, CVE-2025-38417, CVE-2025-38396, CVE-2025-38234, CVE-2025-38434, CVE-2025-38197, CVE-2025-38436, CVE-2025-38408, CVE-2025-38204, CVE-2025-38222, CVE-2025-38361, CVE-2025-38218, CVE-2025-38212, CVE-2025-38198, CVE-2025-38255, CVE-2025-38389, CVE-2025-38085, CVE-2025-38244, CVE-2025-38089, CVE-2025-38428, CVE-2025-38369, CVE-2025-38189, CVE-2025-38084, CVE-2025-38400, CVE-2025-38382, CVE-2025-38223, CVE-2025-38325, CVE-2025-38263, CVE-2025-38249, CVE-2025-38346, CVE-2025-38320, CVE-2025-38409, CVE-2025-38374, CVE-2025-38208, CVE-2025-38256, CVE-2025-38371, CVE-2025-38192, CVE-2025-38406, CVE-2025-38360, CVE-2025-38258, CVE-2025-38226, CVE-2025-38376, CVE-2025-38375, CVE-2025-38200, CVE-2025-38523, CVE-2025-38334, CVE-2025-38236, CVE-2025-38386, CVE-2025-38421, CVE-2025-38087, CVE-2025-38416, CVE-2025-38179, CVE-2025-38420, CVE-2025-38424, CVE-2025-38377, CVE-2025-38359, CVE-2025-38342, CVE-2025-38431, CVE-2025-38407, CVE-2025-38427, CVE-2025-38229, CVE-2025-38353, CVE-2025-38383, CVE-2025-38211, CVE-2025-38322, CVE-2025-38381, CVE-2025-38261)

FEDORA-2025-0753bddd6c Packages in this update:

• bpfman-0.5.4-3.fc42

Update description:

This update fixes CVE-2025-0977 (RUSTSEC-2025-0004), a use-after-free vulnerability in the Rust openssl crate's ssl::select_next_proto function. The openssl crate has been updated from version 0.10.67 to 0.10.70 in the vendored dependencies.

FEDORA-2025-e67231423f Packages in this update:

• bpfman-0.5.4-3.fc43

Update description:

This update fixes CVE-2025-0977 (RUSTSEC-2025-0004), a use-after-free vulnerability in the Rust openssl crate's ssl::select_next_proto function. The openssl crate has been updated from version 0.10.67 to 0.10.70 in the vendored dependencies.

FEDORA-2025-78747a63cd Packages in this update:

• luksmeta-10-1.fc41

Update description:

New upstream release v10 Fix: CVE-2025-11568

FEDORA-2025-457000540a Packages in this update:

• luksmeta-10-1.fc42

Update description:

New upstream release v10 Fix: CVE-2025-11568

FEDORA-2025-e53e8fdc0a Packages in this update:

• luksmeta-10-1.fc43

Update description:

Fix handling of large metadata Fix: CVE-2025-11568

Version:next-20251031 (linux-next) Released:2025-10-31

FEDORA-2025-9d12a32bce Packages in this update:

• golang-github-openprinting-ipp-usb-0.9.30-7.fc41

Update description:

Rebuild with the latest golang in repos

FEDORA-2025-d9921d4ed5 Packages in this update:

• golang-github-openprinting-ipp-usb-0.9.30-7.fc42

Update description:

Rebuild with the latest golang in repos

FEDORA-2025-46b6a955b3 Packages in this update:

• golang-github-openprinting-ipp-usb-0.9.30-7.fc43

Update description:

Rebuild with the latest golang in repos

FEDORA-2025-ece4f3816e Packages in this update:

• dotnet9.0-9.0.111-1.fc41

Update description:

This is the October 2025 release of .NET 9, updating the SDK to version 9.0.111 and runtime to version to 9.0.10.

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.10/9.0.111.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.10/9.0.10.md

FEDORA-2025-e9c0b9e1b4 Packages in this update:

• dotnet9.0-9.0.111-1.fc42

Update description:

This is the October 2025 release of .NET 9, updating the SDK to version 9.0.111 and runtime to version to 9.0.10.

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.10/9.0.111.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.10/9.0.10.md