Aggregator

chromium-142.0.7444.134-1.fc41

Fedora Security Advisories
2 weeks 3 days ago
FEDORA-2025-671d7aa1ba Packages in this update:
  • chromium-142.0.7444.134-1.fc41
Update description:

Update to 142.0.7444.134

* High CVE-2025-12725: Out of bounds write in WebGPU * High CVE-2025-12726: Inappropriate implementation in Views * High CVE-2025-12727: Inappropriate implementation in V8 * Medium CVE-2025-12728: Inappropriate implementation in Omnibox * Medium CVE-2025-12729: Inappropriate implementation in Omnibox

chromium-142.0.7444.134-1.el9

Fedora Security Advisories
2 weeks 3 days ago
FEDORA-EPEL-2025-35c67d93f9 Packages in this update:
  • chromium-142.0.7444.134-1.el9
Update description:

Update to 142.0.7444.134

* High CVE-2025-12725: Out of bounds write in WebGPU * High CVE-2025-12726: Inappropriate implementation in Views * High CVE-2025-12727: Inappropriate implementation in V8 * Medium CVE-2025-12728: Inappropriate implementation in Omnibox * Medium CVE-2025-12729: Inappropriate implementation in Omnibox

chromium-142.0.7444.134-1.fc43

Fedora Security Advisories
2 weeks 3 days ago
FEDORA-2025-97961060e1 Packages in this update:
  • chromium-142.0.7444.134-1.fc43
Update description:

Update to 142.0.7444.134

* High CVE-2025-12725: Out of bounds write in WebGPU * High CVE-2025-12726: Inappropriate implementation in Views * High CVE-2025-12727: Inappropriate implementation in V8 * Medium CVE-2025-12728: Inappropriate implementation in Omnibox * Medium CVE-2025-12729: Inappropriate implementation in Omnibox

chromium-142.0.7444.134-1.el10_2

Fedora Security Advisories
2 weeks 3 days ago
FEDORA-EPEL-2025-bcf0aee791 Packages in this update:
  • chromium-142.0.7444.134-1.el10_2
Update description:

Update to 142.0.7444.134

* High CVE-2025-12725: Out of bounds write in WebGPU * High CVE-2025-12726: Inappropriate implementation in Views * High CVE-2025-12727: Inappropriate implementation in V8 * Medium CVE-2025-12728: Inappropriate implementation in Omnibox * Medium CVE-2025-12729: Inappropriate implementation in Omnibox

USN-7853-3: Linux kernel (Azure) vulnerabilities

Ubuntu Security Advisories
2 weeks 4 days ago
Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this to expose sensitive information from the host OS. (CVE-2025-40300) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - DMA engine subsystem; - GPU drivers; - HSI subsystem; - Ethernet team driver; - Ext4 file system; - Timer subsystem; - DCCP (Datagram Congestion Control Protocol); - IPv6 networking; - NET/ROM layer; - SCTP protocol; - USB sound devices; (CVE-2023-52574, CVE-2023-52650, CVE-2024-41006, CVE-2024-50006, CVE-2024-50299, CVE-2024-53124, CVE-2024-53150, CVE-2024-56767, CVE-2025-37838, CVE-2025-38352)

bind9-next-9.21.14-2.fc42

Fedora Security Advisories
2 weeks 4 days ago
FEDORA-2025-d9f9394ecd Packages in this update:
  • bind9-next-9.21.14-2.fc42
Update description: Update to 9.21.14 (rhbz#2394406) Security Fixes:
  • DNSSEC validation fails if matching but invalid DNSKEY is found. (CVE-2025-8677)
  • Address various spoofing attacks. (CVE-2025-40778)
  • Cache-poisoning due to weak pseudo-random number generator. (CVE-2025-40780)
New Features:
  • Add dnssec-policy keys configuration check to named-checkconf.
  • Add support for synthetic records.
  • Support for zone-specific plugins.
  • Support for additional tokens in the zone file name template.
Removed Features:
  • Remove randomized RRset ordering.

and bug fixes

https://downloads.isc.org/isc/bind9/9.21.14/doc/arm/html/notes.html#notes-for-bind-9-21-14