Aggregator

FEDORA-2025-3a9b79ca0e Packages in this update:

• xkbcomp-1.5.0-1.fc43

Update description:

xkbcomp 1.5.0 (CVE-2018-15853, CVE-2018-15859, CVE-2018-15861, CVE-2018-15863)

FEDORA-EPEL-2025-0fa35909c3 Packages in this update:

• apptainer-1.4.5-1.el10_2

Update description:

Update to upstream 1.4.5, including a fix for CVE-2025-65105

FEDORA-EPEL-2025-066c32c492 Packages in this update:

• apptainer-1.4.5-1.el10_1

Update description:

Update to upstream 1.4.5, including a fix for CVE-2025-65105

FEDORA-EPEL-2025-730a1d821d Packages in this update:

• apptainer-1.4.5-1.el8

Update description:

Update to upstream 1.4.5, including a fix for CVE-2025-65105

FEDORA-2025-39d2a94670 Packages in this update:

• apptainer-1.4.5-1.fc41

Update description:

Update to upstream 1.4.5, including a fix for CVE-2025-65105

FEDORA-2025-a3e04f92cc Packages in this update:

• apptainer-1.4.5-1.fc43

Update description:

Update to upstream 1.4.5, including a fix for CVE-2025-65105

FEDORA-2025-6a23b222a9 Packages in this update:

• apptainer-1.4.5-1.fc42

Update description:

Update to upstream 1.4.5, including a fix for CVE-2025-65105

FEDORA-EPEL-2025-ea025c55af Packages in this update:

• apptainer-1.4.5-1.el9

Update description:

Update to upstream 1.4.5, including a fix for CVE-2025-65105

FEDORA-EPEL-2025-3e0de9b3c4 Packages in this update:

• tinyproxy-1.11.2-5.el8

Update description:

Add upstream patch to fix CVE-2025-63938.

FEDORA-EPEL-2025-7b2f9fd08b Packages in this update:

• tinyproxy-1.11.2-5.el9

Update description:

Add upstream patch to fix CVE-2025-63938.

FEDORA-EPEL-2025-343fcf2075 Packages in this update:

• tinyproxy-1.11.2-5.el10_1

Update description:

Add upstream patch to fix CVE-2025-63938.

FEDORA-EPEL-2025-65c77530a8 Packages in this update:

• tinyproxy-1.11.2-5.el10_2

Update description:

Add upstream patch to fix CVE-2025-63938.

FEDORA-2025-a177cf4e1e Packages in this update:

• tinyproxy-1.11.2-5.fc42

Update description:

Add upstream patch to fix CVE-2025-63938.

FEDORA-2025-72fbf180c7 Packages in this update:

• tinyproxy-1.11.2-5.fc43

Update description:

Add upstream patch to fix CVE-2025-63938.

FEDORA-2025-0cc929ff17 Packages in this update:

• gi-loadouts-0.1.10-2.fc43
• kf6-kcoreaddons-6.20.0-2.fc43
• kf6-kguiaddons-6.20.0-2.fc43
• kf6-kjobwidgets-6.20.0-2.fc43
• kf6-knotifications-6.20.0-2.fc43
• kf6-kstatusnotifieritem-6.20.0-2.fc43
• kf6-kunitconversion-6.20.0-2.fc43
• kf6-kwidgetsaddons-6.20.0-2.fc43
• kf6-kxmlgui-6.20.0-2.fc43
• nanovna-saver-0.7.3-8.fc43
• persepolis-5.1.1-6.fc43
• python-ezdxf-1.4.3-3.fc43
• python-pyside6-6.10.1-2.fc43
• sigil-2.6.2-3.fc43
• syncplay-1.7.4-6.fc43
• torbrowser-launcher-0.3.9-2.fc43
• ubertooth-2020.12.R1-24.fc43
• usd-25.08-11.fc43

Update description:

PySide6 6.10.1 update.

Pyside6 6.10.1 release.

Rebuilt with stb_image patched for two new security bugs.

It was discovered that Django incorrectly handled certain characters in the FilteredRelation object. An attacker could possibly use this issue to execute arbitrary SQL commands. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.04, and Ubuntu 25.10. (CVE-2025-13372) Seokchan Yoon discovered that Django inefficiently handled deserialization of XML objects. An attacker could possibly use this issue to cause Django to use excessive resources, causing a denial of service. (CVE-2025-64460)

USN-7855-1 fixed vulnerabilities in Unbound. It was discovered that the fix for CVE-2025-11411 was incomplete. This update fixes the problem. Original advisory details: Yuxiao Wu, Yunyi Zhang, Baojun Liu, and Haixin Duan discovered that Unbound incorrectly handled certain promiscuous NS RRSets. A remote attacker could possibly use this issue to perform a domain hijack attack.

FEDORA-2025-47551b2aa2 Packages in this update:

• perl-CGI-Simple-1.282-1.fc42

Update description:

1.282 - Sanitize all user-supplied values before inserting into HTTP headers; Fixed CVE-2025-40927.

FEDORA-2025-3dd97ed203 Packages in this update:

• perl-CGI-Simple-1.282-1.fc43

Update description:

1.282 - Sanitize all user-supplied values before inserting into HTTP headers; Fixed CVE-2025-40927.

Version:next-20251202 (linux-next) Released:2025-12-02