Aggregator

FEDORA-2025-0490389cb0 Packages in this update:

• suricata-7.0.13-1.fc42

Update description:

upstream bugfix/security release

FEDORA-2025-671d7aa1ba Packages in this update:

• chromium-142.0.7444.134-1.fc41

Update description:

Update to 142.0.7444.134

* High CVE-2025-12725: Out of bounds write in WebGPU * High CVE-2025-12726: Inappropriate implementation in Views * High CVE-2025-12727: Inappropriate implementation in V8 * Medium CVE-2025-12728: Inappropriate implementation in Omnibox * Medium CVE-2025-12729: Inappropriate implementation in Omnibox

FEDORA-EPEL-2025-35c67d93f9 Packages in this update:

• chromium-142.0.7444.134-1.el9

Update description:

Update to 142.0.7444.134

* High CVE-2025-12725: Out of bounds write in WebGPU * High CVE-2025-12726: Inappropriate implementation in Views * High CVE-2025-12727: Inappropriate implementation in V8 * Medium CVE-2025-12728: Inappropriate implementation in Omnibox * Medium CVE-2025-12729: Inappropriate implementation in Omnibox

FEDORA-2025-97961060e1 Packages in this update:

• chromium-142.0.7444.134-1.fc43

Update description:

Update to 142.0.7444.134

* High CVE-2025-12725: Out of bounds write in WebGPU * High CVE-2025-12726: Inappropriate implementation in Views * High CVE-2025-12727: Inappropriate implementation in V8 * Medium CVE-2025-12728: Inappropriate implementation in Omnibox * Medium CVE-2025-12729: Inappropriate implementation in Omnibox

FEDORA-EPEL-2025-bcf0aee791 Packages in this update:

• chromium-142.0.7444.134-1.el10_2

Update description:

Update to 142.0.7444.134

* High CVE-2025-12725: Out of bounds write in WebGPU * High CVE-2025-12726: Inappropriate implementation in Views * High CVE-2025-12727: Inappropriate implementation in V8 * Medium CVE-2025-12728: Inappropriate implementation in Omnibox * Medium CVE-2025-12729: Inappropriate implementation in Omnibox

FEDORA-2025-a366512b23 Packages in this update:

• suricata-7.0.13-1.fc43

Update description:

Upstream security/bugfix release.

FEDORA-EPEL-2025-a52b9deb70 Packages in this update:

• python-pdfminer-20240706-2.el9

Update description:

Backport security fix for GHSA-wf5f-4jwr-ppcp

FEDORA-2025-d019d16668 Packages in this update:

• python-pdfminer-20240706-3.fc41

Update description:

Backport security fix for GHSA-wf5f-4jwr-ppcp

FEDORA-2025-453047be66 Packages in this update:

• python-pdfminer-20240706-4.fc42

Update description:

Backport security fix for GHSA-wf5f-4jwr-ppcp

FEDORA-EPEL-2025-bc46c9a9b9 Packages in this update:

• python-pdfminer-20251107-1.el10_1

Update description:

Update to 20251107

Fix: arbitary code execution when loading pickle font files

Security fix for GHSA-wf5f-4jwr-ppcp

FEDORA-EPEL-2025-58acb12ebc Packages in this update:

• python-pdfminer-20251107-1.el10_2

Update description:

Update to 20251107

Fix: arbitary code execution when loading pickle font files

Security fix for GHSA-wf5f-4jwr-ppcp

FEDORA-2025-63872f52bb Packages in this update:

• python-pdfminer-20251107-1.fc43

Update description:

Update to 20251107

Fix: arbitary code execution when loading pickle font files

Security fix for GHSA-wf5f-4jwr-ppcp

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this to expose sensitive information from the host OS. (CVE-2025-40300) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - DMA engine subsystem; - GPU drivers; - HSI subsystem; - Ethernet team driver; - Ext4 file system; - Timer subsystem; - DCCP (Datagram Congestion Control Protocol); - IPv6 networking; - NET/ROM layer; - SCTP protocol; - USB sound devices; (CVE-2023-52574, CVE-2023-52650, CVE-2024-41006, CVE-2024-50006, CVE-2024-50299, CVE-2024-53124, CVE-2024-53150, CVE-2024-56767, CVE-2025-37838, CVE-2025-38352)

FEDORA-2025-d9f9394ecd Packages in this update:

• bind9-next-9.21.14-2.fc42

Update description: Update to 9.21.14 (rhbz#2394406) Security Fixes:

• DNSSEC validation fails if matching but invalid DNSKEY is found. (CVE-2025-8677)
• Address various spoofing attacks. (CVE-2025-40778)
• Cache-poisoning due to weak pseudo-random number generator. (CVE-2025-40780)

New Features:

• Add dnssec-policy keys configuration check to named-checkconf.
• Add support for synthetic records.
• Support for zone-specific plugins.
• Support for additional tokens in the zone file name template.

Removed Features:

• Remove randomized RRset ordering.

and bug fixes

https://downloads.isc.org/isc/bind9/9.21.14/doc/arm/html/notes.html#notes-for-bind-9-21-14

FEDORA-2025-b68f7f541d Packages in this update:

• bind9-next-9.21.14-2.fc43

Update description: Update to 9.21.14 (rhbz#2394406) Security Fixes:

• DNSSEC validation fails if matching but invalid DNSKEY is found. (CVE-2025-8677)
• Address various spoofing attacks. (CVE-2025-40778)
• Cache-poisoning due to weak pseudo-random number generator. (CVE-2025-40780)

New Features:

• Add dnssec-policy keys configuration check to named-checkconf.
• Add support for synthetic records.
• Support for zone-specific plugins.
• Support for additional tokens in the zone file name template.

Removed Features:

• Remove randomized RRset ordering.

and bug fixes

https://downloads.isc.org/isc/bind9/9.21.14/doc/arm/html/notes.html#notes-for-bind-9-21-14

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this to expose sensitive information from the host OS.

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this to expose sensitive information from the host OS.

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ext4 file system; - Network file system (NFS) server daemon; - Packet sockets; - Network traffic control; - VMware vSockets driver; (CVE-2025-21796, CVE-2025-37785, CVE-2025-38477, CVE-2025-38617, CVE-2025-38618)

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this to expose sensitive information from the host OS. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - HSI subsystem; - Bluetooth subsystem; - Timer subsystem; (CVE-2025-37838, CVE-2025-38118, CVE-2025-38352)

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this to expose sensitive information from the host OS. (CVE-2025-40300) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - HSI subsystem; - I2C subsystem; - Bluetooth subsystem; - Timer subsystem; (CVE-2025-37838, CVE-2025-38118, CVE-2025-38352, CVE-2025-38425)