Fedora Security Advisories

FEDORA-2025-604e02ca72 Packages in this update:

• cef-142.0.10^chromium142.0.7444.162-2.fc43

Update description:

Update to 142.0.7444.162

• High CVE-2025-12725: Out of bounds write in WebGPU
• High CVE-2025-12726: Inappropriate implementation in Views
• High CVE-2025-12727: Inappropriate implementation in V8
• Medium CVE-2025-12728: Inappropriate implementation in Omnibox
• Medium CVE-2025-12729: Inappropriate implementation in Omnibox
• High CVE-2025-12428: Type Confusion in V8
• High CVE-2025-12429: Inappropriate implementation in V8
• High CVE-2025-12430: Object lifecycle issue in Media
• High CVE-2025-12431: Inappropriate implementation in Extensions
• High CVE-2025-12432: Race in V8
• High CVE-2025-12433: Inappropriate implementation in V8
• High CVE-2025-12036: Inappropriate implementation in V8
• Medium CVE-2025-12434: Race in Storage
• Medium CVE-2025-12435: Incorrect security UI in Omnibox
• Medium CVE-2025-12436: Policy bypass in Extensions
• Medium CVE-2025-12437: Use after free in PageInfo
• Medium CVE-2025-12438: Use after free in Ozone
• Medium CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
• Low CVE-2025-12440: Inappropriate implementation in Autofill
• Medium CVE-2025-12441: Out of bounds read in V8
• Medium CVE-2025-12443: Out of bounds read in WebXR
• Low CVE-2025-12444: Incorrect security UI in Fullscreen UI
• Low CVE-2025-12445: Policy bypass in Extensions
• Low CVE-2025-12446: Incorrect security UI in SplitView
• Low CVE-2025-12447: Incorrect security UI in Omnibox

FEDORA-2025-58193e3850 Packages in this update:

• cef-142.0.10^chromium142.0.7444.162-2.fc42

Update description:

Update to 142.0.7444.162

• High CVE-2025-12725: Out of bounds write in WebGPU
• High CVE-2025-12726: Inappropriate implementation in Views
• High CVE-2025-12727: Inappropriate implementation in V8
• Medium CVE-2025-12728: Inappropriate implementation in Omnibox
• Medium CVE-2025-12729: Inappropriate implementation in Omnibox
• High CVE-2025-12428: Type Confusion in V8
• High CVE-2025-12429: Inappropriate implementation in V8
• High CVE-2025-12430: Object lifecycle issue in Media
• High CVE-2025-12431: Inappropriate implementation in Extensions
• High CVE-2025-12432: Race in V8
• High CVE-2025-12433: Inappropriate implementation in V8
• High CVE-2025-12036: Inappropriate implementation in V8
• Medium CVE-2025-12434: Race in Storage
• Medium CVE-2025-12435: Incorrect security UI in Omnibox
• Medium CVE-2025-12436: Policy bypass in Extensions
• Medium CVE-2025-12437: Use after free in PageInfo
• Medium CVE-2025-12438: Use after free in Ozone
• Medium CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
• Low CVE-2025-12440: Inappropriate implementation in Autofill
• Medium CVE-2025-12441: Out of bounds read in V8
• Medium CVE-2025-12443: Out of bounds read in WebXR
• Low CVE-2025-12444: Incorrect security UI in Fullscreen UI
• Low CVE-2025-12445: Policy bypass in Extensions
• Low CVE-2025-12446: Incorrect security UI in SplitView
• Low CVE-2025-12447: Incorrect security UI in Omnibox

FEDORA-2025-fd56e115c0 Packages in this update:

• k9s-0.50.16-2.fc42

Update description:

Rebuild to fix several CVEs in golang std.

FEDORA-2025-30806907c2 Packages in this update:

• k9s-0.50.16-2.fc43

Update description:

Rebuild to fix several CVEs in golang std.

FEDORA-2025-e282b00383 Packages in this update:

• kubernetes1.33-1.33.6-1.fc41

Update description:

• Update to release v1.33.6
• Resolves: rhbz#2398588, rhbz#2398849, rhbz#2399250, rhbz#2399523
• Resolves: rhbz#2407789, rhbz#2408059, rhbz#2408316, rhbz#2408610
• Resolves: rhbz#2408673, rhbz#2408731, rhbz#2409238, rhbz#2409528
• Resolves: rhbz#2409789, rhbz#2410203, rhbz#2410478, rhbz#2410739
• Resolves: rhbz#2411118, rhbz#2411377, rhbz#2412570, rhbz#2412589
• Resolves: rhbz#2412804
• Upstream fixes

FEDORA-2025-362709ff5e Packages in this update:

• kubernetes1.33-1.33.6-1.fc42

Update description:

• Update to release v1.33.6
• Resolves: rhbz#2398588, rhbz#2398849, rhbz#2399250, rhbz#2399523
• Resolves: rhbz#2407789, rhbz#2408059, rhbz#2408316, rhbz#2408610
• Resolves: rhbz#2408673, rhbz#2408731, rhbz#2409238, rhbz#2409528
• Resolves: rhbz#2409789, rhbz#2410203, rhbz#2410478, rhbz#2410739
• Resolves: rhbz#2411118, rhbz#2411377, rhbz#2412570, rhbz#2412589
• Resolves: rhbz#2412804
• Upstream fixes

FEDORA-2025-355be35bb1 Packages in this update:

• calibre-8.14.0-1.fc43

Update description:

Update to 8.14.0. Fixes rhbz#2413304

FEDORA-2025-298add9246 Packages in this update:

• kubernetes1.33-1.33.6-1.fc43

Update description:

• Update to release v1.33.6
• Resolves: rhbz#2398588, rhbz#2398849, rhbz#2399250, rhbz#2399523
• Resolves: rhbz#2407789, rhbz#2408059, rhbz#2408316, rhbz#2408610
• Resolves: rhbz#2408673, rhbz#2408731, rhbz#2409238, rhbz#2409528
• Resolves: rhbz#2409789, rhbz#2410203, rhbz#2410478, rhbz#2410739
• Resolves: rhbz#2411118, rhbz#2411377, rhbz#2412570, rhbz#2412589
• Resolves: rhbz#2412804
• Upstream fixes

FEDORA-2025-fe1d8025b0 Packages in this update:

• kubernetes1.33-1.33.6-1.fc44

Update description:

Automatic update for kubernetes1.33-1.33.6-1.fc44.

Changelog * Thu Nov 13 2025 Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.6-1 - Update to release v1.33.6 - Resolves: rhbz#2398588, rhbz#2398849, rhbz#2399250, rhbz#2399523 - Resolves: rhbz#2407789, rhbz#2408059, rhbz#2408316, rhbz#2408610 - Resolves: rhbz#2408673, rhbz#2408731, rhbz#2409238, rhbz#2409528 - Resolves: rhbz#2409789, rhbz#2410203, rhbz#2410478, rhbz#2410739 - Resolves: rhbz#2411118, rhbz#2411377, rhbz#2412570, rhbz#2412589 - Resolves: rhbz#2412804 - Upstream fixes

FEDORA-2025-ebce31df24 Packages in this update:

• kubernetes1.34-1.34.2-1.fc41

Update description:

• Update to release v1.34.2
• Resolves: rhbz#2398589, rhbz#2398850, rhbz#2399251, rhbz#2399524
• Resolves: rhbz#2407790, rhbz#2408060, rhbz#2408317, rhbz#2408611
• Resolves: rhbz#2408674, rhbz#2408732, rhbz#2409239, rhbz#2409529
• Resolves: rhbz#2409790, rhbz#2410204, rhbz#2410479, rhbz#2410740
• Resolves: rhbz#2411120, rhbz#2411378, rhbz#2411636 rhbz#2412590
• Resolves: rhbz#2412805
• Upstream fixes

FEDORA-2025-4c576d1bd9 Packages in this update:

• kubernetes1.34-1.34.2-1.fc42

Update description:

• Update to release v1.34.2
• Resolves: rhbz#2398589, rhbz#2398850, rhbz#2399251, rhbz#2399524
• Resolves: rhbz#2407790, rhbz#2408060, rhbz#2408317, rhbz#2408611
• Resolves: rhbz#2408674, rhbz#2408732, rhbz#2409239, rhbz#2409529
• Resolves: rhbz#2409790, rhbz#2410204, rhbz#2410479, rhbz#2410740
• Resolves: rhbz#2411120, rhbz#2411378, rhbz#2411636 rhbz#2412590
• Resolves: rhbz#2412805
• Upstream fixes

FEDORA-2025-f32b1debd8 Packages in this update:

• kubernetes1.34-1.34.2-1.fc43

Update description:

• Update to release v1.34.2
• Resolves: rhbz#2398589, rhbz#2398850, rhbz#2399251, rhbz#2399524
• Resolves: rhbz#2407790, rhbz#2408060, rhbz#2408317, rhbz#2408611
• Resolves: rhbz#2408674, rhbz#2408732, rhbz#2409239, rhbz#2409529
• Resolves: rhbz#2409790, rhbz#2410204, rhbz#2410479, rhbz#2410740
• Resolves: rhbz#2411120, rhbz#2411378, rhbz#2411636 rhbz#2412590
• Resolves: rhbz#2412805
• Upstream fixes

FEDORA-2025-36898b8750 Packages in this update:

• chromium-142.0.7444.162-1.fc43

Update description:

Update to 142.0.7444.162

* High CVE-2025-13042: Inappropriate implementation in V8

FEDORA-2025-c92c2e0d79 Packages in this update:

• chromium-142.0.7444.162-1.fc42

Update description:

Update to 142.0.7444.162

* High CVE-2025-13042: Inappropriate implementation in V8

FEDORA-2025-7c82e2b870 Packages in this update:

• chromium-142.0.7444.162-1.fc41

Update description:

Update to 142.0.7444.162

* High CVE-2025-13042: Inappropriate implementation in V8

FEDORA-EPEL-2025-400842a607 Packages in this update:

• chromium-142.0.7444.162-1.el9

Update description:

Update to 142.0.7444.162

* High CVE-2025-13042: Inappropriate implementation in V8

FEDORA-EPEL-2025-f20433b22b Packages in this update:

• chromium-142.0.7444.162-1.el10_2

Update description:

Update to 142.0.7444.162

* High CVE-2025-13042: Inappropriate implementation in V8

FEDORA-2025-eeedae8757 Packages in this update:

• kubernetes1.34-1.34.2-1.fc44

Update description:

Automatic update for kubernetes1.34-1.34.2-1.fc44.

Changelog * Fri Nov 14 2025 Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.2-1 - Update to release v1.34.2 - Resolves: rhbz#2398589, rhbz#2398850, rhbz#2399251, rhbz#2399524 - Resolves: rhbz#2407790, rhbz#2408060, rhbz#2408317, rhbz#2408611 - Resolves: rhbz#2408674, rhbz#2408732, rhbz#2409239, rhbz#2409529 - Resolves: rhbz#2409790, rhbz#2410204, rhbz#2410479, rhbz#2410740 - Resolves: rhbz#2411120, rhbz#2411378, rhbz#2411636 rhbz#2412590 - Resolves: rhbz#2412805 - Upstream fixes * Fri Nov 14 2025 Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.1-4 - Reorder CRI Recommends - Update cri-o recommend with correct version information - Reorder CRI as (for example): Recommends: (cri-o1.34 or containerd)

FEDORA-2025-547f14aef4 Packages in this update:

• kubernetes1.32-1.32.10-2.fc41

Update description:

• Update to release v1.32.10
• Resolves: rhbz#2414539
• Resolves: rhbz#2398587, rhbz#2398848, rhbz#2399249, rhbz#2399522
• Resolves: rhbz#2399703, rhbz#2399721, rhbz#2407788, rhbz#2408058
• Resolves: rhbz#2408315, rhbz#2408609, rhbz#2408672, rhbz#2408730
• Resolves: rhbz#2409237, rhbz#2409527, rhbz#2409788, rhbz#2410202
• Resolves: rhbz#2410477, rhbz#2410738, rhbz#2411117, rhbz#2411376
• Resolves: rhbz#2411634, rhbz#2412569, rhbz#2412588, rhbz#2412803
• Upstream fixes

FEDORA-2025-aaa5764dc9 Packages in this update:

• dotnet10.0-10.0.100-1.fc42

Update description:

This is the .NET 10 GA update

Update .NEt 10 to RC 2