Fedora Security Advisories

• rust-az-cvm-vtpm-0.7.4-3.fc42
• rust-az-snp-vtpm-0.7.4-1.fc42
• rust-az-tdx-vtpm-0.7.4-1.fc42
• trustee-guest-components-0.13.0-3.fc42

Rebase trustee-guest-components to v0.13.0 Include rust-az-???-vtpm packages rebase to version 0.7.4 Adjust (patches) to work with 'sev' version 6.

• xen-4.20.1-5.fc43

Mutiple vulnerabilities in the Viridian interface [XSA-472, CVE-2025-27466, CVE-2025-58142, CVE-2025-58143] Arm issues with page refcounting [XSA-473, CVE-2025-58144, CVE-2025-58145]

• python-pip-24.3.1-5.fc42

Security fix for the bundled urllib3 for CVE-2025-50181

• python-pip-25.1.1-17.fc43

Security fix for the bundled urllib3 for CVE-2025-50181

• python-pip-24.2-3.fc41

Security fix for the bundled urllib3 for CVE-2025-50181

• firefox-143.0-1.fc42

• New upstream release (143.0)

• firefox-143.0-1.fc41

• New upstream release (143.0)

• kernel-6.17.0-0.rc6.49.fc43
• kernel-headers-6.17.0-0.rc6.49.fc43

The 6.17 rc6 kernel build contains a number of important fixes across the tree. It also includes mitigations for the VMSCAPE vulnerability on x86 CPUs. This has been assigned CVE-2025-40300.

• xen-4.19.3-3.fc41

Mutiple vulnerabilities in the Viridian interface [XSA-472, CVE-2025-27466, CVE-2025-58142, CVE-2025-58143] Arm issues with page refcounting [XSA-473, CVE-2025-58144, CVE-2025-58145]

• xen-4.19.3-4.fc42

Mutiple vulnerabilities in the Viridian interface [XSA-472, CVE-2025-27466, CVE-2025-58142, CVE-2025-58143] Arm issues with page refcounting [XSA-473, CVE-2025-58144, CVE-2025-58145]

• python-deepdiff-8.6.1-1.fc42
• python-orderly-set-5.5.0-2.fc42

Update to 8.6.1

• python-deepdiff-8.6.1-1.fc41
• python-orderly-set-5.5.0-2.fc41

Update to 8.6.1

• python-deepdiff-8.6.1-1.el10_2

Update to 8.6.1 (rhbz#2393085).

• python-deepdiff-8.6.1-1.el10_1

Update to 8.6.1 (rhbz#2393085).

• checkpointctl-1.4.0-3.fc41

Rebuild

• checkpointctl-1.4.0-3.fc43

Rebuild

• checkpointctl-1.4.0-3.fc42

Rebuild

• checkpointctl-1.4.0-3.el9

Rebuild

• perl-Catalyst-Authentication-Credential-HTTP-1.019-1.fc43

This update upgrade the package to version 1.019. This version fixes CVE-2025-40920 by using Crypt::SysRandom to generate nonces instead of Data::UUID.

• jupyterlab-4.4.7-1.el10_2

Update to 4.4.7 (rhbz#2392881)