Fedora Security Advisories

• mupen64plus-2.6.0-8.fc42

Patch CVE-2025-29366 and CVE-2025-29366 There should be no change in behaviour.

• unbound-1.24.1-1.fc43

• Enables DNS over QUIC server in unbound
• Fix CVE-2025-11411, (possible domain hijacking attack), reported by Yuxiao Wu, Yunyi Zhang, Baojun Liu and Haixin Duan from Tsinghua University.

• mingw-poppler-24.08.0-7.fc42

Backport fix for CVE-2025.52885.

• mingw-poppler-25.07.0-2.fc43

Backport fix for CVE-2025.52885.

• python-starlette-0.42.0-3.fc41

Backport security fix for CVE-2025-62727, GHSA-7f5h-v6xp-fcq8

• GeographicLib-2.5.2-1.fc42

Update to GeographicLib-2.5.2, fixes CVE-2025-60751.

• GeographicLib-2.5.2-1.fc43

Update to GeographicLib-2.5.2, fixes CVE-2025-60751.

• python-starlette-0.47.0-2.el10_1

Backport security fix for CVE-2025-62727, GHSA-7f5h-v6xp-fcq8

• python-starlette-0.47.0-2.el10_2

Backport security fix for CVE-2025-62727, GHSA-7f5h-v6xp-fcq8

• python-starlette-0.47.3-2.fc42

Backport security fix for CVE-2025-62727, GHSA-7f5h-v6xp-fcq8

• xorg-x11-server-21.1.20-1.fc41

Update to xserver 21.1.20, CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231

• xorg-x11-server-21.1.20-1.fc42

Update to xserver 21.1.20, CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231

• xorg-x11-server-21.1.20-1.fc43

Update to xserver 21.1.20, CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231

• xorg-x11-server-Xwayland-24.1.9-1.fc41

Update to xwayland 24.1.9, CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231

• xorg-x11-server-Xwayland-24.1.9-1.fc42

Update to xwayland 24.1.9, CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231

• xorg-x11-server-Xwayland-24.1.9-1.fc43

Update to xwayland 24.1.9 CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231

• fontforge-20230101-16.fc41

CVE-2025-50949

• fontforge-20230101-17.fc42

CVE-2025-50949

• fontforge-20230101-15.fc41

Resolves: CVE-2025-50949 and CVE-2025-50951

• fontforge-20230101-16.fc42

Resolves: CVE-2025-50949 and CVE-2025-50951