Fedora Security Advisories

FEDORA-2025-702902f388 Packages in this update:

• bird-3.1.4-1.fc41

Update description: BIRD 3.1.4 (2025-09-22)

• BGP: Fixed crash on Notification with a message, CVE-2025-59688
• BGP: Fixed invalid memory access in pending TX flush
• BGP: Fixed a rare bug with listening socket delay
• Pipe: Disabled statisticts for stopping pipe
• Hash: Read-only assertions
• ROA Aggregator: Fixed crash on multiwithdraw
• Protocol: Fixed broken state announcements

FEDORA-2025-ee9b86c6d9 Packages in this update:

• ntpd-rs-1.6.2-1.fc41

Update description:

Update to version 1.6.2.

Includes fixes for CVE-2025-58066 (potential DoS in the ntpd-rs server) and CVE-2025-58160 (potential tracing log pollution).

FEDORA-2025-7fbf258406 Packages in this update:

• ntpd-rs-1.6.2-1.fc42

Update description:

Update to version 1.6.2.

Includes fixes for CVE-2025-58066 (potential DoS in the ntpd-rs server) and CVE-2025-58160 (potential tracing log pollution).

FEDORA-2025-cf3fbd8fcf Packages in this update:

• ntpd-rs-1.6.2-1.fc43

Update description:

Update to version 1.6.2.

Includes fixes for CVE-2025-58066 (potential DoS in the ntpd-rs server) and CVE-2025-58160 (potential tracing log pollution).

FEDORA-EPEL-2025-7209d59fc3 Packages in this update:

• dnsdist-2.0.1-1.el10_2

Update description:

Update to 2.0.1 to CVE-2025-30187

FEDORA-2025-5cef5ecca3 Packages in this update:

• dnsdist-2.0.1-1.fc43

Update description:

Update to 2.0.1 to CVE-2025-30187

FEDORA-2025-0f0623b719 Packages in this update:

• dnsdist-1.9.11-1.fc41

Update description:

Update to 1.9.11 to fix CVE-2025-30187

FEDORA-2025-b6c24f05eb Packages in this update:

• dnsdist-1.9.11-1.fc42

Update description:

Update to 1.9.11 to fix CVE-2025-30187

FEDORA-2025-1be5992b52 Packages in this update:

• python-nh3-0.2.15-7.fc41
• rust-ammonia-3.3.1-1.fc41

Update description:

Update the ammonia crate to version 3.3.1 and rebuild python-nh3 to apply fixes for RUSTSEC-2025-0071.

FEDORA-EPEL-2025-78c7cd34db Packages in this update:

• python-nh3-0.2.21-2.el10_0
• rust-ammonia-4.0.1-1.el10_0

Update description:

Update the ammonia crate to version 4.0.1 and rebuild python-nh3 to apply fixes for RUSTSEC-2025-0071.

FEDORA-EPEL-2025-829b789d0e Packages in this update:

• python-nh3-0.2.21-2.el10_1
• rust-ammonia-4.0.1-1.el10_1

Update description:

Update the ammonia crate to version 4.0.1 and rebuild python-nh3 to apply fixes for RUSTSEC-2025-0071.

FEDORA-EPEL-2025-c6fbad96c4 Packages in this update:

• python-nh3-0.2.21-2.el10_2
• rust-ammonia-4.0.1-1.el10_2

Update description:

Update the ammonia crate to version 4.0.1 and rebuild python-nh3 to apply fixes for RUSTSEC-2025-0071.

FEDORA-2025-7ec84ba6e9 Packages in this update:

• python-nh3-0.2.21-2.fc42
• rust-ammonia-4.0.1-1.fc42

Update description:

Update the ammonia crate to version 4.0.1 and rebuild python-nh3 to apply fixes for RUSTSEC-2025-0071.

FEDORA-2025-074aba6ad4 Packages in this update:

• python-nh3-0.2.21-8.fc43
• rust-ammonia-4.1.2-1.fc43

Update description:

Update the ammonia crate to version 4.1.2 and rebuild python-nh3 to apply fixes for RUSTSEC-2025-0071.

FEDORA-2025-06a8d5853b Packages in this update:

• python-nh3-0.3.0-3.fc44
• rust-ammonia-4.1.2-1.fc44

Update description:

Update the ammonia crate to version 4.1.2 and rebuild python-nh3 to apply fixes for RUSTSEC-2025-0071.

FEDORA-2025-2b5c69ffe6 Packages in this update:

• mapserver-8.4.1-1.fc41

Update description:

Update to mapserver-8.4.1, fixes CVE-2025-59431.

FEDORA-2025-5b5dedacb2 Packages in this update:

• mapserver-8.4.1-1.fc43

Update description:

Update to mapserver-8.4.1, fixes CVE-2025-59431.

FEDORA-2025-38689b7760 Packages in this update:

• mapserver-8.4.1-1.fc42

Update description:

Update to mapserver-8.4.1, fixes CVE-2025-59431.

FEDORA-2025-2cec357f64 Packages in this update:

• chromium-140.0.7339.185-1.fc43

Update description: - Update to 140.0.7339.185 * CVE-2025-10585: Type Confusion in V8 * CVE-2025-10500: Use after free in Dawn * CVE-2025-10501: Use after free in WebRTC * CVE-2025-10502: Heap buffer overflow in ANGLE

FEDORA-EPEL-2025-8e569e683e Packages in this update:

• chromium-140.0.7339.185-1.el9

Update description: - Update to 140.0.7339.185 * CVE-2025-10585: Type Confusion in V8 * CVE-2025-10500: Use after free in Dawn * CVE-2025-10501: Use after free in WebRTC * CVE-2025-10502: Heap buffer overflow in ANGLE