Fedora Security Advisories

FEDORA-EPEL-2025-58be015476 Packages in this update:

• python38-ldap-epel-3.4.3-2.el8

Update description:

Apply upstream fix for CVE-2025-61911 CVE-205-61912'

FEDORA-EPEL-2025-b6fbc3fa28 Packages in this update:

• python39-ldap-epel-3.4.3-2.el8

Update description:

Apply upstream fix for CVE-2025-61911 CVE-205-61912'

FEDORA-EPEL-2025-cb47cd63d1 Packages in this update:

• python3.11-ldap-epel-3.4.5-1.el8

Update description:

Update to 3.4.5

CVE-2025-61911 CVE-205-61912

FEDORA-EPEL-2025-c9895b0a25 Packages in this update:

• python3.11-ldap-epel-3.4.5-1.el9

Update description:

Update to 3.4.5

CVE-2025-61911 CVE-205-61912

FEDORA-2025-2f6ca95a74 Packages in this update:

• moby-engine-29.1.3-1.fc42

Update description:

• Update to release v29.1.3
• Resolves: rhbz#2417969
• Resolves CVE-2024-25621: rhbz#2419019, rhbz#2419046, rhbz#2419442
• Upstream new features and fixes

FEDORA-2025-d39f46567c Packages in this update:

• moby-engine-29.1.3-1.fc43

Update description:

• Update to release v29.1.3
• Resolves: rhbz#2417969
• Resolves CVE-2024-25621: rhbz#2419019, rhbz#2419046, rhbz#2419442
• Upstream new features and fixes

FEDORA-2025-2ca3289343 Packages in this update:

• moby-engine-29.1.3-1.fc44

Update description:

Automatic update for moby-engine-29.1.3-1.fc44.

Changelog * Fri Dec 12 2025 Bradley G Smith <bradley.g.smith@gmail.com> - 29.1.3-1 - Update to release v29.1.3 - Resolves: rhbz#2417969 - Resolves CVE-2024-25621: rhbz#2419019, rhbz#2419046, rhbz#2419442 - Upstream new features and fixes * Tue Dec 2 2025 Bradley G Smith <bradley.g.smith@gmail.com> - 29.1.2-1 - Update to release v29.1.2 - Resolves: rhbz#2417969 - Upstream new features and fixes

FEDORA-EPEL-2025-06a7b99250 Packages in this update:

• nextcloud-32.0.3-1.el10_1

Update description:

32.0.3 release, fixes RHBZ# 2420196 RHBZ# 2420197 RHBZ# 2420198 RHBZ# 2421368

FEDORA-2025-86c0829159 Packages in this update:

• nextcloud-32.0.3-1.fc43

Update description:

32.0.3 release, fixes RHBZ# 2420196 RHBZ# 2420197 RHBZ# 2420198 RHBZ# 2421368

FEDORA-2025-12c04cdf06 Packages in this update:

• nextcloud-32.0.3-1.fc41

Update description:

32.0.3 release, fixes RHBZ# 2420196 RHBZ# 2420197 RHBZ# 2420198 RHBZ# 2421368

FEDORA-EPEL-2025-1701844e6f Packages in this update:

• nextcloud-32.0.3-1.el10_2

Update description:

32.0.3 release, fixes RHBZ# 2420196 RHBZ# 2420197 RHBZ# 2420198 RHBZ# 2421368

FEDORA-2025-519240c972 Packages in this update:

• nextcloud-32.0.3-1.fc42

Update description:

32.0.3 release, fixes RHBZ# 2420196 RHBZ# 2420197 RHBZ# 2420198 RHBZ# 2421368

FEDORA-2025-c09b980696 Packages in this update:

• cups-2.4.16-4.fc42

Update description:

fix possible issue reported by OSH

2.4.16 (fedora#2417970)

rebuild due binutils bug (fedora#2418285) fix division by zero crash in pstops (fedora#2415396)

FEDORA-2025-f20b9f321d Packages in this update:

• firefox-146.0-3.fc43

Update description:

• Fixed aarch64 crashes

• Updated to latest upstream (146.0)

FEDORA-2025-4984e74557 Packages in this update:

• firefox-146.0-3.fc42

Update description:

• Fixed aarch64 crashes

• Updated to latest upstream (146.0)

FEDORA-2025-7605ca0d7d Packages in this update:

• cef-143.0.10^chromium143.0.7499.109-1.fc42

Update description:

Update to cef-143.0.9+ge88e818 + chromium-143.0.7499.40 (rhbz#2420939)

• High CVE-2025-13630: Type Confusion in V8
• High CVE-2025-13631: Inappropriate implementation in Google Updater
• High CVE-2025-13632: Inappropriate implementation in DevTools
• High CVE-2025-13633: Use after free in Digital Credentials
• Medium CVE-2025-13634: Inappropriate implementation in Downloads
• Medium CVE-2025-13720: Bad cast in Loader
• Medium CVE-2025-13721: Race in v8
• Low CVE-2025-13635: Inappropriate implementation in Downloads
• Low CVE-2025-13636: Inappropriate implementation in Split View
• Low CVE-2025-13637: Inappropriate implementation in Downloads
• Low CVE-2025-13638: Use after free in Media Stream
• Low CVE-2025-13639: Inappropriate implementation in WebRTC
• Low CVE-2025-13640: Inappropriate implementation in Passwords

FEDORA-2025-6e776254bf Packages in this update:

• cef-143.0.10^chromium143.0.7499.109-1.fc43

Update description:

Update to cef-143.0.9+ge88e818 + chromium-143.0.7499.40 (rhbz#2420939)

• High CVE-2025-13630: Type Confusion in V8
• High CVE-2025-13631: Inappropriate implementation in Google Updater
• High CVE-2025-13632: Inappropriate implementation in DevTools
• High CVE-2025-13633: Use after free in Digital Credentials
• Medium CVE-2025-13634: Inappropriate implementation in Downloads
• Medium CVE-2025-13720: Bad cast in Loader
• Medium CVE-2025-13721: Race in v8
• Low CVE-2025-13635: Inappropriate implementation in Downloads
• Low CVE-2025-13636: Inappropriate implementation in Split View
• Low CVE-2025-13637: Inappropriate implementation in Downloads
• Low CVE-2025-13638: Use after free in Media Stream
• Low CVE-2025-13639: Inappropriate implementation in WebRTC
• Low CVE-2025-13640: Inappropriate implementation in Passwords

FEDORA-2025-2842f20915 Packages in this update:

• ansible-13.1.0-1.fc44
• ansible-core-2.20.1-1.fc44

Update description:

https://fedoraproject.org/wiki/Changes/Ansible13

• Close old CVE bugs
• Close bogus Markdown-It CVE bug
• Close unactionable ABRT bug

FEDORA-2025-447e38400e Packages in this update:

• gosec-2.22.11-2.fc42

Update description:

Update to 2.22.11

FEDORA-2025-6ad9ed1275 Packages in this update:

• gosec-2.22.11-2.fc43

Update description:

Update to 2.22.11