Fedora Security Advisories

• reposurgeon-5.3-1.fc42

reposurgeon: update to 5.3 version

• glibc-2.41-9.fc42

This update fixes CVE-2025-8058, a low-impact security vulnerability in the regcomp function. It also includes a fix for the iconv; it no longer creates executable files.

• glibc-2.40-27.fc41

This update fixes CVE-2025-8058, a low-impact security vulnerability in the regcomp function.

• botan2-2.19.5-7.el10_1

fix vulnerability CVE-2024-50383 (rhbz#2321555)

• thunderbird-128.13.0-1.fc42

Update to 128.13.0

• https://www.thunderbird.net/en-US/thunderbird/128.13.0esr/releasenotes/
• https://www.mozilla.org/en-US/security/advisories/mfsa2025-62/

• thunderbird-128.13.0-1.fc41

Update to 128.13.0

• https://www.thunderbird.net/en-US/thunderbird/128.13.0esr/releasenotes/
• https://www.mozilla.org/en-US/security/advisories/mfsa2025-62/

• chromium-138.0.7204.168-1.el10_1

Update to 138.0.7204.168

• CVE-2025-8010: Type Confusion in V8
• CVE-2025-8011: Type Confusion in V8

• chromium-138.0.7204.168-1.el9

Update to 138.0.7204.168

• CVE-2025-8010: Type Confusion in V8
• CVE-2025-8011: Type Confusion in V8

• chromium-138.0.7204.168-1.fc41

Update to 138.0.7204.168

• CVE-2025-8010: Type Confusion in V8
• CVE-2025-8011: Type Confusion in V8

• chromium-138.0.7204.168-1.fc42

Update to 138.0.7204.168

• CVE-2025-8010: Type Confusion in V8
• CVE-2025-8011: Type Confusion in V8

• java-latest-openjdk-24.0.2.0.12-1.rolling.el10_0

security update for July CPU 2025

• java-latest-openjdk-24.0.2.0.12-1.rolling.el8

security update for July CPU 2025

• java-21-openjdk-21.0.8.0.9-1.fc42
• java-25-openjdk-25.0.0.0.32-0.1.ea.fc42
• java-latest-openjdk-24.0.2.0.12-1.rolling.fc42

security update for July CPU 2025

• java-latest-openjdk-24.0.2.0.12-1.rolling.el10_1
• java-latest-openjdk-portable-24.0.2.0.12-1.rolling.el8

security update for July CPU 2025

• java-latest-openjdk-24.0.2.0.12-1.rolling.el9

security update for July CPU 2025

• java-21-openjdk-21.0.8.0.9-1.fc41
• java-25-openjdk-25.0.0.0.32-0.1.ea.fc41
• java-latest-openjdk-24.0.2.0.12-1.rolling.fc41

security update for July CPU 2025

• shadow-utils-4.17.4-2.fc42

Stop assigning subids by default

• firefox-141.0-2.fc42

• Updated to latest upstream (141.0)

• firefox-141.0-2.fc41

• Updated to latest upstream (141.0)

• libssh-0.11.2-1.fc41

New upstream release with security fixes for CVE-2025-4877, CVE-2025-4878, CVE-2025-5987, CVE-2025-5318, CVE-2025-5351, CVE-2025-5372, CVE-2025-5449

Automatic update for libssh-0.11.0-1.fc41.