Fedora Security Advisories

FEDORA-2025-5a73e9e251 Packages in this update:

• bind-9.18.41-1.fc44
• bind-dyndb-ldap-11.11-8.fc44

Update description: Update to 9.18.41 (rhbz#2405786) Security fixes:

• DNSSEC validation fails if matching but invalid DNSKEY is found. (CVE-2025-8677)
• Address various spoofing attacks. (CVE-2025-40778)
• Cache-poisoning due to weak pseudo-random number generator. (CVE-2025-40780)

New Features:

• Support for parsing HHIT and BRID records has been added.

Removed Features:

• Deprecate the "tkey-domain" statement.
• Deprecate the "tkey-gssapi-credential" statement.

Bug Fixes:

• Prevent spurious SERVFAILs for certain 0-TTL resource records.
• Missing DNSSEC information when CD bit is set in query.

https://downloads.isc.org/isc/bind9/9.18.41/doc/arm/html/notes.html#notes-for-bind-9-18-41

FEDORA-2025-b10099f608 Packages in this update:

• ruby-3.3.10-21.fc41

Update description:

• Upgrade to Ruby 3.3.10.
• CVE-2025-58767 ruby: REXML denial of service (rhbz#2396203)

FEDORA-2025-5905c468d2 Packages in this update:

• pcre2-10.46-1.fc42

Update description:

Fix for CVE-2025-58050

FEDORA-2025-4bf7795b4e Packages in this update:

• openbao-2.4.3-1.fc42

Update description:

Update to upstream 2.4.3, including fixes for CVE-2025-62513 and CVE-2025-62705.

FEDORA-EPEL-2025-3975babff2 Packages in this update:

• openbao-2.4.3-1.el10_2

Update description:

Update to upstream 2.4.3, including fixes for CVE-2025-62513 and CVE-2025-62705.

FEDORA-2025-ab1fce816d Packages in this update:

• openbao-2.4.3-1.fc41

Update description:

Update to upstream 2.4.3, including fixes for CVE-2025-62513 and CVE-2025-62705.

FEDORA-EPEL-2025-7bec9f8025 Packages in this update:

• openbao-2.4.3-1.el10_0

Update description:

Update to upstream 2.4.3, including fixes for CVE-2025-62513 and CVE-2025-62705.

FEDORA-EPEL-2025-ffd437e0e8 Packages in this update:

• openbao-2.4.3-1.el9

Update description:

Update to upstream 2.4.3, including fixes for CVE-2025-62513 and CVE-2025-62705.

FEDORA-2025-0687b2debc Packages in this update:

• openbao-2.4.3-1.fc43

Update description:

Update to upstream 2.4.3, including fixes for CVE-2025-62513 and CVE-2025-62705.

FEDORA-EPEL-2025-bdd3bd8616 Packages in this update:

• openbao-2.4.3-1.el8

Update description:

Update to upstream 2.4.3, including fixes for CVE-2025-62513 and CVE-2025-62705.

FEDORA-EPEL-2025-a67eb81816 Packages in this update:

• openbao-2.4.3-1.el10_1

Update description:

Update to upstream 2.4.3, including fixes for CVE-2025-62513 and CVE-2025-62705.

FEDORA-2025-7b296ce1ee Packages in this update:

• libnbd-1.23.9-1.fc43

Update description:

New upstream development version 1.23.9

FEDORA-2025-ffa97eb16f Packages in this update:

• libnbd-1.22.5-1.fc41

Update description:

New upstream stable version 1.22.5

FEDORA-2025-2e23403e23 Packages in this update:

• libnbd-1.22.5-1.fc42

Update description:

New upstream stable version 1.22.5

FEDORA-EPEL-2025-ebffab4484 Packages in this update:

• chromium-141.0.7390.122-1.el10_2

Update description:

Update to 141.0.7390.122

• High CVE-2025-12036 chromium: Inappropriate implementation in V8

FEDORA-2025-c75c2892d7 Packages in this update:

• chromium-141.0.7390.122-1.fc43

Update description:

Update to 141.0.7390.122

• High CVE-2025-12036 chromium: Inappropriate implementation in V8

FEDORA-2025-6728ac0fca Packages in this update:

• chromium-141.0.7390.122-1.fc41

Update description:

Update to 141.0.7390.122

• High CVE-2025-12036 chromium: Inappropriate implementation in V8

FEDORA-2025-80c24c67b6 Packages in this update:

• chromium-141.0.7390.122-1.fc42

Update description:

Update to 141.0.7390.122

• High CVE-2025-12036 chromium: Inappropriate implementation in V8

FEDORA-EPEL-2025-bab8ce5461 Packages in this update:

• chromium-141.0.7390.122-1.el9

Update description:

Update to 141.0.7390.122

• High CVE-2025-12036 chromium: Inappropriate implementation in V8

FEDORA-2025-2d70cfaa80 Packages in this update:

• firefox-144.0-3.fc43

Update description:

• Updated to latest upstream (114.0)