Fedora Security Advisories

FEDORA-EPEL-2025-a6b5af1b6e Packages in this update:

• python3.13-3.13.11-1.el10_1

Update description:

This is the eleventh maintenance release of Python 3.13

FEDORA-2025-447047dda8 Packages in this update:

• usd-25.02a-4.fc42

Update description:

Backport fixes for CVE-2025-64181 etc. in OpenEXRCore

FEDORA-2025-4924a5bc8b Packages in this update:

• usd-25.08-12.fc43

Update description:

Backport fixes for CVE-2025-64181 etc. in OpenEXRCore

FEDORA-EPEL-2025-c15a630034 Packages in this update:

• python3.13-3.13.11-1.el9

Update description:

This is the eleventh maintenance release of Python 3.13

FEDORA-EPEL-2025-d543204b44 Packages in this update:

• python3.13-3.13.11-1.el10_2

Update description:

This is the eleventh maintenance release of Python 3.13

FEDORA-2025-6407a7ee7e Packages in this update:

• python3.13-3.13.11-1.fc43

Update description:

This is the eleventh maintenance release of Python 3.13

FEDORA-2025-7ec743931c Packages in this update:

• python3.13-3.13.11-1.fc42
• python3-docs-3.13.11-1.fc42

Update description:

This is the eleventh maintenance release of Python 3.13

FEDORA-2025-d5dffbf048 Packages in this update:

• python3.14-3.14.2-1.fc42

Update description:

This is the second maintenance release of Python 3.14

FEDORA-2025-e235793f10 Packages in this update:

• python3.14-3.14.2-1.fc43
• python3-docs-3.14.2-1.fc43

Update description:

This is the second maintenance release of Python 3.14

FEDORA-2025-7536d2d941 Packages in this update:

• webkitgtk-2.50.3-1.fc42

Update description:

• Fix seeking and looping of media elements that set the loop property.
• Fix several crashes and rendering issues.
• Fix CVE-2025-13947, CVE-2025-43458, CVE-2025-66287

FEDORA-2025-cc4c533b49 Packages in this update:

• golangci-lint-2.7.1-1.fc43

Update description:

Latest version

• This build with the latest golang should also fix all the Go CVEs, although I did verify how/if this package is affected by these CVEs.

FEDORA-2025-b07cd2cae2 Packages in this update:

• webkitgtk-2.50.3-1.fc43

Update description:

• Fix seeking and looping of media elements that set the loop property.
• Fix several crashes and rendering issues.
• Fix CVE-2025-13947, CVE-2025-43458, CVE-2025-66287

FEDORA-2025-00a9a7c9b5 Packages in this update: Update description:

This update includes the latest upstream release of mod_md, with various bug and feature updates.

A fix for the security vulnerability CVE-2025-55753 is also included.

FEDORA-2025-24bf1ffbe7 Packages in this update:

• mod_md-2.6.6-1.fc43

Update description:

This update includes the latest upstream release of mod_md, with various bug and feature updates.

A fix for the security vulnerability CVE-2025-55753 is also included.

FEDORA-2025-f46efdfd9d Packages in this update: Update description:

This update includes the latest upstream release of mod_md, with various bug and feature updates.

A fix for the security vulnerability CVE-2025-55753 is also included.

FEDORA-2025-62d125612b Packages in this update:

• qt6-qtdeclarative-6.9.3-2.fc42

Update description:

CVE-2025-12385: Fix improper validation of img tag size in Text component parser

FEDORA-EPEL-2025-16257f5bba Packages in this update:

• chromium-143.0.7499.40-1.el10_2

Update description: Update to 143.0.7499.40 * High CVE-2025-13630: Type Confusion in V8 * High CVE-2025-13631: Inappropriate implementation in Google Updater * High CVE-2025-13632: Inappropriate implementation in DevTools * High CVE-2025-13633: Use after free in Digital Credentials * Medium CVE-2025-13634: Inappropriate implementation in Downloads * Medium CVE-2025-13720: Bad cast in Loader * Medium CVE-2025-13721: Race in v8 * Low CVE-2025-13635: Inappropriate implementation in Downloads * Low CVE-2025-13636: Inappropriate implementation in Split View * Low CVE-2025-13637: Inappropriate implementation in Downloads * Low CVE-2025-13638: Use after free in Media Stream * Low CVE-2025-13639: Inappropriate implementation in WebRTC * Low CVE-2025-13640: Inappropriate implementation in Passwords

FEDORA-2025-a41df7ce46 Packages in this update:

• chromium-143.0.7499.40-1.fc42

Update description: Update to 143.0.7499.40 * High CVE-2025-13630: Type Confusion in V8 * High CVE-2025-13631: Inappropriate implementation in Google Updater * High CVE-2025-13632: Inappropriate implementation in DevTools * High CVE-2025-13633: Use after free in Digital Credentials * Medium CVE-2025-13634: Inappropriate implementation in Downloads * Medium CVE-2025-13720: Bad cast in Loader * Medium CVE-2025-13721: Race in v8 * Low CVE-2025-13635: Inappropriate implementation in Downloads * Low CVE-2025-13636: Inappropriate implementation in Split View * Low CVE-2025-13637: Inappropriate implementation in Downloads * Low CVE-2025-13638: Use after free in Media Stream * Low CVE-2025-13639: Inappropriate implementation in WebRTC * Low CVE-2025-13640: Inappropriate implementation in Passwords

FEDORA-EPEL-2025-a6a7b21687 Packages in this update:

• chromium-143.0.7499.40-1.el9

Update description: Update to 143.0.7499.40 * High CVE-2025-13630: Type Confusion in V8 * High CVE-2025-13631: Inappropriate implementation in Google Updater * High CVE-2025-13632: Inappropriate implementation in DevTools * High CVE-2025-13633: Use after free in Digital Credentials * Medium CVE-2025-13634: Inappropriate implementation in Downloads * Medium CVE-2025-13720: Bad cast in Loader * Medium CVE-2025-13721: Race in v8 * Low CVE-2025-13635: Inappropriate implementation in Downloads * Low CVE-2025-13636: Inappropriate implementation in Split View * Low CVE-2025-13637: Inappropriate implementation in Downloads * Low CVE-2025-13638: Use after free in Media Stream * Low CVE-2025-13639: Inappropriate implementation in WebRTC * Low CVE-2025-13640: Inappropriate implementation in Passwords

FEDORA-2025-3c51a0ed51 Packages in this update:

• chromium-143.0.7499.40-1.fc43

Update description: Update to 143.0.7499.40 * High CVE-2025-13630: Type Confusion in V8 * High CVE-2025-13631: Inappropriate implementation in Google Updater * High CVE-2025-13632: Inappropriate implementation in DevTools * High CVE-2025-13633: Use after free in Digital Credentials * Medium CVE-2025-13634: Inappropriate implementation in Downloads * Medium CVE-2025-13720: Bad cast in Loader * Medium CVE-2025-13721: Race in v8 * Low CVE-2025-13635: Inappropriate implementation in Downloads * Low CVE-2025-13636: Inappropriate implementation in Split View * Low CVE-2025-13637: Inappropriate implementation in Downloads * Low CVE-2025-13638: Use after free in Media Stream * Low CVE-2025-13639: Inappropriate implementation in WebRTC * Low CVE-2025-13640: Inappropriate implementation in Passwords