Fedora Security Advisories

FEDORA-EPEL-2025-e58ddd2daf Packages in this update:

• roundcubemail-1.6.12-1.el10_1

Update description: Release 1.6.12

• Support IPv6 in database DSN (#9937)
• Don't force specific error_reporting setting
• Fix compatibility with PHP 8.5 regarding array_first()
• Remove X-XSS-Protection example from .htaccess file (#9875)
• Fix "Assign to group" action state after creation of a first group (#9889)
• Fix bug where contacts search would fail if contactlist_fields contained vcard fields (#9850)
• Fix bug where an mbox export file could include inconsistent message delimiters (#9879)
• Fix parsing of inline styles that aren't well-formatted (#9948)
• Fix Cross-Site-Scripting vulnerability via SVG's animate tag
• Fix Information Disclosure vulnerability in the HTML style sanitizer

FEDORA-2025-fc18ab1e37 Packages in this update:

• util-linux-2.40.4-8.fc42

Update description:

• fix setpwnam() buffer use [CVE-2025-14104]
• libblkid: use snprintf() instead of sprintf()

FEDORA-2025-40fe2fec53 Packages in this update:

• util-linux-2.41.3-7.fc43

Update description:

upstream stable upgrade from 2.41.1 to 2.41.3 (CVE-2025-14104 and other issues)

FEDORA-2025-0fc373e72b Packages in this update:

• NetworkManager-1.54.3-1.fc43

Update description:

Update to 1.54.3 Partially fixes CVE-2025-9615. To protect totally from it, see: https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2325.

FEDORA-2025-27f16898ba Packages in this update:

• NetworkManager-1.52.2-1.fc42

Update description:

Update to 1.52.2 Partially fixes CVE-2025-9615. To protect totally from it, see: https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2325.

FEDORA-2025-0f4b31c58e Packages in this update:

• assimp-6.0.2-4.fc43

Update description:

Backport fix for CVE-2025-11277

FEDORA-2025-6c78aad721 Packages in this update:

• mingw-libsoup-2.74.3-14.fc42

Update description:

Backport fix for CVE-2025-11021.

FEDORA-2025-5a82449616 Packages in this update:

• mingw-libsoup-2.74.3-14.fc43

Update description:

Backport fix for CVE-2025-11021.

FEDORA-2025-883181272e Packages in this update:

• mingw-python3-3.11.14-4.fc43

Update description:

Backport fix for CVE-2025-12084.

FEDORA-2025-34626c05f6 Packages in this update:

• mingw-python3-3.11.14-4.fc42

Update description:

Backport fix for CVE-2025-12084.

FEDORA-2025-ecdc29aa34 Packages in this update:

• mingw-glib2-2.86.3-1.fc43

Update description:

Update to 2.86.3, fixes CVE-2025-13601, CVE-2025-14087 and CVE-2025-14512.

FEDORA-2025-b2df36b70a Packages in this update:

• mingw-glib2-2.84.4-1.fc42

Update description:

Update to glib-2.84.4 and backport fixes for CVE-2025-13601, CVE-2025-14087 and CVE-2025-14512.

FEDORA-EPEL-2025-69e9a501c7 Packages in this update:

• chromium-143.0.7499.109-2.el9

Update description:

Update to 143.0.7499.109

* High: Under coordination * Medium CVE-2025-14372: Use after free in Password Manager * Medium CVE-2025-14373: Inappropriate implementation in Toolbar

FEDORA-2025-a315866a59 Packages in this update:

• chromium-143.0.7499.109-2.fc42

Update description:

Update to 143.0.7499.109

* High: Under coordination * Medium CVE-2025-14372: Use after free in Password Manager * Medium CVE-2025-14373: Inappropriate implementation in Toolbar

FEDORA-EPEL-2025-fdf05692b5 Packages in this update:

• chromium-143.0.7499.109-2.el10_2

Update description:

Update to 143.0.7499.109

* High: Under coordination * Medium CVE-2025-14372: Use after free in Password Manager * Medium CVE-2025-14373: Inappropriate implementation in Toolbar

FEDORA-2025-1077c09b50 Packages in this update:

• chromium-143.0.7499.109-2.fc43

Update description:

Update to 143.0.7499.109

* High: Under coordination * Medium CVE-2025-14372: Use after free in Password Manager * Medium CVE-2025-14373: Inappropriate implementation in Toolbar

FEDORA-2025-c7fd6acdf6 Packages in this update:

• pgadmin4-9.11-1.fc43

Update description:

Update to pgadmin-9.11, fixes CVE_2025-13780.

FEDORA-2025-b08763f674 Packages in this update:

• pgadmin4-9.11-1.fc42

Update description:

Update to pgadmin-9.11, fixes CVE_2025-13780.

FEDORA-2025-da6d092209 Packages in this update:

• mingw-libpng-1.6.53-1.fc43

Update description:

Update to libpng-1.6.53, fixes CVE-2025-66293 and CVE-2025-64505.

FEDORA-2025-dbd70402f4 Packages in this update:

• mingw-libpng-1.6.53-1.fc42

Update description:

Update to libpng-1.6.53, fixes CVE-2025-66293 and CVE-2025-64505.