Fedora Security Advisories

• perl-Crypt-CBC-3.07-1.el10_1

This update, to the current upstream release version, includes a fix to source random numbers using the Crypt::URandom module rather than trying to read /dev/urandom and falling back to Perl's insecure rand() function if /dev/urandom is not usable (CVE-2025-2814).

• mingw-libxslt-1.1.43-3.fc41

Apply proposed fix for CVE-2205-7424.

• mingw-libxslt-1.1.43-3.fc42

Apply proposed fix for CVE-2205-7424.

• node-exporter-1.9.1-2.el9

Initial package of node-expoter for for EL9 using go-vendor-tools.

This obsoletes golang-github-prometheus-node-exporter and updates to latest 1.9.1 version.

• iputils-20250602-3.fc42

Update to 20250602 with fixes for CVE-2025-48964

• iputils-20250602-3.fc41

Update to 20250602 with fixes for CVE-2025-48964

• opentofu-1.10.3-1.el9

Update to 1.10.3

• reposurgeon-5.3-1.fc42

reposurgeon: update to 5.3 version

• glibc-2.41-9.fc42

This update fixes CVE-2025-8058, a low-impact security vulnerability in the regcomp function. It also includes a fix for the iconv; it no longer creates executable files.

• glibc-2.40-27.fc41

This update fixes CVE-2025-8058, a low-impact security vulnerability in the regcomp function.

• botan2-2.19.5-7.el10_1

fix vulnerability CVE-2024-50383 (rhbz#2321555)