Aggregator

FEDORA-2025-4520cf6bac Packages in this update:

• python-starlette-0.47.3-2.fc42

Update description:

Backport security fix for CVE-2025-62727, GHSA-7f5h-v6xp-fcq8

It was discovered that YAML::Syck did not properly handle parsing YAML files. An attacker could possibly use this issue to expose sensitive information.

Leonardo Giovannini discovered that Squid failed to redact HTTP Authentication credentials in a default configuration. An attacker could possibly use this issue to obtain sensitive information.

FEDORA-2025-b36b5a6fe4 Packages in this update:

• xorg-x11-server-21.1.20-1.fc41

Update description:

Update to xserver 21.1.20, CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231

FEDORA-2025-43c76ece40 Packages in this update:

• xorg-x11-server-21.1.20-1.fc42

Update description:

Update to xserver 21.1.20, CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231

FEDORA-2025-df25db07fb Packages in this update:

• xorg-x11-server-21.1.20-1.fc43

Update description:

Update to xserver 21.1.20, CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231

FEDORA-2025-0e29263f5a Packages in this update:

• xorg-x11-server-Xwayland-24.1.9-1.fc41

Update description:

Update to xwayland 24.1.9, CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231

FEDORA-2025-6f416148b4 Packages in this update:

• xorg-x11-server-Xwayland-24.1.9-1.fc42

Update description:

Update to xwayland 24.1.9, CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231

It was discovered that Netty did not properly handle user input. A remote attacker could possibly use this issue to forge arbitrary emails from a trusted server.

FEDORA-2025-fe61a6ad60 Packages in this update:

• xorg-x11-server-Xwayland-24.1.9-1.fc43

Update description:

Update to xwayland 24.1.9 CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Network drivers; - Netlink; (CVE-2024-26700, CVE-2025-38727, CVE-2023-52593, CVE-2024-26896)

FEDORA-2025-cb6d4788a8 Packages in this update:

• fontforge-20230101-16.fc41

Update description:

CVE-2025-50949

FEDORA-2025-6e501740b2 Packages in this update:

• fontforge-20230101-17.fc42

Update description:

CVE-2025-50949

FEDORA-2025-598261ae04 Packages in this update:

• fontforge-20230101-15.fc41

Update description:

Resolves: CVE-2025-50949 and CVE-2025-50951

FEDORA-2025-5ed7a12149 Packages in this update:

• fontforge-20230101-16.fc42

Update description:

Resolves: CVE-2025-50949 and CVE-2025-50951