Released updates Filtered on: type(security)
- mod_auth_openidc-2.4.17.2-1.fc41on August 19, 2025 at 9:49 am
FEDORA-2025-be0c6f25ce Packages in this update: mod_auth_openidc-2.4.17.2-1.fc41 Update description: Rebase to new version resolves CVE-2025-31492
- firefox-142.0-1.fc42on August 19, 2025 at 6:43 am
FEDORA-2025-e689575030 Packages in this update: firefox-142.0-1.fc42 Update description: Updated to new upstream release (142.0)
- firefox-142.0-1.fc41on August 19, 2025 at 6:43 am
FEDORA-2025-76c7ca6b1b Packages in this update: firefox-142.0-1.fc41 Update description: Updated to new upstream release (142.0)
- libarchive-3.8.1-1.fc42on August 18, 2025 at 1:22 pm
FEDORA-2025-47e73aaaea Packages in this update: libarchive-3.8.1-1.fc42 Update description: Rebase due to a lot of CVE fixes
- keylime-agent-rust-0.2.8-1.fc42on August 18, 2025 at 9:47 am
FEDORA-2025-6c7178c159 Packages in this update: keylime-agent-rust-0.2.8-1.fc42 Update description: Update to upstream version 0.2.8 Update idna dependency to a version not affected by CVE-2024-12224
- botan2-2.19.5-2.el9on August 17, 2025 at 6:21 am
FEDORA-EPEL-2025-e389498ad5 Packages in this update: botan2-2.19.5-2.el9 Update description: fix vulnerability CVE-2024-50382 and CVE-2024-50383
- python3-docs-3.13.7-1.fc41 python3.13-3.13.7-1.fc41on August 15, 2025 at 11:19 am
FEDORA-2025-62fe746ed0 Packages in this update: python3.13-3.13.7-1.fc41 python3-docs-3.13.7-1.fc41 Update description: Python 3.13.7 is the seventh maintenance release of 3.13. 3.13.7 is an expedited release to fix a significant issue with the 3.13.6 release: gh-137583: Regression in ssl module between 3.13.5 and 3.13.6: reading from a TLS-encrypted connection blocks A few other bug fixes (which would otherwise have waited until the next release) are also included. 3.13.6 is the sixth maintenance release of 3.13, containing around 200 bugfixes, build improvements and documentation changes since 3.13.5. This update contains fix for https://www.cve.org/CVERecord?id=CVE-2025-8194
- chromium-139.0.7258.127-1.fc41on August 15, 2025 at 6:23 am
FEDORA-2025-0ea30a8042 Packages in this update: chromium-139.0.7258.127-1.fc41 Update description: Updated to 139.0.7258.127 * CVE-2025-8879: Heap buffer overflow in libaom * CVE-2025-8880: Race in V8 * CVE-2025-8901: Out of bounds write in ANGLE * CVE-2025-8881: Inappropriate implementation in File Picker * CVE-2025-8882: Use after free in Aura * Fix FTBFS with rust-1.89.0
- chromium-139.0.7258.127-1.el10_1on August 15, 2025 at 6:23 am
FEDORA-EPEL-2025-77303504f8 Packages in this update: chromium-139.0.7258.127-1.el10_1 Update description: Updated to 139.0.7258.127 * CVE-2025-8879: Heap buffer overflow in libaom * CVE-2025-8880: Race in V8 * CVE-2025-8901: Out of bounds write in ANGLE * CVE-2025-8881: Inappropriate implementation in File Picker * CVE-2025-8882: Use after free in Aura * Fix FTBFS with rust-1.89.0
- chromium-139.0.7258.127-1.fc42on August 15, 2025 at 6:23 am
FEDORA-2025-502faa722e Packages in this update: chromium-139.0.7258.127-1.fc42 Update description: Updated to 139.0.7258.127 * CVE-2025-8879: Heap buffer overflow in libaom * CVE-2025-8880: Race in V8 * CVE-2025-8901: Out of bounds write in ANGLE * CVE-2025-8881: Inappropriate implementation in File Picker * CVE-2025-8882: Use after free in Aura * Fix FTBFS with rust-1.89.0
- chromium-139.0.7258.127-1.el9on August 15, 2025 at 6:23 am
FEDORA-EPEL-2025-7f8d0718b0 Packages in this update: chromium-139.0.7258.127-1.el9 Update description: Updated to 139.0.7258.127 * CVE-2025-8879: Heap buffer overflow in libaom * CVE-2025-8880: Race in V8 * CVE-2025-8901: Out of bounds write in ANGLE * CVE-2025-8881: Inappropriate implementation in File Picker * CVE-2025-8882: Use after free in Aura * Fix FTBFS with rust-1.89.0
- kubernetes1.32-1.32.8-1.fc41on August 14, 2025 at 5:26 pm
FEDORA-2025-8f9b0ca4c7 Packages in this update: kubernetes1.32-1.32.8-1.fc41 Update description: Update to release v1.32.7 Resolves: rhbz#2388412 Resolves: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fixes
- kubernetes1.31-1.31.12-1.fc41on August 14, 2025 at 5:26 pm
FEDORA-2025-a1ec5a674c Packages in this update: kubernetes1.31-1.31.12-1.fc41 Update description: Update to release v1.31.12 Resolves: rhbz#2388412 Resolves: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fix
- kubernetes1.31-1.31.12-1.fc42on August 14, 2025 at 4:52 pm
FEDORA-2025-d78e6ddfe3 Packages in this update: kubernetes1.31-1.31.12-1.fc42 Update description: Update to release v1.31.12 Resolves: rhbz#2388412 Resolves: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fix
- kubernetes1.32-1.32.8-1.fc42on August 14, 2025 at 4:37 pm
FEDORA-2025-9b52dfdae9 Packages in this update: kubernetes1.32-1.32.8-1.fc42 Update description: Update to release v1.32.7 Resolves: rhbz#2388412 Resolves: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fixes
- kubernetes1.33-1.33.4-1.fc41on August 14, 2025 at 4:29 pm
FEDORA-2025-51e8d5ec56 Packages in this update: kubernetes1.33-1.33.4-1.fc41 Update description: Update to release v1.33.4 Resolves: rhbz#2388412 Fixes CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fixes
- kubernetes1.33-1.33.4-1.fc42on August 14, 2025 at 4:07 pm
FEDORA-2025-409ed32016 Packages in this update: kubernetes1.33-1.33.4-1.fc42 Update description: Update to release v1.33.4 Resolves: rhbz#2388412 Fixes CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fixes
- glab-1.67.0-1.fc42on August 14, 2025 at 1:01 pm
FEDORA-2025-b597c89f32 Packages in this update: glab-1.67.0-1.fc42 Update description: Update to 1.67.0 Update to 1.66.0
- glab-1.67.0-1.fc41on August 14, 2025 at 1:01 pm
FEDORA-2025-41a6e9b04d Packages in this update: glab-1.67.0-1.fc41 Update description: Update to 1.67.0 Update to 1.66.0
- rust-slab-0.4.11-1.fc42on August 13, 2025 at 2:33 pm
FEDORA-2025-1e9ad724f8 Packages in this update: rust-slab-0.4.11-1.fc42 Update description: Update to version 0.4.11. This version includes a fix for CVE-2025-55159, but there are zero packages in Fedora or EPEL that use the affected API, so no rebuilds are necessary.