Fedora Security Advisories

FEDORA-2025-585ba94c06 Packages in this update:

• dpkg-1.22.20-1.fc42

Update description:

• Update to 1.22.20.
• General cleanup.
• Fix CVE-2025-6297.

Major clean up.

• Enable all tests.
• Trim changelog.
• Adjust Requires and BuildRequires.
• Update configure options.

FEDORA-2025-0ae3421615 Packages in this update:

• dpkg-1.22.20-1.fc41

Update description:

• Update to 1.22.20.
• General cleanup.
• Fix CVE-2025-6297.

Major clean up.

• Enable all tests.
• Trim changelog.
• Adjust Requires and BuildRequires.
• Update configure options.

FEDORA-EPEL-2025-4d5e8f0a17 Packages in this update:

• dpkg-1.22.20-1.el10_0

Update description:

• Update to 1.22.20.
• General cleanup.
• Fix CVE-2025-6297.

FEDORA-EPEL-2025-55175f96ff Packages in this update:

• dpkg-1.22.20-1.el10_1

Update description:

• Update to 1.22.20.
• General cleanup.
• Fix CVE-2025-6297.

FEDORA-EPEL-2025-461065f2f4 Packages in this update:

• dpkg-1.22.20-1.el9

Update description:

• Update to 1.22.20.
• General cleanup.
• Fix CVE-2025-6297.

FEDORA-2025-35515b7ddf Packages in this update:

• rclone-1.70.2-1.fc43

Update description:

Automatic update for rclone-1.70.2-1.fc43.

Changelog * Sun Jul 6 2025 Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.70.2-1 - Update to 1.70.2 - Closes rhbz#2254045 rhbz#2336979 rhbz#2337234 rhbz#2341265 rhbz#2348838 rhbz#2350844 rhbz#2352327 rhbz#2354433 rhbz#2360615 rhbz#2360653

FEDORA-2025-b712778148 Packages in this update:

• salt-3007.5-2.fc41

Update description:

Contains fixes for regressions introduced during CVE bugfix update (3007.4).

FEDORA-2025-c903306aee Packages in this update:

• salt-3007.5-2.fc42

Update description:

Contains fixes for regressions introduced during CVE bugfix update (3007.4).

FEDORA-2025-e286662e59 Packages in this update:

• mingw-djvulibre-3.5.29-1.fc42

Update description:

Update to 3.5.29, fixes CVE-2025-53367.

FEDORA-2025-0f35c5dbbb Packages in this update:

• mingw-djvulibre-3.5.29-1.fc41

Update description:

Update to 3.5.29, fixes CVE-2025-53367.

FEDORA-2025-47916db6c7 Packages in this update:

• mingw-python-requests-2.32.4-1.fc41

Update description:

Update to 2.32.4. Fixes CVE-2024-47081.

FEDORA-2025-5ea2b69c03 Packages in this update:

• mingw-python-requests-2.32.4-1.fc42

Update description:

Update to 2.32.4. Fixes CVE-2024-47081.

FEDORA-2025-29c6186ffb Packages in this update:

• sudo-1.9.17-2.p1.fc41

Update description:

Rebase to sudo 1.9.17p1

• sudo-1_9_16p2 is available. Resolves: rhbz#2309626
• sudo: LPE via host option. Resolves: CVE-2025-32462
• Properly apply system buildflags.
• Use new build macros, drop unneeded %defattr.

FEDORA-2025-44c3b13554 Packages in this update:

• sudo-1.9.17-2.p1.fc42

Update description:

Rebase to sudo 1.9.17p1

• sudo-1_9_16p2 is available. Resolves: rhbz#2309626
• sudo: LPE via host option. Resolves: CVE-2025-32462
• Properly apply system buildflags.
• Use new build macros, drop unneeded %defattr.

FEDORA-2025-266a1353a1 Packages in this update:

• python3.6-3.6.15-47.fc42

Update description:

Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435

FEDORA-2025-a8abfbb35c Packages in this update:

• python3.6-3.6.15-47.fc41

Update description:

Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435

FEDORA-2025-c4c8863fd7 Packages in this update:

• ov-0.42.1-1.fc43

Update description:

Automatic update for ov-0.42.1-1.fc43.

Changelog * Fri Jul 4 2025 Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.42.1-1 - Update to 0.42.1 and go-vendor-tools. Closes rhbz#2348375 rhbz#2352321

FEDORA-2025-c05ae72339 Packages in this update:

• chromium-138.0.7204.92-1.fc41

Update description:

Update to 138.0.7204.92

* High CVE-2025-6554: Type Confusion in V8

FEDORA-2025-87af8315ff Packages in this update:

• chromium-138.0.7204.92-1.fc42

Update description:

Update to 138.0.7204.92

* High CVE-2025-6554: Type Confusion in V8

FEDORA-EPEL-2025-4a1990d54d Packages in this update:

• chromium-138.0.7204.92-1.el9

Update description:

Update to 138.0.7204.92

* High CVE-2025-6554: Type Confusion in V8