Fedora Security Advisories

FEDORA-2025-be2a1b5e6a Packages in this update:

• python-spotipy-2.25.2-1.fc41

Update description:

update to version 2.25.2

FEDORA-2025-f0df882417 Packages in this update:

• timg-1.6.3-5.fc42

Update description:

Rebuilt with latest patched stb_image: memory-safety fixes

FEDORA-2025-d2b7d94014 Packages in this update:

• timg-1.6.3-5.fc43

Update description:

Rebuilt with latest patched stb_image: memory-safety fixes

FEDORA-2025-b6422d64f9 Packages in this update:

• 7zip-25.01-1.fc43

Update description:

Various CVE fixes, most importantly CVE-2025-11001

This also backports the Debian patch (PR unfortunately stalled upstream, with no communication from upstream developers) to not echo passwords when dealing with encrypted archives.

FEDORA-EPEL-2025-0a81d38451 Packages in this update:

• 7zip-25.01-1.el10_1

Update description:

Various CVE fixes, most importantly CVE-2025-11001

This also backports the Debian patch (PR unfortunately stalled upstream, with no communication from upstream developers) to not echo passwords when dealing with encrypted archives.

FEDORA-EPEL-2025-2bed30c65f Packages in this update:

• 7zip-25.01-1.el10_2

Update description:

Various CVE fixes, most importantly CVE-2025-11001

This also backports the Debian patch (PR unfortunately stalled upstream, with no communication from upstream developers) to not echo passwords when dealing with encrypted archives.

FEDORA-2025-b5a4903ea0 Packages in this update:

• 7zip-25.01-1.fc44

Update description:

Automatic update for 7zip-25.01-1.fc44.

Changelog * Wed Nov 26 2025 Michel Lind <salimma@fedoraproject.org> - 25.01-1 - Update to 25.01 - 25.00+ fixes CVE-2025-11001; Resolves: rhbz#2416011 - Backport Debian patch to disable echo-ing password; Resolves: rhbz#2412315

FEDORA-2025-90281e4554 Packages in this update:

• unbound-1.24.2-1.fc43

Update description: Update to 1.24.2 (rhbz#2417261)

• Additional fix for CVE-2025-11411

https://nlnetlabs.nl/projects/unbound/download/#unbound-1-24-2

Do not always initialize QUIC library, even if not usage of QUIC is configured.

FEDORA-2025-38b1c0f3b5 Packages in this update:

• unbound-1.24.2-1.fc42

Update description: Update to 1.24.2 (rhbz#2417261)

• Additional fix for CVE-2025-11411

https://nlnetlabs.nl/projects/unbound/download/#unbound-1-24-2

FEDORA-EPEL-2025-16dc0220ef Packages in this update:

• fcgi-2.4.7-1.el9

Update description:

2.4.7 release, fixes CVE-2025-23016

FEDORA-2025-93042e260c Packages in this update:

• fcgi-2.4.7-1.fc43

Update description:

2.4.7 release, fixes CVE-2025-23016

FEDORA-2025-67511a59e3 Packages in this update:

• fcgi-2.4.7-1.fc41

Update description:

2.4.7 release, fixes CVE-2025-23016

FEDORA-EPEL-2025-f8b4636e06 Packages in this update:

• fcgi-2.4.7-1.el10_1

Update description:

2.4.7 release, fixes CVE-2025-23016

FEDORA-EPEL-2025-596d7a5bb9 Packages in this update:

• fcgi-2.4.7-1.el10_2

Update description:

2.4.7 release, fixes CVE-2025-23016

FEDORA-2025-d7c1457e7e Packages in this update:

• fcgi-2.4.7-1.fc42

Update description:

2.4.7 release, fixes CVE-2025-23016

FEDORA-EPEL-2025-1099c414ec Packages in this update:

• fcgi-2.4.7-1.el8

Update description:

2.4.7 release, fixes CVE-2025-23016

FEDORA-2025-9831accfe9 Packages in this update:

• alexvsbus-2025.06.16.0-3.fc42

Update description:

Rebuilt against patched stb_image

Initial build for F42

FEDORA-2025-673ec8d684 Packages in this update:

• alexvsbus-2025.06.16.0-3.fc43

Update description:

Rebuilt against patched stb_image

Initial build for F43

FEDORA-2025-19c65f1d15 Packages in this update:

• CuraEngine-5.4.0-10.fc43

Update description:

• Rebuilt with latest patched stb_image: memory-safety fixes

FEDORA-2025-fc872e9426 Packages in this update:

• CuraEngine-5.4.0-10.fc42

Update description:

• Rebuilt with latest patched stb_image: memory-safety fixes