Fedora Security Advisories

• dotnet8.0-8.0.114-1.fc42

This is the monthly update for .NET for March 2025.

Release Notes:

• SDK https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.14/8.0.114.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.14/8.0.14.md

• expat-2.7.0-1.fc40

Rebase to 2.7.0

• expat-2.7.0-1.fc41

Rebase to 2.7.0

• expat-2.7.0-1.fc42

Rebase to 2.7.0

• vim-9.1.1202-1.fc40

patchlevel 1202

Security fix for CVE-2025-29768

• vim-9.1.1202-1.fc41

patchlevel 1202

Security fix for CVE-2025-29768

• libxml2-2.12.10-1.fc40

Update to 2.12.10

• libxml2-2.12.10-1.fc41

Update to 2.12.10

Fix CVE-2024-56171 and CVE-2025-24928.

• libxml2-2.12.10-1.fc42

Update to 2.12.10

Fix CVE-2024-56171 and CVE-2025-24928.

• kitty-0.40.0-2.fc40

Update to 0.40.0

https://sw.kovidgoyal.net/kitty/changelog/#detailed-list-of-changes

• linux-firmware-20250311-1.fc42

Update to upstream 20250311:

• amdgpu: many firmware updates
• qcom: Update gpu firmwares for qcs8300 chipset
• add firmware for qat_420xx devices
• amdgpu: DMCUB updates for various ASICs
• i915: Update Xe3LPD DMC to v2.20
• update firmware for MT7920/MT7925 WiFi device
• mediatek MT7920/MT7925 bluetooth firmware update
• Update firmware file for Intel BlazarI/BlazarU core
• intel_vpu: Add firmware for 37xx and 40xx NPUs
• QCA: Add Bluetooth firmwares for QCA2066 with USB transport
• QCA: Add two bluetooth firmware nvm files for QCA2066
• QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
• QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
• cirrus: cs35l41: Add firmware and tuning for ASUS Commercial/Consumer laptops
• ASoC: tas2781: Update dsp firmware for Gemtree project
• xe: Update GUC to v70.40.2 for BMG, LNL
• cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
• ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
• ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
• ath11k: QCA6698AQ hw2.1: update board-2.bin
• rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
• Update AMD SEV firmware
• qca: update WCN3988 firmware
• amdgpu: Update ISP FW for isp v4.1.1
• qcom: add firmware for Adreno A225
• cirrus: cs35l56: Add / update firmware for Cirrus CS35L56 for ASUS/Dell/HP/Lenovo laptops
• update firmware for en8811h 2.5G ethernet phy
• ASoC: tas2781: Change regbin firmwares for single device

• linux-firmware-20250311-1.fc40

Update to upstream 20250311:

• amdgpu: many firmware updates
• qcom: Update gpu firmwares for qcs8300 chipset
• add firmware for qat_420xx devices
• amdgpu: DMCUB updates for various ASICs
• i915: Update Xe3LPD DMC to v2.20
• update firmware for MT7920/MT7925 WiFi device
• mediatek MT7920/MT7925 bluetooth firmware update
• Update firmware file for Intel BlazarI/BlazarU core
• intel_vpu: Add firmware for 37xx and 40xx NPUs
• QCA: Add Bluetooth firmwares for QCA2066 with USB transport
• QCA: Add two bluetooth firmware nvm files for QCA2066
• QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
• QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
• cirrus: cs35l41: Add firmware and tuning for ASUS Commercial/Consumer laptops
• ASoC: tas2781: Update dsp firmware for Gemtree project
• xe: Update GUC to v70.40.2 for BMG, LNL
• cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
• ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
• ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
• ath11k: QCA6698AQ hw2.1: update board-2.bin
• rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
• Update AMD SEV firmware
• qca: update WCN3988 firmware
• amdgpu: Update ISP FW for isp v4.1.1
• qcom: add firmware for Adreno A225
• cirrus: cs35l56: Add / update firmware for Cirrus CS35L56 for ASUS/Dell/HP/Lenovo laptops
• update firmware for en8811h 2.5G ethernet phy
• ASoC: tas2781: Change regbin firmwares for single device

• linux-firmware-20250311-1.fc41

Update to upstream 20250311:

• amdgpu: many firmware updates
• qcom: Update gpu firmwares for qcs8300 chipset
• add firmware for qat_420xx devices
• amdgpu: DMCUB updates for various ASICs
• i915: Update Xe3LPD DMC to v2.20
• update firmware for MT7920/MT7925 WiFi device
• mediatek MT7920/MT7925 bluetooth firmware update
• Update firmware file for Intel BlazarI/BlazarU core
• intel_vpu: Add firmware for 37xx and 40xx NPUs
• QCA: Add Bluetooth firmwares for QCA2066 with USB transport
• QCA: Add two bluetooth firmware nvm files for QCA2066
• QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
• QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
• cirrus: cs35l41: Add firmware and tuning for ASUS Commercial/Consumer laptops
• ASoC: tas2781: Update dsp firmware for Gemtree project
• xe: Update GUC to v70.40.2 for BMG, LNL
• cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
• ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
• ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
• ath11k: QCA6698AQ hw2.1: update board-2.bin
• rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
• Update AMD SEV firmware
• qca: update WCN3988 firmware
• amdgpu: Update ISP FW for isp v4.1.1
• qcom: add firmware for Adreno A225
• cirrus: cs35l56: Add / update firmware for Cirrus CS35L56 for ASUS/Dell/HP/Lenovo laptops
• update firmware for en8811h 2.5G ethernet phy
• ASoC: tas2781: Change regbin firmwares for single device

• firefox-136.0.1-1.fc42

• New upstream release (136.0.1)

• Updated to latest upstream (136.0)

• chromium-134.0.6998.88-1.fc41

Update to 134.0.6998.88

• High CVE-2025-1920: Type Confusion in V8
• High CVE-2025-2135: Type Confusion in V8
• Medium CVE-2025-2136: Use after free in Inspector
• Medium CVE-2025-2137: Out of bounds read in V8

• chromium-134.0.6998.88-1.el10_1

Update to 134.0.6998.88

• High CVE-2025-1920: Type Confusion in V8
• High CVE-2025-2135: Type Confusion in V8
• Medium CVE-2025-2136: Use after free in Inspector
• Medium CVE-2025-2137: Out of bounds read in V8

• chromium-134.0.6998.88-1.el9

Update to 134.0.6998.88

• High CVE-2025-1920: Type Confusion in V8
• High CVE-2025-2135: Type Confusion in V8
• Medium CVE-2025-2136: Use after free in Inspector
• Medium CVE-2025-2137: Out of bounds read in V8

• chromium-134.0.6998.88-1.fc40

Update to 134.0.6998.88

• High CVE-2025-1920: Type Confusion in V8
• High CVE-2025-2135: Type Confusion in V8
• Medium CVE-2025-2136: Use after free in Inspector
• Medium CVE-2025-2137: Out of bounds read in V8

• fluent-bit-3.2.8-1.fc42

Update to 3.2.8 - Closes rhbz#2137000 rhbz#2340164 rhbz#2300673

• fluent-bit-3.2.8-1.fc41

Update to 3.2.8 - Closes rhbz#2137000 rhbz#2340164 rhbz#2300673