Fix crash in fontconfig database. Fix some CVEs.
Comment
Archive for Fedora Linux Distribution – Security Advisories
2744 results.
Fix crash in fontconfig database. Fix some CVEs.
Update to 7.9.1
This update addresses two string function vulnerabilities specific to POWER10 machines (CVE-2025-5702, CVE-2025-5745) and fixes a bug in TLS management when auditors are used (rhbz#2330213).
Update to 78.1.1, fixes CVE-2025-47273.
Update to 78.1.1, fixes CVE-2025-47273.
Harden temporary private mounts (#2373301)
Update to 137.0.7151.119 * CVE-2025-6191: Integer overflow in V8 * CVE-2025-6192: Use after free in Profiler
New version 2.6.3 (rhbz#2368989) Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803 kea.conf: Remove /tmp/ from socket-name for existing configurations kea.conf: Set pseudo-random password for default config to secure fresh install and allow CA startup without user intervention
Security fix for CVE-2025-47273
Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags() Fixes CVE-2025-48432: Potential log injection via unescaped request path
New version 2.6.3 (rhbz#2368989) Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803 kea.conf: Remove /tmp/ from socket-name for existing configurations kea.conf: Set pseudo-random password for default config to secure fresh install and allow CA startup without user intervention
Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags() Fixes CVE-2025-48432: Potential log injection via unescaped request path
Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags() Fixes CVE-2025-48432: Potential log injection via unescaped request path
Update to 128.11.1 https://www.mozilla.org/en-US/security/advisories/mfsa2025-49/
Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags() Fixes CVE-2025-48432: Potential log injection via unescaped request path
This is a security update to the stable version 1.6 of Roundcube Webmail. It provides fixes to recently reported security vulnerabilities: Fix Post-Auth RCE via PHP Object Deserialization reported by firs0v. This version is considered stable and we recommend to update all productive installations of Roundcube 1.6.x with it. Please do backup your data before
Qt 6.9.1 bugfix release.
Qt 6.9.1 bugfix release.
Qt 6.9.1 bugfix release.
Qt 6.9.1 bugfix release.
Qt 6.9.1 bugfix release.
Qt 6.9.1 bugfix release.
Qt 6.9.1 bugfix release.
Qt 6.9.1 bugfix release.
Qt 6.9.1 bugfix release.
Qt 6.9.1 bugfix release.
Qt 6.9.1 bugfix release.
Qt 6.9.1 bugfix release.
Qt 6.9.1 bugfix release.