Fedora 41 Update: salt-3007.5-2.fc41
Fedora 41 Update: mingw-python-requests-2.32.4-1.fc41
Fedora 41 Update: mingw-djvulibre-3.5.29-1.fc41
[SECURITY] Fedora 41 Update: salt-3007.5-2.fc41
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-b712778148
2025-07-14 02:33:25.946198+00:00
--------------------------------------------------------------------------------
Name : salt
Product : Fedora 41
Version : 3007.5
Release : 2.fc41
URL : https://saltproject.io/
Summary : A parallel remote execution system
Description :
Salt is a distributed remote execution system used to execute commands and
query data. It was developed in order to bring the best solutions found in
the world of remote execution together and make them better, faster and more
malleable. Salt accomplishes this via its ability to handle larger loads of
information, and not just dozens, but hundreds or even thousands of individual
servers, handle them quickly and through a simple and manageable interface.
--------------------------------------------------------------------------------
Update Information:
Contains fixes for regressions introduced during CVE bugfix update (3007.4).
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 5 2025 Robby Callicotte [rcallicotte@fedoraproject.org] - 3007.5-1
- Updated to 3007.5
- Resolves RHBZ#2375105
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2372777 - CVE-2025-22238 salt: Directory traversal in salt project [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2372777
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-b712778148' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--
[SECURITY] Fedora 41 Update: mingw-python-requests-2.32.4-1.fc41
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-47916db6c7
2025-07-14 02:33:25.946188+00:00
--------------------------------------------------------------------------------
Name : mingw-python-requests
Product : Fedora 41
Version : 2.32.4
Release : 1.fc41
URL : https://requests.readthedocs.io/
Summary : MinGW Windows Python requests library
Description :
MinGW Windows Python requests.
--------------------------------------------------------------------------------
Update Information:
Update to 2.32.4. Fixes CVE-2024-47081.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 5 2025 Sandro Mani [manisandro@gmail.com] - 2.32.4-1
- Update to 2.32.4
* Fri Jan 17 2025 Fedora Release Engineering [releng@fedoraproject.org] - 2.32.3-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2375883 - CVE-2024-47081 mingw-python-requests: Requests vulnerable to .netrc credentials leak via malicious URLs [fedora-41]
https://bugzilla.redhat.com/show_bug.cgi?id=2375883
[ 2 ] Bug #2375885 - CVE-2024-47081 mingw-python-requests: Requests vulnerable to .netrc credentials leak via malicious URLs [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2375885
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-47916db6c7' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--
[SECURITY] Fedora 41 Update: mingw-djvulibre-3.5.29-1.fc41
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-0f35c5dbbb
2025-07-14 02:33:25.946191+00:00
--------------------------------------------------------------------------------
Name : mingw-djvulibre
Product : Fedora 41
Version : 3.5.29
Release : 1.fc41
URL : http://djvu.sourceforge.net/
Summary : MinGW Windows djvulibre library
Description :
MinGW Windows djvulibre library.
--------------------------------------------------------------------------------
Update Information:
Update to 3.5.29, fixes CVE-2025-53367.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 5 2025 Sandro Mani [manisandro@gmail.com] - 3.5.29-1
- Update to 3.5.29
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2376252 - CVE-2025-53367 mingw-djvulibre: DjVuLibre out of bounds write [fedora-41]
https://bugzilla.redhat.com/show_bug.cgi?id=2376252
[ 2 ] Bug #2376254 - CVE-2025-53367 mingw-djvulibre: DjVuLibre out of bounds write [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2376254
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-0f35c5dbbb' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--