Fedora Linux 8994 Published by

Fedora Linux has been updated with various security enhancements, including Vyper, .NET, Open-VM-Tools, and Thunderbird:

Fedora 41 Update: vyper-0.4.1-4.fc41
Fedora 41 Update: dotnet8.0-8.0.116-1.fc41
Fedora 41 Update: open-vm-tools-12.5.2-1.fc41
Fedora 42 Update: thunderbird-128.10.2-1.fc42
Fedora 42 Update: vyper-0.4.1-4.fc42
Fedora 42 Update: dotnet8.0-8.0.116-1.fc42




[SECURITY] Fedora 41 Update: vyper-0.4.1-4.fc41


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-510a78f439
2025-05-25 02:12:06.542038+00:00
--------------------------------------------------------------------------------

Name : vyper
Product : Fedora 41
Version : 0.4.1
Release : 4.fc41
URL : https://vyperlang.org
Summary : Pythonic Smart Contract Language for the EVM
Description :
Pythonic Smart Contract Language for the EVM.

--------------------------------------------------------------------------------
Update Information:

A few fixes
--------------------------------------------------------------------------------
ChangeLog:

* Fri May 16 2025 Peter Lemenkov [lemenkov@gmail.com] - 0.4.1-4
- Address two issues
* Thu Apr 24 2025 Romain Geissler [romain.geissler@amadeus.com] - 0.4.1-3
- Relax asttokens version dependency.
* Mon Mar 31 2025 Peter Lemenkov [lemenkov@gmail.com] - 0.4.1-2
- F41+: Use the provisional declarative buildsystem
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2366718 - CVE-2025-47774 vyper: Vyper: Slice Length Zero Side-Effect Elision [fedora-41]
https://bugzilla.redhat.com/show_bug.cgi?id=2366718
[ 2 ] Bug #2366719 - CVE-2025-47774 vyper: Vyper: Slice Length Zero Side-Effect Elision [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2366719
[ 3 ] Bug #2366742 - CVE-2025-47285 vyper: Vyper: Zero-Length Bytestring Side-Effect Skipping [fedora-41]
https://bugzilla.redhat.com/show_bug.cgi?id=2366742
[ 4 ] Bug #2366743 - CVE-2025-47285 vyper: Vyper: Zero-Length Bytestring Side-Effect Skipping [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2366743
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-510a78f439' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

--



[SECURITY] Fedora 41 Update: dotnet8.0-8.0.116-1.fc41


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-d62bbb5261
2025-05-25 02:12:06.541990+00:00
--------------------------------------------------------------------------------

Name : dotnet8.0
Product : Fedora 41
Version : 8.0.116
Release : 1.fc41
URL : https://github.com/dotnet/
Summary : .NET Runtime and SDK
Description :
.NET is a fast, lightweight and modular platform for creating
cross platform applications that work on Linux, macOS and Windows.

It particularly focuses on creating console applications, web
applications and micro-services.

.NET contains a runtime conforming to .NET Standards a set of
framework libraries, an SDK containing compilers and a 'dotnet'
application to drive everything.

--------------------------------------------------------------------------------
Update Information:

This is the May 2025 update for .NET 8 for Fedora.
Release Notes:
SDK: https://github.com/dotnet/core/blob/main/release-
notes/8.0/8.0.16/8.0.116.md
Runtime: https://github.com/dotnet/core/blob/main/release-
notes/8.0/8.0.16/8.0.16.md
--------------------------------------------------------------------------------
ChangeLog:

* Tue May 13 2025 Omair Majid [omajid@redhat.com] - 8.0.116-1
- Update to .NET SDK 8.0.116 and Runtime 8.0.16
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-d62bbb5261' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

--



[SECURITY] Fedora 41 Update: open-vm-tools-12.5.2-1.fc41


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-a6305306dd
2025-05-25 02:12:06.541985+00:00
--------------------------------------------------------------------------------

Name : open-vm-tools
Product : Fedora 41
Version : 12.5.2
Release : 1.fc41
URL : https://github.com/vmware/open-vm-tools
Summary : Open Virtual Machine Tools for virtual machines hosted on VMware
Description :
The open-vm-tools project is an open source implementation of VMware Tools. It
is a suite of open source virtualization utilities and drivers to improve the
functionality, user experience and administration of VMware virtual machines.
This package contains only the core user-space programs and libraries of
open-vm-tools.

--------------------------------------------------------------------------------
Update Information:

Update to version 12.5.2. Fixes CVE-2025-22247
--------------------------------------------------------------------------------
ChangeLog:

* Fri May 16 2025 Simone Caronni [negativo17@gmail.com] - 12.5.2-1
- Update to 12.5.2
* Thu Mar 20 2025 Richard W.M. Jones [rjones@redhat.com] - 12.4.0-4
- Bump and rebuild
* Fri Jan 17 2025 Fedora Release Engineering [releng@fedoraproject.org] - 12.4.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2294721 - open-vm-tools version 12.4.5 has been released - please rebase
https://bugzilla.redhat.com/show_bug.cgi?id=2294721
[ 2 ] Bug #2320094 - open-vm-tools version 12.5.0 has been released - please rebase
https://bugzilla.redhat.com/show_bug.cgi?id=2320094
[ 3 ] Bug #2365723 - CVE-2025-22247 open-vm-tools: Insecure file handling [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2365723
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-a6305306dd' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

--



[SECURITY] Fedora 42 Update: thunderbird-128.10.2-1.fc42


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-32d6feec91
2025-05-25 01:46:56.023617+00:00
--------------------------------------------------------------------------------

Name : thunderbird
Product : Fedora 42
Version : 128.10.2
Release : 1.fc42
URL : http://www.mozilla.org/projects/thunderbird/
Summary : Mozilla Thunderbird mail/newsgroup client
Description :
Mozilla Thunderbird is a standalone mail and newsgroup client.

--------------------------------------------------------------------------------
Update Information:

Update to 128.10.2
https://www.thunderbird.net/en-US/thunderbird/128.10.2esr/releasenotes/
--------------------------------------------------------------------------------
ChangeLog:

* Wed May 21 2025 Eike Rathke [erack@redhat.com] - 128.10.2-1
- Update to 128.10.2
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-32d6feec91' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

--



[SECURITY] Fedora 42 Update: vyper-0.4.1-4.fc42


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-4acdb9a1bd
2025-05-25 01:46:56.023552+00:00
--------------------------------------------------------------------------------

Name : vyper
Product : Fedora 42
Version : 0.4.1
Release : 4.fc42
URL : https://vyperlang.org
Summary : Pythonic Smart Contract Language for the EVM
Description :
Pythonic Smart Contract Language for the EVM.

--------------------------------------------------------------------------------
Update Information:

A few fixes
--------------------------------------------------------------------------------
ChangeLog:

* Fri May 16 2025 Peter Lemenkov [lemenkov@gmail.com] - 0.4.1-4
- Address two issues
* Thu Apr 24 2025 Romain Geissler [romain.geissler@amadeus.com] - 0.4.1-3
- Relax asttokens version dependency.
* Mon Mar 31 2025 Peter Lemenkov [lemenkov@gmail.com] - 0.4.1-2
- F41+: Use the provisional declarative buildsystem
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2366718 - CVE-2025-47774 vyper: Vyper: Slice Length Zero Side-Effect Elision [fedora-41]
https://bugzilla.redhat.com/show_bug.cgi?id=2366718
[ 2 ] Bug #2366719 - CVE-2025-47774 vyper: Vyper: Slice Length Zero Side-Effect Elision [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2366719
[ 3 ] Bug #2366742 - CVE-2025-47285 vyper: Vyper: Zero-Length Bytestring Side-Effect Skipping [fedora-41]
https://bugzilla.redhat.com/show_bug.cgi?id=2366742
[ 4 ] Bug #2366743 - CVE-2025-47285 vyper: Vyper: Zero-Length Bytestring Side-Effect Skipping [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2366743
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-4acdb9a1bd' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

--



[SECURITY] Fedora 42 Update: dotnet8.0-8.0.116-1.fc42


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-3f807ca531
2025-05-25 01:46:56.023510+00:00
--------------------------------------------------------------------------------

Name : dotnet8.0
Product : Fedora 42
Version : 8.0.116
Release : 1.fc42
URL : https://github.com/dotnet/
Summary : .NET Runtime and SDK
Description :
.NET is a fast, lightweight and modular platform for creating
cross platform applications that work on Linux, macOS and Windows.

It particularly focuses on creating console applications, web
applications and micro-services.

.NET contains a runtime conforming to .NET Standards a set of
framework libraries, an SDK containing compilers and a 'dotnet'
application to drive everything.

--------------------------------------------------------------------------------
Update Information:

This is the May 2025 update for .NET 8 for Fedora.
Release Notes:
SDK: https://github.com/dotnet/core/blob/main/release-
notes/8.0/8.0.16/8.0.116.md
Runtime: https://github.com/dotnet/core/blob/main/release-
notes/8.0/8.0.16/8.0.16.md
--------------------------------------------------------------------------------
ChangeLog:

* Tue May 13 2025 Omair Majid [omajid@redhat.com] - 8.0.116-1
- Update to .NET SDK 8.0.116 and Runtime 8.0.16
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-3f807ca531' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

--