[SECURITY] Fedora 41 Update: mingw-LibRaw-0.21.4-1.fc41

MinGW Windows LibRaw library...

CVE-2025-32025 vulnerabilities

Vulnerabilities for packages: mattermost-fips...

GHSA-FMHH-RW3H-785M vulnerabilities

Vulnerabilities for packages: mattermost-fips...

GHSA-Q7RW-W4CQ-2J6W vulnerabilities

Vulnerabilities for packages: mattermost-fips...

CVE-2025-4093

Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox ESR 128.10 and Thunderbird 128.10...

CVE-2025-46327 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, sqlexporter, splunk-otel-collector, grafana-alloy...

GHSA-VQFR-H8MV-GHFJ vulnerabilities

Vulnerabilities for packages: kserve, reflex, kubeflow-pipelines-visualization-server, checkov, jupyter-base-notebook, mitmproxy, airflow...

GHSA-6JGM-J7H2-2FQG vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, sqlexporter, splunk-otel-collector, grafana-alloy...

CVE-2025-3891

A flaw was found in the modauthopenidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistently, affecting availability...

CVE-2025-31650

Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger an OutOfMemoryException resulting in a denial ...

CVE-2025-31651

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a subset of unlikely rewrite rule configurations, it was possible for a specially crafted request to bypass some rewrite rules. If those rewrite rules effectively enforced security constraints, those...

CVE-2025-31650

Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger an OutOfMemoryException resulting in a denial ...

GHSA-3G36-GF7C-75QW vulnerabilities

Vulnerabilities for packages: mattermost-fips...

CVE-2025-41395 vulnerabilities

Vulnerabilities for packages: mattermost-fips...

GHSA-XFQ9-HH5X-XFQ9 vulnerabilities

Vulnerabilities for packages: mattermost-fips...

GHSA-689C-XQ7X-XJWF vulnerabilities

Vulnerabilities for packages: mattermost-fips...

GHSA-FR22-5377-F3P7 vulnerabilities

Vulnerabilities for packages: mattermost-fips...

CVE-2025-24866 vulnerabilities

Vulnerabilities for packages: mattermost-fips...

CVE-2025-22235

EndpointRequest.to creates a matcher for null/ if the actuator endpoint, for which the EndpointRequest has been created, is disabled or not exposed. Your application may be affected by this if all the following conditions are met: You use Spring Security EndpointRequest.to has been used in a Spri...

CVE-2025-46687

quickjs-ng through 0.9.0 has a missing length check in JSReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected...