Fedora Linux 8902 Published by

Fedora Linux has received several security updates, including jupyterlab-4.3.6-1.fc41, dotnet8.0-8.0.114-1.fc41, jupyterlab-4.3.6-1.fc40, dotnet8.0-8.0.114-1.fc40, ffmpeg-6.1.2-2.fc40, and dotnet8.0-8.0.114-1.fc42:

Fedora 41 Update: jupyterlab-4.3.6-1.fc41
Fedora 41 Update: dotnet8.0-8.0.114-1.fc41
Fedora 40 Update: jupyterlab-4.3.6-1.fc40
Fedora 40 Update: dotnet8.0-8.0.114-1.fc40
Fedora 40 Update: ffmpeg-6.1.2-2.fc40
Fedora 42 Update: dotnet8.0-8.0.114-1.fc42




[SECURITY] Fedora 41 Update: jupyterlab-4.3.6-1.fc41


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-e50201543b
2025-03-23 01:13:07.010432+00:00
--------------------------------------------------------------------------------

Name : jupyterlab
Product : Fedora 41
Version : 4.3.6
Release : 1.fc41
URL : https://jupyter.org
Summary : JupyterLab computational environment
Description :
JupyterLab is the next-generation user interface for Project Jupyter
offering all the familiar building blocks of the classic Jupyter
Notebook (notebook, terminal, text editor, file browser, rich outputs, etc.)
in a flexible and powerful user interface.

--------------------------------------------------------------------------------
Update Information:

Update to 4.3.6 (rhbz#2352545)
--------------------------------------------------------------------------------
ChangeLog:

* Fri Mar 14 2025 Lumir Balhar [lbalhar@redhat.com] - 4.3.6-1
- Update to 4.3.6 (rhbz#2352545)
* Wed Feb 12 2025 Lumir Balhar [lbalhar@redhat.com] - 4.3.5-1
- Update to 4.3.5 (rhbz#2342878)
* Fri Jan 17 2025 Fedora Release Engineering [releng@fedoraproject.org] - 4.3.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Fri Dec 20 2024 Lumir Balhar [lbalhar@redhat.com] - 4.3.4-1
- Update to 4.3.4 (rhbz#2333040)
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2345774 - CVE-2025-26791 jupyterlab: Mutation XSS in DOMPurify Due to Improper Template Literal Handling [fedora-41]
https://bugzilla.redhat.com/show_bug.cgi?id=2345774
[ 2 ] Bug #2345861 - CVE-2025-25304 jupyterlab: Vega allows Cross-site Scripting via the vlSelectionTuples function [fedora-41]
https://bugzilla.redhat.com/show_bug.cgi?id=2345861
[ 3 ] Bug #2352545 - jupyterlab-4.3.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2352545
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-e50201543b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

--



[SECURITY] Fedora 41 Update: dotnet8.0-8.0.114-1.fc41


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-adbd75f500
2025-03-23 01:13:07.010408+00:00
--------------------------------------------------------------------------------

Name : dotnet8.0
Product : Fedora 41
Version : 8.0.114
Release : 1.fc41
URL : https://github.com/dotnet/
Summary : .NET Runtime and SDK
Description :
.NET is a fast, lightweight and modular platform for creating
cross platform applications that work on Linux, macOS and Windows.

It particularly focuses on creating console applications, web
applications and micro-services.

.NET contains a runtime conforming to .NET Standards a set of
framework libraries, an SDK containing compilers and a 'dotnet'
application to drive everything.

--------------------------------------------------------------------------------
Update Information:

This is the monthly update for .NET for March 2025.
Release Notes:
SDK https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.14/8.0.114.md
Runtime: https://github.com/dotnet/core/blob/main/release-
notes/8.0/8.0.14/8.0.14.md
--------------------------------------------------------------------------------
ChangeLog:

* Tue Mar 11 2025 Omair Majid [omajid@redhat.com] - 8.0.114-1
- Update to .NET SDK 8.0.114 and Runtime 8.0.14
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-adbd75f500' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

--



[SECURITY] Fedora 40 Update: jupyterlab-4.3.6-1.fc40


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-1d68ba6806
2025-03-23 01:06:47.328397+00:00
--------------------------------------------------------------------------------

Name : jupyterlab
Product : Fedora 40
Version : 4.3.6
Release : 1.fc40
URL : https://jupyter.org
Summary : JupyterLab computational environment
Description :
JupyterLab is the next-generation user interface for Project Jupyter
offering all the familiar building blocks of the classic Jupyter
Notebook (notebook, terminal, text editor, file browser, rich outputs, etc.)
in a flexible and powerful user interface.

--------------------------------------------------------------------------------
Update Information:

Update to 4.3.6 (rhbz#2352545)
--------------------------------------------------------------------------------
ChangeLog:

* Fri Mar 14 2025 Lumir Balhar [lbalhar@redhat.com] - 4.3.6-1
- Update to 4.3.6 (rhbz#2352545)
* Wed Feb 12 2025 Lumir Balhar [lbalhar@redhat.com] - 4.3.5-1
- Update to 4.3.5 (rhbz#2342878)
* Fri Jan 17 2025 Fedora Release Engineering [releng@fedoraproject.org] - 4.3.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Fri Dec 20 2024 Lumir Balhar [lbalhar@redhat.com] - 4.3.4-1
- Update to 4.3.4 (rhbz#2333040)
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2345768 - CVE-2025-26791 jupyterlab: Mutation XSS in DOMPurify Due to Improper Template Literal Handling [fedora-40]
https://bugzilla.redhat.com/show_bug.cgi?id=2345768
[ 2 ] Bug #2345860 - CVE-2025-25304 jupyterlab: Vega allows Cross-site Scripting via the vlSelectionTuples function [fedora-40]
https://bugzilla.redhat.com/show_bug.cgi?id=2345860
[ 3 ] Bug #2352545 - jupyterlab-4.3.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2352545
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-1d68ba6806' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

--



[SECURITY] Fedora 40 Update: dotnet8.0-8.0.114-1.fc40


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-83c147615e
2025-03-23 01:06:47.328380+00:00
--------------------------------------------------------------------------------

Name : dotnet8.0
Product : Fedora 40
Version : 8.0.114
Release : 1.fc40
URL : https://github.com/dotnet/
Summary : .NET Runtime and SDK
Description :
.NET is a fast, lightweight and modular platform for creating
cross platform applications that work on Linux, macOS and Windows.

It particularly focuses on creating console applications, web
applications and micro-services.

.NET contains a runtime conforming to .NET Standards a set of
framework libraries, an SDK containing compilers and a 'dotnet'
application to drive everything.

--------------------------------------------------------------------------------
Update Information:

This is the monthly update for .NET for March 2025.
Release Notes:
SDK https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.14/8.0.114.md
Runtime: https://github.com/dotnet/core/blob/main/release-
notes/8.0/8.0.14/8.0.14.md
--------------------------------------------------------------------------------
ChangeLog:

* Tue Mar 11 2025 Omair Majid [omajid@redhat.com] - 8.0.114-1
- Update to .NET SDK 8.0.114 and Runtime 8.0.14
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-83c147615e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

--



[SECURITY] Fedora 40 Update: ffmpeg-6.1.2-2.fc40


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-34c88263fe
2025-03-23 01:06:47.328285+00:00
--------------------------------------------------------------------------------

Name : ffmpeg
Product : Fedora 40
Version : 6.1.2
Release : 2.fc40
URL : https://ffmpeg.org/
Summary : A complete solution to record, convert and stream audio and video
Description :
FFmpeg is a leading multimedia framework, able to decode, encode, transcode,
mux, demux, stream, filter and play pretty much anything that humans and
machines have created. It supports the most obscure ancient formats up to the
cutting edge. No matter if they were designed by some standards committee, the
community or a corporation.

This build of ffmpeg is limited in the number of codecs supported.

--------------------------------------------------------------------------------
Update Information:

Backported fix for CVE-2024-12361 .
--------------------------------------------------------------------------------
ChangeLog:

* Fri Mar 7 2025 Dominik Mierzejewski [dominik@greysector.net] - 6.1.2-2
- Backport fix for CVE-2024-12361 (resolves rhbz#2331085)
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2331085 - CVE-2024-12361 ffmpeg: FFmpeg NULL Pointer Dereference [fedora-40]
https://bugzilla.redhat.com/show_bug.cgi?id=2331085
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-34c88263fe' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

--



[SECURITY] Fedora 42 Update: dotnet8.0-8.0.114-1.fc42


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-54ac622cef
2025-03-23 00:15:15.929205+00:00
--------------------------------------------------------------------------------

Name : dotnet8.0
Product : Fedora 42
Version : 8.0.114
Release : 1.fc42
URL : https://github.com/dotnet/
Summary : .NET Runtime and SDK
Description :
.NET is a fast, lightweight and modular platform for creating
cross platform applications that work on Linux, macOS and Windows.

It particularly focuses on creating console applications, web
applications and micro-services.

.NET contains a runtime conforming to .NET Standards a set of
framework libraries, an SDK containing compilers and a 'dotnet'
application to drive everything.

--------------------------------------------------------------------------------
Update Information:

This is the monthly update for .NET for March 2025.
Release Notes:
SDK https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.14/8.0.114.md
Runtime: https://github.com/dotnet/core/blob/main/release-
notes/8.0/8.0.14/8.0.14.md
--------------------------------------------------------------------------------
ChangeLog:

* Tue Mar 11 2025 Omair Majid [omajid@redhat.com] - 8.0.114-1
- Update to .NET SDK 8.0.114 and Runtime 8.0.14
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-54ac622cef' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

--