Fedora Linux has released important security updates for two of its components: Cloud-Init and Chromium.
- Fedora 41: Update to version 24.2-4.fc41, which addresses vulnerabilities CVE-2024-6174 and CVE-2024-11584. The update includes backported fixes that correct permissions on the cloud-init-hotplugd.socket, which had default permissions that allowed world-write access, potentially enabling unprivileged users to execute hotplug-hook commands. Additionally, it disables certain configurations that granted root access to a hardcoded local IP address on non-x86 platforms, which may affect non-x86 OpenStack Nova users.
- Fedora 42: Update to version 24.2-5.fc42, which includes the same fixes as the Fedora 41 update.
2. Chromium Update:
- Fedora 42: Update to version 138.0.7204.168-1.fc42, which resolves type confusion vulnerabilities in V8 (CVE-2025-8010 and CVE-2025-8011).
- For Cloud-Init on Fedora 41:
Updates Overview:
1. Cloud-Init Updates:- Fedora 41: Update to version 24.2-4.fc41, which addresses vulnerabilities CVE-2024-6174 and CVE-2024-11584. The update includes backported fixes that correct permissions on the cloud-init-hotplugd.socket, which had default permissions that allowed world-write access, potentially enabling unprivileged users to execute hotplug-hook commands. Additionally, it disables certain configurations that granted root access to a hardcoded local IP address on non-x86 platforms, which may affect non-x86 OpenStack Nova users.
- Fedora 42: Update to version 24.2-5.fc42, which includes the same fixes as the Fedora 41 update.
2. Chromium Update:
- Fedora 42: Update to version 138.0.7204.168-1.fc42, which resolves type confusion vulnerabilities in V8 (CVE-2025-8010 and CVE-2025-8011).
Installation Instructions:
Users can install these updates using the DNF package manager with the following commands:- For Cloud-Init on Fedora 41:
su -c 'dnf upgrade --advisory FEDORA-2025-58f05c43ae'- For Chromium on Fedora 42:
su -c 'dnf upgrade --advisory FEDORA-2025-0069214e9f'- For Cloud-Init on Fedora 42:
su -c 'dnf upgrade --advisory FEDORA-2025-b93ee7b368'
Additional Information:
All packages are signed with the Fedora Project GPG key, ensuring their integrity and origin. Users can find more about the GPG keys on the Fedora Project's official website.Conclusion:
These updates emphasize Fedora's commitment to security by swiftly addressing vulnerabilities that could potentially compromise user systems. Users are encouraged to keep their systems updated to benefit from these security enhancements and maintain optimal performance and safety while using Fedora LinuxCloud-Init and Chromium updates for Fedora
Fedora Linux has received security updates, including Cloud-Init and Chromium:
Fedora 41 Update: cloud-init-24.2-4.fc41
Fedora 42 Update: chromium-138.0.7204.168-1.fc42
Fedora 42 Update: cloud-init-24.2-5.fc42Cloud-Init and Chromium updates for Fedora @ Linux Compatible
