Aggregator

bind-9.18.51^git20261003.d0a87358-11.fc46 bind-dyndb-ldap-11.11-18.fc46

Fedora Security Advisories
5 days 16 hours ago
FEDORA-2026-56974571ee Packages in this update:
  • bind-9.18.51^git20261003.d0a87358-11.fc46
  • bind-dyndb-ldap-11.11-18.fc46
Update description: Security updates using git snapshot

Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git branch bind-9.18.

  • CVE-2026-75029 Discard repeated SOA, CNAME, and DNAME records when parsing DNS messages
  • CVE-2026-19666 DNS64 with break-dnssec could cause an assertion failure
  • CVE-2026-19662 Prevent resolver crash with cached DNSSEC proofs
  • CVE-2026-19941 Prevent forged DNSSEC-validated NXDOMAIN responses
  • CVE-2026-78301 Out-of-zone records in a zone database could be served as authoritative
  • CVE-2026-81563 Following HTTPS/SVCB aliases could leak resolver cache memory
  • CVE-2026-80274 Crash on wildcard answers carrying both NSEC and NSEC3 proofs
  • CVE-2026-19033 Require a TSIG on every message of incoming zone transfers
  • CVE-2026-81736 Cached HTTPS/SVCB aliases could exhaust resolver CPU
  • CVE-2026-19667 Reject negative cache records that do not fit in a dns_rdata_t

bind-9.18.51^git20261003.d0a87358-11.fc45 bind-dyndb-ldap-11.11-18.fc45

Fedora Security Advisories
5 days 18 hours ago
FEDORA-2026-468290e984 Packages in this update:
  • bind-9.18.51^git20261003.d0a87358-11.fc45
  • bind-dyndb-ldap-11.11-18.fc45
Update description: Security updates using git snapshot

Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git branch bind-9.18.

  • CVE-2026-75029 Discard repeated SOA, CNAME, and DNAME records when parsing DNS messages
  • CVE-2026-19666 DNS64 with break-dnssec could cause an assertion failure
  • CVE-2026-19662 Prevent resolver crash with cached DNSSEC proofs
  • CVE-2026-19941 Prevent forged DNSSEC-validated NXDOMAIN responses
  • CVE-2026-78301 Out-of-zone records in a zone database could be served as authoritative
  • CVE-2026-81563 Following HTTPS/SVCB aliases could leak resolver cache memory
  • CVE-2026-80274 Crash on wildcard answers carrying both NSEC and NSEC3 proofs
  • CVE-2026-19033 Require a TSIG on every message of incoming zone transfers
  • CVE-2026-81736 Cached HTTPS/SVCB aliases could exhaust resolver CPU
  • CVE-2026-19667 Reject negative cache records that do not fit in a dns_rdata_t

dotnet8.0-8.0.132-1.fc43

Fedora Security Advisories
5 days 18 hours ago
FEDORA-2026-aca7a82c77 Packages in this update:
  • dotnet8.0-8.0.132-1.fc43
Update description:

Update to .NET SDK 8.0.132 and Runtime 8.0.32

Fixes: CVE-2026-105016,CVE-2026-58280,CVE-2026-66822,CVE-2026-69651,CVE-2026-70007,CVE-2026-70035,CVE-2026-70159,CVE-2026-70162,CVE-2026-70174,CVE-2026-70175,CVE-2026-70179,CVE-2026-70181,CVE-2026-70183,CVE-2026-70186,CVE-2026-70188,CVE-2026-70196,CVE-2026-70197,CVE-2026-83520,CVE-2026-84008,CVE-2026-85363,CVE-2026-85790,CVE-2026-87697,CVE-2026-88092,CVE-2026-92707,CVE-2026-96222,CVE-2026-96224,CVE-2026-96225,CVE-2026-96229,CVE-2026-96230,CVE-2026-96231,CVE-2026-96232,CVE-2026-96233,CVE-2026-96234,CVE-2026-96235,CVE-2026-96236,CVE-2026-96237,CVE-2026-96238,CVE-2026-96958,CVE-2026-96959,CVE-2026-96960

Release Notes:

dotnet8.0-8.0.132-1.fc44

Fedora Security Advisories
5 days 18 hours ago
FEDORA-2026-6cdafc7e45 Packages in this update:
  • dotnet8.0-8.0.132-1.fc44
Update description:

Update to .NET SDK 8.0.132 and Runtime 8.0.32

Fixes: CVE-2026-105016,CVE-2026-58280,CVE-2026-66822,CVE-2026-69651,CVE-2026-70007,CVE-2026-70035,CVE-2026-70159,CVE-2026-70162,CVE-2026-70174,CVE-2026-70175,CVE-2026-70179,CVE-2026-70181,CVE-2026-70183,CVE-2026-70186,CVE-2026-70188,CVE-2026-70196,CVE-2026-70197,CVE-2026-83520,CVE-2026-84008,CVE-2026-85363,CVE-2026-85790,CVE-2026-87697,CVE-2026-88092,CVE-2026-92707,CVE-2026-96222,CVE-2026-96224,CVE-2026-96225,CVE-2026-96229,CVE-2026-96230,CVE-2026-96231,CVE-2026-96232,CVE-2026-96233,CVE-2026-96234,CVE-2026-96235,CVE-2026-96236,CVE-2026-96237,CVE-2026-96238,CVE-2026-96958,CVE-2026-96959,CVE-2026-96960

Release Notes:

ghostscript-10.05.1-7.fc43

Fedora Security Advisories
5 days 19 hours ago
FEDORA-2026-58a572baa1 Packages in this update:
  • ghostscript-10.05.1-7.fc43
Update description:

CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter

CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free bypass via Type 5 shading OOB write and procedure-stream use-after-free

CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data

ghostscript-10.06.0-3.fc44

Fedora Security Advisories
5 days 19 hours ago
FEDORA-2026-cf31315f93 Packages in this update:
  • ghostscript-10.06.0-3.fc44
Update description:

CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter

CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free bypass via Type 5 shading OOB write and procedure-stream use-after-free

CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data

ghostscript-10.07.1-3.fc45

Fedora Security Advisories
5 days 19 hours ago
FEDORA-2026-b90bfa1339 Packages in this update:
  • ghostscript-10.07.1-3.fc45
Update description:

CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter

CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free bypass via Type 5 shading OOB write and procedure-stream use-after-free

CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data

bind-9.18.51^git20261003.d0a87358-2.fc44 bind-dyndb-ldap-11.11-17.fc44

Fedora Security Advisories
5 days 20 hours ago
FEDORA-2026-a5b5298a84 Packages in this update:
  • bind-9.18.51^git20261003.d0a87358-2.fc44
  • bind-dyndb-ldap-11.11-17.fc44
Update description: Security updates using git snapshot

Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git branch bind-9.18.

  • CVE-2026-75029 Discard repeated SOA, CNAME, and DNAME records when parsing DNS messages
  • CVE-2026-19666 DNS64 with break-dnssec could cause an assertion failure
  • CVE-2026-19662 Prevent resolver crash with cached DNSSEC proofs
  • CVE-2026-19941 Prevent forged DNSSEC-validated NXDOMAIN responses
  • CVE-2026-78301 Out-of-zone records in a zone database could be served as authoritative
  • CVE-2026-81563 Following HTTPS/SVCB aliases could leak resolver cache memory
  • CVE-2026-80274 Crash on wildcard answers carrying both NSEC and NSEC3 proofs
  • CVE-2026-19033 Require a TSIG on every message of incoming zone transfers
  • CVE-2026-81736 Cached HTTPS/SVCB aliases could exhaust resolver CPU
  • CVE-2026-19667 Reject negative cache records that do not fit in a dns_rdata_t

bind-9.18.51^git20261003.d0a87358-2.fc43 bind-dyndb-ldap-11.11-15.fc43

Fedora Security Advisories
5 days 20 hours ago
FEDORA-2026-aba85b9a89 Packages in this update:
  • bind-9.18.51^git20261003.d0a87358-2.fc43
  • bind-dyndb-ldap-11.11-15.fc43
Update description: Security updates using git snapshot

Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git branch bind-9.18.

  • CVE-2026-75029 Discard repeated SOA, CNAME, and DNAME records when parsing DNS messages
  • CVE-2026-19666 DNS64 with break-dnssec could cause an assertion failure
  • CVE-2026-19662 Prevent resolver crash with cached DNSSEC proofs
  • CVE-2026-19941 Prevent forged DNSSEC-validated NXDOMAIN responses
  • CVE-2026-78301 Out-of-zone records in a zone database could be served as authoritative
  • CVE-2026-81563 Following HTTPS/SVCB aliases could leak resolver cache memory
  • CVE-2026-80274 Crash on wildcard answers carrying both NSEC and NSEC3 proofs
  • CVE-2026-19033 Require a TSIG on every message of incoming zone transfers
  • CVE-2026-81736 Cached HTTPS/SVCB aliases could exhaust resolver CPU
  • CVE-2026-19667 Reject negative cache records that do not fit in a dns_rdata_t

perl-Badger-0.16-2.fc43 perl-CLI-Simple-2.2.5-1.fc43 perl-CSS-Inliner-4027-1.fc43 perl-Encoding-FixLatin-1.04-2.fc43 perl-HTML-Query-0.09-2.fc43 perl-Markdown-Render-2.0.4-1.fc43 perl-Text-Markdown-Discount-0.18-2.fc43 rt-5.0.10-1.fc43

Fedora Security Advisories
6 days ago
FEDORA-2026-04f78841ec Packages in this update:
  • perl-Badger-0.16-2.fc43
  • perl-CLI-Simple-2.2.5-1.fc43
  • perl-CSS-Inliner-4027-1.fc43
  • perl-Encoding-FixLatin-1.04-2.fc43
  • perl-HTML-Query-0.09-2.fc43
  • perl-Markdown-Render-2.0.4-1.fc43
  • perl-Text-Markdown-Discount-0.18-2.fc43
  • rt-5.0.10-1.fc43
Update description:

Update to rt 5.0.10

Fixes CVE-2025-61873 CVE-2026-41075 CVE-2026-41076 CVE-2026-6841 CVE-2026-44231 CVE-2026-44229 CVE-2026-44230

perl-Badger-0.16-2.fc44 perl-CLI-Simple-2.2.5-1.fc44 perl-CSS-Inliner-4027-1.fc44 perl-Encoding-FixLatin-1.04-2.fc44 perl-HTML-Query-0.09-2.fc44 perl-Markdown-Render-2.0.4-1.fc44 perl-Text-Markdown-Discount-0.18-2.fc44 rt-5.0.10-1.fc44

Fedora Security Advisories
6 days ago
FEDORA-2026-0b9eb888a8 Packages in this update:
  • perl-Badger-0.16-2.fc44
  • perl-CLI-Simple-2.2.5-1.fc44
  • perl-CSS-Inliner-4027-1.fc44
  • perl-Encoding-FixLatin-1.04-2.fc44
  • perl-HTML-Query-0.09-2.fc44
  • perl-Markdown-Render-2.0.4-1.fc44
  • perl-Text-Markdown-Discount-0.18-2.fc44
  • rt-5.0.10-1.fc44
Update description:

Update to rt 5.0.10

Fixes CVE-2025-61873 CVE-2026-41075 CVE-2026-41076 CVE-2026-6841 CVE-2026-44231 CVE-2026-44229 CVE-2026-44230

perl-Badger-0.16-2.fc45 perl-CLI-Simple-2.2.5-1.fc45 perl-CSS-Inliner-4027-1.fc45 perl-Encoding-FixLatin-1.04-2.fc45 perl-HTML-Query-0.09-2.fc45 perl-Markdown-Render-2.0.4-1.fc45 rt-5.0.10-1.fc45

Fedora Security Advisories
6 days ago
FEDORA-2026-719dc03ab9 Packages in this update:
  • perl-Badger-0.16-2.fc45
  • perl-CLI-Simple-2.2.5-1.fc45
  • perl-CSS-Inliner-4027-1.fc45
  • perl-Encoding-FixLatin-1.04-2.fc45
  • perl-HTML-Query-0.09-2.fc45
  • perl-Markdown-Render-2.0.4-1.fc45
  • rt-5.0.10-1.fc45
Update description:

Update to rt 5.0.10

Fixes CVE-2025-61873 CVE-2026-41075 CVE-2026-41076 CVE-2026-6841 CVE-2026-44231 CVE-2026-44229 CVE-2026-44230

chromium-155.0.8059.79-1.el9

Fedora Security Advisories
6 days 2 hours ago
FEDORA-EPEL-2026-e4c861a1e5 Packages in this update:
  • chromium-155.0.8059.79-1.el9
Update description:

Update to 155.0.8059.39, includes 37 security fixes

  • CVE-2026-110136: Use after free in PDF
  • CVE-2026-110137: Use after free in WebRTC
  • CVE-2026-110138: Use after free in ShapeDetection
  • CVE-2026-110139: Use after free in Media
  • CVE-2026-110140: Type confusion in V8
  • CVE-2026-110141: Observable discrepancy in Media
  • CVE-2026-110142: Use after free in FileSystem
  • CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
  • CVE-2026-110144: Incorrect authorization in Mojo
  • CVE-2026-110145: Use after free in Passwords
  • CVE-2026-110146: Information leak in Passwords
  • CVE-2026-110147: Use after free in PDF
  • CVE-2026-110148: Use after free in SVG
  • CVE-2026-110149: Use after free in Browser
  • CVE-2026-110150: Privilege elevation in Installer
  • CVE-2026-110151: Use after free in Media
  • CVE-2026-110152: Buffer overflow in ANGLE
  • CVE-2026-110153: Use after free in Media
  • CVE-2026-110154: Use after free in Canvas
  • CVE-2026-110155: Buffer overflow in PDFium
  • CVE-2026-110156: Incorrect reference resolution in Extensions
  • CVE-2026-110157: Use after free in SVG
  • CVE-2026-110158: Use after free in Passwords
  • CVE-2026-110159: Incorrect authorization in Updater
  • CVE-2026-110160: Missing authorization in ReadingMode
  • CVE-2026-110161: Use after free in Network
  • CVE-2026-110162: Use after free in Desktop
  • CVE-2026-110163: Use after free in DOM
  • CVE-2026-110164: Use after free in DOM
  • CVE-2026-110165: Use after free in Core
  • CVE-2026-110166: Buffer overflow in Animation
  • CVE-2026-110167: Use after free in Media
  • CVE-2026-110168: Use after free in V8
  • CVE-2026-110169: Use after free in V8
  • CVE-2026-110170: Use after free in Bindings
  • CVE-2026-110171: Use after free in Media
  • CVE-2026-110172: Use after free in Media

chromium-155.0.8059.79-1.el10_3

Fedora Security Advisories
6 days 2 hours ago
FEDORA-EPEL-2026-e85d6428a6 Packages in this update:
  • chromium-155.0.8059.79-1.el10_3
Update description:

Update to 155.0.8059.39, includes 37 security fixes

  • CVE-2026-110136: Use after free in PDF
  • CVE-2026-110137: Use after free in WebRTC
  • CVE-2026-110138: Use after free in ShapeDetection
  • CVE-2026-110139: Use after free in Media
  • CVE-2026-110140: Type confusion in V8
  • CVE-2026-110141: Observable discrepancy in Media
  • CVE-2026-110142: Use after free in FileSystem
  • CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
  • CVE-2026-110144: Incorrect authorization in Mojo
  • CVE-2026-110145: Use after free in Passwords
  • CVE-2026-110146: Information leak in Passwords
  • CVE-2026-110147: Use after free in PDF
  • CVE-2026-110148: Use after free in SVG
  • CVE-2026-110149: Use after free in Browser
  • CVE-2026-110150: Privilege elevation in Installer
  • CVE-2026-110151: Use after free in Media
  • CVE-2026-110152: Buffer overflow in ANGLE
  • CVE-2026-110153: Use after free in Media
  • CVE-2026-110154: Use after free in Canvas
  • CVE-2026-110155: Buffer overflow in PDFium
  • CVE-2026-110156: Incorrect reference resolution in Extensions
  • CVE-2026-110157: Use after free in SVG
  • CVE-2026-110158: Use after free in Passwords
  • CVE-2026-110159: Incorrect authorization in Updater
  • CVE-2026-110160: Missing authorization in ReadingMode
  • CVE-2026-110161: Use after free in Network
  • CVE-2026-110162: Use after free in Desktop
  • CVE-2026-110163: Use after free in DOM
  • CVE-2026-110164: Use after free in DOM
  • CVE-2026-110165: Use after free in Core
  • CVE-2026-110166: Buffer overflow in Animation
  • CVE-2026-110167: Use after free in Media
  • CVE-2026-110168: Use after free in V8
  • CVE-2026-110169: Use after free in V8
  • CVE-2026-110170: Use after free in Bindings
  • CVE-2026-110171: Use after free in Media
  • CVE-2026-110172: Use after free in Media

chromium-155.0.8059.79-1.el10_4

Fedora Security Advisories
6 days 2 hours ago
FEDORA-EPEL-2026-a4b05877fa Packages in this update:
  • chromium-155.0.8059.79-1.el10_4
Update description:

Update to 155.0.8059.39, includes 37 security fixes

  • CVE-2026-110136: Use after free in PDF
  • CVE-2026-110137: Use after free in WebRTC
  • CVE-2026-110138: Use after free in ShapeDetection
  • CVE-2026-110139: Use after free in Media
  • CVE-2026-110140: Type confusion in V8
  • CVE-2026-110141: Observable discrepancy in Media
  • CVE-2026-110142: Use after free in FileSystem
  • CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
  • CVE-2026-110144: Incorrect authorization in Mojo
  • CVE-2026-110145: Use after free in Passwords
  • CVE-2026-110146: Information leak in Passwords
  • CVE-2026-110147: Use after free in PDF
  • CVE-2026-110148: Use after free in SVG
  • CVE-2026-110149: Use after free in Browser
  • CVE-2026-110150: Privilege elevation in Installer
  • CVE-2026-110151: Use after free in Media
  • CVE-2026-110152: Buffer overflow in ANGLE
  • CVE-2026-110153: Use after free in Media
  • CVE-2026-110154: Use after free in Canvas
  • CVE-2026-110155: Buffer overflow in PDFium
  • CVE-2026-110156: Incorrect reference resolution in Extensions
  • CVE-2026-110157: Use after free in SVG
  • CVE-2026-110158: Use after free in Passwords
  • CVE-2026-110159: Incorrect authorization in Updater
  • CVE-2026-110160: Missing authorization in ReadingMode
  • CVE-2026-110161: Use after free in Network
  • CVE-2026-110162: Use after free in Desktop
  • CVE-2026-110163: Use after free in DOM
  • CVE-2026-110164: Use after free in DOM
  • CVE-2026-110165: Use after free in Core
  • CVE-2026-110166: Buffer overflow in Animation
  • CVE-2026-110167: Use after free in Media
  • CVE-2026-110168: Use after free in V8
  • CVE-2026-110169: Use after free in V8
  • CVE-2026-110170: Use after free in Bindings
  • CVE-2026-110171: Use after free in Media
  • CVE-2026-110172: Use after free in Media

chromium-155.0.8059.79-1.el10_2

Fedora Security Advisories
6 days 2 hours ago
FEDORA-EPEL-2026-5f716994ca Packages in this update:
  • chromium-155.0.8059.79-1.el10_2
Update description:

Update to 155.0.8059.39, includes 37 security fixes

  • CVE-2026-110136: Use after free in PDF
  • CVE-2026-110137: Use after free in WebRTC
  • CVE-2026-110138: Use after free in ShapeDetection
  • CVE-2026-110139: Use after free in Media
  • CVE-2026-110140: Type confusion in V8
  • CVE-2026-110141: Observable discrepancy in Media
  • CVE-2026-110142: Use after free in FileSystem
  • CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
  • CVE-2026-110144: Incorrect authorization in Mojo
  • CVE-2026-110145: Use after free in Passwords
  • CVE-2026-110146: Information leak in Passwords
  • CVE-2026-110147: Use after free in PDF
  • CVE-2026-110148: Use after free in SVG
  • CVE-2026-110149: Use after free in Browser
  • CVE-2026-110150: Privilege elevation in Installer
  • CVE-2026-110151: Use after free in Media
  • CVE-2026-110152: Buffer overflow in ANGLE
  • CVE-2026-110153: Use after free in Media
  • CVE-2026-110154: Use after free in Canvas
  • CVE-2026-110155: Buffer overflow in PDFium
  • CVE-2026-110156: Incorrect reference resolution in Extensions
  • CVE-2026-110157: Use after free in SVG
  • CVE-2026-110158: Use after free in Passwords
  • CVE-2026-110159: Incorrect authorization in Updater
  • CVE-2026-110160: Missing authorization in ReadingMode
  • CVE-2026-110161: Use after free in Network
  • CVE-2026-110162: Use after free in Desktop
  • CVE-2026-110163: Use after free in DOM
  • CVE-2026-110164: Use after free in DOM
  • CVE-2026-110165: Use after free in Core
  • CVE-2026-110166: Buffer overflow in Animation
  • CVE-2026-110167: Use after free in Media
  • CVE-2026-110168: Use after free in V8
  • CVE-2026-110169: Use after free in V8
  • CVE-2026-110170: Use after free in Bindings
  • CVE-2026-110171: Use after free in Media
  • CVE-2026-110172: Use after free in Media

chromium-155.0.8059.79-1.fc45

Fedora Security Advisories
6 days 2 hours ago
FEDORA-2026-b80c0df326 Packages in this update:
  • chromium-155.0.8059.79-1.fc45
Update description:

Update to 155.0.8059.39, includes 37 security fixes

  • CVE-2026-110136: Use after free in PDF
  • CVE-2026-110137: Use after free in WebRTC
  • CVE-2026-110138: Use after free in ShapeDetection
  • CVE-2026-110139: Use after free in Media
  • CVE-2026-110140: Type confusion in V8
  • CVE-2026-110141: Observable discrepancy in Media
  • CVE-2026-110142: Use after free in FileSystem
  • CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
  • CVE-2026-110144: Incorrect authorization in Mojo
  • CVE-2026-110145: Use after free in Passwords
  • CVE-2026-110146: Information leak in Passwords
  • CVE-2026-110147: Use after free in PDF
  • CVE-2026-110148: Use after free in SVG
  • CVE-2026-110149: Use after free in Browser
  • CVE-2026-110150: Privilege elevation in Installer
  • CVE-2026-110151: Use after free in Media
  • CVE-2026-110152: Buffer overflow in ANGLE
  • CVE-2026-110153: Use after free in Media
  • CVE-2026-110154: Use after free in Canvas
  • CVE-2026-110155: Buffer overflow in PDFium
  • CVE-2026-110156: Incorrect reference resolution in Extensions
  • CVE-2026-110157: Use after free in SVG
  • CVE-2026-110158: Use after free in Passwords
  • CVE-2026-110159: Incorrect authorization in Updater
  • CVE-2026-110160: Missing authorization in ReadingMode
  • CVE-2026-110161: Use after free in Network
  • CVE-2026-110162: Use after free in Desktop
  • CVE-2026-110163: Use after free in DOM
  • CVE-2026-110164: Use after free in DOM
  • CVE-2026-110165: Use after free in Core
  • CVE-2026-110166: Buffer overflow in Animation
  • CVE-2026-110167: Use after free in Media
  • CVE-2026-110168: Use after free in V8
  • CVE-2026-110169: Use after free in V8
  • CVE-2026-110170: Use after free in Bindings
  • CVE-2026-110171: Use after free in Media
  • CVE-2026-110172: Use after free in Media

chromium-155.0.8059.79-1.fc43

Fedora Security Advisories
6 days 2 hours ago
FEDORA-2026-1710275b63 Packages in this update:
  • chromium-155.0.8059.79-1.fc43
Update description:

Update to 155.0.8059.39, includes 37 security fixes

  • CVE-2026-110136: Use after free in PDF
  • CVE-2026-110137: Use after free in WebRTC
  • CVE-2026-110138: Use after free in ShapeDetection
  • CVE-2026-110139: Use after free in Media
  • CVE-2026-110140: Type confusion in V8
  • CVE-2026-110141: Observable discrepancy in Media
  • CVE-2026-110142: Use after free in FileSystem
  • CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
  • CVE-2026-110144: Incorrect authorization in Mojo
  • CVE-2026-110145: Use after free in Passwords
  • CVE-2026-110146: Information leak in Passwords
  • CVE-2026-110147: Use after free in PDF
  • CVE-2026-110148: Use after free in SVG
  • CVE-2026-110149: Use after free in Browser
  • CVE-2026-110150: Privilege elevation in Installer
  • CVE-2026-110151: Use after free in Media
  • CVE-2026-110152: Buffer overflow in ANGLE
  • CVE-2026-110153: Use after free in Media
  • CVE-2026-110154: Use after free in Canvas
  • CVE-2026-110155: Buffer overflow in PDFium
  • CVE-2026-110156: Incorrect reference resolution in Extensions
  • CVE-2026-110157: Use after free in SVG
  • CVE-2026-110158: Use after free in Passwords
  • CVE-2026-110159: Incorrect authorization in Updater
  • CVE-2026-110160: Missing authorization in ReadingMode
  • CVE-2026-110161: Use after free in Network
  • CVE-2026-110162: Use after free in Desktop
  • CVE-2026-110163: Use after free in DOM
  • CVE-2026-110164: Use after free in DOM
  • CVE-2026-110165: Use after free in Core
  • CVE-2026-110166: Buffer overflow in Animation
  • CVE-2026-110167: Use after free in Media
  • CVE-2026-110168: Use after free in V8
  • CVE-2026-110169: Use after free in V8
  • CVE-2026-110170: Use after free in Bindings
  • CVE-2026-110171: Use after free in Media
  • CVE-2026-110172: Use after free in Media