Aggregator

OpenImageIO-3.1.17.0-2.fc46 blender-5.2.2-5.fc46 luxcorerender-2.11.2-2.fc46 manifold-3.5.3-3.fc46 openvdb-13.1.0-3.fc46 usd-26.08-9.fc46

Fedora Security Advisories
2 hours 30 minutes ago
FEDORA-2026-edf57cab54 Packages in this update:
  • blender-5.2.2-5.fc46
  • luxcorerender-2.11.2-2.fc46
  • manifold-3.5.3-3.fc46
  • OpenImageIO-3.1.17.0-2.fc46
  • openvdb-13.1.0-3.fc46
  • usd-26.08-9.fc46
Update description:

This update moves OpenVDB from:

libopenvdb.so.13.0

to:

libopenvdb.so.13.1

and includes coordinated rebuilds of:

openvdb OpenImageIO luxcorerender manifold openvkl usd blender

Side tag:

f46-build-side-151928

Tracker:

rhbz#2535782

Related bugs:

rhbz#2535783 rhbz#2535784 rhbz#2535787 rhbz#2535789 rhbz#2535790 rhbz#2535791 rhbz#2535792

Please test package installation/upgrades, dependency resolution against libopenvdb.so.13.1, and functionality in Blender, OpenImageIO, USD, LuxCoreRender, Manifold, and OpenVKL.

No affected package should retain a dependency on libopenvdb.so.13.0.

webkitgtk-2.54.1-1.fc43

Fedora Security Advisories
6 hours 22 minutes ago
FEDORA-2026-9669c4bb36 Packages in this update:
  • webkitgtk-2.54.1-1.fc43
Update description:

Update to 2.54.1:

  • Allow pasting in-memory image data from clipboard.
  • Add User-Agent quirk for Amazon Luna.
  • Align the filter surface with the device pixel grid.
  • Fix rendering of scaled or transformed no-repeat background images.
  • Fix rendering of preserve-3d layers when a layer crosses the camera plane.
  • Fix SkiaCompositingLayer filter rendering under transforms.
  • Do not rasterize the part of a tile that the clip drops.
  • Skip non-composited frames when damage is empty.
  • Fix text deleted by input method delete-surrounding in contenteditable.
  • Fix several crashes and rendering issues.

Update to 2.54.0:

  • Switch web process compositor to use Skia instead of TextureMapper.
  • Improved damage handling that is now also used during the composition to limit the composited areas.
  • Implement GPU atlas creation and replay substitution for batched raster image uploads.
  • Media capability reporting is more accurate.
  • Video decoding limits are now respected in media capabilities queries.
  • Add new improved API for page favicons.
  • Add magnification property to WebKitWebView to handle visual scaling.
  • Add new API to allow setting a per-navigation custom User-Agent to WebKitWebsitePolicies.
  • Remove the option to use cairo for 2D rendering.

WebKit Security fixes from 2.54.0: CVE-2026-84635, CVE-2026-64753, CVE-2026-64715, CVE-2026-64778, CVE-2026-64779, CVE-2026-64780, CVE-2026-64782, CVE-2026-64784, CVE-2026-65331, CVE-2026-65332, CVE-2026-65333, CVE-2026-65334, CVE-2026-65335, CVE-2026-65336, CVE-2026-65337, CVE-2026-65338, CVE-2026-65340, CVE-2026-65341, CVE-2026-65351, CVE-2026-78376, CVE-2026-83596.

WebKit security fixes from 2.52.6: CVE-2026-43804, CVE-2026-64713, CVE-2026-64728, CVE-2026-64730, CVE-2026-64757, CVE-2026-64783

This update also fixes a couple hundred or so ANGLE CVEs and several dozen Skia CVEs.

This update breaks some styles in Evolution. Sorry about that.

chromium-154.0.8037.92-1.fc45

Fedora Security Advisories
10 hours 43 minutes ago
FEDORA-2026-0daef29dc3 Packages in this update:
  • chromium-154.0.8037.92-1.fc45
Update description:

Update to 154.0.8037.92

* CVE-2026-102299: Type confusion in V8 * CVE-2026-102300: Uninitialized resource in WebGPU * CVE-2026-102301: Out of bounds write in GPU * CVE-2026-102302: Buffer overflow in V8 * CVE-2026-102303: Uninitialized resource in GPU * CVE-2026-102304: Use after free in Passwords * CVE-2026-102305: UI misrepresentation in SignIn * CVE-2026-102306: Use after free in Bluetooth * CVE-2026-102307: Uninitialized resource in Dawn * CVE-2026-102308: Use after free in Views * CVE-2026-102309: Use after free in FullScreen * CVE-2026-102310: Missing authorization in Payments * CVE-2026-102311: Uninitialized resource in GPU * CVE-2026-102312: UI misrepresentation in Omnibox * CVE-2026-102313: Uninitialized resource in ANGLE * CVE-2026-102314: UI misrepresentation in TabStrip * CVE-2026-102315: Uninitialized resource in Media * CVE-2026-102316: Use after free in Views * CVE-2026-102317: Improper privilege management in Mojo * CVE-2026-102318: Out of bounds read in WebGL * CVE-2026-102319: Uninitialized resource in GPU * CVE-2026-102320: Missing authorization in CORS * CVE-2026-102321: Type confusion in V8 * CVE-2026-102323: Type confusion in V8 * CVE-2026-102324: Use after free in PictureInPicture * CVE-2026-102325: Uninitialized resource in Skia * CVE-2026-102326: Type confusion in V8 * CVE-2026-102327: Incorrect authorization in WebView * CVE-2026-102328: Type confusion in V8 * CVE-2026-102329: Cross-site scripting in WebUI * CVE-2026-102330: Incorrect authorization in SiteIsolation * CVE-2026-102331: Buffer overflow in ANGLE

chromium-154.0.8037.92-1.el10_2

Fedora Security Advisories
10 hours 43 minutes ago
FEDORA-EPEL-2026-c0bda57b6d Packages in this update:
  • chromium-154.0.8037.92-1.el10_2
Update description:

Update to 154.0.8037.92

* CVE-2026-102299: Type confusion in V8 * CVE-2026-102300: Uninitialized resource in WebGPU * CVE-2026-102301: Out of bounds write in GPU * CVE-2026-102302: Buffer overflow in V8 * CVE-2026-102303: Uninitialized resource in GPU * CVE-2026-102304: Use after free in Passwords * CVE-2026-102305: UI misrepresentation in SignIn * CVE-2026-102306: Use after free in Bluetooth * CVE-2026-102307: Uninitialized resource in Dawn * CVE-2026-102308: Use after free in Views * CVE-2026-102309: Use after free in FullScreen * CVE-2026-102310: Missing authorization in Payments * CVE-2026-102311: Uninitialized resource in GPU * CVE-2026-102312: UI misrepresentation in Omnibox * CVE-2026-102313: Uninitialized resource in ANGLE * CVE-2026-102314: UI misrepresentation in TabStrip * CVE-2026-102315: Uninitialized resource in Media * CVE-2026-102316: Use after free in Views * CVE-2026-102317: Improper privilege management in Mojo * CVE-2026-102318: Out of bounds read in WebGL * CVE-2026-102319: Uninitialized resource in GPU * CVE-2026-102320: Missing authorization in CORS * CVE-2026-102321: Type confusion in V8 * CVE-2026-102323: Type confusion in V8 * CVE-2026-102324: Use after free in PictureInPicture * CVE-2026-102325: Uninitialized resource in Skia * CVE-2026-102326: Type confusion in V8 * CVE-2026-102327: Incorrect authorization in WebView * CVE-2026-102328: Type confusion in V8 * CVE-2026-102329: Cross-site scripting in WebUI * CVE-2026-102330: Incorrect authorization in SiteIsolation * CVE-2026-102331: Buffer overflow in ANGLE

chromium-154.0.8037.92-1.el10_4

Fedora Security Advisories
10 hours 43 minutes ago
FEDORA-EPEL-2026-d31d4891d1 Packages in this update:
  • chromium-154.0.8037.92-1.el10_4
Update description:

Update to 154.0.8037.92

* CVE-2026-102299: Type confusion in V8 * CVE-2026-102300: Uninitialized resource in WebGPU * CVE-2026-102301: Out of bounds write in GPU * CVE-2026-102302: Buffer overflow in V8 * CVE-2026-102303: Uninitialized resource in GPU * CVE-2026-102304: Use after free in Passwords * CVE-2026-102305: UI misrepresentation in SignIn * CVE-2026-102306: Use after free in Bluetooth * CVE-2026-102307: Uninitialized resource in Dawn * CVE-2026-102308: Use after free in Views * CVE-2026-102309: Use after free in FullScreen * CVE-2026-102310: Missing authorization in Payments * CVE-2026-102311: Uninitialized resource in GPU * CVE-2026-102312: UI misrepresentation in Omnibox * CVE-2026-102313: Uninitialized resource in ANGLE * CVE-2026-102314: UI misrepresentation in TabStrip * CVE-2026-102315: Uninitialized resource in Media * CVE-2026-102316: Use after free in Views * CVE-2026-102317: Improper privilege management in Mojo * CVE-2026-102318: Out of bounds read in WebGL * CVE-2026-102319: Uninitialized resource in GPU * CVE-2026-102320: Missing authorization in CORS * CVE-2026-102321: Type confusion in V8 * CVE-2026-102323: Type confusion in V8 * CVE-2026-102324: Use after free in PictureInPicture * CVE-2026-102325: Uninitialized resource in Skia * CVE-2026-102326: Type confusion in V8 * CVE-2026-102327: Incorrect authorization in WebView * CVE-2026-102328: Type confusion in V8 * CVE-2026-102329: Cross-site scripting in WebUI * CVE-2026-102330: Incorrect authorization in SiteIsolation * CVE-2026-102331: Buffer overflow in ANGLE

chromium-154.0.8037.92-1.el9

Fedora Security Advisories
10 hours 43 minutes ago
FEDORA-EPEL-2026-016a408698 Packages in this update:
  • chromium-154.0.8037.92-1.el9
Update description:

Update to 154.0.8037.92

* CVE-2026-102299: Type confusion in V8 * CVE-2026-102300: Uninitialized resource in WebGPU * CVE-2026-102301: Out of bounds write in GPU * CVE-2026-102302: Buffer overflow in V8 * CVE-2026-102303: Uninitialized resource in GPU * CVE-2026-102304: Use after free in Passwords * CVE-2026-102305: UI misrepresentation in SignIn * CVE-2026-102306: Use after free in Bluetooth * CVE-2026-102307: Uninitialized resource in Dawn * CVE-2026-102308: Use after free in Views * CVE-2026-102309: Use after free in FullScreen * CVE-2026-102310: Missing authorization in Payments * CVE-2026-102311: Uninitialized resource in GPU * CVE-2026-102312: UI misrepresentation in Omnibox * CVE-2026-102313: Uninitialized resource in ANGLE * CVE-2026-102314: UI misrepresentation in TabStrip * CVE-2026-102315: Uninitialized resource in Media * CVE-2026-102316: Use after free in Views * CVE-2026-102317: Improper privilege management in Mojo * CVE-2026-102318: Out of bounds read in WebGL * CVE-2026-102319: Uninitialized resource in GPU * CVE-2026-102320: Missing authorization in CORS * CVE-2026-102321: Type confusion in V8 * CVE-2026-102323: Type confusion in V8 * CVE-2026-102324: Use after free in PictureInPicture * CVE-2026-102325: Uninitialized resource in Skia * CVE-2026-102326: Type confusion in V8 * CVE-2026-102327: Incorrect authorization in WebView * CVE-2026-102328: Type confusion in V8 * CVE-2026-102329: Cross-site scripting in WebUI * CVE-2026-102330: Incorrect authorization in SiteIsolation * CVE-2026-102331: Buffer overflow in ANGLE

chromium-154.0.8037.92-1.el10_3

Fedora Security Advisories
10 hours 43 minutes ago
FEDORA-EPEL-2026-bf22fee762 Packages in this update:
  • chromium-154.0.8037.92-1.el10_3
Update description:

Update to 154.0.8037.92

* CVE-2026-102299: Type confusion in V8 * CVE-2026-102300: Uninitialized resource in WebGPU * CVE-2026-102301: Out of bounds write in GPU * CVE-2026-102302: Buffer overflow in V8 * CVE-2026-102303: Uninitialized resource in GPU * CVE-2026-102304: Use after free in Passwords * CVE-2026-102305: UI misrepresentation in SignIn * CVE-2026-102306: Use after free in Bluetooth * CVE-2026-102307: Uninitialized resource in Dawn * CVE-2026-102308: Use after free in Views * CVE-2026-102309: Use after free in FullScreen * CVE-2026-102310: Missing authorization in Payments * CVE-2026-102311: Uninitialized resource in GPU * CVE-2026-102312: UI misrepresentation in Omnibox * CVE-2026-102313: Uninitialized resource in ANGLE * CVE-2026-102314: UI misrepresentation in TabStrip * CVE-2026-102315: Uninitialized resource in Media * CVE-2026-102316: Use after free in Views * CVE-2026-102317: Improper privilege management in Mojo * CVE-2026-102318: Out of bounds read in WebGL * CVE-2026-102319: Uninitialized resource in GPU * CVE-2026-102320: Missing authorization in CORS * CVE-2026-102321: Type confusion in V8 * CVE-2026-102323: Type confusion in V8 * CVE-2026-102324: Use after free in PictureInPicture * CVE-2026-102325: Uninitialized resource in Skia * CVE-2026-102326: Type confusion in V8 * CVE-2026-102327: Incorrect authorization in WebView * CVE-2026-102328: Type confusion in V8 * CVE-2026-102329: Cross-site scripting in WebUI * CVE-2026-102330: Incorrect authorization in SiteIsolation * CVE-2026-102331: Buffer overflow in ANGLE

chromium-154.0.8037.92-1.fc44

Fedora Security Advisories
10 hours 43 minutes ago
FEDORA-2026-35b989661c Packages in this update:
  • chromium-154.0.8037.92-1.fc44
Update description:

Update to 154.0.8037.92

* CVE-2026-102299: Type confusion in V8 * CVE-2026-102300: Uninitialized resource in WebGPU * CVE-2026-102301: Out of bounds write in GPU * CVE-2026-102302: Buffer overflow in V8 * CVE-2026-102303: Uninitialized resource in GPU * CVE-2026-102304: Use after free in Passwords * CVE-2026-102305: UI misrepresentation in SignIn * CVE-2026-102306: Use after free in Bluetooth * CVE-2026-102307: Uninitialized resource in Dawn * CVE-2026-102308: Use after free in Views * CVE-2026-102309: Use after free in FullScreen * CVE-2026-102310: Missing authorization in Payments * CVE-2026-102311: Uninitialized resource in GPU * CVE-2026-102312: UI misrepresentation in Omnibox * CVE-2026-102313: Uninitialized resource in ANGLE * CVE-2026-102314: UI misrepresentation in TabStrip * CVE-2026-102315: Uninitialized resource in Media * CVE-2026-102316: Use after free in Views * CVE-2026-102317: Improper privilege management in Mojo * CVE-2026-102318: Out of bounds read in WebGL * CVE-2026-102319: Uninitialized resource in GPU * CVE-2026-102320: Missing authorization in CORS * CVE-2026-102321: Type confusion in V8 * CVE-2026-102323: Type confusion in V8 * CVE-2026-102324: Use after free in PictureInPicture * CVE-2026-102325: Uninitialized resource in Skia * CVE-2026-102326: Type confusion in V8 * CVE-2026-102327: Incorrect authorization in WebView * CVE-2026-102328: Type confusion in V8 * CVE-2026-102329: Cross-site scripting in WebUI * CVE-2026-102330: Incorrect authorization in SiteIsolation * CVE-2026-102331: Buffer overflow in ANGLE

chromium-154.0.8037.92-1.fc43

Fedora Security Advisories
10 hours 43 minutes ago
FEDORA-2026-cd4e714c4e Packages in this update:
  • chromium-154.0.8037.92-1.fc43
Update description:

Update to 154.0.8037.92

* CVE-2026-102299: Type confusion in V8 * CVE-2026-102300: Uninitialized resource in WebGPU * CVE-2026-102301: Out of bounds write in GPU * CVE-2026-102302: Buffer overflow in V8 * CVE-2026-102303: Uninitialized resource in GPU * CVE-2026-102304: Use after free in Passwords * CVE-2026-102305: UI misrepresentation in SignIn * CVE-2026-102306: Use after free in Bluetooth * CVE-2026-102307: Uninitialized resource in Dawn * CVE-2026-102308: Use after free in Views * CVE-2026-102309: Use after free in FullScreen * CVE-2026-102310: Missing authorization in Payments * CVE-2026-102311: Uninitialized resource in GPU * CVE-2026-102312: UI misrepresentation in Omnibox * CVE-2026-102313: Uninitialized resource in ANGLE * CVE-2026-102314: UI misrepresentation in TabStrip * CVE-2026-102315: Uninitialized resource in Media * CVE-2026-102316: Use after free in Views * CVE-2026-102317: Improper privilege management in Mojo * CVE-2026-102318: Out of bounds read in WebGL * CVE-2026-102319: Uninitialized resource in GPU * CVE-2026-102320: Missing authorization in CORS * CVE-2026-102321: Type confusion in V8 * CVE-2026-102323: Type confusion in V8 * CVE-2026-102324: Use after free in PictureInPicture * CVE-2026-102325: Uninitialized resource in Skia * CVE-2026-102326: Type confusion in V8 * CVE-2026-102327: Incorrect authorization in WebView * CVE-2026-102328: Type confusion in V8 * CVE-2026-102329: Cross-site scripting in WebUI * CVE-2026-102330: Incorrect authorization in SiteIsolation * CVE-2026-102331: Buffer overflow in ANGLE

python3-docs-3.14.8-1.fc43 python3.14-3.14.8-1.fc43

Fedora Security Advisories
1 day 10 hours ago
FEDORA-2026-a3da6bb5cd Packages in this update:
  • python3.14-3.14.8-1.fc43
  • python3-docs-3.14.8-1.fc43
Update description:

New version of Python interpreter

Security fix for CVE-2026-19553 Security fix for CVE-2026-82049 Security fix for CVE-2026-15310 Security fix for CVE-2026-19672 Security fix for CVE-2026-19445 Security fix for CVE-2026-17084 Security fix for CVE-2026-15806