Aggregator

helix-25.07.1-13.fc43 rust-dua-cli-2.38.1-3.fc43 rust-gengo-bin-0.15.0-3.fc43 rust-gitui-0.28.1-4.fc43 stgit-2.6.1-3.fc43

Fedora Security Advisories
2 hours 29 minutes ago
FEDORA-2026-957c1e5c9d Packages in this update:
  • helix-25.07.1-13.fc43
  • rust-dua-cli-2.38.1-3.fc43
  • rust-gengo-bin-0.15.0-3.fc43
  • rust-gitui-0.28.1-4.fc43
  • stgit-2.6.1-3.fc43
Update description:

Rebuilt several packages with faster-hex version 0.10.1 to fix RUSTSEC-2026-0306, an unsoundness issue on x86 and x86_64 when AVX2 is enabled.

chromium-155.0.8059.84-1.el10_4

Fedora Security Advisories
3 hours 34 minutes ago
FEDORA-EPEL-2026-8f19f5cc9d Packages in this update:
  • chromium-155.0.8059.84-1.el10_4
Update description:

Update to 155.0.8059.84, includes 10 security fixes

  • CVE-2026-110913: Memory corruption in DOM
  • CVE-2026-110914: Memory corruption in Workers
  • CVE-2026-110915: Use after free in Compositing
  • CVE-2026-110916: Improper input validation in Desktop
  • CVE-2026-110917: Memory corruption in SVG
  • CVE-2026-110918: Memory corruption in Core
  • CVE-2026-110919: Use after free in V8
  • CVE-2026-110920: Memory corruption in V8
  • CVE-2026-110921: Use after free in V8
  • CVE-2026-110922: Use after free in Prerender

chromium-155.0.8059.84-1.fc44

Fedora Security Advisories
3 hours 34 minutes ago
FEDORA-2026-aab47c4e08 Packages in this update:
  • chromium-155.0.8059.84-1.fc44
Update description:

Update to 155.0.8059.84, includes 10 security fixes

  • CVE-2026-110913: Memory corruption in DOM
  • CVE-2026-110914: Memory corruption in Workers
  • CVE-2026-110915: Use after free in Compositing
  • CVE-2026-110916: Improper input validation in Desktop
  • CVE-2026-110917: Memory corruption in SVG
  • CVE-2026-110918: Memory corruption in Core
  • CVE-2026-110919: Use after free in V8
  • CVE-2026-110920: Memory corruption in V8
  • CVE-2026-110921: Use after free in V8
  • CVE-2026-110922: Use after free in Prerender

chromium-155.0.8059.84-1.el10_3

Fedora Security Advisories
3 hours 34 minutes ago
FEDORA-EPEL-2026-a7da7e1fac Packages in this update:
  • chromium-155.0.8059.84-1.el10_3
Update description:

Update to 155.0.8059.84, includes 10 security fixes

  • CVE-2026-110913: Memory corruption in DOM
  • CVE-2026-110914: Memory corruption in Workers
  • CVE-2026-110915: Use after free in Compositing
  • CVE-2026-110916: Improper input validation in Desktop
  • CVE-2026-110917: Memory corruption in SVG
  • CVE-2026-110918: Memory corruption in Core
  • CVE-2026-110919: Use after free in V8
  • CVE-2026-110920: Memory corruption in V8
  • CVE-2026-110921: Use after free in V8
  • CVE-2026-110922: Use after free in Prerender

chromium-155.0.8059.84-1.el9

Fedora Security Advisories
3 hours 34 minutes ago
FEDORA-EPEL-2026-61e356351b Packages in this update:
  • chromium-155.0.8059.84-1.el9
Update description:

Update to 155.0.8059.84, includes 10 security fixes

  • CVE-2026-110913: Memory corruption in DOM
  • CVE-2026-110914: Memory corruption in Workers
  • CVE-2026-110915: Use after free in Compositing
  • CVE-2026-110916: Improper input validation in Desktop
  • CVE-2026-110917: Memory corruption in SVG
  • CVE-2026-110918: Memory corruption in Core
  • CVE-2026-110919: Use after free in V8
  • CVE-2026-110920: Memory corruption in V8
  • CVE-2026-110921: Use after free in V8
  • CVE-2026-110922: Use after free in Prerender

chromium-155.0.8059.84-1.el10_2

Fedora Security Advisories
3 hours 34 minutes ago
FEDORA-EPEL-2026-22f5631881 Packages in this update:
  • chromium-155.0.8059.84-1.el10_2
Update description:

Update to 155.0.8059.84, includes 10 security fixes

  • CVE-2026-110913: Memory corruption in DOM
  • CVE-2026-110914: Memory corruption in Workers
  • CVE-2026-110915: Use after free in Compositing
  • CVE-2026-110916: Improper input validation in Desktop
  • CVE-2026-110917: Memory corruption in SVG
  • CVE-2026-110918: Memory corruption in Core
  • CVE-2026-110919: Use after free in V8
  • CVE-2026-110920: Memory corruption in V8
  • CVE-2026-110921: Use after free in V8
  • CVE-2026-110922: Use after free in Prerender

chromium-155.0.8059.84-1.fc43

Fedora Security Advisories
3 hours 34 minutes ago
FEDORA-2026-5a871d2ca7 Packages in this update:
  • chromium-155.0.8059.84-1.fc43
Update description:

Update to 155.0.8059.84, includes 10 security fixes

  • CVE-2026-110913: Memory corruption in DOM
  • CVE-2026-110914: Memory corruption in Workers
  • CVE-2026-110915: Use after free in Compositing
  • CVE-2026-110916: Improper input validation in Desktop
  • CVE-2026-110917: Memory corruption in SVG
  • CVE-2026-110918: Memory corruption in Core
  • CVE-2026-110919: Use after free in V8
  • CVE-2026-110920: Memory corruption in V8
  • CVE-2026-110921: Use after free in V8
  • CVE-2026-110922: Use after free in Prerender

chromium-155.0.8059.84-1.fc45

Fedora Security Advisories
3 hours 34 minutes ago
FEDORA-2026-63615cd446 Packages in this update:
  • chromium-155.0.8059.84-1.fc45
Update description:

Update to 155.0.8059.84, includes 10 security fixes

  • CVE-2026-110913: Memory corruption in DOM
  • CVE-2026-110914: Memory corruption in Workers
  • CVE-2026-110915: Use after free in Compositing
  • CVE-2026-110916: Improper input validation in Desktop
  • CVE-2026-110917: Memory corruption in SVG
  • CVE-2026-110918: Memory corruption in Core
  • CVE-2026-110919: Use after free in V8
  • CVE-2026-110920: Memory corruption in V8
  • CVE-2026-110921: Use after free in V8
  • CVE-2026-110922: Use after free in Prerender

helix-25.07.1-13.fc44 rust-dua-cli-2.38.1-3.fc44 rust-gengo-bin-0.15.0-3.fc44 rust-gitui-0.28.1-4.fc44 stgit-2.6.1-3.fc44

Fedora Security Advisories
3 hours 39 minutes ago
FEDORA-2026-e2538282de Packages in this update:
  • helix-25.07.1-13.fc44
  • rust-dua-cli-2.38.1-3.fc44
  • rust-gengo-bin-0.15.0-3.fc44
  • rust-gitui-0.28.1-4.fc44
  • stgit-2.6.1-3.fc44
Update description:

Rebuilt several packages with faster-hex version 0.10.1 to fix RUSTSEC-2026-0306, an unsoundness issue on x86 and x86_64 when AVX2 is enabled.

helix-25.07.1-13.fc45 rust-dua-cli-2.38.1-3.fc45 rust-gengo-bin-0.15.0-3.fc45 rust-gitui-0.28.1-4.fc45 stgit-2.6.1-3.fc45

Fedora Security Advisories
3 hours 40 minutes ago
FEDORA-2026-03b88adb99 Packages in this update:
  • helix-25.07.1-13.fc45
  • rust-dua-cli-2.38.1-3.fc45
  • rust-gengo-bin-0.15.0-3.fc45
  • rust-gitui-0.28.1-4.fc45
  • stgit-2.6.1-3.fc45
Update description:

Rebuilt several packages with faster-hex version 0.10.1 to fix RUSTSEC-2026-0306, an unsoundness issue on x86 and x86_64 when AVX2 is enabled.

perl-Plack-1.0055-1.fc44 perl-Plack-Middleware-ReverseProxy-0.17-1.fc44

Fedora Security Advisories
3 hours 55 minutes ago
FEDORA-2026-1a8f37b585 Packages in this update:
  • perl-Plack-1.0055-1.fc44
  • perl-Plack-Middleware-ReverseProxy-0.17-1.fc44
Update description:

A number of security issues were found in the Plack stack: SECURITY Fix memory leak of every request env in Plack::Middleware::Recursive (CVE-2026-110333) Plack::Request::Upload->basename never returns '', '.' or '..' (CVE-2026-110332) Plack::App::URLMap matches SERVER_PORT literally when stripping it from Host (CVE-2026-110335) BUG FIXES Plack::Middleware::ErrorDocument restores the env after a subrequest, so outer middleware such as AccessLog sees the original request (CVE-2026-110334) DOCUMENTATION Document that Plack::Handler::FCGI and Apache2 keep dot segments in PATH_INFO and warn against relying on front-server path-based access control (CVE-2026-110336)

perl-Plack-1.0055-1.fc45 perl-Plack-Middleware-ReverseProxy-0.17-1.fc45

Fedora Security Advisories
3 hours 55 minutes ago
FEDORA-2026-04e2968a8a Packages in this update:
  • perl-Plack-1.0055-1.fc45
  • perl-Plack-Middleware-ReverseProxy-0.17-1.fc45
Update description:

A number of security issues were found in the Plack stack: SECURITY Fix memory leak of every request env in Plack::Middleware::Recursive (CVE-2026-110333) Plack::Request::Upload->basename never returns '', '.' or '..' (CVE-2026-110332) Plack::App::URLMap matches SERVER_PORT literally when stripping it from Host (CVE-2026-110335) BUG FIXES Plack::Middleware::ErrorDocument restores the env after a subrequest, so outer middleware such as AccessLog sees the original request (CVE-2026-110334) DOCUMENTATION Document that Plack::Handler::FCGI and Apache2 keep dot segments in PATH_INFO and warn against relying on front-server path-based access control (CVE-2026-110336)

perl-Plack-1.0055-1.fc43 perl-Plack-Middleware-ReverseProxy-0.17-1.fc43

Fedora Security Advisories
3 hours 55 minutes ago
FEDORA-2026-1f56c920d8 Packages in this update:
  • perl-Plack-1.0055-1.fc43
  • perl-Plack-Middleware-ReverseProxy-0.17-1.fc43
Update description:

A number of security issues were found in the Plack stack: SECURITY Fix memory leak of every request env in Plack::Middleware::Recursive (CVE-2026-110333) Plack::Request::Upload->basename never returns '', '.' or '..' (CVE-2026-110332) Plack::App::URLMap matches SERVER_PORT literally when stripping it from Host (CVE-2026-110335) BUG FIXES Plack::Middleware::ErrorDocument restores the env after a subrequest, so outer middleware such as AccessLog sees the original request (CVE-2026-110334) DOCUMENTATION Document that Plack::Handler::FCGI and Apache2 keep dot segments in PATH_INFO and warn against relying on front-server path-based access control (CVE-2026-110336)

nix-2.31.6-1.el10_2

Fedora Security Advisories
7 hours 31 minutes ago
FEDORA-EPEL-2026-06f144fbdf Packages in this update:
  • nix-2.31.6-1.el10_2
Update description:

Update to 2.31.6 which addresses:

bugfixes:

  • nix.fish and nix-daemon.fish should live in fish/vendor_conf.d
  • switch back to editline from readline to fix repl history (#2536840)