Aggregator

chromium-155.0.8059.79-1.el9

Fedora Security Advisories
1 hour 47 minutes ago
FEDORA-EPEL-2026-e4c861a1e5 Packages in this update:
  • chromium-155.0.8059.79-1.el9
Update description:

Update to 155.0.8059.39, includes 37 security fixes

  • CVE-2026-110136: Use after free in PDF
  • CVE-2026-110137: Use after free in WebRTC
  • CVE-2026-110138: Use after free in ShapeDetection
  • CVE-2026-110139: Use after free in Media
  • CVE-2026-110140: Type confusion in V8
  • CVE-2026-110141: Observable discrepancy in Media
  • CVE-2026-110142: Use after free in FileSystem
  • CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
  • CVE-2026-110144: Incorrect authorization in Mojo
  • CVE-2026-110145: Use after free in Passwords
  • CVE-2026-110146: Information leak in Passwords
  • CVE-2026-110147: Use after free in PDF
  • CVE-2026-110148: Use after free in SVG
  • CVE-2026-110149: Use after free in Browser
  • CVE-2026-110150: Privilege elevation in Installer
  • CVE-2026-110151: Use after free in Media
  • CVE-2026-110152: Buffer overflow in ANGLE
  • CVE-2026-110153: Use after free in Media
  • CVE-2026-110154: Use after free in Canvas
  • CVE-2026-110155: Buffer overflow in PDFium
  • CVE-2026-110156: Incorrect reference resolution in Extensions
  • CVE-2026-110157: Use after free in SVG
  • CVE-2026-110158: Use after free in Passwords
  • CVE-2026-110159: Incorrect authorization in Updater
  • CVE-2026-110160: Missing authorization in ReadingMode
  • CVE-2026-110161: Use after free in Network
  • CVE-2026-110162: Use after free in Desktop
  • CVE-2026-110163: Use after free in DOM
  • CVE-2026-110164: Use after free in DOM
  • CVE-2026-110165: Use after free in Core
  • CVE-2026-110166: Buffer overflow in Animation
  • CVE-2026-110167: Use after free in Media
  • CVE-2026-110168: Use after free in V8
  • CVE-2026-110169: Use after free in V8
  • CVE-2026-110170: Use after free in Bindings
  • CVE-2026-110171: Use after free in Media
  • CVE-2026-110172: Use after free in Media

chromium-155.0.8059.79-1.el10_3

Fedora Security Advisories
1 hour 47 minutes ago
FEDORA-EPEL-2026-e85d6428a6 Packages in this update:
  • chromium-155.0.8059.79-1.el10_3
Update description:

Update to 155.0.8059.39, includes 37 security fixes

  • CVE-2026-110136: Use after free in PDF
  • CVE-2026-110137: Use after free in WebRTC
  • CVE-2026-110138: Use after free in ShapeDetection
  • CVE-2026-110139: Use after free in Media
  • CVE-2026-110140: Type confusion in V8
  • CVE-2026-110141: Observable discrepancy in Media
  • CVE-2026-110142: Use after free in FileSystem
  • CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
  • CVE-2026-110144: Incorrect authorization in Mojo
  • CVE-2026-110145: Use after free in Passwords
  • CVE-2026-110146: Information leak in Passwords
  • CVE-2026-110147: Use after free in PDF
  • CVE-2026-110148: Use after free in SVG
  • CVE-2026-110149: Use after free in Browser
  • CVE-2026-110150: Privilege elevation in Installer
  • CVE-2026-110151: Use after free in Media
  • CVE-2026-110152: Buffer overflow in ANGLE
  • CVE-2026-110153: Use after free in Media
  • CVE-2026-110154: Use after free in Canvas
  • CVE-2026-110155: Buffer overflow in PDFium
  • CVE-2026-110156: Incorrect reference resolution in Extensions
  • CVE-2026-110157: Use after free in SVG
  • CVE-2026-110158: Use after free in Passwords
  • CVE-2026-110159: Incorrect authorization in Updater
  • CVE-2026-110160: Missing authorization in ReadingMode
  • CVE-2026-110161: Use after free in Network
  • CVE-2026-110162: Use after free in Desktop
  • CVE-2026-110163: Use after free in DOM
  • CVE-2026-110164: Use after free in DOM
  • CVE-2026-110165: Use after free in Core
  • CVE-2026-110166: Buffer overflow in Animation
  • CVE-2026-110167: Use after free in Media
  • CVE-2026-110168: Use after free in V8
  • CVE-2026-110169: Use after free in V8
  • CVE-2026-110170: Use after free in Bindings
  • CVE-2026-110171: Use after free in Media
  • CVE-2026-110172: Use after free in Media

chromium-155.0.8059.79-1.el10_4

Fedora Security Advisories
1 hour 47 minutes ago
FEDORA-EPEL-2026-a4b05877fa Packages in this update:
  • chromium-155.0.8059.79-1.el10_4
Update description:

Update to 155.0.8059.39, includes 37 security fixes

  • CVE-2026-110136: Use after free in PDF
  • CVE-2026-110137: Use after free in WebRTC
  • CVE-2026-110138: Use after free in ShapeDetection
  • CVE-2026-110139: Use after free in Media
  • CVE-2026-110140: Type confusion in V8
  • CVE-2026-110141: Observable discrepancy in Media
  • CVE-2026-110142: Use after free in FileSystem
  • CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
  • CVE-2026-110144: Incorrect authorization in Mojo
  • CVE-2026-110145: Use after free in Passwords
  • CVE-2026-110146: Information leak in Passwords
  • CVE-2026-110147: Use after free in PDF
  • CVE-2026-110148: Use after free in SVG
  • CVE-2026-110149: Use after free in Browser
  • CVE-2026-110150: Privilege elevation in Installer
  • CVE-2026-110151: Use after free in Media
  • CVE-2026-110152: Buffer overflow in ANGLE
  • CVE-2026-110153: Use after free in Media
  • CVE-2026-110154: Use after free in Canvas
  • CVE-2026-110155: Buffer overflow in PDFium
  • CVE-2026-110156: Incorrect reference resolution in Extensions
  • CVE-2026-110157: Use after free in SVG
  • CVE-2026-110158: Use after free in Passwords
  • CVE-2026-110159: Incorrect authorization in Updater
  • CVE-2026-110160: Missing authorization in ReadingMode
  • CVE-2026-110161: Use after free in Network
  • CVE-2026-110162: Use after free in Desktop
  • CVE-2026-110163: Use after free in DOM
  • CVE-2026-110164: Use after free in DOM
  • CVE-2026-110165: Use after free in Core
  • CVE-2026-110166: Buffer overflow in Animation
  • CVE-2026-110167: Use after free in Media
  • CVE-2026-110168: Use after free in V8
  • CVE-2026-110169: Use after free in V8
  • CVE-2026-110170: Use after free in Bindings
  • CVE-2026-110171: Use after free in Media
  • CVE-2026-110172: Use after free in Media

chromium-155.0.8059.79-1.el10_2

Fedora Security Advisories
1 hour 47 minutes ago
FEDORA-EPEL-2026-5f716994ca Packages in this update:
  • chromium-155.0.8059.79-1.el10_2
Update description:

Update to 155.0.8059.39, includes 37 security fixes

  • CVE-2026-110136: Use after free in PDF
  • CVE-2026-110137: Use after free in WebRTC
  • CVE-2026-110138: Use after free in ShapeDetection
  • CVE-2026-110139: Use after free in Media
  • CVE-2026-110140: Type confusion in V8
  • CVE-2026-110141: Observable discrepancy in Media
  • CVE-2026-110142: Use after free in FileSystem
  • CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
  • CVE-2026-110144: Incorrect authorization in Mojo
  • CVE-2026-110145: Use after free in Passwords
  • CVE-2026-110146: Information leak in Passwords
  • CVE-2026-110147: Use after free in PDF
  • CVE-2026-110148: Use after free in SVG
  • CVE-2026-110149: Use after free in Browser
  • CVE-2026-110150: Privilege elevation in Installer
  • CVE-2026-110151: Use after free in Media
  • CVE-2026-110152: Buffer overflow in ANGLE
  • CVE-2026-110153: Use after free in Media
  • CVE-2026-110154: Use after free in Canvas
  • CVE-2026-110155: Buffer overflow in PDFium
  • CVE-2026-110156: Incorrect reference resolution in Extensions
  • CVE-2026-110157: Use after free in SVG
  • CVE-2026-110158: Use after free in Passwords
  • CVE-2026-110159: Incorrect authorization in Updater
  • CVE-2026-110160: Missing authorization in ReadingMode
  • CVE-2026-110161: Use after free in Network
  • CVE-2026-110162: Use after free in Desktop
  • CVE-2026-110163: Use after free in DOM
  • CVE-2026-110164: Use after free in DOM
  • CVE-2026-110165: Use after free in Core
  • CVE-2026-110166: Buffer overflow in Animation
  • CVE-2026-110167: Use after free in Media
  • CVE-2026-110168: Use after free in V8
  • CVE-2026-110169: Use after free in V8
  • CVE-2026-110170: Use after free in Bindings
  • CVE-2026-110171: Use after free in Media
  • CVE-2026-110172: Use after free in Media

chromium-155.0.8059.79-1.fc45

Fedora Security Advisories
1 hour 47 minutes ago
FEDORA-2026-b80c0df326 Packages in this update:
  • chromium-155.0.8059.79-1.fc45
Update description:

Update to 155.0.8059.39, includes 37 security fixes

  • CVE-2026-110136: Use after free in PDF
  • CVE-2026-110137: Use after free in WebRTC
  • CVE-2026-110138: Use after free in ShapeDetection
  • CVE-2026-110139: Use after free in Media
  • CVE-2026-110140: Type confusion in V8
  • CVE-2026-110141: Observable discrepancy in Media
  • CVE-2026-110142: Use after free in FileSystem
  • CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
  • CVE-2026-110144: Incorrect authorization in Mojo
  • CVE-2026-110145: Use after free in Passwords
  • CVE-2026-110146: Information leak in Passwords
  • CVE-2026-110147: Use after free in PDF
  • CVE-2026-110148: Use after free in SVG
  • CVE-2026-110149: Use after free in Browser
  • CVE-2026-110150: Privilege elevation in Installer
  • CVE-2026-110151: Use after free in Media
  • CVE-2026-110152: Buffer overflow in ANGLE
  • CVE-2026-110153: Use after free in Media
  • CVE-2026-110154: Use after free in Canvas
  • CVE-2026-110155: Buffer overflow in PDFium
  • CVE-2026-110156: Incorrect reference resolution in Extensions
  • CVE-2026-110157: Use after free in SVG
  • CVE-2026-110158: Use after free in Passwords
  • CVE-2026-110159: Incorrect authorization in Updater
  • CVE-2026-110160: Missing authorization in ReadingMode
  • CVE-2026-110161: Use after free in Network
  • CVE-2026-110162: Use after free in Desktop
  • CVE-2026-110163: Use after free in DOM
  • CVE-2026-110164: Use after free in DOM
  • CVE-2026-110165: Use after free in Core
  • CVE-2026-110166: Buffer overflow in Animation
  • CVE-2026-110167: Use after free in Media
  • CVE-2026-110168: Use after free in V8
  • CVE-2026-110169: Use after free in V8
  • CVE-2026-110170: Use after free in Bindings
  • CVE-2026-110171: Use after free in Media
  • CVE-2026-110172: Use after free in Media

chromium-155.0.8059.79-1.fc43

Fedora Security Advisories
1 hour 47 minutes ago
FEDORA-2026-1710275b63 Packages in this update:
  • chromium-155.0.8059.79-1.fc43
Update description:

Update to 155.0.8059.39, includes 37 security fixes

  • CVE-2026-110136: Use after free in PDF
  • CVE-2026-110137: Use after free in WebRTC
  • CVE-2026-110138: Use after free in ShapeDetection
  • CVE-2026-110139: Use after free in Media
  • CVE-2026-110140: Type confusion in V8
  • CVE-2026-110141: Observable discrepancy in Media
  • CVE-2026-110142: Use after free in FileSystem
  • CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
  • CVE-2026-110144: Incorrect authorization in Mojo
  • CVE-2026-110145: Use after free in Passwords
  • CVE-2026-110146: Information leak in Passwords
  • CVE-2026-110147: Use after free in PDF
  • CVE-2026-110148: Use after free in SVG
  • CVE-2026-110149: Use after free in Browser
  • CVE-2026-110150: Privilege elevation in Installer
  • CVE-2026-110151: Use after free in Media
  • CVE-2026-110152: Buffer overflow in ANGLE
  • CVE-2026-110153: Use after free in Media
  • CVE-2026-110154: Use after free in Canvas
  • CVE-2026-110155: Buffer overflow in PDFium
  • CVE-2026-110156: Incorrect reference resolution in Extensions
  • CVE-2026-110157: Use after free in SVG
  • CVE-2026-110158: Use after free in Passwords
  • CVE-2026-110159: Incorrect authorization in Updater
  • CVE-2026-110160: Missing authorization in ReadingMode
  • CVE-2026-110161: Use after free in Network
  • CVE-2026-110162: Use after free in Desktop
  • CVE-2026-110163: Use after free in DOM
  • CVE-2026-110164: Use after free in DOM
  • CVE-2026-110165: Use after free in Core
  • CVE-2026-110166: Buffer overflow in Animation
  • CVE-2026-110167: Use after free in Media
  • CVE-2026-110168: Use after free in V8
  • CVE-2026-110169: Use after free in V8
  • CVE-2026-110170: Use after free in Bindings
  • CVE-2026-110171: Use after free in Media
  • CVE-2026-110172: Use after free in Media

chromium-155.0.8059.79-1.fc44

Fedora Security Advisories
1 hour 47 minutes ago
FEDORA-2026-ca33e36dd6 Packages in this update:
  • chromium-155.0.8059.79-1.fc44
Update description:

Update to 155.0.8059.39, includes 37 security fixes

  • CVE-2026-110136: Use after free in PDF
  • CVE-2026-110137: Use after free in WebRTC
  • CVE-2026-110138: Use after free in ShapeDetection
  • CVE-2026-110139: Use after free in Media
  • CVE-2026-110140: Type confusion in V8
  • CVE-2026-110141: Observable discrepancy in Media
  • CVE-2026-110142: Use after free in FileSystem
  • CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
  • CVE-2026-110144: Incorrect authorization in Mojo
  • CVE-2026-110145: Use after free in Passwords
  • CVE-2026-110146: Information leak in Passwords
  • CVE-2026-110147: Use after free in PDF
  • CVE-2026-110148: Use after free in SVG
  • CVE-2026-110149: Use after free in Browser
  • CVE-2026-110150: Privilege elevation in Installer
  • CVE-2026-110151: Use after free in Media
  • CVE-2026-110152: Buffer overflow in ANGLE
  • CVE-2026-110153: Use after free in Media
  • CVE-2026-110154: Use after free in Canvas
  • CVE-2026-110155: Buffer overflow in PDFium
  • CVE-2026-110156: Incorrect reference resolution in Extensions
  • CVE-2026-110157: Use after free in SVG
  • CVE-2026-110158: Use after free in Passwords
  • CVE-2026-110159: Incorrect authorization in Updater
  • CVE-2026-110160: Missing authorization in ReadingMode
  • CVE-2026-110161: Use after free in Network
  • CVE-2026-110162: Use after free in Desktop
  • CVE-2026-110163: Use after free in DOM
  • CVE-2026-110164: Use after free in DOM
  • CVE-2026-110165: Use after free in Core
  • CVE-2026-110166: Buffer overflow in Animation
  • CVE-2026-110167: Use after free in Media
  • CVE-2026-110168: Use after free in V8
  • CVE-2026-110169: Use after free in V8
  • CVE-2026-110170: Use after free in Bindings
  • CVE-2026-110171: Use after free in Media
  • CVE-2026-110172: Use after free in Media

dotnet9.0-9.0.122-1.fc43

Fedora Security Advisories
10 hours 32 minutes ago
FEDORA-2026-22271e9271 Packages in this update:
  • dotnet9.0-9.0.122-1.fc43
Update description:

Update to .NET SDK 9.0.122 and Runtime 9.0.21

Fixes: CVE-2026-105016,CVE-2026-58280,CVE-2026-66822,CVE-2026-69651,CVE-2026-70007,CVE-2026-70035,CVE-2026-70159,CVE-2026-70161,CVE-2026-70162,CVE-2026-70165,CVE-2026-70174,CVE-2026-70175,CVE-2026-70179,CVE-2026-70181,CVE-2026-70183,CVE-2026-70186,CVE-2026-70188,CVE-2026-70190,CVE-2026-70196,CVE-2026-70197,CVE-2026-83520,CVE-2026-84008,CVE-2026-85363,CVE-2026-85790,CVE-2026-87697,CVE-2026-88092,CVE-2026-92707,CVE-2026-96224,CVE-2026-96225,CVE-2026-96229,CVE-2026-96230,CVE-2026-96231,CVE-2026-96232,CVE-2026-96233,CVE-2026-96234,CVE-2026-96235,CVE-2026-96236,CVE-2026-96237,CVE-2026-96238,CVE-2026-96958,CVE-2026-96959,CVE-2026-96960

Release Notes:

dotnet9.0-9.0.122-1.fc44

Fedora Security Advisories
10 hours 32 minutes ago
FEDORA-2026-6dc45f0579 Packages in this update:
  • dotnet9.0-9.0.122-1.fc44
Update description:

Update to .NET SDK 9.0.122 and Runtime 9.0.21

Fixes: CVE-2026-105016,CVE-2026-58280,CVE-2026-66822,CVE-2026-69651,CVE-2026-70007,CVE-2026-70035,CVE-2026-70159,CVE-2026-70161,CVE-2026-70162,CVE-2026-70165,CVE-2026-70174,CVE-2026-70175,CVE-2026-70179,CVE-2026-70181,CVE-2026-70183,CVE-2026-70186,CVE-2026-70188,CVE-2026-70190,CVE-2026-70196,CVE-2026-70197,CVE-2026-83520,CVE-2026-84008,CVE-2026-85363,CVE-2026-85790,CVE-2026-87697,CVE-2026-88092,CVE-2026-92707,CVE-2026-96224,CVE-2026-96225,CVE-2026-96229,CVE-2026-96230,CVE-2026-96231,CVE-2026-96232,CVE-2026-96233,CVE-2026-96234,CVE-2026-96235,CVE-2026-96236,CVE-2026-96237,CVE-2026-96238,CVE-2026-96958,CVE-2026-96959,CVE-2026-96960

Release Notes:

kernel-7.2.11-100.fc43

Fedora Security Advisories
13 hours 16 minutes ago
FEDORA-2026-3057544965 Packages in this update:
  • kernel-7.2.11-100.fc43
Update description:

The 7.2.11 stable kernel updates contain a number of important fixes across the tree.

kernel-7.2.11-200.fc44

Fedora Security Advisories
13 hours 16 minutes ago
FEDORA-2026-1a3e2d0ffe Packages in this update:
  • kernel-7.2.11-200.fc44
Update description:

The 7.2.11 stable kernel updates contain a number of important fixes across the tree.

kernel-7.2.11-300.fc45

Fedora Security Advisories
13 hours 16 minutes ago
FEDORA-2026-e96bbfedfe Packages in this update:
  • kernel-7.2.11-300.fc45
Update description:

The 7.2.11 stable kernel updates contain a number of important fixes across the tree.

USN-8933-1: RabbitMQ Server vulnerabilities

Ubuntu Security Advisories
15 hours 6 minutes ago
It was discovered that RabbitMQ Server incorrectly handled CORS wildcard origin configuration. An attacker could possibly use this issue to cause a cross-site request forgery attack. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-66070) It was discovered that RabbitMQ Server incorrectly handled TLS peer-certificate DNs in the management UI. An attacker could possibly use this issue to cause a cross-site scripting attack. (CVE-2026-66077) It was discovered that RabbitMQ Server incorrectly handled AMQP 1.0 arrays with zero-width element constructors. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-66079) It was discovered that RabbitMQ Server trust-store plugin incorrectly validated client certificates. An attacker could possibly use this issue to bypass TLS client authentication. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-67231) It was discovered that RabbitMQ Server incorrectly handled WebSocket frame sizes. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-67232) It was discovered that RabbitMQ Server incorrectly handled content-header body sizes. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-67235) It was discovered that RabbitMQ Server incorrectly stored credentials in an insecure cookie. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-67236) It was discovered that RabbitMQ Server incorrectly handled OAuth bearer tokens in bootstrap JavaScript. An attacker could possibly use this issue to cause a cross-site scripting attack. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-67237) It was discovered that RabbitMQ Server incorrectly handled ETF-encoded PID node names. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-67238) It was discovered that RabbitMQ Server incorrectly handled TLS peer-certificate DNs in the stream management UI. An attacker could possibly use this issue to cause a cross-site scripting attack. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-67239) It was discovered that RabbitMQ Server incorrectly handled OAuth2 SSL options when no CA certificates were available. An attacker could possibly use this issue to bypass TLS verification. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-67404) It was discovered that RabbitMQ Server incorrectly validated HTTP response status codes when fetching JWKS keys. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-67409)