python3.14-3.14.4-1.fc42
FEDORA-2026-ba01bab3bb
Packages in this update:
- python3.14-3.14.4-1.fc42
New minor version of the alternate Python interpreter
Aggregator
python3-docs-3.14.4-1.fc43 python3.14-3.14.4-1.fc43
FEDORA-2026-9a8fddee0b
Packages in this update:
- python3.14-3.14.4-1.fc43
- python3-docs-3.14.4-1.fc43
New minor version of the Python interpreter
python3-docs-3.13.13-1.fc42 python3.13-3.13.13-1.fc42
FEDORA-2026-13c6899032
Packages in this update:
- python3.13-3.13.13-1.fc42
- python3-docs-3.13.13-1.fc42
Update to 3.13.13
python3.13-3.13.13-1.fc44
FEDORA-2026-80165205dc
Packages in this update:
- python3.13-3.13.13-1.fc44
Update to 3.13.13
cockpit-357-2.fc42
FEDORA-2026-134819a61b
Packages in this update:
- cockpit-357-2.fc42
- ws: be more explicit when handling hostnames on cli [CVE-2026-4631]
python-msal-1.36.0-1.fc44
FEDORA-2026-64b1c7aa6b
Packages in this update:
- python-msal-1.36.0-1.fc44
Update to v1.36.0
Full changelog: https://github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.36.0
python-msal-1.36.0-1.fc43
FEDORA-2026-891d8718e7
Packages in this update:
- python-msal-1.36.0-1.fc43
Update to v1.36.0
Full changelog: https://github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.36.0
next-20260410: linux-next
Version:next-20260410 (linux-next)
Released:2026-04-10
curl-8.18.0-6.fc44
FEDORA-2026-f13d888b0f
Packages in this update:
- curl-8.18.0-6.fc44
- Fix bad reuse of HTTP Negotiate connection (CVE-2026-1965)
- Fix token leak with redirect and netrc (CVE-2026-3783)
- Fix wrong proxy connection reuse with credentials (CVE-2026-3784)
- Fix use after free in SMB connection reuse (CVE-2026-3805)
python3-docs-3.14.4-1.fc44 python3.14-3.14.4-1.fc44
FEDORA-2026-884eccdb03
Packages in this update:
- python3.14-3.14.4-1.fc44
- python3-docs-3.14.4-1.fc44
New minor version of the Python interpreter
python3.15-3.15.0~a8-1.fc42
FEDORA-2026-485183030a
Packages in this update:
- python3.15-3.15.0~a8-1.fc42
New prerelease version
python3.15-3.15.0~a8-1.fc43
FEDORA-2026-7ea30e843c
Packages in this update:
- python3.15-3.15.0~a8-1.fc43
New prerelease version
python3.15-3.15.0~a8-1.fc44
FEDORA-2026-d494efe6a9
Packages in this update:
- python3.15-3.15.0~a8-1.fc44
New prerelease version
chromium-147.0.7727.55-1.el10_2
FEDORA-EPEL-2026-f96b4915e2
Packages in this update:
- chromium-147.0.7727.55-1.el10_2
Update to 147.0.7727.55
- Critical CVE-2026-5858: Heap buffer overflow in WebML
- Critical CVE-2026-5859: Integer overflow in WebML
- High CVE-2026-5860: Use after free in WebRTC
- High CVE-2026-5861: Use after free in V8
- High CVE-2026-5862: Inappropriate implementation in V8
- High CVE-2026-5863: Inappropriate implementation in V8
- High CVE-2026-5864: Heap buffer overflow in WebAudio
- High CVE-2026-5865: Type Confusion in V8
- High CVE-2026-5866: Use after free in Media
- High CVE-2026-5867: Heap buffer overflow in WebML
- High CVE-2026-5868: Heap buffer overflow in ANGLE
- High CVE-2026-5869: Heap buffer overflow in WebML
- High CVE-2026-5870: Integer overflow in Skia
- High CVE-2026-5871: Type Confusion in V8
- High CVE-2026-5872: Use after free in Blink
- High CVE-2026-5873: Out of bounds read and write in V8
- Medium CVE-2026-5874: Use after free in PrivateAI
- Medium CVE-2026-5875: Policy bypass in Blink
- Medium CVE-2026-5876: Side-channel information leakage in Navigation
- Medium CVE-2026-5877: Use after free in Navigation
- Medium CVE-2026-5878: Incorrect security UI in Blink
- Medium CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
- Medium CVE-2026-5880: Incorrect security UI in browser UI
- Medium CVE-2026-5881: Policy bypass in LocalNetworkAccess
- Medium CVE-2026-5882: Incorrect security UI in Fullscreen
- Medium CVE-2026-5883: Use after free in Media
- Medium CVE-2026-5884: Insufficient validation of untrusted input in Media
- Medium CVE-2026-5885: Insufficient validation of untrusted input in WebML
- Medium CVE-2026-5886: Out of bounds read in WebAudio
- Medium CVE-2026-5887: Insufficient validation of untrusted input in Downloads
- Medium CVE-2026-5888: Uninitialized Use in WebCodecs
- Medium CVE-2026-5889: Cryptographic Flaw in PDFium
- Medium CVE-2026-5890: Race in WebCodecs
- Medium CVE-2026-5891: Insufficient policy enforcement in browser UI
- Medium CVE-2026-5892: Insufficient policy enforcement in PWAs
- Medium CVE-2026-5893: Race in V8
- Low CVE-2026-5894: Inappropriate implementation in PDF
- Low CVE-2026-5895: Incorrect security UI in Omnibox
- Low CVE-2026-5896: Policy bypass in Audio
- Low CVE-2026-5897: Incorrect security UI in Downloads
- Low CVE-2026-5898: Incorrect security UI in Omnibox
- Low CVE-2026-5899: Incorrect security UI in History Navigation
- Low CVE-2026-5900: Policy bypass in Downloads
- Low CVE-2026-5901: Policy bypass in DevTools
- Low CVE-2026-5902: Race in Media
- Low CVE-2026-5903: Policy bypass in IFrameSandbox
- Low CVE-2026-5904: Use after free in V8
- Low CVE-2026-5905: Incorrect security UI in Permissions
- Low CVE-2026-5906: Incorrect security UI in Omnibox
- Low CVE-2026-5907: Insufficient data validation in Media
- Low CVE-2026-5908: Integer overflow in Media
- Low CVE-2026-5909: Integer overflow in Media
- Low CVE-2026-5910: Integer overflow in Media
- Low CVE-2026-5911: Policy bypass in ServiceWorkers
- Low CVE-2026-5912: Integer overflow in WebRTC
- Low CVE-2026-5913: Out of bounds read in Blink
- Low CVE-2026-5914: Type Confusion in CSS
- Low CVE-2026-5915: Insufficient validation of untrusted input in WebML
- Low CVE-2026-5918: Inappropriate implementation in Navigation
- Low CVE-2026-5919: Insufficient validation of untrusted input in WebSockets
chromium-147.0.7727.55-1.fc42
FEDORA-2026-f0ab053633
Packages in this update:
- chromium-147.0.7727.55-1.fc42
Update to 147.0.7727.55
- Critical CVE-2026-5858: Heap buffer overflow in WebML
- Critical CVE-2026-5859: Integer overflow in WebML
- High CVE-2026-5860: Use after free in WebRTC
- High CVE-2026-5861: Use after free in V8
- High CVE-2026-5862: Inappropriate implementation in V8
- High CVE-2026-5863: Inappropriate implementation in V8
- High CVE-2026-5864: Heap buffer overflow in WebAudio
- High CVE-2026-5865: Type Confusion in V8
- High CVE-2026-5866: Use after free in Media
- High CVE-2026-5867: Heap buffer overflow in WebML
- High CVE-2026-5868: Heap buffer overflow in ANGLE
- High CVE-2026-5869: Heap buffer overflow in WebML
- High CVE-2026-5870: Integer overflow in Skia
- High CVE-2026-5871: Type Confusion in V8
- High CVE-2026-5872: Use after free in Blink
- High CVE-2026-5873: Out of bounds read and write in V8
- Medium CVE-2026-5874: Use after free in PrivateAI
- Medium CVE-2026-5875: Policy bypass in Blink
- Medium CVE-2026-5876: Side-channel information leakage in Navigation
- Medium CVE-2026-5877: Use after free in Navigation
- Medium CVE-2026-5878: Incorrect security UI in Blink
- Medium CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
- Medium CVE-2026-5880: Incorrect security UI in browser UI
- Medium CVE-2026-5881: Policy bypass in LocalNetworkAccess
- Medium CVE-2026-5882: Incorrect security UI in Fullscreen
- Medium CVE-2026-5883: Use after free in Media
- Medium CVE-2026-5884: Insufficient validation of untrusted input in Media
- Medium CVE-2026-5885: Insufficient validation of untrusted input in WebML
- Medium CVE-2026-5886: Out of bounds read in WebAudio
- Medium CVE-2026-5887: Insufficient validation of untrusted input in Downloads
- Medium CVE-2026-5888: Uninitialized Use in WebCodecs
- Medium CVE-2026-5889: Cryptographic Flaw in PDFium
- Medium CVE-2026-5890: Race in WebCodecs
- Medium CVE-2026-5891: Insufficient policy enforcement in browser UI
- Medium CVE-2026-5892: Insufficient policy enforcement in PWAs
- Medium CVE-2026-5893: Race in V8
- Low CVE-2026-5894: Inappropriate implementation in PDF
- Low CVE-2026-5895: Incorrect security UI in Omnibox
- Low CVE-2026-5896: Policy bypass in Audio
- Low CVE-2026-5897: Incorrect security UI in Downloads
- Low CVE-2026-5898: Incorrect security UI in Omnibox
- Low CVE-2026-5899: Incorrect security UI in History Navigation
- Low CVE-2026-5900: Policy bypass in Downloads
- Low CVE-2026-5901: Policy bypass in DevTools
- Low CVE-2026-5902: Race in Media
- Low CVE-2026-5903: Policy bypass in IFrameSandbox
- Low CVE-2026-5904: Use after free in V8
- Low CVE-2026-5905: Incorrect security UI in Permissions
- Low CVE-2026-5906: Incorrect security UI in Omnibox
- Low CVE-2026-5907: Insufficient data validation in Media
- Low CVE-2026-5908: Integer overflow in Media
- Low CVE-2026-5909: Integer overflow in Media
- Low CVE-2026-5910: Integer overflow in Media
- Low CVE-2026-5911: Policy bypass in ServiceWorkers
- Low CVE-2026-5912: Integer overflow in WebRTC
- Low CVE-2026-5913: Out of bounds read in Blink
- Low CVE-2026-5914: Type Confusion in CSS
- Low CVE-2026-5915: Insufficient validation of untrusted input in WebML
- Low CVE-2026-5918: Inappropriate implementation in Navigation
- Low CVE-2026-5919: Insufficient validation of untrusted input in WebSockets
Update to 146.0.7680.177
- High CVE-2026-5273: Use after free in CSS
- High CVE-2026-5272: Heap buffer overflow in GPU
- High CVE-2026-5274: Integer overflow in Codecs
- High CVE-2026-5275: Heap buffer overflow in ANGLE
- High CVE-2026-5276: Insufficient policy enforcement in WebUSB
- High CVE-2026-5277: Integer overflow in ANGLE
- High CVE-2026-5278: Use after free in Web MIDI
- High CVE-2026-5279: Object corruption in V8
- High CVE-2026-5280: Use after free in WebCodecs
- High CVE-2026-5281: Use after free in Dawn
- High CVE-2026-5282: Out of bounds read in WebCodecs
- High CVE-2026-5283: Inappropriate implementation in ANGLE
- High CVE-2026-5284: Use after free in Dawn
- High CVE-2026-5285: Use after free in WebGL
- High CVE-2026-5286: Use after free in Dawn
- High CVE-2026-5287: Use after free in PDF
- High CVE-2026-5288: Use after free in WebView
- High CVE-2026-5289: Use after free in Navigation
- High CVE-2026-5290: Use after free in Compositing
- Medium CVE-2026-5291: Inappropriate implementation in WebGL
- Medium CVE-2026-5292: Out of bounds read in WebCodecs
chromium-147.0.7727.55-1.fc44
FEDORA-2026-900eef4571
Packages in this update:
- chromium-147.0.7727.55-1.fc44
Update to 147.0.7727.55
- Critical CVE-2026-5858: Heap buffer overflow in WebML
- Critical CVE-2026-5859: Integer overflow in WebML
- High CVE-2026-5860: Use after free in WebRTC
- High CVE-2026-5861: Use after free in V8
- High CVE-2026-5862: Inappropriate implementation in V8
- High CVE-2026-5863: Inappropriate implementation in V8
- High CVE-2026-5864: Heap buffer overflow in WebAudio
- High CVE-2026-5865: Type Confusion in V8
- High CVE-2026-5866: Use after free in Media
- High CVE-2026-5867: Heap buffer overflow in WebML
- High CVE-2026-5868: Heap buffer overflow in ANGLE
- High CVE-2026-5869: Heap buffer overflow in WebML
- High CVE-2026-5870: Integer overflow in Skia
- High CVE-2026-5871: Type Confusion in V8
- High CVE-2026-5872: Use after free in Blink
- High CVE-2026-5873: Out of bounds read and write in V8
- Medium CVE-2026-5874: Use after free in PrivateAI
- Medium CVE-2026-5875: Policy bypass in Blink
- Medium CVE-2026-5876: Side-channel information leakage in Navigation
- Medium CVE-2026-5877: Use after free in Navigation
- Medium CVE-2026-5878: Incorrect security UI in Blink
- Medium CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
- Medium CVE-2026-5880: Incorrect security UI in browser UI
- Medium CVE-2026-5881: Policy bypass in LocalNetworkAccess
- Medium CVE-2026-5882: Incorrect security UI in Fullscreen
- Medium CVE-2026-5883: Use after free in Media
- Medium CVE-2026-5884: Insufficient validation of untrusted input in Media
- Medium CVE-2026-5885: Insufficient validation of untrusted input in WebML
- Medium CVE-2026-5886: Out of bounds read in WebAudio
- Medium CVE-2026-5887: Insufficient validation of untrusted input in Downloads
- Medium CVE-2026-5888: Uninitialized Use in WebCodecs
- Medium CVE-2026-5889: Cryptographic Flaw in PDFium
- Medium CVE-2026-5890: Race in WebCodecs
- Medium CVE-2026-5891: Insufficient policy enforcement in browser UI
- Medium CVE-2026-5892: Insufficient policy enforcement in PWAs
- Medium CVE-2026-5893: Race in V8
- Low CVE-2026-5894: Inappropriate implementation in PDF
- Low CVE-2026-5895: Incorrect security UI in Omnibox
- Low CVE-2026-5896: Policy bypass in Audio
- Low CVE-2026-5897: Incorrect security UI in Downloads
- Low CVE-2026-5898: Incorrect security UI in Omnibox
- Low CVE-2026-5899: Incorrect security UI in History Navigation
- Low CVE-2026-5900: Policy bypass in Downloads
- Low CVE-2026-5901: Policy bypass in DevTools
- Low CVE-2026-5902: Race in Media
- Low CVE-2026-5903: Policy bypass in IFrameSandbox
- Low CVE-2026-5904: Use after free in V8
- Low CVE-2026-5905: Incorrect security UI in Permissions
- Low CVE-2026-5906: Incorrect security UI in Omnibox
- Low CVE-2026-5907: Insufficient data validation in Media
- Low CVE-2026-5908: Integer overflow in Media
- Low CVE-2026-5909: Integer overflow in Media
- Low CVE-2026-5910: Integer overflow in Media
- Low CVE-2026-5911: Policy bypass in ServiceWorkers
- Low CVE-2026-5912: Integer overflow in WebRTC
- Low CVE-2026-5913: Out of bounds read in Blink
- Low CVE-2026-5914: Type Confusion in CSS
- Low CVE-2026-5915: Insufficient validation of untrusted input in WebML
- Low CVE-2026-5918: Inappropriate implementation in Navigation
- Low CVE-2026-5919: Insufficient validation of untrusted input in WebSockets
chromium-147.0.7727.55-1.el10_1
FEDORA-EPEL-2026-82b8678fe1
Packages in this update:
- chromium-147.0.7727.55-1.el10_1
Update to 147.0.7727.55
- Critical CVE-2026-5858: Heap buffer overflow in WebML
- Critical CVE-2026-5859: Integer overflow in WebML
- High CVE-2026-5860: Use after free in WebRTC
- High CVE-2026-5861: Use after free in V8
- High CVE-2026-5862: Inappropriate implementation in V8
- High CVE-2026-5863: Inappropriate implementation in V8
- High CVE-2026-5864: Heap buffer overflow in WebAudio
- High CVE-2026-5865: Type Confusion in V8
- High CVE-2026-5866: Use after free in Media
- High CVE-2026-5867: Heap buffer overflow in WebML
- High CVE-2026-5868: Heap buffer overflow in ANGLE
- High CVE-2026-5869: Heap buffer overflow in WebML
- High CVE-2026-5870: Integer overflow in Skia
- High CVE-2026-5871: Type Confusion in V8
- High CVE-2026-5872: Use after free in Blink
- High CVE-2026-5873: Out of bounds read and write in V8
- Medium CVE-2026-5874: Use after free in PrivateAI
- Medium CVE-2026-5875: Policy bypass in Blink
- Medium CVE-2026-5876: Side-channel information leakage in Navigation
- Medium CVE-2026-5877: Use after free in Navigation
- Medium CVE-2026-5878: Incorrect security UI in Blink
- Medium CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
- Medium CVE-2026-5880: Incorrect security UI in browser UI
- Medium CVE-2026-5881: Policy bypass in LocalNetworkAccess
- Medium CVE-2026-5882: Incorrect security UI in Fullscreen
- Medium CVE-2026-5883: Use after free in Media
- Medium CVE-2026-5884: Insufficient validation of untrusted input in Media
- Medium CVE-2026-5885: Insufficient validation of untrusted input in WebML
- Medium CVE-2026-5886: Out of bounds read in WebAudio
- Medium CVE-2026-5887: Insufficient validation of untrusted input in Downloads
- Medium CVE-2026-5888: Uninitialized Use in WebCodecs
- Medium CVE-2026-5889: Cryptographic Flaw in PDFium
- Medium CVE-2026-5890: Race in WebCodecs
- Medium CVE-2026-5891: Insufficient policy enforcement in browser UI
- Medium CVE-2026-5892: Insufficient policy enforcement in PWAs
- Medium CVE-2026-5893: Race in V8
- Low CVE-2026-5894: Inappropriate implementation in PDF
- Low CVE-2026-5895: Incorrect security UI in Omnibox
- Low CVE-2026-5896: Policy bypass in Audio
- Low CVE-2026-5897: Incorrect security UI in Downloads
- Low CVE-2026-5898: Incorrect security UI in Omnibox
- Low CVE-2026-5899: Incorrect security UI in History Navigation
- Low CVE-2026-5900: Policy bypass in Downloads
- Low CVE-2026-5901: Policy bypass in DevTools
- Low CVE-2026-5902: Race in Media
- Low CVE-2026-5903: Policy bypass in IFrameSandbox
- Low CVE-2026-5904: Use after free in V8
- Low CVE-2026-5905: Incorrect security UI in Permissions
- Low CVE-2026-5906: Incorrect security UI in Omnibox
- Low CVE-2026-5907: Insufficient data validation in Media
- Low CVE-2026-5908: Integer overflow in Media
- Low CVE-2026-5909: Integer overflow in Media
- Low CVE-2026-5910: Integer overflow in Media
- Low CVE-2026-5911: Policy bypass in ServiceWorkers
- Low CVE-2026-5912: Integer overflow in WebRTC
- Low CVE-2026-5913: Out of bounds read in Blink
- Low CVE-2026-5914: Type Confusion in CSS
- Low CVE-2026-5915: Insufficient validation of untrusted input in WebML
- Low CVE-2026-5918: Inappropriate implementation in Navigation
- Low CVE-2026-5919: Insufficient validation of untrusted input in WebSockets
chromium-147.0.7727.55-1.el10_3
FEDORA-EPEL-2026-718899309a
Packages in this update:
- chromium-147.0.7727.55-1.el10_3
Update to 147.0.7727.55
- Critical CVE-2026-5858: Heap buffer overflow in WebML
- Critical CVE-2026-5859: Integer overflow in WebML
- High CVE-2026-5860: Use after free in WebRTC
- High CVE-2026-5861: Use after free in V8
- High CVE-2026-5862: Inappropriate implementation in V8
- High CVE-2026-5863: Inappropriate implementation in V8
- High CVE-2026-5864: Heap buffer overflow in WebAudio
- High CVE-2026-5865: Type Confusion in V8
- High CVE-2026-5866: Use after free in Media
- High CVE-2026-5867: Heap buffer overflow in WebML
- High CVE-2026-5868: Heap buffer overflow in ANGLE
- High CVE-2026-5869: Heap buffer overflow in WebML
- High CVE-2026-5870: Integer overflow in Skia
- High CVE-2026-5871: Type Confusion in V8
- High CVE-2026-5872: Use after free in Blink
- High CVE-2026-5873: Out of bounds read and write in V8
- Medium CVE-2026-5874: Use after free in PrivateAI
- Medium CVE-2026-5875: Policy bypass in Blink
- Medium CVE-2026-5876: Side-channel information leakage in Navigation
- Medium CVE-2026-5877: Use after free in Navigation
- Medium CVE-2026-5878: Incorrect security UI in Blink
- Medium CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
- Medium CVE-2026-5880: Incorrect security UI in browser UI
- Medium CVE-2026-5881: Policy bypass in LocalNetworkAccess
- Medium CVE-2026-5882: Incorrect security UI in Fullscreen
- Medium CVE-2026-5883: Use after free in Media
- Medium CVE-2026-5884: Insufficient validation of untrusted input in Media
- Medium CVE-2026-5885: Insufficient validation of untrusted input in WebML
- Medium CVE-2026-5886: Out of bounds read in WebAudio
- Medium CVE-2026-5887: Insufficient validation of untrusted input in Downloads
- Medium CVE-2026-5888: Uninitialized Use in WebCodecs
- Medium CVE-2026-5889: Cryptographic Flaw in PDFium
- Medium CVE-2026-5890: Race in WebCodecs
- Medium CVE-2026-5891: Insufficient policy enforcement in browser UI
- Medium CVE-2026-5892: Insufficient policy enforcement in PWAs
- Medium CVE-2026-5893: Race in V8
- Low CVE-2026-5894: Inappropriate implementation in PDF
- Low CVE-2026-5895: Incorrect security UI in Omnibox
- Low CVE-2026-5896: Policy bypass in Audio
- Low CVE-2026-5897: Incorrect security UI in Downloads
- Low CVE-2026-5898: Incorrect security UI in Omnibox
- Low CVE-2026-5899: Incorrect security UI in History Navigation
- Low CVE-2026-5900: Policy bypass in Downloads
- Low CVE-2026-5901: Policy bypass in DevTools
- Low CVE-2026-5902: Race in Media
- Low CVE-2026-5903: Policy bypass in IFrameSandbox
- Low CVE-2026-5904: Use after free in V8
- Low CVE-2026-5905: Incorrect security UI in Permissions
- Low CVE-2026-5906: Incorrect security UI in Omnibox
- Low CVE-2026-5907: Insufficient data validation in Media
- Low CVE-2026-5908: Integer overflow in Media
- Low CVE-2026-5909: Integer overflow in Media
- Low CVE-2026-5910: Integer overflow in Media
- Low CVE-2026-5911: Policy bypass in ServiceWorkers
- Low CVE-2026-5912: Integer overflow in WebRTC
- Low CVE-2026-5913: Out of bounds read in Blink
- Low CVE-2026-5914: Type Confusion in CSS
- Low CVE-2026-5915: Insufficient validation of untrusted input in WebML
- Low CVE-2026-5918: Inappropriate implementation in Navigation
- Low CVE-2026-5919: Insufficient validation of untrusted input in WebSockets
chromium-147.0.7727.55-1.el9
FEDORA-EPEL-2026-4bb81189d7
Packages in this update:
- chromium-147.0.7727.55-1.el9
Update to 147.0.7727.55
- Critical CVE-2026-5858: Heap buffer overflow in WebML
- Critical CVE-2026-5859: Integer overflow in WebML
- High CVE-2026-5860: Use after free in WebRTC
- High CVE-2026-5861: Use after free in V8
- High CVE-2026-5862: Inappropriate implementation in V8
- High CVE-2026-5863: Inappropriate implementation in V8
- High CVE-2026-5864: Heap buffer overflow in WebAudio
- High CVE-2026-5865: Type Confusion in V8
- High CVE-2026-5866: Use after free in Media
- High CVE-2026-5867: Heap buffer overflow in WebML
- High CVE-2026-5868: Heap buffer overflow in ANGLE
- High CVE-2026-5869: Heap buffer overflow in WebML
- High CVE-2026-5870: Integer overflow in Skia
- High CVE-2026-5871: Type Confusion in V8
- High CVE-2026-5872: Use after free in Blink
- High CVE-2026-5873: Out of bounds read and write in V8
- Medium CVE-2026-5874: Use after free in PrivateAI
- Medium CVE-2026-5875: Policy bypass in Blink
- Medium CVE-2026-5876: Side-channel information leakage in Navigation
- Medium CVE-2026-5877: Use after free in Navigation
- Medium CVE-2026-5878: Incorrect security UI in Blink
- Medium CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
- Medium CVE-2026-5880: Incorrect security UI in browser UI
- Medium CVE-2026-5881: Policy bypass in LocalNetworkAccess
- Medium CVE-2026-5882: Incorrect security UI in Fullscreen
- Medium CVE-2026-5883: Use after free in Media
- Medium CVE-2026-5884: Insufficient validation of untrusted input in Media
- Medium CVE-2026-5885: Insufficient validation of untrusted input in WebML
- Medium CVE-2026-5886: Out of bounds read in WebAudio
- Medium CVE-2026-5887: Insufficient validation of untrusted input in Downloads
- Medium CVE-2026-5888: Uninitialized Use in WebCodecs
- Medium CVE-2026-5889: Cryptographic Flaw in PDFium
- Medium CVE-2026-5890: Race in WebCodecs
- Medium CVE-2026-5891: Insufficient policy enforcement in browser UI
- Medium CVE-2026-5892: Insufficient policy enforcement in PWAs
- Medium CVE-2026-5893: Race in V8
- Low CVE-2026-5894: Inappropriate implementation in PDF
- Low CVE-2026-5895: Incorrect security UI in Omnibox
- Low CVE-2026-5896: Policy bypass in Audio
- Low CVE-2026-5897: Incorrect security UI in Downloads
- Low CVE-2026-5898: Incorrect security UI in Omnibox
- Low CVE-2026-5899: Incorrect security UI in History Navigation
- Low CVE-2026-5900: Policy bypass in Downloads
- Low CVE-2026-5901: Policy bypass in DevTools
- Low CVE-2026-5902: Race in Media
- Low CVE-2026-5903: Policy bypass in IFrameSandbox
- Low CVE-2026-5904: Use after free in V8
- Low CVE-2026-5905: Incorrect security UI in Permissions
- Low CVE-2026-5906: Incorrect security UI in Omnibox
- Low CVE-2026-5907: Insufficient data validation in Media
- Low CVE-2026-5908: Integer overflow in Media
- Low CVE-2026-5909: Integer overflow in Media
- Low CVE-2026-5910: Integer overflow in Media
- Low CVE-2026-5911: Policy bypass in ServiceWorkers
- Low CVE-2026-5912: Integer overflow in WebRTC
- Low CVE-2026-5913: Out of bounds read in Blink
- Low CVE-2026-5914: Type Confusion in CSS
- Low CVE-2026-5915: Insufficient validation of untrusted input in WebML
- Low CVE-2026-5918: Inappropriate implementation in Navigation
- Low CVE-2026-5919: Insufficient validation of untrusted input in WebSockets
chromium-147.0.7727.55-1.fc43
FEDORA-2026-952f3c3d9e
Packages in this update:
- chromium-147.0.7727.55-1.fc43
Update to 147.0.7727.55
- Critical CVE-2026-5858: Heap buffer overflow in WebML
- Critical CVE-2026-5859: Integer overflow in WebML
- High CVE-2026-5860: Use after free in WebRTC
- High CVE-2026-5861: Use after free in V8
- High CVE-2026-5862: Inappropriate implementation in V8
- High CVE-2026-5863: Inappropriate implementation in V8
- High CVE-2026-5864: Heap buffer overflow in WebAudio
- High CVE-2026-5865: Type Confusion in V8
- High CVE-2026-5866: Use after free in Media
- High CVE-2026-5867: Heap buffer overflow in WebML
- High CVE-2026-5868: Heap buffer overflow in ANGLE
- High CVE-2026-5869: Heap buffer overflow in WebML
- High CVE-2026-5870: Integer overflow in Skia
- High CVE-2026-5871: Type Confusion in V8
- High CVE-2026-5872: Use after free in Blink
- High CVE-2026-5873: Out of bounds read and write in V8
- Medium CVE-2026-5874: Use after free in PrivateAI
- Medium CVE-2026-5875: Policy bypass in Blink
- Medium CVE-2026-5876: Side-channel information leakage in Navigation
- Medium CVE-2026-5877: Use after free in Navigation
- Medium CVE-2026-5878: Incorrect security UI in Blink
- Medium CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
- Medium CVE-2026-5880: Incorrect security UI in browser UI
- Medium CVE-2026-5881: Policy bypass in LocalNetworkAccess
- Medium CVE-2026-5882: Incorrect security UI in Fullscreen
- Medium CVE-2026-5883: Use after free in Media
- Medium CVE-2026-5884: Insufficient validation of untrusted input in Media
- Medium CVE-2026-5885: Insufficient validation of untrusted input in WebML
- Medium CVE-2026-5886: Out of bounds read in WebAudio
- Medium CVE-2026-5887: Insufficient validation of untrusted input in Downloads
- Medium CVE-2026-5888: Uninitialized Use in WebCodecs
- Medium CVE-2026-5889: Cryptographic Flaw in PDFium
- Medium CVE-2026-5890: Race in WebCodecs
- Medium CVE-2026-5891: Insufficient policy enforcement in browser UI
- Medium CVE-2026-5892: Insufficient policy enforcement in PWAs
- Medium CVE-2026-5893: Race in V8
- Low CVE-2026-5894: Inappropriate implementation in PDF
- Low CVE-2026-5895: Incorrect security UI in Omnibox
- Low CVE-2026-5896: Policy bypass in Audio
- Low CVE-2026-5897: Incorrect security UI in Downloads
- Low CVE-2026-5898: Incorrect security UI in Omnibox
- Low CVE-2026-5899: Incorrect security UI in History Navigation
- Low CVE-2026-5900: Policy bypass in Downloads
- Low CVE-2026-5901: Policy bypass in DevTools
- Low CVE-2026-5902: Race in Media
- Low CVE-2026-5903: Policy bypass in IFrameSandbox
- Low CVE-2026-5904: Use after free in V8
- Low CVE-2026-5905: Incorrect security UI in Permissions
- Low CVE-2026-5906: Incorrect security UI in Omnibox
- Low CVE-2026-5907: Insufficient data validation in Media
- Low CVE-2026-5908: Integer overflow in Media
- Low CVE-2026-5909: Integer overflow in Media
- Low CVE-2026-5910: Integer overflow in Media
- Low CVE-2026-5911: Policy bypass in ServiceWorkers
- Low CVE-2026-5912: Integer overflow in WebRTC
- Low CVE-2026-5913: Out of bounds read in Blink
- Low CVE-2026-5914: Type Confusion in CSS
- Low CVE-2026-5915: Insufficient validation of untrusted input in WebML
- Low CVE-2026-5918: Inappropriate implementation in Navigation
- Low CVE-2026-5919: Insufficient validation of untrusted input in WebSockets