Aggregator

FEDORA-EPEL-2026-e556a969dd Packages in this update:

• chromium-155.0.8059.39-1.el10_3

Update description:

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

FEDORA-EPEL-2026-4f0eafd918 Packages in this update:

• chromium-155.0.8059.39-1.el10_4

Update description:

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

FEDORA-2026-f4734755e7 Packages in this update:

• chromium-155.0.8059.39-1.fc43

Update description:

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

FEDORA-2026-d94b4ed6e7 Packages in this update:

• chromium-155.0.8059.39-1.fc44

Update description:

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

FEDORA-EPEL-2026-36c9d3c26d Packages in this update:

• chromium-155.0.8059.39-1.el9

Update description:

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

FEDORA-EPEL-2026-0f504f9d83 Packages in this update:

• chromium-155.0.8059.39-1.el10_2

Update description:

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

FEDORA-2026-87586557c0 Packages in this update:

• chromium-155.0.8059.39-1.fc45

Update description:

Update to 155.0.8059.39, includes 247 security fixes: CVE-2026-102322, CVE-2026-106179 -CVE-2026-106427

It was discovered that the Go x/net/idna package, vendored in Google Guest Agent and Google OS Config Agent, incorrectly accepted Punycode-encoded labels that decoded to ASCII-only labels when processing internationalized domain names. A remote attacker could possibly use this issue to bypass hostname-based access controls and escalate privileges.

Adam Bedard discovered that libx11 incorrectly handled certain XKB keyboard map replies. If a user were tricked into connecting to a malicious X server, a remote attacker could possibly use this issue to cause libx11 to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-88806) It was discovered that libx11 incorrectly handled certain X Input Method (XIM) messages. If a user were tricked into connecting to a malicious X server, a remote attacker could possibly use these issues to cause libx11 to crash, resulting in a denial of service. (CVE-2026-94283, CVE-2026-94284) It was discovered that libx11 incorrectly handled converting certain multibyte text. An attacker could possibly use this issue to cause libx11 to crash, resulting in a denial of service. (CVE-2026-94285)

FEDORA-2026-a06b828d65 Packages in this update:

• curl-8.18.0-14.fc44

Update description:

• Fix incomplete mTLS config matching in conn reuse (CVE-2026-8932)
• Fix OpenLDAP SASL authentication bypass (CVE-2026-13608)
• Fix OpenSSL pinning bypass (CVE-2026-80230)

FEDORA-2026-a9e9ce1f16 Packages in this update:

• flare-im-0.22.4-1.fc45

Update description:

Update to latest upstream security release. Fixes an impersonation vulnerability in libsignal-service-rs. See: https://gitlab.com/schmiddi-on-mobile/flare/-/releases/0.22.4 .

FEDORA-2026-2eb07bf1f9 Packages in this update:

• flare-im-0.22.4-1.fc44

Update description:

Update to latest upstream security release. Fixes an impersonation vulnerability in libsignal-service-rs. See: https://gitlab.com/schmiddi-on-mobile/flare/-/releases/0.22.4 .

FEDORA-2026-67c5e97a79 Packages in this update:

• flare-im-0.22.4-1.fc43

Update description:

Update to latest upstream security release. Fixes an impersonation vulnerability in libsignal-service-rs. See: https://gitlab.com/schmiddi-on-mobile/flare/-/releases/0.22.4 .

FEDORA-2026-65b6e06c2d Packages in this update:

• libpng12-1.2.57-27.fc44

Update description:

• fixes CVE-2025-64505 and CVE-2026-33416

FEDORA-2026-9d85027cc0 Packages in this update:

• libpng12-1.2.57-27.fc45

Update description:

• fixes CVE-2025-64505 and CVE-2026-33416

FEDORA-2026-d6bf58e7ce Packages in this update:

• libpng12-1.2.57-27.fc43

Update description:

• fixes CVE-2025-64505 and CVE-2026-33416

FEDORA-2026-095025bfaa Packages in this update:

• libpng15-1.5.30-27.fc43

Update description:

• fixes CVE-2025-64505 and CVE-2026-33416

FEDORA-2026-7facd4fad2 Packages in this update:

• libpng15-1.5.30-27.fc44

Update description:

• fixes CVE-2025-64505 and CVE-2026-33416

FEDORA-2026-fe765b13ce Packages in this update:

• libpng15-1.5.30-27.fc45

Update description:

• fixes CVE-2025-64505 and CVE-2026-33416