Fedora Security Advisories

• jfrog-cli-2.119.0-1.el10_3

Update to 2.119.0.

• jfrog-cli-2.119.0-1.el9

Update to 2.119.0.

• jfrog-cli-2.119.0-1.el10_2

Update to 2.119.0.

• jfrog-cli-2.119.0-1.fc44

Update to 2.119.0.

• chromium-151.0.7922.108-1.el10_3

chromium-151.0.7922.108 security release fix 41 CVE

• CVE-2026-19137: Use after free in WebGL
• CVE-2026-19138: Heap buffer overflow in CrashReporting
• CVE-2026-19139: Race in CredentialProvider
• CVE-2026-19140: Use after free in GPU
• CVE-2026-19141: Use after free in Resources
• CVE-2026-19142: Use after free in Views
• CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
• CVE-2026-19144: Use after free in HTML
• CVE-2026-19145: Use after free in Translate
• CVE-2026-19146: Uninitialized Use in GPU
• CVE-2026-19147: Use after free in Aura
• CVE-2026-19148: Out of bounds write in GPU
• CVE-2026-19149: Use after free in Aura
• CVE-2026-19150: Inappropriate implementation in V8
• CVE-2026-19151: Use after free in V8
• CVE-2026-19152: Inappropriate implementation in Navigation
• CVE-2026-19153: Insufficient validation of untrusted input in Workers
• CVE-2026-19154: Use after free in Skia
• CVE-2026-19155: Use after free in Payments
• CVE-2026-19156: Heap buffer overflow in Base
• CVE-2026-19157: Out of bounds write in ANGLE
• CVE-2026-19158: Use after free in Views
• CVE-2026-19159: Use after free in Views
• CVE-2026-19160: Uninitialized Use in Skia
• CVE-2026-19161: Uninitialized Use in Skia
• CVE-2026-19162: Out of bounds write in V8
• CVE-2026-19163: Use after free in Media
• CVE-2026-19164: Insufficient validation of untrusted input in Codecs
• CVE-2026-19165: Use after free in Extensions
• CVE-2026-19166: Use after free in Web Authentication
• CVE-2026-19167: Integer overflow in GPU
• CVE-2026-19168: Inappropriate implementation in V8
• CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
• CVE-2026-19170: Use after free in WebGL
• CVE-2026-19171: Use after free in Media
• CVE-2026-19172: Use after free in Views
• CVE-2026-19173: Out of bounds write in Skia
• CVE-2026-19174: Integer overflow in V8
• CVE-2026-19175: Use after free in Payments
• CVE-2026-19176: Use after free in Skia
• CVE-2026-19177: Insufficient validation of untrusted input in UI

• chromium-151.0.7922.108-1.el10_2

chromium-151.0.7922.108 security release fix 41 CVE

• CVE-2026-19137: Use after free in WebGL
• CVE-2026-19138: Heap buffer overflow in CrashReporting
• CVE-2026-19139: Race in CredentialProvider
• CVE-2026-19140: Use after free in GPU
• CVE-2026-19141: Use after free in Resources
• CVE-2026-19142: Use after free in Views
• CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
• CVE-2026-19144: Use after free in HTML
• CVE-2026-19145: Use after free in Translate
• CVE-2026-19146: Uninitialized Use in GPU
• CVE-2026-19147: Use after free in Aura
• CVE-2026-19148: Out of bounds write in GPU
• CVE-2026-19149: Use after free in Aura
• CVE-2026-19150: Inappropriate implementation in V8
• CVE-2026-19151: Use after free in V8
• CVE-2026-19152: Inappropriate implementation in Navigation
• CVE-2026-19153: Insufficient validation of untrusted input in Workers
• CVE-2026-19154: Use after free in Skia
• CVE-2026-19155: Use after free in Payments
• CVE-2026-19156: Heap buffer overflow in Base
• CVE-2026-19157: Out of bounds write in ANGLE
• CVE-2026-19158: Use after free in Views
• CVE-2026-19159: Use after free in Views
• CVE-2026-19160: Uninitialized Use in Skia
• CVE-2026-19161: Uninitialized Use in Skia
• CVE-2026-19162: Out of bounds write in V8
• CVE-2026-19163: Use after free in Media
• CVE-2026-19164: Insufficient validation of untrusted input in Codecs
• CVE-2026-19165: Use after free in Extensions
• CVE-2026-19166: Use after free in Web Authentication
• CVE-2026-19167: Integer overflow in GPU
• CVE-2026-19168: Inappropriate implementation in V8
• CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
• CVE-2026-19170: Use after free in WebGL
• CVE-2026-19171: Use after free in Media
• CVE-2026-19172: Use after free in Views
• CVE-2026-19173: Out of bounds write in Skia
• CVE-2026-19174: Integer overflow in V8
• CVE-2026-19175: Use after free in Payments
• CVE-2026-19176: Use after free in Skia
• CVE-2026-19177: Insufficient validation of untrusted input in UI

• chromium-151.0.7922.108-1.fc43

chromium-151.0.7922.108 security release fix 41 CVE

• CVE-2026-19137: Use after free in WebGL
• CVE-2026-19138: Heap buffer overflow in CrashReporting
• CVE-2026-19139: Race in CredentialProvider
• CVE-2026-19140: Use after free in GPU
• CVE-2026-19141: Use after free in Resources
• CVE-2026-19142: Use after free in Views
• CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
• CVE-2026-19144: Use after free in HTML
• CVE-2026-19145: Use after free in Translate
• CVE-2026-19146: Uninitialized Use in GPU
• CVE-2026-19147: Use after free in Aura
• CVE-2026-19148: Out of bounds write in GPU
• CVE-2026-19149: Use after free in Aura
• CVE-2026-19150: Inappropriate implementation in V8
• CVE-2026-19151: Use after free in V8
• CVE-2026-19152: Inappropriate implementation in Navigation
• CVE-2026-19153: Insufficient validation of untrusted input in Workers
• CVE-2026-19154: Use after free in Skia
• CVE-2026-19155: Use after free in Payments
• CVE-2026-19156: Heap buffer overflow in Base
• CVE-2026-19157: Out of bounds write in ANGLE
• CVE-2026-19158: Use after free in Views
• CVE-2026-19159: Use after free in Views
• CVE-2026-19160: Uninitialized Use in Skia
• CVE-2026-19161: Uninitialized Use in Skia
• CVE-2026-19162: Out of bounds write in V8
• CVE-2026-19163: Use after free in Media
• CVE-2026-19164: Insufficient validation of untrusted input in Codecs
• CVE-2026-19165: Use after free in Extensions
• CVE-2026-19166: Use after free in Web Authentication
• CVE-2026-19167: Integer overflow in GPU
• CVE-2026-19168: Inappropriate implementation in V8
• CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
• CVE-2026-19170: Use after free in WebGL
• CVE-2026-19171: Use after free in Media
• CVE-2026-19172: Use after free in Views
• CVE-2026-19173: Out of bounds write in Skia
• CVE-2026-19174: Integer overflow in V8
• CVE-2026-19175: Use after free in Payments
• CVE-2026-19176: Use after free in Skia
• CVE-2026-19177: Insufficient validation of untrusted input in UI

• chromium-151.0.7922.108-1.el9

chromium-151.0.7922.108 security release fix 41 CVE

• CVE-2026-19137: Use after free in WebGL
• CVE-2026-19138: Heap buffer overflow in CrashReporting
• CVE-2026-19139: Race in CredentialProvider
• CVE-2026-19140: Use after free in GPU
• CVE-2026-19141: Use after free in Resources
• CVE-2026-19142: Use after free in Views
• CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
• CVE-2026-19144: Use after free in HTML
• CVE-2026-19145: Use after free in Translate
• CVE-2026-19146: Uninitialized Use in GPU
• CVE-2026-19147: Use after free in Aura
• CVE-2026-19148: Out of bounds write in GPU
• CVE-2026-19149: Use after free in Aura
• CVE-2026-19150: Inappropriate implementation in V8
• CVE-2026-19151: Use after free in V8
• CVE-2026-19152: Inappropriate implementation in Navigation
• CVE-2026-19153: Insufficient validation of untrusted input in Workers
• CVE-2026-19154: Use after free in Skia
• CVE-2026-19155: Use after free in Payments
• CVE-2026-19156: Heap buffer overflow in Base
• CVE-2026-19157: Out of bounds write in ANGLE
• CVE-2026-19158: Use after free in Views
• CVE-2026-19159: Use after free in Views
• CVE-2026-19160: Uninitialized Use in Skia
• CVE-2026-19161: Uninitialized Use in Skia
• CVE-2026-19162: Out of bounds write in V8
• CVE-2026-19163: Use after free in Media
• CVE-2026-19164: Insufficient validation of untrusted input in Codecs
• CVE-2026-19165: Use after free in Extensions
• CVE-2026-19166: Use after free in Web Authentication
• CVE-2026-19167: Integer overflow in GPU
• CVE-2026-19168: Inappropriate implementation in V8
• CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
• CVE-2026-19170: Use after free in WebGL
• CVE-2026-19171: Use after free in Media
• CVE-2026-19172: Use after free in Views
• CVE-2026-19173: Out of bounds write in Skia
• CVE-2026-19174: Integer overflow in V8
• CVE-2026-19175: Use after free in Payments
• CVE-2026-19176: Use after free in Skia
• CVE-2026-19177: Insufficient validation of untrusted input in UI

• chromium-151.0.7922.108-1.fc44

chromium-151.0.7922.108 security release fix 41 CVE

• CVE-2026-19137: Use after free in WebGL
• CVE-2026-19138: Heap buffer overflow in CrashReporting
• CVE-2026-19139: Race in CredentialProvider
• CVE-2026-19140: Use after free in GPU
• CVE-2026-19141: Use after free in Resources
• CVE-2026-19142: Use after free in Views
• CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
• CVE-2026-19144: Use after free in HTML
• CVE-2026-19145: Use after free in Translate
• CVE-2026-19146: Uninitialized Use in GPU
• CVE-2026-19147: Use after free in Aura
• CVE-2026-19148: Out of bounds write in GPU
• CVE-2026-19149: Use after free in Aura
• CVE-2026-19150: Inappropriate implementation in V8
• CVE-2026-19151: Use after free in V8
• CVE-2026-19152: Inappropriate implementation in Navigation
• CVE-2026-19153: Insufficient validation of untrusted input in Workers
• CVE-2026-19154: Use after free in Skia
• CVE-2026-19155: Use after free in Payments
• CVE-2026-19156: Heap buffer overflow in Base
• CVE-2026-19157: Out of bounds write in ANGLE
• CVE-2026-19158: Use after free in Views
• CVE-2026-19159: Use after free in Views
• CVE-2026-19160: Uninitialized Use in Skia
• CVE-2026-19161: Uninitialized Use in Skia
• CVE-2026-19162: Out of bounds write in V8
• CVE-2026-19163: Use after free in Media
• CVE-2026-19164: Insufficient validation of untrusted input in Codecs
• CVE-2026-19165: Use after free in Extensions
• CVE-2026-19166: Use after free in Web Authentication
• CVE-2026-19167: Integer overflow in GPU
• CVE-2026-19168: Inappropriate implementation in V8
• CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
• CVE-2026-19170: Use after free in WebGL
• CVE-2026-19171: Use after free in Media
• CVE-2026-19172: Use after free in Views
• CVE-2026-19173: Out of bounds write in Skia
• CVE-2026-19174: Integer overflow in V8
• CVE-2026-19175: Use after free in Payments
• CVE-2026-19176: Use after free in Skia
• CVE-2026-19177: Insufficient validation of untrusted input in UI

• emacs-30.2-27.fc44

This mitigates a vulnerability that allowed a specially crafted file to trigger execution of attacker-controlled arbitrary Emacs Lisp code immediately when the file is visited in Emacs (before the file's malicious contents are even displayed). https://debbugs.gnu.org/cgi/bugreport.cgi?bug=80574

• pdns-recursor-5.4.5-2.el10_3

Update to latest upstream version

• pdns-recursor-5.4.5-2.el10_2

Update to latest upstream version

• pdns-recursor-5.4.5-2.fc44

Update to latest upstream version

• pdns-recursor-5.2.13-1.fc43

Update to latest upstream version

• jrnl-4.6-1.fc43

Update to version 4.6: fixes GHSA-rhx6-37mm-5q9r and other bugs.

• jrnl-4.6-1.fc44

Update to version 4.6: fixes GHSA-rhx6-37mm-5q9r and other bugs.

• libgsasl-1.10.0-17.el10_2

Fix CVE-2026-48829

• libgsasl-1.10.0-17.el10_3

Fix CVE-2026-48829

• libgsasl-1.8.0-10.el8

Fix CVE-2026-48829

• libgsasl-1.10.0-17.el9

Fix CVE-2026-48829