Fedora Security Advisories

FEDORA-2026-a36bdff8d7 Packages in this update:

• doctl-1.164.0-1.fc43

Update description:

Update to 1.164.0

FEDORA-2026-7ca1b24b3c Packages in this update:

• doctl-1.164.0-1.fc44

Update description:

Update to 1.164.0

FEDORA-2026-8a09a7af63 Packages in this update:

• chromium-150.0.7871.186-1.fc43

Update description:

Update to 150.0.7871.186

* CVE-2026-16807: Out of bounds write in Codecs * CVE-2026-16806: Use after free in WebMCP * CVE-2026-16805: Use after free in Blink * CVE-2026-16804: Use after free in Input

FEDORA-EPEL-2026-a0f8efaf63 Packages in this update:

• chromium-150.0.7871.186-1.el10_2

Update description:

Update to 150.0.7871.186

* CVE-2026-16807: Out of bounds write in Codecs * CVE-2026-16806: Use after free in WebMCP * CVE-2026-16805: Use after free in Blink * CVE-2026-16804: Use after free in Input

FEDORA-EPEL-2026-78d19b7e32 Packages in this update:

• chromium-150.0.7871.186-1.el9

Update description:

Update to 150.0.7871.186

* CVE-2026-16807: Out of bounds write in Codecs * CVE-2026-16806: Use after free in WebMCP * CVE-2026-16805: Use after free in Blink * CVE-2026-16804: Use after free in Input

FEDORA-EPEL-2026-20a659f606 Packages in this update:

• chromium-150.0.7871.186-1.el10_3

Update description:

Update to 150.0.7871.186

* CVE-2026-16807: Out of bounds write in Codecs * CVE-2026-16806: Use after free in WebMCP * CVE-2026-16805: Use after free in Blink * CVE-2026-16804: Use after free in Input

FEDORA-2026-e48156418f Packages in this update:

• chromium-150.0.7871.186-1.fc44

Update description:

Update to 150.0.7871.186

* CVE-2026-16807: Out of bounds write in Codecs * CVE-2026-16806: Use after free in WebMCP * CVE-2026-16805: Use after free in Blink * CVE-2026-16804: Use after free in Input

FEDORA-EPEL-2026-33afcba8b1 Packages in this update:

• betterleaks-1.7.0-2.el10_2

Update description:

Update to 1.7.0

FEDORA-EPEL-2026-8c7f34abe0 Packages in this update:

• betterleaks-1.7.0-2.el10_3

Update description:

Update to 1.7.0

FEDORA-EPEL-2026-276b2f5cdc Packages in this update:

• betterleaks-1.7.0-2.el9

Update description:

Update to 1.7.0

FEDORA-EPEL-2026-a024e7aa84 Packages in this update:

• openssl3-3.5.5-5.el8

Update description:

Fix CVE-2026-31790, CVE-2026-28390, CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182

FEDORA-2026-12d6749851 Packages in this update:

• nebula-1.11.0-1.fc44

Update description:

Update to 1.11.0

FEDORA-EPEL-2026-1ef710a40b Packages in this update:

• borgbackup-1.4.5-1.el10_2

Update description:

new bugfix release, contains a fix for CVE-2026-62268

FEDORA-2026-5a13ef79cc Packages in this update:

• borgbackup-1.4.5-1.fc43

Update description:

new bugfix release, contains a fix for CVE-2026-62268

FEDORA-EPEL-2026-696e985feb Packages in this update:

• borgbackup-1.4.5-1.el10_3

Update description:

new bugfix release, contains a fix for CVE-2026-62268

FEDORA-2026-289c38d6f2 Packages in this update:

• systemd-258.10-1.fc43

Update description:

Latest upstream bugfix release.

FEDORA-2026-5cc233b0ea Packages in this update:

• borgbackup-1.4.5-1.fc44

Update description:

new bugfix release, contains a fix for CVE-2026-62268

FEDORA-EPEL-2026-397d87e12c Packages in this update:

• goaccess-1.11-1.el10_2

Update description:

Update to goaccess 1.11.

Notable fixes: - Fixed a heap buffer overflow when parsing malformed Opera user agents - Fixed an infinite loop while writing log parsing errors from multiple input files - Fixed unique visitor undercounting caused by key collisions - Fixed city lookups ignoring the City database when Country was listed first

Also includes: automatic crash-safe migration to storage format v3, ~20% lower storage memory usage and ~35% faster parsing, fullscreen geolocation map controls in the HTML report, and Traditional Chinese translation.

FEDORA-EPEL-2026-93554d5ab9 Packages in this update:

• goaccess-1.11-1.el10_3

Update description:

Update to goaccess 1.11.

Notable fixes: - Fixed a heap buffer overflow when parsing malformed Opera user agents - Fixed an infinite loop while writing log parsing errors from multiple input files - Fixed unique visitor undercounting caused by key collisions - Fixed city lookups ignoring the City database when Country was listed first

Also includes: automatic crash-safe migration to storage format v3, ~20% lower storage memory usage and ~35% faster parsing, fullscreen geolocation map controls in the HTML report, and Traditional Chinese translation.

FEDORA-EPEL-2026-dd8a644630 Packages in this update:

• goaccess-1.11-1.el9

Update description:

Update to goaccess 1.11.

Notable fixes: - Fixed a heap buffer overflow when parsing malformed Opera user agents - Fixed an infinite loop while writing log parsing errors from multiple input files - Fixed unique visitor undercounting caused by key collisions - Fixed city lookups ignoring the City database when Country was listed first

Also includes: automatic crash-safe migration to storage format v3, ~20% lower storage memory usage and ~35% faster parsing, fullscreen geolocation map controls in the HTML report, and Traditional Chinese translation.