Fedora Security Advisories

chromium-157.0.8103.78-1.fc44

Fedora Security Advisories
15 hours 55 minutes ago
FEDORA-2026-6216d41e0e Packages in this update:
  • chromium-157.0.8103.78-1.fc44
Update description:
  • This Update includes 83 security fixes
  • CVE-2026-126885: Use after free in ServiceWorker
  • CVE-2026-126895: Use after free in CSS
  • CVE-2026-126879: Use after free in Layout
  • CVE-2026-126846: Use after free in Skia
  • CVE-2026-126911: Use after free in Accessibility
  • CVE-2026-126864: Use after free in V8
  • CVE-2026-126889: Off-by-one error in V8
  • CVE-2026-126859: Link following in FileSystem
  • CVE-2026-126886: Use after free in Frames
  • CVE-2026-126887: Use after free in Animation
  • CVE-2026-126870: Uninitialized resource in ANGLE
  • CVE-2026-126912: Buffer overflow in Skia
  • CVE-2026-126919: Use after free in BrowserTag
  • CVE-2026-126878: Information leak in Core
  • CVE-2026-126909: Use after free in Passwords
  • CVE-2026-126847: Type confusion in V8
  • CVE-2026-126853: Uninitialized resource in Skia
  • CVE-2026-126865: Use after free in DOM
  • CVE-2026-126916: Integer overflow in V8
  • CVE-2026-126903: Improper state validation in ANGLE
  • CVE-2026-126910: Type confusion in V8
  • CVE-2026-126842: Use after free in ANGLE
  • CVE-2026-126898: Uninitialized resource in Skia
  • CVE-2026-126871: Out of bounds read in Skia
  • CVE-2026-126875: Missing authorization in V8
  • CVE-2026-126862: Improper input validation in Core
  • CVE-2026-126900: Use after free in CSS
  • CVE-2026-126904: Use after free in Compositing
  • CVE-2026-126907: Uninitialized resource in Media
  • CVE-2026-126851: Use after free in Accessibility
  • CVE-2026-126845: Uninitialized resource in GPU
  • CVE-2026-126881: Improper initialization in Media
  • CVE-2026-126867: Use after free in Browser
  • CVE-2026-126863: Use after free in HTML
  • CVE-2026-126896: Missing authorization in V8
  • CVE-2026-126869: Use after free in Frames
  • CVE-2026-126858: Uninitialized resource in ANGLE
  • CVE-2026-126891: Use after free in V8
  • CVE-2026-126874: Type confusion in V8
  • CVE-2026-126876: Integer overflow in Skia
  • CVE-2026-126918: Use after free in Layout
  • CVE-2026-126866: Incorrect authorization in Extensions
  • CVE-2026-126844: Uninitialized resource in Skia
  • CVE-2026-126884: Out of bounds read in Skia
  • CVE-2026-126894: Out of bounds read in Skia
  • CVE-2026-126861: Use after free in Media
  • CVE-2026-126917: Memory corruption in V8
  • CVE-2026-126856: Incomplete cleanup in Cache
  • CVE-2026-126905: Incomplete cleanup in V8
  • CVE-2026-126873: Use after free in Extensions
  • CVE-2026-126922: Out of bounds read in Skia
  • CVE-2026-126914: Uninitialized resource in Skia
  • CVE-2026-126880: Type confusion in V8
  • CVE-2026-126872: Incorrect authorization in FileSystem
  • CVE-2026-126877: Use after free in Dawn
  • CVE-2026-126888: Buffer overflow in Turbolev
  • CVE-2026-126843: Type confusion in Turbolev
  • CVE-2026-126854: Incorrect authorization in Layout
  • CVE-2026-126892: Use after free in MediaStream
  • CVE-2026-126897: Type confusion in V8
  • CVE-2026-126857: Out of bounds read in Skia
  • CVE-2026-126883: Use after free in Core
  • CVE-2026-126840: Out of bounds write in Network
  • CVE-2026-126848: Uninitialized resource in Skia
  • CVE-2026-126882: Information leak in Skia
  • CVE-2026-126906: Race condition in Extensions
  • CVE-2026-126915: Use of uninitialized variable in Skia
  • CVE-2026-126893: Out of bounds write in V8
  • CVE-2026-126855: Missing authorization in ImageCapture
  • CVE-2026-126908: Type confusion in V8
  • CVE-2026-126849: Type confusion in V8
  • CVE-2026-126901: Use after free in PDF
  • CVE-2026-126852: Use after free in MediaStream
  • CVE-2026-126850: Incorrect authorization in SiteIsolation
  • CVE-2026-126841: Out of bounds read in Skia
  • CVE-2026-126902: Incorrect reference resolution in Browser
  • CVE-2026-126868: Type confusion in V8
  • CVE-2026-126921: Use after free in Accessibility
  • CVE-2026-126913: Out of bounds read in Compositing
  • CVE-2026-126890: Out of bounds read in Media
  • CVE-2026-126860: Incorrect authorization in FileSystem
  • CVE-2026-126920: Information leak in Skia
  • CVE-2026-126899: Use after free in Elements

chromium-157.0.8103.78-1.fc43

Fedora Security Advisories
15 hours 55 minutes ago
FEDORA-2026-a6bc484842 Packages in this update:
  • chromium-157.0.8103.78-1.fc43
Update description:
  • This Update includes 83 security fixes
  • CVE-2026-126885: Use after free in ServiceWorker
  • CVE-2026-126895: Use after free in CSS
  • CVE-2026-126879: Use after free in Layout
  • CVE-2026-126846: Use after free in Skia
  • CVE-2026-126911: Use after free in Accessibility
  • CVE-2026-126864: Use after free in V8
  • CVE-2026-126889: Off-by-one error in V8
  • CVE-2026-126859: Link following in FileSystem
  • CVE-2026-126886: Use after free in Frames
  • CVE-2026-126887: Use after free in Animation
  • CVE-2026-126870: Uninitialized resource in ANGLE
  • CVE-2026-126912: Buffer overflow in Skia
  • CVE-2026-126919: Use after free in BrowserTag
  • CVE-2026-126878: Information leak in Core
  • CVE-2026-126909: Use after free in Passwords
  • CVE-2026-126847: Type confusion in V8
  • CVE-2026-126853: Uninitialized resource in Skia
  • CVE-2026-126865: Use after free in DOM
  • CVE-2026-126916: Integer overflow in V8
  • CVE-2026-126903: Improper state validation in ANGLE
  • CVE-2026-126910: Type confusion in V8
  • CVE-2026-126842: Use after free in ANGLE
  • CVE-2026-126898: Uninitialized resource in Skia
  • CVE-2026-126871: Out of bounds read in Skia
  • CVE-2026-126875: Missing authorization in V8
  • CVE-2026-126862: Improper input validation in Core
  • CVE-2026-126900: Use after free in CSS
  • CVE-2026-126904: Use after free in Compositing
  • CVE-2026-126907: Uninitialized resource in Media
  • CVE-2026-126851: Use after free in Accessibility
  • CVE-2026-126845: Uninitialized resource in GPU
  • CVE-2026-126881: Improper initialization in Media
  • CVE-2026-126867: Use after free in Browser
  • CVE-2026-126863: Use after free in HTML
  • CVE-2026-126896: Missing authorization in V8
  • CVE-2026-126869: Use after free in Frames
  • CVE-2026-126858: Uninitialized resource in ANGLE
  • CVE-2026-126891: Use after free in V8
  • CVE-2026-126874: Type confusion in V8
  • CVE-2026-126876: Integer overflow in Skia
  • CVE-2026-126918: Use after free in Layout
  • CVE-2026-126866: Incorrect authorization in Extensions
  • CVE-2026-126844: Uninitialized resource in Skia
  • CVE-2026-126884: Out of bounds read in Skia
  • CVE-2026-126894: Out of bounds read in Skia
  • CVE-2026-126861: Use after free in Media
  • CVE-2026-126917: Memory corruption in V8
  • CVE-2026-126856: Incomplete cleanup in Cache
  • CVE-2026-126905: Incomplete cleanup in V8
  • CVE-2026-126873: Use after free in Extensions
  • CVE-2026-126922: Out of bounds read in Skia
  • CVE-2026-126914: Uninitialized resource in Skia
  • CVE-2026-126880: Type confusion in V8
  • CVE-2026-126872: Incorrect authorization in FileSystem
  • CVE-2026-126877: Use after free in Dawn
  • CVE-2026-126888: Buffer overflow in Turbolev
  • CVE-2026-126843: Type confusion in Turbolev
  • CVE-2026-126854: Incorrect authorization in Layout
  • CVE-2026-126892: Use after free in MediaStream
  • CVE-2026-126897: Type confusion in V8
  • CVE-2026-126857: Out of bounds read in Skia
  • CVE-2026-126883: Use after free in Core
  • CVE-2026-126840: Out of bounds write in Network
  • CVE-2026-126848: Uninitialized resource in Skia
  • CVE-2026-126882: Information leak in Skia
  • CVE-2026-126906: Race condition in Extensions
  • CVE-2026-126915: Use of uninitialized variable in Skia
  • CVE-2026-126893: Out of bounds write in V8
  • CVE-2026-126855: Missing authorization in ImageCapture
  • CVE-2026-126908: Type confusion in V8
  • CVE-2026-126849: Type confusion in V8
  • CVE-2026-126901: Use after free in PDF
  • CVE-2026-126852: Use after free in MediaStream
  • CVE-2026-126850: Incorrect authorization in SiteIsolation
  • CVE-2026-126841: Out of bounds read in Skia
  • CVE-2026-126902: Incorrect reference resolution in Browser
  • CVE-2026-126868: Type confusion in V8
  • CVE-2026-126921: Use after free in Accessibility
  • CVE-2026-126913: Out of bounds read in Compositing
  • CVE-2026-126890: Out of bounds read in Media
  • CVE-2026-126860: Incorrect authorization in FileSystem
  • CVE-2026-126920: Information leak in Skia
  • CVE-2026-126899: Use after free in Elements

chromium-157.0.8103.78-1.el10_3

Fedora Security Advisories
15 hours 55 minutes ago
FEDORA-EPEL-2026-7a08efe121 Packages in this update:
  • chromium-157.0.8103.78-1.el10_3
Update description:
  • This Update includes 83 security fixes
  • CVE-2026-126885: Use after free in ServiceWorker
  • CVE-2026-126895: Use after free in CSS
  • CVE-2026-126879: Use after free in Layout
  • CVE-2026-126846: Use after free in Skia
  • CVE-2026-126911: Use after free in Accessibility
  • CVE-2026-126864: Use after free in V8
  • CVE-2026-126889: Off-by-one error in V8
  • CVE-2026-126859: Link following in FileSystem
  • CVE-2026-126886: Use after free in Frames
  • CVE-2026-126887: Use after free in Animation
  • CVE-2026-126870: Uninitialized resource in ANGLE
  • CVE-2026-126912: Buffer overflow in Skia
  • CVE-2026-126919: Use after free in BrowserTag
  • CVE-2026-126878: Information leak in Core
  • CVE-2026-126909: Use after free in Passwords
  • CVE-2026-126847: Type confusion in V8
  • CVE-2026-126853: Uninitialized resource in Skia
  • CVE-2026-126865: Use after free in DOM
  • CVE-2026-126916: Integer overflow in V8
  • CVE-2026-126903: Improper state validation in ANGLE
  • CVE-2026-126910: Type confusion in V8
  • CVE-2026-126842: Use after free in ANGLE
  • CVE-2026-126898: Uninitialized resource in Skia
  • CVE-2026-126871: Out of bounds read in Skia
  • CVE-2026-126875: Missing authorization in V8
  • CVE-2026-126862: Improper input validation in Core
  • CVE-2026-126900: Use after free in CSS
  • CVE-2026-126904: Use after free in Compositing
  • CVE-2026-126907: Uninitialized resource in Media
  • CVE-2026-126851: Use after free in Accessibility
  • CVE-2026-126845: Uninitialized resource in GPU
  • CVE-2026-126881: Improper initialization in Media
  • CVE-2026-126867: Use after free in Browser
  • CVE-2026-126863: Use after free in HTML
  • CVE-2026-126896: Missing authorization in V8
  • CVE-2026-126869: Use after free in Frames
  • CVE-2026-126858: Uninitialized resource in ANGLE
  • CVE-2026-126891: Use after free in V8
  • CVE-2026-126874: Type confusion in V8
  • CVE-2026-126876: Integer overflow in Skia
  • CVE-2026-126918: Use after free in Layout
  • CVE-2026-126866: Incorrect authorization in Extensions
  • CVE-2026-126844: Uninitialized resource in Skia
  • CVE-2026-126884: Out of bounds read in Skia
  • CVE-2026-126894: Out of bounds read in Skia
  • CVE-2026-126861: Use after free in Media
  • CVE-2026-126917: Memory corruption in V8
  • CVE-2026-126856: Incomplete cleanup in Cache
  • CVE-2026-126905: Incomplete cleanup in V8
  • CVE-2026-126873: Use after free in Extensions
  • CVE-2026-126922: Out of bounds read in Skia
  • CVE-2026-126914: Uninitialized resource in Skia
  • CVE-2026-126880: Type confusion in V8
  • CVE-2026-126872: Incorrect authorization in FileSystem
  • CVE-2026-126877: Use after free in Dawn
  • CVE-2026-126888: Buffer overflow in Turbolev
  • CVE-2026-126843: Type confusion in Turbolev
  • CVE-2026-126854: Incorrect authorization in Layout
  • CVE-2026-126892: Use after free in MediaStream
  • CVE-2026-126897: Type confusion in V8
  • CVE-2026-126857: Out of bounds read in Skia
  • CVE-2026-126883: Use after free in Core
  • CVE-2026-126840: Out of bounds write in Network
  • CVE-2026-126848: Uninitialized resource in Skia
  • CVE-2026-126882: Information leak in Skia
  • CVE-2026-126906: Race condition in Extensions
  • CVE-2026-126915: Use of uninitialized variable in Skia
  • CVE-2026-126893: Out of bounds write in V8
  • CVE-2026-126855: Missing authorization in ImageCapture
  • CVE-2026-126908: Type confusion in V8
  • CVE-2026-126849: Type confusion in V8
  • CVE-2026-126901: Use after free in PDF
  • CVE-2026-126852: Use after free in MediaStream
  • CVE-2026-126850: Incorrect authorization in SiteIsolation
  • CVE-2026-126841: Out of bounds read in Skia
  • CVE-2026-126902: Incorrect reference resolution in Browser
  • CVE-2026-126868: Type confusion in V8
  • CVE-2026-126921: Use after free in Accessibility
  • CVE-2026-126913: Out of bounds read in Compositing
  • CVE-2026-126890: Out of bounds read in Media
  • CVE-2026-126860: Incorrect authorization in FileSystem
  • CVE-2026-126920: Information leak in Skia
  • CVE-2026-126899: Use after free in Elements

chromium-157.0.8103.78-1.el10_4

Fedora Security Advisories
15 hours 55 minutes ago
FEDORA-EPEL-2026-9103cd9fef Packages in this update:
  • chromium-157.0.8103.78-1.el10_4
Update description:
  • This Update includes 83 security fixes
  • CVE-2026-126885: Use after free in ServiceWorker
  • CVE-2026-126895: Use after free in CSS
  • CVE-2026-126879: Use after free in Layout
  • CVE-2026-126846: Use after free in Skia
  • CVE-2026-126911: Use after free in Accessibility
  • CVE-2026-126864: Use after free in V8
  • CVE-2026-126889: Off-by-one error in V8
  • CVE-2026-126859: Link following in FileSystem
  • CVE-2026-126886: Use after free in Frames
  • CVE-2026-126887: Use after free in Animation
  • CVE-2026-126870: Uninitialized resource in ANGLE
  • CVE-2026-126912: Buffer overflow in Skia
  • CVE-2026-126919: Use after free in BrowserTag
  • CVE-2026-126878: Information leak in Core
  • CVE-2026-126909: Use after free in Passwords
  • CVE-2026-126847: Type confusion in V8
  • CVE-2026-126853: Uninitialized resource in Skia
  • CVE-2026-126865: Use after free in DOM
  • CVE-2026-126916: Integer overflow in V8
  • CVE-2026-126903: Improper state validation in ANGLE
  • CVE-2026-126910: Type confusion in V8
  • CVE-2026-126842: Use after free in ANGLE
  • CVE-2026-126898: Uninitialized resource in Skia
  • CVE-2026-126871: Out of bounds read in Skia
  • CVE-2026-126875: Missing authorization in V8
  • CVE-2026-126862: Improper input validation in Core
  • CVE-2026-126900: Use after free in CSS
  • CVE-2026-126904: Use after free in Compositing
  • CVE-2026-126907: Uninitialized resource in Media
  • CVE-2026-126851: Use after free in Accessibility
  • CVE-2026-126845: Uninitialized resource in GPU
  • CVE-2026-126881: Improper initialization in Media
  • CVE-2026-126867: Use after free in Browser
  • CVE-2026-126863: Use after free in HTML
  • CVE-2026-126896: Missing authorization in V8
  • CVE-2026-126869: Use after free in Frames
  • CVE-2026-126858: Uninitialized resource in ANGLE
  • CVE-2026-126891: Use after free in V8
  • CVE-2026-126874: Type confusion in V8
  • CVE-2026-126876: Integer overflow in Skia
  • CVE-2026-126918: Use after free in Layout
  • CVE-2026-126866: Incorrect authorization in Extensions
  • CVE-2026-126844: Uninitialized resource in Skia
  • CVE-2026-126884: Out of bounds read in Skia
  • CVE-2026-126894: Out of bounds read in Skia
  • CVE-2026-126861: Use after free in Media
  • CVE-2026-126917: Memory corruption in V8
  • CVE-2026-126856: Incomplete cleanup in Cache
  • CVE-2026-126905: Incomplete cleanup in V8
  • CVE-2026-126873: Use after free in Extensions
  • CVE-2026-126922: Out of bounds read in Skia
  • CVE-2026-126914: Uninitialized resource in Skia
  • CVE-2026-126880: Type confusion in V8
  • CVE-2026-126872: Incorrect authorization in FileSystem
  • CVE-2026-126877: Use after free in Dawn
  • CVE-2026-126888: Buffer overflow in Turbolev
  • CVE-2026-126843: Type confusion in Turbolev
  • CVE-2026-126854: Incorrect authorization in Layout
  • CVE-2026-126892: Use after free in MediaStream
  • CVE-2026-126897: Type confusion in V8
  • CVE-2026-126857: Out of bounds read in Skia
  • CVE-2026-126883: Use after free in Core
  • CVE-2026-126840: Out of bounds write in Network
  • CVE-2026-126848: Uninitialized resource in Skia
  • CVE-2026-126882: Information leak in Skia
  • CVE-2026-126906: Race condition in Extensions
  • CVE-2026-126915: Use of uninitialized variable in Skia
  • CVE-2026-126893: Out of bounds write in V8
  • CVE-2026-126855: Missing authorization in ImageCapture
  • CVE-2026-126908: Type confusion in V8
  • CVE-2026-126849: Type confusion in V8
  • CVE-2026-126901: Use after free in PDF
  • CVE-2026-126852: Use after free in MediaStream
  • CVE-2026-126850: Incorrect authorization in SiteIsolation
  • CVE-2026-126841: Out of bounds read in Skia
  • CVE-2026-126902: Incorrect reference resolution in Browser
  • CVE-2026-126868: Type confusion in V8
  • CVE-2026-126921: Use after free in Accessibility
  • CVE-2026-126913: Out of bounds read in Compositing
  • CVE-2026-126890: Out of bounds read in Media
  • CVE-2026-126860: Incorrect authorization in FileSystem
  • CVE-2026-126920: Information leak in Skia
  • CVE-2026-126899: Use after free in Elements

chromium-157.0.8103.78-1.fc45

Fedora Security Advisories
15 hours 55 minutes ago
FEDORA-2026-b51236ac2d Packages in this update:
  • chromium-157.0.8103.78-1.fc45
Update description:
  • This Update includes 83 security fixes
  • CVE-2026-126885: Use after free in ServiceWorker
  • CVE-2026-126895: Use after free in CSS
  • CVE-2026-126879: Use after free in Layout
  • CVE-2026-126846: Use after free in Skia
  • CVE-2026-126911: Use after free in Accessibility
  • CVE-2026-126864: Use after free in V8
  • CVE-2026-126889: Off-by-one error in V8
  • CVE-2026-126859: Link following in FileSystem
  • CVE-2026-126886: Use after free in Frames
  • CVE-2026-126887: Use after free in Animation
  • CVE-2026-126870: Uninitialized resource in ANGLE
  • CVE-2026-126912: Buffer overflow in Skia
  • CVE-2026-126919: Use after free in BrowserTag
  • CVE-2026-126878: Information leak in Core
  • CVE-2026-126909: Use after free in Passwords
  • CVE-2026-126847: Type confusion in V8
  • CVE-2026-126853: Uninitialized resource in Skia
  • CVE-2026-126865: Use after free in DOM
  • CVE-2026-126916: Integer overflow in V8
  • CVE-2026-126903: Improper state validation in ANGLE
  • CVE-2026-126910: Type confusion in V8
  • CVE-2026-126842: Use after free in ANGLE
  • CVE-2026-126898: Uninitialized resource in Skia
  • CVE-2026-126871: Out of bounds read in Skia
  • CVE-2026-126875: Missing authorization in V8
  • CVE-2026-126862: Improper input validation in Core
  • CVE-2026-126900: Use after free in CSS
  • CVE-2026-126904: Use after free in Compositing
  • CVE-2026-126907: Uninitialized resource in Media
  • CVE-2026-126851: Use after free in Accessibility
  • CVE-2026-126845: Uninitialized resource in GPU
  • CVE-2026-126881: Improper initialization in Media
  • CVE-2026-126867: Use after free in Browser
  • CVE-2026-126863: Use after free in HTML
  • CVE-2026-126896: Missing authorization in V8
  • CVE-2026-126869: Use after free in Frames
  • CVE-2026-126858: Uninitialized resource in ANGLE
  • CVE-2026-126891: Use after free in V8
  • CVE-2026-126874: Type confusion in V8
  • CVE-2026-126876: Integer overflow in Skia
  • CVE-2026-126918: Use after free in Layout
  • CVE-2026-126866: Incorrect authorization in Extensions
  • CVE-2026-126844: Uninitialized resource in Skia
  • CVE-2026-126884: Out of bounds read in Skia
  • CVE-2026-126894: Out of bounds read in Skia
  • CVE-2026-126861: Use after free in Media
  • CVE-2026-126917: Memory corruption in V8
  • CVE-2026-126856: Incomplete cleanup in Cache
  • CVE-2026-126905: Incomplete cleanup in V8
  • CVE-2026-126873: Use after free in Extensions
  • CVE-2026-126922: Out of bounds read in Skia
  • CVE-2026-126914: Uninitialized resource in Skia
  • CVE-2026-126880: Type confusion in V8
  • CVE-2026-126872: Incorrect authorization in FileSystem
  • CVE-2026-126877: Use after free in Dawn
  • CVE-2026-126888: Buffer overflow in Turbolev
  • CVE-2026-126843: Type confusion in Turbolev
  • CVE-2026-126854: Incorrect authorization in Layout
  • CVE-2026-126892: Use after free in MediaStream
  • CVE-2026-126897: Type confusion in V8
  • CVE-2026-126857: Out of bounds read in Skia
  • CVE-2026-126883: Use after free in Core
  • CVE-2026-126840: Out of bounds write in Network
  • CVE-2026-126848: Uninitialized resource in Skia
  • CVE-2026-126882: Information leak in Skia
  • CVE-2026-126906: Race condition in Extensions
  • CVE-2026-126915: Use of uninitialized variable in Skia
  • CVE-2026-126893: Out of bounds write in V8
  • CVE-2026-126855: Missing authorization in ImageCapture
  • CVE-2026-126908: Type confusion in V8
  • CVE-2026-126849: Type confusion in V8
  • CVE-2026-126901: Use after free in PDF
  • CVE-2026-126852: Use after free in MediaStream
  • CVE-2026-126850: Incorrect authorization in SiteIsolation
  • CVE-2026-126841: Out of bounds read in Skia
  • CVE-2026-126902: Incorrect reference resolution in Browser
  • CVE-2026-126868: Type confusion in V8
  • CVE-2026-126921: Use after free in Accessibility
  • CVE-2026-126913: Out of bounds read in Compositing
  • CVE-2026-126890: Out of bounds read in Media
  • CVE-2026-126860: Incorrect authorization in FileSystem
  • CVE-2026-126920: Information leak in Skia
  • CVE-2026-126899: Use after free in Elements

chromium-157.0.8103.78-1.el9

Fedora Security Advisories
15 hours 55 minutes ago
FEDORA-EPEL-2026-090a6abd8f Packages in this update:
  • chromium-157.0.8103.78-1.el9
Update description:
  • This Update includes 83 security fixes
  • CVE-2026-126885: Use after free in ServiceWorker
  • CVE-2026-126895: Use after free in CSS
  • CVE-2026-126879: Use after free in Layout
  • CVE-2026-126846: Use after free in Skia
  • CVE-2026-126911: Use after free in Accessibility
  • CVE-2026-126864: Use after free in V8
  • CVE-2026-126889: Off-by-one error in V8
  • CVE-2026-126859: Link following in FileSystem
  • CVE-2026-126886: Use after free in Frames
  • CVE-2026-126887: Use after free in Animation
  • CVE-2026-126870: Uninitialized resource in ANGLE
  • CVE-2026-126912: Buffer overflow in Skia
  • CVE-2026-126919: Use after free in BrowserTag
  • CVE-2026-126878: Information leak in Core
  • CVE-2026-126909: Use after free in Passwords
  • CVE-2026-126847: Type confusion in V8
  • CVE-2026-126853: Uninitialized resource in Skia
  • CVE-2026-126865: Use after free in DOM
  • CVE-2026-126916: Integer overflow in V8
  • CVE-2026-126903: Improper state validation in ANGLE
  • CVE-2026-126910: Type confusion in V8
  • CVE-2026-126842: Use after free in ANGLE
  • CVE-2026-126898: Uninitialized resource in Skia
  • CVE-2026-126871: Out of bounds read in Skia
  • CVE-2026-126875: Missing authorization in V8
  • CVE-2026-126862: Improper input validation in Core
  • CVE-2026-126900: Use after free in CSS
  • CVE-2026-126904: Use after free in Compositing
  • CVE-2026-126907: Uninitialized resource in Media
  • CVE-2026-126851: Use after free in Accessibility
  • CVE-2026-126845: Uninitialized resource in GPU
  • CVE-2026-126881: Improper initialization in Media
  • CVE-2026-126867: Use after free in Browser
  • CVE-2026-126863: Use after free in HTML
  • CVE-2026-126896: Missing authorization in V8
  • CVE-2026-126869: Use after free in Frames
  • CVE-2026-126858: Uninitialized resource in ANGLE
  • CVE-2026-126891: Use after free in V8
  • CVE-2026-126874: Type confusion in V8
  • CVE-2026-126876: Integer overflow in Skia
  • CVE-2026-126918: Use after free in Layout
  • CVE-2026-126866: Incorrect authorization in Extensions
  • CVE-2026-126844: Uninitialized resource in Skia
  • CVE-2026-126884: Out of bounds read in Skia
  • CVE-2026-126894: Out of bounds read in Skia
  • CVE-2026-126861: Use after free in Media
  • CVE-2026-126917: Memory corruption in V8
  • CVE-2026-126856: Incomplete cleanup in Cache
  • CVE-2026-126905: Incomplete cleanup in V8
  • CVE-2026-126873: Use after free in Extensions
  • CVE-2026-126922: Out of bounds read in Skia
  • CVE-2026-126914: Uninitialized resource in Skia
  • CVE-2026-126880: Type confusion in V8
  • CVE-2026-126872: Incorrect authorization in FileSystem
  • CVE-2026-126877: Use after free in Dawn
  • CVE-2026-126888: Buffer overflow in Turbolev
  • CVE-2026-126843: Type confusion in Turbolev
  • CVE-2026-126854: Incorrect authorization in Layout
  • CVE-2026-126892: Use after free in MediaStream
  • CVE-2026-126897: Type confusion in V8
  • CVE-2026-126857: Out of bounds read in Skia
  • CVE-2026-126883: Use after free in Core
  • CVE-2026-126840: Out of bounds write in Network
  • CVE-2026-126848: Uninitialized resource in Skia
  • CVE-2026-126882: Information leak in Skia
  • CVE-2026-126906: Race condition in Extensions
  • CVE-2026-126915: Use of uninitialized variable in Skia
  • CVE-2026-126893: Out of bounds write in V8
  • CVE-2026-126855: Missing authorization in ImageCapture
  • CVE-2026-126908: Type confusion in V8
  • CVE-2026-126849: Type confusion in V8
  • CVE-2026-126901: Use after free in PDF
  • CVE-2026-126852: Use after free in MediaStream
  • CVE-2026-126850: Incorrect authorization in SiteIsolation
  • CVE-2026-126841: Out of bounds read in Skia
  • CVE-2026-126902: Incorrect reference resolution in Browser
  • CVE-2026-126868: Type confusion in V8
  • CVE-2026-126921: Use after free in Accessibility
  • CVE-2026-126913: Out of bounds read in Compositing
  • CVE-2026-126890: Out of bounds read in Media
  • CVE-2026-126860: Incorrect authorization in FileSystem
  • CVE-2026-126920: Information leak in Skia
  • CVE-2026-126899: Use after free in Elements

mimedefang-3.7.3-1.fc44

Fedora Security Advisories
19 hours 48 minutes ago
FEDORA-2026-33df41eb7a Packages in this update:
  • mimedefang-3.7.3-1.fc44
Update description: MIMEDefang 3.7.3
  • fix build on CPAN
MIMEDefang 3.7.2 Security
  • CVE-2026-120211 - PID file symlink following (privileged file overwrite).
  • CVE-2026-120304 - anonymize_uri() regular expression denial of service.
  • CVE-2026-120305 - md_spf_verify()/md_authres() regular expression denial of service.
  • Header injection hardening: header names and values that the filter returns are now validated before they are passed to the MTA. Invalid header names are logged and dropped.
  • MTA-STS (RFC 8461): policy fetches now allow HTTPS only, follow no redirects and stop at 64 KB and the domain is validated before it is used in the policy URL.
Bug fixes and improvements
  • re_match_in_7zip_directory: correctly parses listings of solid archives, skips directory entries and no longer hangs on archives with encrypted headers.
  • re_match_in_rar_directory: the file list is now read up to the closing separator.
  • Mail::MIMEDefang::Async: faster parsing of the SpamAssassin X-Spam-Status header.
  • Mail::MIMEDefang::Net: improve ipv6 checks.

mimedefang-3.7.3-1.el10_3

Fedora Security Advisories
19 hours 48 minutes ago
FEDORA-EPEL-2026-c7924505e9 Packages in this update:
  • mimedefang-3.7.3-1.el10_3
Update description: MIMEDefang 3.7.3
  • fix build on CPAN
MIMEDefang 3.7.2 Security
  • CVE-2026-120211 - PID file symlink following (privileged file overwrite).
  • CVE-2026-120304 - anonymize_uri() regular expression denial of service.
  • CVE-2026-120305 - md_spf_verify()/md_authres() regular expression denial of service.
  • Header injection hardening: header names and values that the filter returns are now validated before they are passed to the MTA. Invalid header names are logged and dropped.
  • MTA-STS (RFC 8461): policy fetches now allow HTTPS only, follow no redirects and stop at 64 KB and the domain is validated before it is used in the policy URL.
Bug fixes and improvements
  • re_match_in_7zip_directory: correctly parses listings of solid archives, skips directory entries and no longer hangs on archives with encrypted headers.
  • re_match_in_rar_directory: the file list is now read up to the closing separator.
  • Mail::MIMEDefang::Async: faster parsing of the SpamAssassin X-Spam-Status header.
  • Mail::MIMEDefang::Net: improve ipv6 checks.

mimedefang-3.7.3-1.fc45

Fedora Security Advisories
19 hours 48 minutes ago
FEDORA-2026-f5d90a5819 Packages in this update:
  • mimedefang-3.7.3-1.fc45
Update description: MIMEDefang 3.7.3
  • fix build on CPAN
MIMEDefang 3.7.2 Security
  • CVE-2026-120211 - PID file symlink following (privileged file overwrite).
  • CVE-2026-120304 - anonymize_uri() regular expression denial of service.
  • CVE-2026-120305 - md_spf_verify()/md_authres() regular expression denial of service.
  • Header injection hardening: header names and values that the filter returns are now validated before they are passed to the MTA. Invalid header names are logged and dropped.
  • MTA-STS (RFC 8461): policy fetches now allow HTTPS only, follow no redirects and stop at 64 KB and the domain is validated before it is used in the policy URL.
Bug fixes and improvements
  • re_match_in_7zip_directory: correctly parses listings of solid archives, skips directory entries and no longer hangs on archives with encrypted headers.
  • re_match_in_rar_directory: the file list is now read up to the closing separator.
  • Mail::MIMEDefang::Async: faster parsing of the SpamAssassin X-Spam-Status header.
  • Mail::MIMEDefang::Net: improve ipv6 checks.

mimedefang-3.7.3-1.fc43

Fedora Security Advisories
19 hours 48 minutes ago
FEDORA-2026-542ebc61eb Packages in this update:
  • mimedefang-3.7.3-1.fc43
Update description: MIMEDefang 3.7.3
  • fix build on CPAN
MIMEDefang 3.7.2 Security
  • CVE-2026-120211 - PID file symlink following (privileged file overwrite).
  • CVE-2026-120304 - anonymize_uri() regular expression denial of service.
  • CVE-2026-120305 - md_spf_verify()/md_authres() regular expression denial of service.
  • Header injection hardening: header names and values that the filter returns are now validated before they are passed to the MTA. Invalid header names are logged and dropped.
  • MTA-STS (RFC 8461): policy fetches now allow HTTPS only, follow no redirects and stop at 64 KB and the domain is validated before it is used in the policy URL.
Bug fixes and improvements
  • re_match_in_7zip_directory: correctly parses listings of solid archives, skips directory entries and no longer hangs on archives with encrypted headers.
  • re_match_in_rar_directory: the file list is now read up to the closing separator.
  • Mail::MIMEDefang::Async: faster parsing of the SpamAssassin X-Spam-Status header.
  • Mail::MIMEDefang::Net: improve ipv6 checks.

mimedefang-3.7.3-1.el9

Fedora Security Advisories
19 hours 48 minutes ago
FEDORA-EPEL-2026-dfd6652507 Packages in this update:
  • mimedefang-3.7.3-1.el9
Update description: MIMEDefang 3.7.3
  • fix build on CPAN
MIMEDefang 3.7.2 Security
  • CVE-2026-120211 - PID file symlink following (privileged file overwrite).
  • CVE-2026-120304 - anonymize_uri() regular expression denial of service.
  • CVE-2026-120305 - md_spf_verify()/md_authres() regular expression denial of service.
  • Header injection hardening: header names and values that the filter returns are now validated before they are passed to the MTA. Invalid header names are logged and dropped.
  • MTA-STS (RFC 8461): policy fetches now allow HTTPS only, follow no redirects and stop at 64 KB and the domain is validated before it is used in the policy URL.
Bug fixes and improvements
  • re_match_in_7zip_directory: correctly parses listings of solid archives, skips directory entries and no longer hangs on archives with encrypted headers.
  • re_match_in_rar_directory: the file list is now read up to the closing separator.
  • Mail::MIMEDefang::Async: faster parsing of the SpamAssassin X-Spam-Status header.
  • Mail::MIMEDefang::Net: improve ipv6 checks.

mimedefang-3.7.3-1.el10_4

Fedora Security Advisories
19 hours 48 minutes ago
FEDORA-EPEL-2026-686bfc01ab Packages in this update:
  • mimedefang-3.7.3-1.el10_4
Update description: MIMEDefang 3.7.3
  • fix build on CPAN
MIMEDefang 3.7.2 Security
  • CVE-2026-120211 - PID file symlink following (privileged file overwrite).
  • CVE-2026-120304 - anonymize_uri() regular expression denial of service.
  • CVE-2026-120305 - md_spf_verify()/md_authres() regular expression denial of service.
  • Header injection hardening: header names and values that the filter returns are now validated before they are passed to the MTA. Invalid header names are logged and dropped.
  • MTA-STS (RFC 8461): policy fetches now allow HTTPS only, follow no redirects and stop at 64 KB and the domain is validated before it is used in the policy URL.
Bug fixes and improvements
  • re_match_in_7zip_directory: correctly parses listings of solid archives, skips directory entries and no longer hangs on archives with encrypted headers.
  • re_match_in_rar_directory: the file list is now read up to the closing separator.
  • Mail::MIMEDefang::Async: faster parsing of the SpamAssassin X-Spam-Status header.
  • Mail::MIMEDefang::Net: improve ipv6 checks.

mimedefang-3.7.3-1.el8

Fedora Security Advisories
19 hours 48 minutes ago
FEDORA-EPEL-2026-731d033269 Packages in this update:
  • mimedefang-3.7.3-1.el8
Update description: MIMEDefang 3.7.3
  • fix build on CPAN
MIMEDefang 3.7.2 Security
  • CVE-2026-120211 - PID file symlink following (privileged file overwrite).
  • CVE-2026-120304 - anonymize_uri() regular expression denial of service.
  • CVE-2026-120305 - md_spf_verify()/md_authres() regular expression denial of service.
  • Header injection hardening: header names and values that the filter returns are now validated before they are passed to the MTA. Invalid header names are logged and dropped.
  • MTA-STS (RFC 8461): policy fetches now allow HTTPS only, follow no redirects and stop at 64 KB and the domain is validated before it is used in the policy URL.
Bug fixes and improvements
  • re_match_in_7zip_directory: correctly parses listings of solid archives, skips directory entries and no longer hangs on archives with encrypted headers.
  • re_match_in_rar_directory: the file list is now read up to the closing separator.
  • Mail::MIMEDefang::Async: faster parsing of the SpamAssassin X-Spam-Status header.
  • Mail::MIMEDefang::Net: improve ipv6 checks.

radsecproxy-1.11.5-1.el10_3

Fedora Security Advisories
1 day ago
FEDORA-EPEL-2026-cf9252f955 Packages in this update:
  • radsecproxy-1.11.5-1.el10_3
Update description: radsecproxy 1.11.5 (2026-11-13) Bug Fixes
  • Fix vendor attribute rewrite checks (GHSA-mf4w-p52g-j253)
  • Fix dynamic lookup config merge for TLS-PSK (GHSA-4pv5-j49w-wfpp)
  • Fix some configuration values from dynamic lookup command ignored
  • Fix config file issues with string quotation at end of file
  • Fix startup fails when using address-sanitizer

radsecproxy-1.11.5-1.fc44

Fedora Security Advisories
1 day ago
FEDORA-2026-834e6395e9 Packages in this update:
  • radsecproxy-1.11.5-1.fc44
Update description: radsecproxy 1.11.5 (2026-11-13) Bug Fixes
  • Fix vendor attribute rewrite checks (GHSA-mf4w-p52g-j253)
  • Fix dynamic lookup config merge for TLS-PSK (GHSA-4pv5-j49w-wfpp)
  • Fix some configuration values from dynamic lookup command ignored
  • Fix config file issues with string quotation at end of file
  • Fix startup fails when using address-sanitizer

radsecproxy-1.11.5-1.fc45

Fedora Security Advisories
1 day ago
FEDORA-2026-76e466bc35 Packages in this update:
  • radsecproxy-1.11.5-1.fc45
Update description: radsecproxy 1.11.5 (2026-11-13) Bug Fixes
  • Fix vendor attribute rewrite checks (GHSA-mf4w-p52g-j253)
  • Fix dynamic lookup config merge for TLS-PSK (GHSA-4pv5-j49w-wfpp)
  • Fix some configuration values from dynamic lookup command ignored
  • Fix config file issues with string quotation at end of file
  • Fix startup fails when using address-sanitizer

radsecproxy-1.11.5-1.el10_4

Fedora Security Advisories
1 day ago
FEDORA-EPEL-2026-625404d6fc Packages in this update:
  • radsecproxy-1.11.5-1.el10_4
Update description: radsecproxy 1.11.5 (2026-11-13) Bug Fixes
  • Fix vendor attribute rewrite checks (GHSA-mf4w-p52g-j253)
  • Fix dynamic lookup config merge for TLS-PSK (GHSA-4pv5-j49w-wfpp)
  • Fix some configuration values from dynamic lookup command ignored
  • Fix config file issues with string quotation at end of file
  • Fix startup fails when using address-sanitizer
Checked
12 minutes 32 seconds ago
URL
https://bodhi.fedoraproject.org/rss/updates/?type=security