Fedora Security Advisories

chromium-156.0.8078.73-1.el10_4

Fedora Security Advisories
31 minutes 11 seconds ago
FEDORA-EPEL-2026-523ec537c6 Packages in this update:
  • chromium-156.0.8078.73-1.el10_4
Update description:

Update to 156.0.8078.73, include 52 security fixes

  • CVE-2026-118304: Improper input validation in SVG
  • CVE-2026-118305: Memory corruption in Turbolev
  • CVE-2026-118306: Memory corruption in FileSystem
  • CVE-2026-118307: Use after free in Paint
  • CVE-2026-118308: Use after free in SVG
  • CVE-2026-118309: Improper input validation in UI
  • CVE-2026-118310: Improper input validation in Views
  • CVE-2026-118311: Memory corruption in Media
  • CVE-2026-118312: Memory corruption in Paint
  • CVE-2026-118313: Use after free in Video
  • CVE-2026-118314: Improper input validation in UI
  • CVE-2026-118315: Improper input validation in SVG
  • CVE-2026-118316: Improper input validation in V8
  • CVE-2026-118317: Memory corruption in HTML
  • CVE-2026-118318: Improper access control in V8
  • CVE-2026-118319: Memory corruption in Skia
  • CVE-2026-118320: Memory corruption in V8
  • CVE-2026-118321: Improper input validation in Core
  • CVE-2026-118322: Memory corruption in ANGLE
  • CVE-2026-118327: Memory corruption in Media
  • CVE-2026-118328: Improper input validation in WebRTC
  • CVE-2026-118329: Improper input validation in ANGLE
  • CVE-2026-118330: Use after free in Browser
  • CVE-2026-118331: Improper input validation in FileAPI
  • CVE-2026-118332: Improper input validation in Compositing
  • CVE-2026-118333: Missing authorization in Video
  • CVE-2026-118334: Use after free in ImageCapture
  • CVE-2026-118335: Improper input validation in Metrics
  • CVE-2026-118336: Improper input validation in Headless
  • CVE-2026-118337: Improper access control in Forms
  • CVE-2026-118338: Use after free in Animation
  • CVE-2026-118339: Use after free in Animation
  • CVE-2026-118340: Memory corruption in Skia
  • CVE-2026-118341: Use after free in Modularization
  • CVE-2026-118342: Out of bounds write in Editing
  • CVE-2026-118343: Improper input validation in ReadingList
  • CVE-2026-118344: Use after free in Layout
  • CVE-2026-118345: Use after free in PDFium
  • CVE-2026-118346: Use after free in Compositing
  • CVE-2026-118347: Use after free in FileSystem
  • CVE-2026-118348: Improper input validation in Skia
  • CVE-2026-118349: Memory corruption in Payments
  • CVE-2026-118350: Use after free in Turbolev
  • CVE-2026-118351: Memory corruption in Skia
  • CVE-2026-118352: Memory corruption in Cache
  • CVE-2026-118353: Use after free in Paint
  • CVE-2026-118354: Improper input validation in Skia
  • CVE-2026-118355: Improper input validation in Command
  • CVE-2026-118356: Use after free in WTF
  • CVE-2026-118357: Use after free in FileSystem
  • CVE-2026-118358: Memory corruption in WebAudio
  • CVE-2026-118359: Memory corruption in V8

chromium-156.0.8078.73-1.fc44

Fedora Security Advisories
31 minutes 12 seconds ago
FEDORA-2026-9418af6472 Packages in this update:
  • chromium-156.0.8078.73-1.fc44
Update description:

Update to 156.0.8078.73, include 52 security fixes

  • CVE-2026-118304: Improper input validation in SVG
  • CVE-2026-118305: Memory corruption in Turbolev
  • CVE-2026-118306: Memory corruption in FileSystem
  • CVE-2026-118307: Use after free in Paint
  • CVE-2026-118308: Use after free in SVG
  • CVE-2026-118309: Improper input validation in UI
  • CVE-2026-118310: Improper input validation in Views
  • CVE-2026-118311: Memory corruption in Media
  • CVE-2026-118312: Memory corruption in Paint
  • CVE-2026-118313: Use after free in Video
  • CVE-2026-118314: Improper input validation in UI
  • CVE-2026-118315: Improper input validation in SVG
  • CVE-2026-118316: Improper input validation in V8
  • CVE-2026-118317: Memory corruption in HTML
  • CVE-2026-118318: Improper access control in V8
  • CVE-2026-118319: Memory corruption in Skia
  • CVE-2026-118320: Memory corruption in V8
  • CVE-2026-118321: Improper input validation in Core
  • CVE-2026-118322: Memory corruption in ANGLE
  • CVE-2026-118327: Memory corruption in Media
  • CVE-2026-118328: Improper input validation in WebRTC
  • CVE-2026-118329: Improper input validation in ANGLE
  • CVE-2026-118330: Use after free in Browser
  • CVE-2026-118331: Improper input validation in FileAPI
  • CVE-2026-118332: Improper input validation in Compositing
  • CVE-2026-118333: Missing authorization in Video
  • CVE-2026-118334: Use after free in ImageCapture
  • CVE-2026-118335: Improper input validation in Metrics
  • CVE-2026-118336: Improper input validation in Headless
  • CVE-2026-118337: Improper access control in Forms
  • CVE-2026-118338: Use after free in Animation
  • CVE-2026-118339: Use after free in Animation
  • CVE-2026-118340: Memory corruption in Skia
  • CVE-2026-118341: Use after free in Modularization
  • CVE-2026-118342: Out of bounds write in Editing
  • CVE-2026-118343: Improper input validation in ReadingList
  • CVE-2026-118344: Use after free in Layout
  • CVE-2026-118345: Use after free in PDFium
  • CVE-2026-118346: Use after free in Compositing
  • CVE-2026-118347: Use after free in FileSystem
  • CVE-2026-118348: Improper input validation in Skia
  • CVE-2026-118349: Memory corruption in Payments
  • CVE-2026-118350: Use after free in Turbolev
  • CVE-2026-118351: Memory corruption in Skia
  • CVE-2026-118352: Memory corruption in Cache
  • CVE-2026-118353: Use after free in Paint
  • CVE-2026-118354: Improper input validation in Skia
  • CVE-2026-118355: Improper input validation in Command
  • CVE-2026-118356: Use after free in WTF
  • CVE-2026-118357: Use after free in FileSystem
  • CVE-2026-118358: Memory corruption in WebAudio
  • CVE-2026-118359: Memory corruption in V8

chromium-156.0.8078.73-1.fc45

Fedora Security Advisories
31 minutes 13 seconds ago
FEDORA-2026-9d6fc6be6c Packages in this update:
  • chromium-156.0.8078.73-1.fc45
Update description:

Update to 156.0.8078.73, include 52 security fixes

  • CVE-2026-118304: Improper input validation in SVG
  • CVE-2026-118305: Memory corruption in Turbolev
  • CVE-2026-118306: Memory corruption in FileSystem
  • CVE-2026-118307: Use after free in Paint
  • CVE-2026-118308: Use after free in SVG
  • CVE-2026-118309: Improper input validation in UI
  • CVE-2026-118310: Improper input validation in Views
  • CVE-2026-118311: Memory corruption in Media
  • CVE-2026-118312: Memory corruption in Paint
  • CVE-2026-118313: Use after free in Video
  • CVE-2026-118314: Improper input validation in UI
  • CVE-2026-118315: Improper input validation in SVG
  • CVE-2026-118316: Improper input validation in V8
  • CVE-2026-118317: Memory corruption in HTML
  • CVE-2026-118318: Improper access control in V8
  • CVE-2026-118319: Memory corruption in Skia
  • CVE-2026-118320: Memory corruption in V8
  • CVE-2026-118321: Improper input validation in Core
  • CVE-2026-118322: Memory corruption in ANGLE
  • CVE-2026-118327: Memory corruption in Media
  • CVE-2026-118328: Improper input validation in WebRTC
  • CVE-2026-118329: Improper input validation in ANGLE
  • CVE-2026-118330: Use after free in Browser
  • CVE-2026-118331: Improper input validation in FileAPI
  • CVE-2026-118332: Improper input validation in Compositing
  • CVE-2026-118333: Missing authorization in Video
  • CVE-2026-118334: Use after free in ImageCapture
  • CVE-2026-118335: Improper input validation in Metrics
  • CVE-2026-118336: Improper input validation in Headless
  • CVE-2026-118337: Improper access control in Forms
  • CVE-2026-118338: Use after free in Animation
  • CVE-2026-118339: Use after free in Animation
  • CVE-2026-118340: Memory corruption in Skia
  • CVE-2026-118341: Use after free in Modularization
  • CVE-2026-118342: Out of bounds write in Editing
  • CVE-2026-118343: Improper input validation in ReadingList
  • CVE-2026-118344: Use after free in Layout
  • CVE-2026-118345: Use after free in PDFium
  • CVE-2026-118346: Use after free in Compositing
  • CVE-2026-118347: Use after free in FileSystem
  • CVE-2026-118348: Improper input validation in Skia
  • CVE-2026-118349: Memory corruption in Payments
  • CVE-2026-118350: Use after free in Turbolev
  • CVE-2026-118351: Memory corruption in Skia
  • CVE-2026-118352: Memory corruption in Cache
  • CVE-2026-118353: Use after free in Paint
  • CVE-2026-118354: Improper input validation in Skia
  • CVE-2026-118355: Improper input validation in Command
  • CVE-2026-118356: Use after free in WTF
  • CVE-2026-118357: Use after free in FileSystem
  • CVE-2026-118358: Memory corruption in WebAudio
  • CVE-2026-118359: Memory corruption in V8

chromium-156.0.8078.73-1.el10_3

Fedora Security Advisories
31 minutes 14 seconds ago
FEDORA-EPEL-2026-de6d210af4 Packages in this update:
  • chromium-156.0.8078.73-1.el10_3
Update description:

Update to 156.0.8078.73, include 52 security fixes

  • CVE-2026-118304: Improper input validation in SVG
  • CVE-2026-118305: Memory corruption in Turbolev
  • CVE-2026-118306: Memory corruption in FileSystem
  • CVE-2026-118307: Use after free in Paint
  • CVE-2026-118308: Use after free in SVG
  • CVE-2026-118309: Improper input validation in UI
  • CVE-2026-118310: Improper input validation in Views
  • CVE-2026-118311: Memory corruption in Media
  • CVE-2026-118312: Memory corruption in Paint
  • CVE-2026-118313: Use after free in Video
  • CVE-2026-118314: Improper input validation in UI
  • CVE-2026-118315: Improper input validation in SVG
  • CVE-2026-118316: Improper input validation in V8
  • CVE-2026-118317: Memory corruption in HTML
  • CVE-2026-118318: Improper access control in V8
  • CVE-2026-118319: Memory corruption in Skia
  • CVE-2026-118320: Memory corruption in V8
  • CVE-2026-118321: Improper input validation in Core
  • CVE-2026-118322: Memory corruption in ANGLE
  • CVE-2026-118327: Memory corruption in Media
  • CVE-2026-118328: Improper input validation in WebRTC
  • CVE-2026-118329: Improper input validation in ANGLE
  • CVE-2026-118330: Use after free in Browser
  • CVE-2026-118331: Improper input validation in FileAPI
  • CVE-2026-118332: Improper input validation in Compositing
  • CVE-2026-118333: Missing authorization in Video
  • CVE-2026-118334: Use after free in ImageCapture
  • CVE-2026-118335: Improper input validation in Metrics
  • CVE-2026-118336: Improper input validation in Headless
  • CVE-2026-118337: Improper access control in Forms
  • CVE-2026-118338: Use after free in Animation
  • CVE-2026-118339: Use after free in Animation
  • CVE-2026-118340: Memory corruption in Skia
  • CVE-2026-118341: Use after free in Modularization
  • CVE-2026-118342: Out of bounds write in Editing
  • CVE-2026-118343: Improper input validation in ReadingList
  • CVE-2026-118344: Use after free in Layout
  • CVE-2026-118345: Use after free in PDFium
  • CVE-2026-118346: Use after free in Compositing
  • CVE-2026-118347: Use after free in FileSystem
  • CVE-2026-118348: Improper input validation in Skia
  • CVE-2026-118349: Memory corruption in Payments
  • CVE-2026-118350: Use after free in Turbolev
  • CVE-2026-118351: Memory corruption in Skia
  • CVE-2026-118352: Memory corruption in Cache
  • CVE-2026-118353: Use after free in Paint
  • CVE-2026-118354: Improper input validation in Skia
  • CVE-2026-118355: Improper input validation in Command
  • CVE-2026-118356: Use after free in WTF
  • CVE-2026-118357: Use after free in FileSystem
  • CVE-2026-118358: Memory corruption in WebAudio
  • CVE-2026-118359: Memory corruption in V8

chromium-156.0.8078.73-1.fc43

Fedora Security Advisories
31 minutes 14 seconds ago
FEDORA-2026-5a48e58a5e Packages in this update:
  • chromium-156.0.8078.73-1.fc43
Update description:

Update to 156.0.8078.73, include 52 security fixes

  • CVE-2026-118304: Improper input validation in SVG
  • CVE-2026-118305: Memory corruption in Turbolev
  • CVE-2026-118306: Memory corruption in FileSystem
  • CVE-2026-118307: Use after free in Paint
  • CVE-2026-118308: Use after free in SVG
  • CVE-2026-118309: Improper input validation in UI
  • CVE-2026-118310: Improper input validation in Views
  • CVE-2026-118311: Memory corruption in Media
  • CVE-2026-118312: Memory corruption in Paint
  • CVE-2026-118313: Use after free in Video
  • CVE-2026-118314: Improper input validation in UI
  • CVE-2026-118315: Improper input validation in SVG
  • CVE-2026-118316: Improper input validation in V8
  • CVE-2026-118317: Memory corruption in HTML
  • CVE-2026-118318: Improper access control in V8
  • CVE-2026-118319: Memory corruption in Skia
  • CVE-2026-118320: Memory corruption in V8
  • CVE-2026-118321: Improper input validation in Core
  • CVE-2026-118322: Memory corruption in ANGLE
  • CVE-2026-118327: Memory corruption in Media
  • CVE-2026-118328: Improper input validation in WebRTC
  • CVE-2026-118329: Improper input validation in ANGLE
  • CVE-2026-118330: Use after free in Browser
  • CVE-2026-118331: Improper input validation in FileAPI
  • CVE-2026-118332: Improper input validation in Compositing
  • CVE-2026-118333: Missing authorization in Video
  • CVE-2026-118334: Use after free in ImageCapture
  • CVE-2026-118335: Improper input validation in Metrics
  • CVE-2026-118336: Improper input validation in Headless
  • CVE-2026-118337: Improper access control in Forms
  • CVE-2026-118338: Use after free in Animation
  • CVE-2026-118339: Use after free in Animation
  • CVE-2026-118340: Memory corruption in Skia
  • CVE-2026-118341: Use after free in Modularization
  • CVE-2026-118342: Out of bounds write in Editing
  • CVE-2026-118343: Improper input validation in ReadingList
  • CVE-2026-118344: Use after free in Layout
  • CVE-2026-118345: Use after free in PDFium
  • CVE-2026-118346: Use after free in Compositing
  • CVE-2026-118347: Use after free in FileSystem
  • CVE-2026-118348: Improper input validation in Skia
  • CVE-2026-118349: Memory corruption in Payments
  • CVE-2026-118350: Use after free in Turbolev
  • CVE-2026-118351: Memory corruption in Skia
  • CVE-2026-118352: Memory corruption in Cache
  • CVE-2026-118353: Use after free in Paint
  • CVE-2026-118354: Improper input validation in Skia
  • CVE-2026-118355: Improper input validation in Command
  • CVE-2026-118356: Use after free in WTF
  • CVE-2026-118357: Use after free in FileSystem
  • CVE-2026-118358: Memory corruption in WebAudio
  • CVE-2026-118359: Memory corruption in V8

chromium-156.0.8078.73-1.el10_2

Fedora Security Advisories
31 minutes 15 seconds ago
FEDORA-EPEL-2026-9a22f72d1b Packages in this update:
  • chromium-156.0.8078.73-1.el10_2
Update description:

Update to 156.0.8078.73, include 52 security fixes

  • CVE-2026-118304: Improper input validation in SVG
  • CVE-2026-118305: Memory corruption in Turbolev
  • CVE-2026-118306: Memory corruption in FileSystem
  • CVE-2026-118307: Use after free in Paint
  • CVE-2026-118308: Use after free in SVG
  • CVE-2026-118309: Improper input validation in UI
  • CVE-2026-118310: Improper input validation in Views
  • CVE-2026-118311: Memory corruption in Media
  • CVE-2026-118312: Memory corruption in Paint
  • CVE-2026-118313: Use after free in Video
  • CVE-2026-118314: Improper input validation in UI
  • CVE-2026-118315: Improper input validation in SVG
  • CVE-2026-118316: Improper input validation in V8
  • CVE-2026-118317: Memory corruption in HTML
  • CVE-2026-118318: Improper access control in V8
  • CVE-2026-118319: Memory corruption in Skia
  • CVE-2026-118320: Memory corruption in V8
  • CVE-2026-118321: Improper input validation in Core
  • CVE-2026-118322: Memory corruption in ANGLE
  • CVE-2026-118327: Memory corruption in Media
  • CVE-2026-118328: Improper input validation in WebRTC
  • CVE-2026-118329: Improper input validation in ANGLE
  • CVE-2026-118330: Use after free in Browser
  • CVE-2026-118331: Improper input validation in FileAPI
  • CVE-2026-118332: Improper input validation in Compositing
  • CVE-2026-118333: Missing authorization in Video
  • CVE-2026-118334: Use after free in ImageCapture
  • CVE-2026-118335: Improper input validation in Metrics
  • CVE-2026-118336: Improper input validation in Headless
  • CVE-2026-118337: Improper access control in Forms
  • CVE-2026-118338: Use after free in Animation
  • CVE-2026-118339: Use after free in Animation
  • CVE-2026-118340: Memory corruption in Skia
  • CVE-2026-118341: Use after free in Modularization
  • CVE-2026-118342: Out of bounds write in Editing
  • CVE-2026-118343: Improper input validation in ReadingList
  • CVE-2026-118344: Use after free in Layout
  • CVE-2026-118345: Use after free in PDFium
  • CVE-2026-118346: Use after free in Compositing
  • CVE-2026-118347: Use after free in FileSystem
  • CVE-2026-118348: Improper input validation in Skia
  • CVE-2026-118349: Memory corruption in Payments
  • CVE-2026-118350: Use after free in Turbolev
  • CVE-2026-118351: Memory corruption in Skia
  • CVE-2026-118352: Memory corruption in Cache
  • CVE-2026-118353: Use after free in Paint
  • CVE-2026-118354: Improper input validation in Skia
  • CVE-2026-118355: Improper input validation in Command
  • CVE-2026-118356: Use after free in WTF
  • CVE-2026-118357: Use after free in FileSystem
  • CVE-2026-118358: Memory corruption in WebAudio
  • CVE-2026-118359: Memory corruption in V8

dhcpcd-10.5.2-2.fc44

Fedora Security Advisories
52 minutes 8 seconds ago
FEDORA-2026-77541e35f9 Packages in this update:
  • dhcpcd-10.5.2-2.fc44
Update description:
  • Fix daemonising broken by RLIMIT_NOFILE of 0 on Linux (rhbz#2547780)
  • Update to 10.5.2 (rhbz#2511521)

The upstream release contains fixes for the following CVE BZ reports:

  • Bug 2492035 - CVE-2026-56113 dhcpcd: dhcpcd: Denial of Service via crafted DHCPv6 RENEW reply
  • Bug 2492033 - CVE-2026-56114 dhcpcd: dhcpcd: Denial of Service due to stack out-of-bounds write via crafted DHCPv6 message
  • Bug 2492038 - CVE-2026-56115 dhcpcd: dhcpcd: Denial of Service via crafted DHCPv6 ADVERTISE message
  • Bug 2492036 - CVE-2026-56116 dhcpcd: dhcpcd: Denial of Service via IPv6 Router Advertisement memory leak
  • Bug 2492027 - CVE-2026-56117 dhcpcd: dhcpcd: Local heap use-after-free vulnerability leads to denial of service

dhcpcd-10.5.2-2.fc45

Fedora Security Advisories
1 hour 32 minutes ago
FEDORA-2026-c36b5fc4ca Packages in this update:
  • dhcpcd-10.5.2-2.fc45
Update description:
  • Fix daemonising broken by RLIMIT_NOFILE of 0 on Linux (rhbz#2547780)
  • Update to 10.5.2 (rhbz#2511521)

The upstream release contains fixes for the following CVE BZ reports:

  • Bug 2492035 - CVE-2026-56113 dhcpcd: dhcpcd: Denial of Service via crafted DHCPv6 RENEW reply
  • Bug 2492033 - CVE-2026-56114 dhcpcd: dhcpcd: Denial of Service due to stack out-of-bounds write via crafted DHCPv6 message
  • Bug 2492038 - CVE-2026-56115 dhcpcd: dhcpcd: Denial of Service via crafted DHCPv6 ADVERTISE message
  • Bug 2492036 - CVE-2026-56116 dhcpcd: dhcpcd: Denial of Service via IPv6 Router Advertisement memory leak
  • Bug 2492027 - CVE-2026-56117 dhcpcd: dhcpcd: Local heap use-after-free vulnerability leads to denial of service

pie-1.5.4-1.el10_4

Fedora Security Advisories
2 hours 59 minutes ago
FEDORA-EPEL-2026-fc40860fb5 Packages in this update:
  • pie-1.5.4-1.el10_4
Update description: Version 1.5.4
  • dependencies update
Version 1.5.3
  • fix pie staticphp exe issues
  • update bundled dependencies

pie-1.5.4-1.el10_3

Fedora Security Advisories
2 hours 59 minutes ago
FEDORA-EPEL-2026-c1f84dc483 Packages in this update:
  • pie-1.5.4-1.el10_3
Update description: Version 1.5.4
  • dependencies update
Version 1.5.3
  • fix pie staticphp exe issues
  • update bundled dependencies

pie-1.5.4-1.fc45

Fedora Security Advisories
2 hours 59 minutes ago
FEDORA-2026-634d8c263d Packages in this update:
  • pie-1.5.4-1.fc45
Update description: Version 1.5.4
  • dependencies update
Version 1.5.3
  • fix pie staticphp exe issues
  • update bundled dependencies

pie-1.5.4-1.fc44

Fedora Security Advisories
2 hours 59 minutes ago
FEDORA-2026-66a3fa143f Packages in this update:
  • pie-1.5.4-1.fc44
Update description: Version 1.5.4
  • dependencies update
Version 1.5.3
  • fix pie staticphp exe issues
  • update bundled dependencies
Checked
29 minutes 25 seconds ago
URL
https://bodhi.fedoraproject.org/rss/updates/?type=security