Fedora Security Advisories

FEDORA-2026-7ffd130a98 Packages in this update:

• chromium-146.0.7680.80-1.fc42

Update description:

Update to 146.0.7680.80

* CVE-2026-3909: Out of bounds write in Ski

FEDORA-EPEL-2026-1be2809c6a Packages in this update:

• chromium-146.0.7680.80-1.el10_3

Update description:

Update to 146.0.7680.80

* CVE-2026-3909: Out of bounds write in Ski

FEDORA-EPEL-2026-317a58d9a7 Packages in this update:

• chromium-146.0.7680.80-1.el9

Update description:

Update to 146.0.7680.80

* CVE-2026-3909: Out of bounds write in Ski

Update to 146.0.7680.71

• CVE-2026-3913: Heap buffer overflow in WebML
• CVE-2026-3914: Integer overflow in WebML
• CVE-2026-3915: Heap buffer overflow in WebML
• CVE-2026-3916: Out of bounds read in Web Speech
• CVE-2026-3917: Use after free in Agents
• CVE-2026-3918: Use after free in WebMCP
• CVE-2026-3919: Use after free in Extensions
• CVE-2026-3920: Out of bounds memory access in WebML
• CVE-2026-3921: Use after free in TextEncoding
• CVE-2026-3922: Use after free in MediaStream
• CVE-2026-3923: Use after free in WebMIDI
• CVE-2026-3924: Use after free in WindowDialog
• CVE-2026-3925: Incorrect security UI in LookalikeChecks
• CVE-2026-3926: Out of bounds read in V8
• CVE-2026-3927: Incorrect security UI in PictureInPicture
• CVE-2026-3928: Insufficient policy enforcement in Extensions
• CVE-2026-3929: Side-channel information leakage in ResourceTiming
• CVE-2026-3930: Unsafe navigation in Navigation
• CVE-2026-3931: Heap buffer overflow in Skia
• CVE-2026-3932: Insufficient policy enforcement in PDF
• CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
• CVE-2026-3935: Incorrect security UI in WebAppInstalls
• CVE-2026-3936: Use after free in WebView
• CVE-2026-3937: Incorrect security UI in Downloads
• CVE-2026-3938: Insufficient policy enforcement in Clipboard
• CVE-2026-3939: Insufficient policy enforcement in PDF
• CVE-2026-3940: Insufficient policy enforcement in DevTools
• CVE-2026-3941: Insufficient policy enforcement in DevTools
• CVE-2026-3942: Incorrect security UI in PictureInPicture

FEDORA-2026-b7d2936de3 Packages in this update:

• chromium-146.0.7680.80-1.fc44

Update description:

Update to 146.0.7680.80

* CVE-2026-3909: Out of bounds write in Ski

FEDORA-2026-409856189a Packages in this update:

• gnome-remote-desktop-49.3-2.fc43

Update description:

Fixes CVE-2025-5024 by adding connection throttling

FEDORA-2026-c571483404 Packages in this update:

• musescore-4.6.5-34.fc43

Update description:

Rebuilt with updated dr_wav to fix CVE-2026-29022.

FEDORA-2026-5c75eb75d1 Packages in this update:

• python-multipart-1.3.1-1.fc43

Update description:

Update to version 1.3.1 to fix CVE-2026-28356.

FEDORA-2026-7ed700921c Packages in this update:

• containernetworking-plugins-1.9.1-1.fc42

Update description:

Update to release v1.9.1

FEDORA-2026-390ce5262d Packages in this update:

• musescore-4.6.5-37.fc44

Update description:

Rebuilt with updated dr_wav to fix CVE-2026-29022.

FEDORA-2026-8ee0451243 Packages in this update:

• containernetworking-plugins-1.9.1-1.fc43

Update description:

• Update to release v1.9.1
• Resolves: rhbz#2448053, rhbz#2423997, rhbz#2424031
• Upstream fixes

FEDORA-2026-d6b4b4df31 Packages in this update:

• containernetworking-plugins-1.9.1-1.fc44

Update description:

• Update to release v1.9.1
• Resolves: rhbz#2448053, rhbz#2423997, rhbz#2424031
• Upstream fixes

FEDORA-2026-38d944f97d Packages in this update:

• containernetworking-plugins-1.9.1-1.fc45

Update description:

Automatic update for containernetworking-plugins-1.9.1-1.fc45.

Changelog * Mon Mar 16 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 1.9.1-1 - Update to release v1.9.1 - Resolves: rhbz#2448053, rhbz#2423997, rhbz#2424031 - Upstream fixes

FEDORA-2026-4450956be5 Packages in this update:

• libtasn1-4.21.0-1.fc43

Update description:

Update to 4.21.0; fixes CVE-2025-13151

FEDORA-2026-aae50dc427 Packages in this update:

• freerdp-3.24.0-1.fc42

Update description:

Update to 3.24.0 (CVE-2026-29774, CVE-2026-29775, CVE-2026-29776, CVE-2026-31806, CVE-2026-31883, CVE-2026-31884, CVE-2026-31885, CVE-2026-31897)

FEDORA-2026-34886abfad Packages in this update:

• freerdp-3.24.0-1.fc43

Update description:

Update to 3.24.0 (CVE-2026-29774, CVE-2026-29775, CVE-2026-29776, CVE-2026-31806, CVE-2026-31883, CVE-2026-31884, CVE-2026-31885, CVE-2026-31897)

FEDORA-2026-2c1ab5b23b Packages in this update:

• freerdp-3.24.0-1.fc44

Update description:

Update to 3.24.0 (CVE-2026-29774, CVE-2026-29775, CVE-2026-29776, CVE-2026-31806, CVE-2026-31883, CVE-2026-31884, CVE-2026-31885, CVE-2026-31897)

FEDORA-2026-bf4c5bb9c5 Packages in this update:

• freerdp-3.24.0-1.fc45

Update description:

Automatic update for freerdp-3.24.0-1.fc45.

Changelog * Mon Mar 16 2026 Ondrej Holy <oholy@redhat.com> - 2:3.24.0-1 - Update to 3.24.0 (CVE-2026-29774, CVE-2026-29775, CVE-2026-29776, CVE-2026-31806, CVE-2026-31883, CVE-2026-31884, CVE-2026-31885, CVE-2026-31897) Resolves: rhbz#2447295, rhbz#2447393, rhbz#2447412, rhbz#2447415 Resolves: rhbz#2447417, rhbz#2447419, rhbz#2447423, rhbz#2447428 Resolves: rhbz#2447431

FEDORA-2026-9e5037f4e6 Packages in this update:

• python-diskcache-5.6.3-12.fc42

Update description:

Incorporate patch from Sam Doran to fix CVE-2025-69872

FEDORA-2026-56264d0a56 Packages in this update:

• python-diskcache-5.6.3-12.fc44

Update description:

Incorporate patch from Sam Doran to fix CVE-2025-69872

FEDORA-2026-319d85836c Packages in this update:

• python-diskcache-5.6.3-12.fc43

Update description:

Incorporate patch from Sam Doran to fix CVE-2025-69872