Fedora Security Advisories

chromium-154.0.8037.92-1.el10_3

4 days ago
FEDORA-EPEL-2026-bf22fee762 Packages in this update:
  • chromium-154.0.8037.92-1.el10_3
Update description:

Update to 154.0.8037.92

* CVE-2026-102299: Type confusion in V8 * CVE-2026-102300: Uninitialized resource in WebGPU * CVE-2026-102301: Out of bounds write in GPU * CVE-2026-102302: Buffer overflow in V8 * CVE-2026-102303: Uninitialized resource in GPU * CVE-2026-102304: Use after free in Passwords * CVE-2026-102305: UI misrepresentation in SignIn * CVE-2026-102306: Use after free in Bluetooth * CVE-2026-102307: Uninitialized resource in Dawn * CVE-2026-102308: Use after free in Views * CVE-2026-102309: Use after free in FullScreen * CVE-2026-102310: Missing authorization in Payments * CVE-2026-102311: Uninitialized resource in GPU * CVE-2026-102312: UI misrepresentation in Omnibox * CVE-2026-102313: Uninitialized resource in ANGLE * CVE-2026-102314: UI misrepresentation in TabStrip * CVE-2026-102315: Uninitialized resource in Media * CVE-2026-102316: Use after free in Views * CVE-2026-102317: Improper privilege management in Mojo * CVE-2026-102318: Out of bounds read in WebGL * CVE-2026-102319: Uninitialized resource in GPU * CVE-2026-102320: Missing authorization in CORS * CVE-2026-102321: Type confusion in V8 * CVE-2026-102323: Type confusion in V8 * CVE-2026-102324: Use after free in PictureInPicture * CVE-2026-102325: Uninitialized resource in Skia * CVE-2026-102326: Type confusion in V8 * CVE-2026-102327: Incorrect authorization in WebView * CVE-2026-102328: Type confusion in V8 * CVE-2026-102329: Cross-site scripting in WebUI * CVE-2026-102330: Incorrect authorization in SiteIsolation * CVE-2026-102331: Buffer overflow in ANGLE

chromium-154.0.8037.92-1.fc44

4 days ago
FEDORA-2026-35b989661c Packages in this update:
  • chromium-154.0.8037.92-1.fc44
Update description:

Update to 154.0.8037.92

* CVE-2026-102299: Type confusion in V8 * CVE-2026-102300: Uninitialized resource in WebGPU * CVE-2026-102301: Out of bounds write in GPU * CVE-2026-102302: Buffer overflow in V8 * CVE-2026-102303: Uninitialized resource in GPU * CVE-2026-102304: Use after free in Passwords * CVE-2026-102305: UI misrepresentation in SignIn * CVE-2026-102306: Use after free in Bluetooth * CVE-2026-102307: Uninitialized resource in Dawn * CVE-2026-102308: Use after free in Views * CVE-2026-102309: Use after free in FullScreen * CVE-2026-102310: Missing authorization in Payments * CVE-2026-102311: Uninitialized resource in GPU * CVE-2026-102312: UI misrepresentation in Omnibox * CVE-2026-102313: Uninitialized resource in ANGLE * CVE-2026-102314: UI misrepresentation in TabStrip * CVE-2026-102315: Uninitialized resource in Media * CVE-2026-102316: Use after free in Views * CVE-2026-102317: Improper privilege management in Mojo * CVE-2026-102318: Out of bounds read in WebGL * CVE-2026-102319: Uninitialized resource in GPU * CVE-2026-102320: Missing authorization in CORS * CVE-2026-102321: Type confusion in V8 * CVE-2026-102323: Type confusion in V8 * CVE-2026-102324: Use after free in PictureInPicture * CVE-2026-102325: Uninitialized resource in Skia * CVE-2026-102326: Type confusion in V8 * CVE-2026-102327: Incorrect authorization in WebView * CVE-2026-102328: Type confusion in V8 * CVE-2026-102329: Cross-site scripting in WebUI * CVE-2026-102330: Incorrect authorization in SiteIsolation * CVE-2026-102331: Buffer overflow in ANGLE

chromium-154.0.8037.92-1.fc43

4 days ago
FEDORA-2026-cd4e714c4e Packages in this update:
  • chromium-154.0.8037.92-1.fc43
Update description:

Update to 154.0.8037.92

* CVE-2026-102299: Type confusion in V8 * CVE-2026-102300: Uninitialized resource in WebGPU * CVE-2026-102301: Out of bounds write in GPU * CVE-2026-102302: Buffer overflow in V8 * CVE-2026-102303: Uninitialized resource in GPU * CVE-2026-102304: Use after free in Passwords * CVE-2026-102305: UI misrepresentation in SignIn * CVE-2026-102306: Use after free in Bluetooth * CVE-2026-102307: Uninitialized resource in Dawn * CVE-2026-102308: Use after free in Views * CVE-2026-102309: Use after free in FullScreen * CVE-2026-102310: Missing authorization in Payments * CVE-2026-102311: Uninitialized resource in GPU * CVE-2026-102312: UI misrepresentation in Omnibox * CVE-2026-102313: Uninitialized resource in ANGLE * CVE-2026-102314: UI misrepresentation in TabStrip * CVE-2026-102315: Uninitialized resource in Media * CVE-2026-102316: Use after free in Views * CVE-2026-102317: Improper privilege management in Mojo * CVE-2026-102318: Out of bounds read in WebGL * CVE-2026-102319: Uninitialized resource in GPU * CVE-2026-102320: Missing authorization in CORS * CVE-2026-102321: Type confusion in V8 * CVE-2026-102323: Type confusion in V8 * CVE-2026-102324: Use after free in PictureInPicture * CVE-2026-102325: Uninitialized resource in Skia * CVE-2026-102326: Type confusion in V8 * CVE-2026-102327: Incorrect authorization in WebView * CVE-2026-102328: Type confusion in V8 * CVE-2026-102329: Cross-site scripting in WebUI * CVE-2026-102330: Incorrect authorization in SiteIsolation * CVE-2026-102331: Buffer overflow in ANGLE

python3-docs-3.14.8-1.fc43 python3.14-3.14.8-1.fc43

4 days 23 hours ago
FEDORA-2026-a3da6bb5cd Packages in this update:
  • python3.14-3.14.8-1.fc43
  • python3-docs-3.14.8-1.fc43
Update description:

New version of Python interpreter

Security fix for CVE-2026-19553 Security fix for CVE-2026-82049 Security fix for CVE-2026-15310 Security fix for CVE-2026-19672 Security fix for CVE-2026-19445 Security fix for CVE-2026-17084 Security fix for CVE-2026-15806

budgie-control-center-2.1.3-3.fc45 budgie-desktop-10.10.3-2.fc45 budgie-desktop-services-1.0.3-1.fc45 budgie-desktop-view-10.10.3-2.fc45 pocillo-gtk-theme-0.13.0-1.fc45

5 days 2 hours ago
FEDORA-2026-1a5c7b6f1f Packages in this update:
  • budgie-control-center-2.1.3-3.fc45
  • budgie-desktop-10.10.3-2.fc45
  • budgie-desktop-services-1.0.3-1.fc45
  • budgie-desktop-view-10.10.3-2.fc45
  • pocillo-gtk-theme-0.13.0-1.fc45
Update description:

Update to Budgie 10.10.3. Brand new maintenance and bug fix release for Budgie 10.10 series.

Features:

  • Favorites in Budgie Menu
  • Focus fix for Budgie Menu
  • Revamped and reintroduced Keyboard Layout applet with support for locale1, integrated gsettings input sources, labwc environment writing
  • Budgie Desktop View: Arbitrary icon positioning finally supported
  • Many fixes!

Release blog at https://buddiesofbudgie.org/blog/budgie-10-10-3-released

Testing:

  • Open Budgie Menu with Meta/Super key, confirm focus on input box immediately present.
  • Add layouts to Keyboard section of Budgie Control and Keyboard applet to panel via Budgie Desktop Settings. Change layout using applet or Alt+Shift
Checked
40 minutes ago