Fedora Security Advisories

FEDORA-2026-702a03ac4d Packages in this update:

• dotnet8.0-8.0.125-1.fc44

Update description:

This is the March 2026 release of .NET 8

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.25/8.0.125.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.25/8.0.25.md

FEDORA-2026-71154797a5 Packages in this update:

• wireshark-4.6.4-2.fc44

Update description:

Enabling a couple of python tools

New version 6.4.6

FEDORA-2026-8ae04c01e3 Packages in this update:

• dotnet9.0-9.0.115-1.fc42

Update description:

This is the March 2026 release of .NET 9.

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.14/9.0.115.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.14/9.0.14.md

FEDORA-2026-22e517fe60 Packages in this update:

• dotnet9.0-9.0.115-1.fc43

Update description:

This is the March 2026 release of .NET 9.

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.14/9.0.115.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.14/9.0.14.md

FEDORA-2026-624e30e8a7 Packages in this update:

• dotnet9.0-9.0.115-1.fc44

Update description:

This is the March 2026 release of .NET 9.

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.14/9.0.115.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.14/9.0.14.md

FEDORA-2026-48e73ed6b8 Packages in this update:

• dotnet10.0-10.0.104-1.fc42

Update description:

This is the March 2026 release of .NET 10.

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.4/10.0.104.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.4/10.0.4.md

FEDORA-2026-854e553ffa Packages in this update:

• dotnet10.0-10.0.104-1.fc43

Update description:

This is the March 2026 release of .NET 10.

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.4/10.0.104.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.4/10.0.4.md

FEDORA-2026-956fc306c4 Packages in this update:

• dotnet10.0-10.0.104-1.fc44

Update description:

This is the March 2026 release of .NET 10.

Release Notes:

• SDK: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.4/10.0.104.md
• Runtime: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.4/10.0.4.md

FEDORA-2026-06d1b46d1e Packages in this update:

• cpp-httplib-0.38.0-1.fc45

Update description:

Automatic update for cpp-httplib-0.38.0-1.fc45.

Changelog * Tue Mar 17 2026 Petr Menšík <pemensik@redhat.com> - 0.38.0-1 - Update to 0.38.0 (rhbz#2447261) * Tue Mar 17 2026 Petr Menšík <pemensik@redhat.com> - 0.37.2-1 - Update to 0.37.2 - Fixes silent TLS certificate verification bypass on HTTPS Redirect via proxy (CVE-2026-32627, rhbz#2448105)

FEDORA-2026-2e5626418f Packages in this update:

• musescore-4.3.2-21.fc42

Update description:

Rebuilt with patched dr_wav to fix CVE-2026-29022.

FEDORA-EPEL-2026-20bdd5028e Packages in this update:

• chromium-146.0.7680.80-1.el10_1

Update description:

Update to 146.0.7680.80

* CVE-2026-3909: Out of bounds write in Ski

FEDORA-EPEL-2026-d0656234cb Packages in this update:

• chromium-146.0.7680.80-1.el10_2

Update description:

Update to 146.0.7680.80

* CVE-2026-3909: Out of bounds write in Ski

FEDORA-2026-44c7458a92 Packages in this update:

• chromium-146.0.7680.80-1.fc43

Update description:

Update to 146.0.7680.80

* CVE-2026-3909: Out of bounds write in Ski

FEDORA-2026-7ffd130a98 Packages in this update:

• chromium-146.0.7680.80-1.fc42

Update description:

Update to 146.0.7680.80

* CVE-2026-3909: Out of bounds write in Ski

FEDORA-EPEL-2026-1be2809c6a Packages in this update:

• chromium-146.0.7680.80-1.el10_3

Update description:

Update to 146.0.7680.80

* CVE-2026-3909: Out of bounds write in Ski

FEDORA-EPEL-2026-317a58d9a7 Packages in this update:

• chromium-146.0.7680.80-1.el9

Update description:

Update to 146.0.7680.80

* CVE-2026-3909: Out of bounds write in Ski

Update to 146.0.7680.71

• CVE-2026-3913: Heap buffer overflow in WebML
• CVE-2026-3914: Integer overflow in WebML
• CVE-2026-3915: Heap buffer overflow in WebML
• CVE-2026-3916: Out of bounds read in Web Speech
• CVE-2026-3917: Use after free in Agents
• CVE-2026-3918: Use after free in WebMCP
• CVE-2026-3919: Use after free in Extensions
• CVE-2026-3920: Out of bounds memory access in WebML
• CVE-2026-3921: Use after free in TextEncoding
• CVE-2026-3922: Use after free in MediaStream
• CVE-2026-3923: Use after free in WebMIDI
• CVE-2026-3924: Use after free in WindowDialog
• CVE-2026-3925: Incorrect security UI in LookalikeChecks
• CVE-2026-3926: Out of bounds read in V8
• CVE-2026-3927: Incorrect security UI in PictureInPicture
• CVE-2026-3928: Insufficient policy enforcement in Extensions
• CVE-2026-3929: Side-channel information leakage in ResourceTiming
• CVE-2026-3930: Unsafe navigation in Navigation
• CVE-2026-3931: Heap buffer overflow in Skia
• CVE-2026-3932: Insufficient policy enforcement in PDF
• CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
• CVE-2026-3935: Incorrect security UI in WebAppInstalls
• CVE-2026-3936: Use after free in WebView
• CVE-2026-3937: Incorrect security UI in Downloads
• CVE-2026-3938: Insufficient policy enforcement in Clipboard
• CVE-2026-3939: Insufficient policy enforcement in PDF
• CVE-2026-3940: Insufficient policy enforcement in DevTools
• CVE-2026-3941: Insufficient policy enforcement in DevTools
• CVE-2026-3942: Incorrect security UI in PictureInPicture

FEDORA-2026-b7d2936de3 Packages in this update:

• chromium-146.0.7680.80-1.fc44

Update description:

Update to 146.0.7680.80

* CVE-2026-3909: Out of bounds write in Ski

FEDORA-2026-409856189a Packages in this update:

• gnome-remote-desktop-49.3-2.fc43

Update description:

Fixes CVE-2025-5024 by adding connection throttling

FEDORA-2026-c571483404 Packages in this update:

• musescore-4.6.5-34.fc43

Update description:

Rebuilt with updated dr_wav to fix CVE-2026-29022.

FEDORA-2026-5c75eb75d1 Packages in this update:

• python-multipart-1.3.1-1.fc43

Update description:

Update to version 1.3.1 to fix CVE-2026-28356.