Aggregator

perl-Data-Entropy-0.010-1.fc43

Fedora Security Advisories
3 days 9 hours ago
FEDORA-2026-8924ee53fe Packages in this update:
  • perl-Data-Entropy-0.010-1.fc43
Update description:

Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).

perl-Data-Entropy-0.010-1.fc45

Fedora Security Advisories
3 days 9 hours ago
FEDORA-2026-f234be41fe Packages in this update:
  • perl-Data-Entropy-0.010-1.fc45
Update description:

Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).

perl-HTML-FormHandler-0.410001-1.fc45

Fedora Security Advisories
3 days 11 hours ago
FEDORA-2026-5b1ed32d6c Packages in this update:
  • perl-HTML-FormHandler-0.410001-1.fc45
Update description:

HTML::FormHandler versions through 0.40068 allow attacker selected method dispatch and resource exhaustion because _apply_actions and add_error use error message text built from request data as a Locale::Maketext bracket notation template.

Versions 0.410000+ fix the issue by passing error messages with request data as Locale::Maketext arguments instead of templates.

perl-HTML-FormHandler-0.410001-1.fc43

Fedora Security Advisories
3 days 11 hours ago
FEDORA-2026-ab25ac7ee2 Packages in this update:
  • perl-HTML-FormHandler-0.410001-1.fc43
Update description:

HTML::FormHandler versions through 0.40068 allow attacker selected method dispatch and resource exhaustion because _apply_actions and add_error use error message text built from request data as a Locale::Maketext bracket notation template.

Versions 0.410000+ fix the issue by passing error messages with request data as Locale::Maketext arguments instead of templates.

perl-HTML-FormHandler-0.410001-1.fc44

Fedora Security Advisories
3 days 11 hours ago
FEDORA-2026-ad7d80deb9 Packages in this update:
  • perl-HTML-FormHandler-0.410001-1.fc44
Update description:

HTML::FormHandler versions through 0.40068 allow attacker selected method dispatch and resource exhaustion because _apply_actions and add_error use error message text built from request data as a Locale::Maketext bracket notation template.

Versions 0.410000+ fix the issue by passing error messages with request data as Locale::Maketext arguments instead of templates.

chromium-152.0.7977.82-1.fc45

Fedora Security Advisories
4 days 1 hour ago
FEDORA-2026-07ab59f891 Packages in this update:
  • chromium-152.0.7977.82-1.fc45
Update description:

Update to 152.0.7977.82

  • CVE-2026-85046: Type confusion in V8
  • CVE-2026-85052: Out of bounds read in CrashReporting
  • CVE-2026-85043: Incomplete cleanup in Network
  • CVE-2026-85048: Use after free in Compositing
  • CVE-2026-85045: Race condition in V8
  • CVE-2026-85050: Out of bounds write in WebGL
  • CVE-2026-85053: Improper resource exposure in CacheStorage
  • CVE-2026-85042: Use after free in DevTools
  • CVE-2026-85049: Use after free in Skia
  • CVE-2026-85051: Type confusion in Compositing
  • CVE-2026-85047: Improper input validation in Transactions Platform
  • CVE-2026-85044: Use of released resource in Mobile

  • Update to 152.0.7977.75

  • CVE-2026-84353: Use after free in Shared Tab Groups

  • CVE-2026-84352: Use after free in WebGL
  • CVE-2026-84354: Incorrect authorization in FileSystem
  • CVE-2026-84359: Information leak in Skia
  • CVE-2026-84357: Improper input validation in Omnibox
  • CVE-2026-84324: Use after free in Proxy
  • CVE-2026-84349: Use after free in Browser
  • CVE-2026-84326: Uninitialized resource in V8
  • CVE-2026-84333: Use after free in Dawn
  • CVE-2026-84351: Buffer overflow in GPU
  • CVE-2026-84325: Improper input validation in DataTransfer
  • CVE-2026-84328: Missing authorization in FileSystem
  • CVE-2026-84347: Use after free in WebRTC
  • CVE-2026-84323: Missing authorization in FileSystem
  • CVE-2026-84355: Incorrect authorization in Navigation
  • CVE-2026-84358: Improper privilege management in Downloads
  • CVE-2026-84332: Incorrect authorization in SiteSettings
  • CVE-2026-84330: UI misrepresentation in FullScreen
  • CVE-2026-84334: Incorrect authorization in Chromoting
  • CVE-2026-84348: Information leak in MediaCapture
  • CVE-2026-84335: Incorrect authorization in TabStrip
  • CVE-2026-84327: Incorrect authorization in Autofill
  • CVE-2026-84329: Confused deputy in CredentialProvider
  • CVE-2026-84356: UI misrepresentation in FullScreen
  • CVE-2026-84350: Use after free in TabStrip
  • CVE-2026-84331: Incorrect authorization in Actor

chromium-152.0.7977.82-1.el9

Fedora Security Advisories
4 days 1 hour ago
FEDORA-EPEL-2026-6319210a9a Packages in this update:
  • chromium-152.0.7977.82-1.el9
Update description:

Update to 152.0.7977.82

  • CVE-2026-85046: Type confusion in V8
  • CVE-2026-85052: Out of bounds read in CrashReporting
  • CVE-2026-85043: Incomplete cleanup in Network
  • CVE-2026-85048: Use after free in Compositing
  • CVE-2026-85045: Race condition in V8
  • CVE-2026-85050: Out of bounds write in WebGL
  • CVE-2026-85053: Improper resource exposure in CacheStorage
  • CVE-2026-85042: Use after free in DevTools
  • CVE-2026-85049: Use after free in Skia
  • CVE-2026-85051: Type confusion in Compositing
  • CVE-2026-85047: Improper input validation in Transactions Platform
  • CVE-2026-85044: Use of released resource in Mobile

chromium-152.0.7977.82-1.el10_3

Fedora Security Advisories
4 days 1 hour ago
FEDORA-EPEL-2026-3efc5eb835 Packages in this update:
  • chromium-152.0.7977.82-1.el10_3
Update description:

Update to 152.0.7977.82

  • CVE-2026-85046: Type confusion in V8
  • CVE-2026-85052: Out of bounds read in CrashReporting
  • CVE-2026-85043: Incomplete cleanup in Network
  • CVE-2026-85048: Use after free in Compositing
  • CVE-2026-85045: Race condition in V8
  • CVE-2026-85050: Out of bounds write in WebGL
  • CVE-2026-85053: Improper resource exposure in CacheStorage
  • CVE-2026-85042: Use after free in DevTools
  • CVE-2026-85049: Use after free in Skia
  • CVE-2026-85051: Type confusion in Compositing
  • CVE-2026-85047: Improper input validation in Transactions Platform
  • CVE-2026-85044: Use of released resource in Mobile

chromium-152.0.7977.82-1.el10_2

Fedora Security Advisories
4 days 1 hour ago
FEDORA-EPEL-2026-616d16bd5a Packages in this update:
  • chromium-152.0.7977.82-1.el10_2
Update description:

Update to 152.0.7977.82

  • CVE-2026-85046: Type confusion in V8
  • CVE-2026-85052: Out of bounds read in CrashReporting
  • CVE-2026-85043: Incomplete cleanup in Network
  • CVE-2026-85048: Use after free in Compositing
  • CVE-2026-85045: Race condition in V8
  • CVE-2026-85050: Out of bounds write in WebGL
  • CVE-2026-85053: Improper resource exposure in CacheStorage
  • CVE-2026-85042: Use after free in DevTools
  • CVE-2026-85049: Use after free in Skia
  • CVE-2026-85051: Type confusion in Compositing
  • CVE-2026-85047: Improper input validation in Transactions Platform
  • CVE-2026-85044: Use of released resource in Mobile

chromium-152.0.7977.82-1.fc44

Fedora Security Advisories
4 days 1 hour ago
FEDORA-2026-19cbaba275 Packages in this update:
  • chromium-152.0.7977.82-1.fc44
Update description:

Update to 152.0.7977.82

  • CVE-2026-85046: Type confusion in V8
  • CVE-2026-85052: Out of bounds read in CrashReporting
  • CVE-2026-85043: Incomplete cleanup in Network
  • CVE-2026-85048: Use after free in Compositing
  • CVE-2026-85045: Race condition in V8
  • CVE-2026-85050: Out of bounds write in WebGL
  • CVE-2026-85053: Improper resource exposure in CacheStorage
  • CVE-2026-85042: Use after free in DevTools
  • CVE-2026-85049: Use after free in Skia
  • CVE-2026-85051: Type confusion in Compositing
  • CVE-2026-85047: Improper input validation in Transactions Platform
  • CVE-2026-85044: Use of released resource in Mobile

chromium-152.0.7977.82-1.el10_4

Fedora Security Advisories
4 days 1 hour ago
FEDORA-EPEL-2026-818fa146d8 Packages in this update:
  • chromium-152.0.7977.82-1.el10_4
Update description:

Update to 152.0.7977.82

  • CVE-2026-85046: Type confusion in V8
  • CVE-2026-85052: Out of bounds read in CrashReporting
  • CVE-2026-85043: Incomplete cleanup in Network
  • CVE-2026-85048: Use after free in Compositing
  • CVE-2026-85045: Race condition in V8
  • CVE-2026-85050: Out of bounds write in WebGL
  • CVE-2026-85053: Improper resource exposure in CacheStorage
  • CVE-2026-85042: Use after free in DevTools
  • CVE-2026-85049: Use after free in Skia
  • CVE-2026-85051: Type confusion in Compositing
  • CVE-2026-85047: Improper input validation in Transactions Platform
  • CVE-2026-85044: Use of released resource in Mobile

chromium-152.0.7977.82-1.fc43

Fedora Security Advisories
4 days 1 hour ago
FEDORA-2026-c3be138e4c Packages in this update:
  • chromium-152.0.7977.82-1.fc43
Update description:

Update to 152.0.7977.82

  • CVE-2026-85046: Type confusion in V8
  • CVE-2026-85052: Out of bounds read in CrashReporting
  • CVE-2026-85043: Incomplete cleanup in Network
  • CVE-2026-85048: Use after free in Compositing
  • CVE-2026-85045: Race condition in V8
  • CVE-2026-85050: Out of bounds write in WebGL
  • CVE-2026-85053: Improper resource exposure in CacheStorage
  • CVE-2026-85042: Use after free in DevTools
  • CVE-2026-85049: Use after free in Skia
  • CVE-2026-85051: Type confusion in Compositing
  • CVE-2026-85047: Improper input validation in Transactions Platform
  • CVE-2026-85044: Use of released resource in Mobile

rust-hickory-net-0.26.2-1.el9 rust-hickory-proto-0.26.2-1.el9 rust-hickory-resolver-0.26.2-1.el9

Fedora Security Advisories
4 days 7 hours ago
FEDORA-EPEL-2026-a841ec568c Packages in this update:
  • rust-hickory-net-0.26.2-1.el9
  • rust-hickory-proto-0.26.2-1.el9
  • rust-hickory-resolver-0.26.2-1.el9
Update description:

Update hickory-dns crates to version 0.26.2.

This includes fixes for a large number of security relevant bugs.

Release notes: https://github.com/hickory-dns/hickory-dns/releases/tag/v0.26.2

Rebuild tracker: https://forge.fedoraproject.org/rust/backlog/issues/33