Aggregator

ghostscript-10.07.1-3.fc45

Fedora Security Advisories
3 days 15 hours ago
FEDORA-2026-b90bfa1339 Packages in this update:
  • ghostscript-10.07.1-3.fc45
Update description:

CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter

CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free bypass via Type 5 shading OOB write and procedure-stream use-after-free

CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data

bind-9.18.51^git20261003.d0a87358-2.fc44 bind-dyndb-ldap-11.11-17.fc44

Fedora Security Advisories
3 days 16 hours ago
FEDORA-2026-a5b5298a84 Packages in this update:
  • bind-9.18.51^git20261003.d0a87358-2.fc44
  • bind-dyndb-ldap-11.11-17.fc44
Update description: Security updates using git snapshot

Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git branch bind-9.18.

  • CVE-2026-75029 Discard repeated SOA, CNAME, and DNAME records when parsing DNS messages
  • CVE-2026-19666 DNS64 with break-dnssec could cause an assertion failure
  • CVE-2026-19662 Prevent resolver crash with cached DNSSEC proofs
  • CVE-2026-19941 Prevent forged DNSSEC-validated NXDOMAIN responses
  • CVE-2026-78301 Out-of-zone records in a zone database could be served as authoritative
  • CVE-2026-81563 Following HTTPS/SVCB aliases could leak resolver cache memory
  • CVE-2026-80274 Crash on wildcard answers carrying both NSEC and NSEC3 proofs
  • CVE-2026-19033 Require a TSIG on every message of incoming zone transfers
  • CVE-2026-81736 Cached HTTPS/SVCB aliases could exhaust resolver CPU
  • CVE-2026-19667 Reject negative cache records that do not fit in a dns_rdata_t

bind-9.18.51^git20261003.d0a87358-2.fc43 bind-dyndb-ldap-11.11-15.fc43

Fedora Security Advisories
3 days 16 hours ago
FEDORA-2026-aba85b9a89 Packages in this update:
  • bind-9.18.51^git20261003.d0a87358-2.fc43
  • bind-dyndb-ldap-11.11-15.fc43
Update description: Security updates using git snapshot

Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git branch bind-9.18.

  • CVE-2026-75029 Discard repeated SOA, CNAME, and DNAME records when parsing DNS messages
  • CVE-2026-19666 DNS64 with break-dnssec could cause an assertion failure
  • CVE-2026-19662 Prevent resolver crash with cached DNSSEC proofs
  • CVE-2026-19941 Prevent forged DNSSEC-validated NXDOMAIN responses
  • CVE-2026-78301 Out-of-zone records in a zone database could be served as authoritative
  • CVE-2026-81563 Following HTTPS/SVCB aliases could leak resolver cache memory
  • CVE-2026-80274 Crash on wildcard answers carrying both NSEC and NSEC3 proofs
  • CVE-2026-19033 Require a TSIG on every message of incoming zone transfers
  • CVE-2026-81736 Cached HTTPS/SVCB aliases could exhaust resolver CPU
  • CVE-2026-19667 Reject negative cache records that do not fit in a dns_rdata_t

perl-Badger-0.16-2.fc43 perl-CLI-Simple-2.2.5-1.fc43 perl-CSS-Inliner-4027-1.fc43 perl-Encoding-FixLatin-1.04-2.fc43 perl-HTML-Query-0.09-2.fc43 perl-Markdown-Render-2.0.4-1.fc43 perl-Text-Markdown-Discount-0.18-2.fc43 rt-5.0.10-1.fc43

Fedora Security Advisories
3 days 21 hours ago
FEDORA-2026-04f78841ec Packages in this update:
  • perl-Badger-0.16-2.fc43
  • perl-CLI-Simple-2.2.5-1.fc43
  • perl-CSS-Inliner-4027-1.fc43
  • perl-Encoding-FixLatin-1.04-2.fc43
  • perl-HTML-Query-0.09-2.fc43
  • perl-Markdown-Render-2.0.4-1.fc43
  • perl-Text-Markdown-Discount-0.18-2.fc43
  • rt-5.0.10-1.fc43
Update description:

Update to rt 5.0.10

Fixes CVE-2025-61873 CVE-2026-41075 CVE-2026-41076 CVE-2026-6841 CVE-2026-44231 CVE-2026-44229 CVE-2026-44230

perl-Badger-0.16-2.fc44 perl-CLI-Simple-2.2.5-1.fc44 perl-CSS-Inliner-4027-1.fc44 perl-Encoding-FixLatin-1.04-2.fc44 perl-HTML-Query-0.09-2.fc44 perl-Markdown-Render-2.0.4-1.fc44 perl-Text-Markdown-Discount-0.18-2.fc44 rt-5.0.10-1.fc44

Fedora Security Advisories
3 days 21 hours ago
FEDORA-2026-0b9eb888a8 Packages in this update:
  • perl-Badger-0.16-2.fc44
  • perl-CLI-Simple-2.2.5-1.fc44
  • perl-CSS-Inliner-4027-1.fc44
  • perl-Encoding-FixLatin-1.04-2.fc44
  • perl-HTML-Query-0.09-2.fc44
  • perl-Markdown-Render-2.0.4-1.fc44
  • perl-Text-Markdown-Discount-0.18-2.fc44
  • rt-5.0.10-1.fc44
Update description:

Update to rt 5.0.10

Fixes CVE-2025-61873 CVE-2026-41075 CVE-2026-41076 CVE-2026-6841 CVE-2026-44231 CVE-2026-44229 CVE-2026-44230

perl-Badger-0.16-2.fc45 perl-CLI-Simple-2.2.5-1.fc45 perl-CSS-Inliner-4027-1.fc45 perl-Encoding-FixLatin-1.04-2.fc45 perl-HTML-Query-0.09-2.fc45 perl-Markdown-Render-2.0.4-1.fc45 rt-5.0.10-1.fc45

Fedora Security Advisories
3 days 21 hours ago
FEDORA-2026-719dc03ab9 Packages in this update:
  • perl-Badger-0.16-2.fc45
  • perl-CLI-Simple-2.2.5-1.fc45
  • perl-CSS-Inliner-4027-1.fc45
  • perl-Encoding-FixLatin-1.04-2.fc45
  • perl-HTML-Query-0.09-2.fc45
  • perl-Markdown-Render-2.0.4-1.fc45
  • rt-5.0.10-1.fc45
Update description:

Update to rt 5.0.10

Fixes CVE-2025-61873 CVE-2026-41075 CVE-2026-41076 CVE-2026-6841 CVE-2026-44231 CVE-2026-44229 CVE-2026-44230

chromium-155.0.8059.79-1.el9

Fedora Security Advisories
3 days 22 hours ago
FEDORA-EPEL-2026-e4c861a1e5 Packages in this update:
  • chromium-155.0.8059.79-1.el9
Update description:

Update to 155.0.8059.39, includes 37 security fixes

  • CVE-2026-110136: Use after free in PDF
  • CVE-2026-110137: Use after free in WebRTC
  • CVE-2026-110138: Use after free in ShapeDetection
  • CVE-2026-110139: Use after free in Media
  • CVE-2026-110140: Type confusion in V8
  • CVE-2026-110141: Observable discrepancy in Media
  • CVE-2026-110142: Use after free in FileSystem
  • CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
  • CVE-2026-110144: Incorrect authorization in Mojo
  • CVE-2026-110145: Use after free in Passwords
  • CVE-2026-110146: Information leak in Passwords
  • CVE-2026-110147: Use after free in PDF
  • CVE-2026-110148: Use after free in SVG
  • CVE-2026-110149: Use after free in Browser
  • CVE-2026-110150: Privilege elevation in Installer
  • CVE-2026-110151: Use after free in Media
  • CVE-2026-110152: Buffer overflow in ANGLE
  • CVE-2026-110153: Use after free in Media
  • CVE-2026-110154: Use after free in Canvas
  • CVE-2026-110155: Buffer overflow in PDFium
  • CVE-2026-110156: Incorrect reference resolution in Extensions
  • CVE-2026-110157: Use after free in SVG
  • CVE-2026-110158: Use after free in Passwords
  • CVE-2026-110159: Incorrect authorization in Updater
  • CVE-2026-110160: Missing authorization in ReadingMode
  • CVE-2026-110161: Use after free in Network
  • CVE-2026-110162: Use after free in Desktop
  • CVE-2026-110163: Use after free in DOM
  • CVE-2026-110164: Use after free in DOM
  • CVE-2026-110165: Use after free in Core
  • CVE-2026-110166: Buffer overflow in Animation
  • CVE-2026-110167: Use after free in Media
  • CVE-2026-110168: Use after free in V8
  • CVE-2026-110169: Use after free in V8
  • CVE-2026-110170: Use after free in Bindings
  • CVE-2026-110171: Use after free in Media
  • CVE-2026-110172: Use after free in Media

chromium-155.0.8059.79-1.el10_3

Fedora Security Advisories
3 days 22 hours ago
FEDORA-EPEL-2026-e85d6428a6 Packages in this update:
  • chromium-155.0.8059.79-1.el10_3
Update description:

Update to 155.0.8059.39, includes 37 security fixes

  • CVE-2026-110136: Use after free in PDF
  • CVE-2026-110137: Use after free in WebRTC
  • CVE-2026-110138: Use after free in ShapeDetection
  • CVE-2026-110139: Use after free in Media
  • CVE-2026-110140: Type confusion in V8
  • CVE-2026-110141: Observable discrepancy in Media
  • CVE-2026-110142: Use after free in FileSystem
  • CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
  • CVE-2026-110144: Incorrect authorization in Mojo
  • CVE-2026-110145: Use after free in Passwords
  • CVE-2026-110146: Information leak in Passwords
  • CVE-2026-110147: Use after free in PDF
  • CVE-2026-110148: Use after free in SVG
  • CVE-2026-110149: Use after free in Browser
  • CVE-2026-110150: Privilege elevation in Installer
  • CVE-2026-110151: Use after free in Media
  • CVE-2026-110152: Buffer overflow in ANGLE
  • CVE-2026-110153: Use after free in Media
  • CVE-2026-110154: Use after free in Canvas
  • CVE-2026-110155: Buffer overflow in PDFium
  • CVE-2026-110156: Incorrect reference resolution in Extensions
  • CVE-2026-110157: Use after free in SVG
  • CVE-2026-110158: Use after free in Passwords
  • CVE-2026-110159: Incorrect authorization in Updater
  • CVE-2026-110160: Missing authorization in ReadingMode
  • CVE-2026-110161: Use after free in Network
  • CVE-2026-110162: Use after free in Desktop
  • CVE-2026-110163: Use after free in DOM
  • CVE-2026-110164: Use after free in DOM
  • CVE-2026-110165: Use after free in Core
  • CVE-2026-110166: Buffer overflow in Animation
  • CVE-2026-110167: Use after free in Media
  • CVE-2026-110168: Use after free in V8
  • CVE-2026-110169: Use after free in V8
  • CVE-2026-110170: Use after free in Bindings
  • CVE-2026-110171: Use after free in Media
  • CVE-2026-110172: Use after free in Media

chromium-155.0.8059.79-1.el10_4

Fedora Security Advisories
3 days 22 hours ago
FEDORA-EPEL-2026-a4b05877fa Packages in this update:
  • chromium-155.0.8059.79-1.el10_4
Update description:

Update to 155.0.8059.39, includes 37 security fixes

  • CVE-2026-110136: Use after free in PDF
  • CVE-2026-110137: Use after free in WebRTC
  • CVE-2026-110138: Use after free in ShapeDetection
  • CVE-2026-110139: Use after free in Media
  • CVE-2026-110140: Type confusion in V8
  • CVE-2026-110141: Observable discrepancy in Media
  • CVE-2026-110142: Use after free in FileSystem
  • CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
  • CVE-2026-110144: Incorrect authorization in Mojo
  • CVE-2026-110145: Use after free in Passwords
  • CVE-2026-110146: Information leak in Passwords
  • CVE-2026-110147: Use after free in PDF
  • CVE-2026-110148: Use after free in SVG
  • CVE-2026-110149: Use after free in Browser
  • CVE-2026-110150: Privilege elevation in Installer
  • CVE-2026-110151: Use after free in Media
  • CVE-2026-110152: Buffer overflow in ANGLE
  • CVE-2026-110153: Use after free in Media
  • CVE-2026-110154: Use after free in Canvas
  • CVE-2026-110155: Buffer overflow in PDFium
  • CVE-2026-110156: Incorrect reference resolution in Extensions
  • CVE-2026-110157: Use after free in SVG
  • CVE-2026-110158: Use after free in Passwords
  • CVE-2026-110159: Incorrect authorization in Updater
  • CVE-2026-110160: Missing authorization in ReadingMode
  • CVE-2026-110161: Use after free in Network
  • CVE-2026-110162: Use after free in Desktop
  • CVE-2026-110163: Use after free in DOM
  • CVE-2026-110164: Use after free in DOM
  • CVE-2026-110165: Use after free in Core
  • CVE-2026-110166: Buffer overflow in Animation
  • CVE-2026-110167: Use after free in Media
  • CVE-2026-110168: Use after free in V8
  • CVE-2026-110169: Use after free in V8
  • CVE-2026-110170: Use after free in Bindings
  • CVE-2026-110171: Use after free in Media
  • CVE-2026-110172: Use after free in Media

chromium-155.0.8059.79-1.el10_2

Fedora Security Advisories
3 days 22 hours ago
FEDORA-EPEL-2026-5f716994ca Packages in this update:
  • chromium-155.0.8059.79-1.el10_2
Update description:

Update to 155.0.8059.39, includes 37 security fixes

  • CVE-2026-110136: Use after free in PDF
  • CVE-2026-110137: Use after free in WebRTC
  • CVE-2026-110138: Use after free in ShapeDetection
  • CVE-2026-110139: Use after free in Media
  • CVE-2026-110140: Type confusion in V8
  • CVE-2026-110141: Observable discrepancy in Media
  • CVE-2026-110142: Use after free in FileSystem
  • CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
  • CVE-2026-110144: Incorrect authorization in Mojo
  • CVE-2026-110145: Use after free in Passwords
  • CVE-2026-110146: Information leak in Passwords
  • CVE-2026-110147: Use after free in PDF
  • CVE-2026-110148: Use after free in SVG
  • CVE-2026-110149: Use after free in Browser
  • CVE-2026-110150: Privilege elevation in Installer
  • CVE-2026-110151: Use after free in Media
  • CVE-2026-110152: Buffer overflow in ANGLE
  • CVE-2026-110153: Use after free in Media
  • CVE-2026-110154: Use after free in Canvas
  • CVE-2026-110155: Buffer overflow in PDFium
  • CVE-2026-110156: Incorrect reference resolution in Extensions
  • CVE-2026-110157: Use after free in SVG
  • CVE-2026-110158: Use after free in Passwords
  • CVE-2026-110159: Incorrect authorization in Updater
  • CVE-2026-110160: Missing authorization in ReadingMode
  • CVE-2026-110161: Use after free in Network
  • CVE-2026-110162: Use after free in Desktop
  • CVE-2026-110163: Use after free in DOM
  • CVE-2026-110164: Use after free in DOM
  • CVE-2026-110165: Use after free in Core
  • CVE-2026-110166: Buffer overflow in Animation
  • CVE-2026-110167: Use after free in Media
  • CVE-2026-110168: Use after free in V8
  • CVE-2026-110169: Use after free in V8
  • CVE-2026-110170: Use after free in Bindings
  • CVE-2026-110171: Use after free in Media
  • CVE-2026-110172: Use after free in Media

chromium-155.0.8059.79-1.fc45

Fedora Security Advisories
3 days 22 hours ago
FEDORA-2026-b80c0df326 Packages in this update:
  • chromium-155.0.8059.79-1.fc45
Update description:

Update to 155.0.8059.39, includes 37 security fixes

  • CVE-2026-110136: Use after free in PDF
  • CVE-2026-110137: Use after free in WebRTC
  • CVE-2026-110138: Use after free in ShapeDetection
  • CVE-2026-110139: Use after free in Media
  • CVE-2026-110140: Type confusion in V8
  • CVE-2026-110141: Observable discrepancy in Media
  • CVE-2026-110142: Use after free in FileSystem
  • CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
  • CVE-2026-110144: Incorrect authorization in Mojo
  • CVE-2026-110145: Use after free in Passwords
  • CVE-2026-110146: Information leak in Passwords
  • CVE-2026-110147: Use after free in PDF
  • CVE-2026-110148: Use after free in SVG
  • CVE-2026-110149: Use after free in Browser
  • CVE-2026-110150: Privilege elevation in Installer
  • CVE-2026-110151: Use after free in Media
  • CVE-2026-110152: Buffer overflow in ANGLE
  • CVE-2026-110153: Use after free in Media
  • CVE-2026-110154: Use after free in Canvas
  • CVE-2026-110155: Buffer overflow in PDFium
  • CVE-2026-110156: Incorrect reference resolution in Extensions
  • CVE-2026-110157: Use after free in SVG
  • CVE-2026-110158: Use after free in Passwords
  • CVE-2026-110159: Incorrect authorization in Updater
  • CVE-2026-110160: Missing authorization in ReadingMode
  • CVE-2026-110161: Use after free in Network
  • CVE-2026-110162: Use after free in Desktop
  • CVE-2026-110163: Use after free in DOM
  • CVE-2026-110164: Use after free in DOM
  • CVE-2026-110165: Use after free in Core
  • CVE-2026-110166: Buffer overflow in Animation
  • CVE-2026-110167: Use after free in Media
  • CVE-2026-110168: Use after free in V8
  • CVE-2026-110169: Use after free in V8
  • CVE-2026-110170: Use after free in Bindings
  • CVE-2026-110171: Use after free in Media
  • CVE-2026-110172: Use after free in Media

chromium-155.0.8059.79-1.fc43

Fedora Security Advisories
3 days 22 hours ago
FEDORA-2026-1710275b63 Packages in this update:
  • chromium-155.0.8059.79-1.fc43
Update description:

Update to 155.0.8059.39, includes 37 security fixes

  • CVE-2026-110136: Use after free in PDF
  • CVE-2026-110137: Use after free in WebRTC
  • CVE-2026-110138: Use after free in ShapeDetection
  • CVE-2026-110139: Use after free in Media
  • CVE-2026-110140: Type confusion in V8
  • CVE-2026-110141: Observable discrepancy in Media
  • CVE-2026-110142: Use after free in FileSystem
  • CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
  • CVE-2026-110144: Incorrect authorization in Mojo
  • CVE-2026-110145: Use after free in Passwords
  • CVE-2026-110146: Information leak in Passwords
  • CVE-2026-110147: Use after free in PDF
  • CVE-2026-110148: Use after free in SVG
  • CVE-2026-110149: Use after free in Browser
  • CVE-2026-110150: Privilege elevation in Installer
  • CVE-2026-110151: Use after free in Media
  • CVE-2026-110152: Buffer overflow in ANGLE
  • CVE-2026-110153: Use after free in Media
  • CVE-2026-110154: Use after free in Canvas
  • CVE-2026-110155: Buffer overflow in PDFium
  • CVE-2026-110156: Incorrect reference resolution in Extensions
  • CVE-2026-110157: Use after free in SVG
  • CVE-2026-110158: Use after free in Passwords
  • CVE-2026-110159: Incorrect authorization in Updater
  • CVE-2026-110160: Missing authorization in ReadingMode
  • CVE-2026-110161: Use after free in Network
  • CVE-2026-110162: Use after free in Desktop
  • CVE-2026-110163: Use after free in DOM
  • CVE-2026-110164: Use after free in DOM
  • CVE-2026-110165: Use after free in Core
  • CVE-2026-110166: Buffer overflow in Animation
  • CVE-2026-110167: Use after free in Media
  • CVE-2026-110168: Use after free in V8
  • CVE-2026-110169: Use after free in V8
  • CVE-2026-110170: Use after free in Bindings
  • CVE-2026-110171: Use after free in Media
  • CVE-2026-110172: Use after free in Media

chromium-155.0.8059.79-1.fc44

Fedora Security Advisories
3 days 22 hours ago
FEDORA-2026-ca33e36dd6 Packages in this update:
  • chromium-155.0.8059.79-1.fc44
Update description:

Update to 155.0.8059.39, includes 37 security fixes

  • CVE-2026-110136: Use after free in PDF
  • CVE-2026-110137: Use after free in WebRTC
  • CVE-2026-110138: Use after free in ShapeDetection
  • CVE-2026-110139: Use after free in Media
  • CVE-2026-110140: Type confusion in V8
  • CVE-2026-110141: Observable discrepancy in Media
  • CVE-2026-110142: Use after free in FileSystem
  • CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
  • CVE-2026-110144: Incorrect authorization in Mojo
  • CVE-2026-110145: Use after free in Passwords
  • CVE-2026-110146: Information leak in Passwords
  • CVE-2026-110147: Use after free in PDF
  • CVE-2026-110148: Use after free in SVG
  • CVE-2026-110149: Use after free in Browser
  • CVE-2026-110150: Privilege elevation in Installer
  • CVE-2026-110151: Use after free in Media
  • CVE-2026-110152: Buffer overflow in ANGLE
  • CVE-2026-110153: Use after free in Media
  • CVE-2026-110154: Use after free in Canvas
  • CVE-2026-110155: Buffer overflow in PDFium
  • CVE-2026-110156: Incorrect reference resolution in Extensions
  • CVE-2026-110157: Use after free in SVG
  • CVE-2026-110158: Use after free in Passwords
  • CVE-2026-110159: Incorrect authorization in Updater
  • CVE-2026-110160: Missing authorization in ReadingMode
  • CVE-2026-110161: Use after free in Network
  • CVE-2026-110162: Use after free in Desktop
  • CVE-2026-110163: Use after free in DOM
  • CVE-2026-110164: Use after free in DOM
  • CVE-2026-110165: Use after free in Core
  • CVE-2026-110166: Buffer overflow in Animation
  • CVE-2026-110167: Use after free in Media
  • CVE-2026-110168: Use after free in V8
  • CVE-2026-110169: Use after free in V8
  • CVE-2026-110170: Use after free in Bindings
  • CVE-2026-110171: Use after free in Media
  • CVE-2026-110172: Use after free in Media