Aggregator

USN-8819-2: Linux kernel vulnerabilities

Ubuntu Security Advisories
4 days 9 hours ago
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system (NFS) server daemon; - IPv6 networking; - Netfilter; (CVE-2025-38724, CVE-2026-53131, CVE-2026-53221)

chromium-154.0.8037.57-1.el10_4

Fedora Security Advisories
4 days 11 hours ago
FEDORA-EPEL-2026-0004b04067 Packages in this update:
  • chromium-154.0.8037.57-1.el10_4
Update description:

Update to 154.0.8037.57

  • CVE-2026-95274: Improper output encoding in DevTools
  • CVE-2026-95275: Incorrect reference resolution in MediaStream
  • CVE-2026-95276: Improper input validation in Themes
  • CVE-2026-95277: Use after free in Views
  • CVE-2026-95278: Missing authorization in WakeLock
  • CVE-2026-95279: UI misrepresentation in Omnibox
  • CVE-2026-95280: Race condition in V8
  • CVE-2026-95281: Buffer overflow in ANGLE
  • CVE-2026-95282: Use after free in Platform
  • CVE-2026-95283: Buffer overflow in Tint
  • CVE-2026-95284: Buffer overflow in ANGLE
  • CVE-2026-95285: Missing authorization in WebView
  • CVE-2026-95286: Type confusion in Bindings
  • CVE-2026-95287: Missing authorization in Navigation
  • CVE-2026-95288: UI misrepresentation in Mobile
  • CVE-2026-95289: Incorrect authorization in Scroll
  • CVE-2026-95290: Missing authorization in NFC
  • CVE-2026-95291: UI misrepresentation in SecurityIndicators
  • CVE-2026-95292: Incorrect authorization in Safebrowsing
  • CVE-2026-95293: Uninitialized resource in GPU
  • CVE-2026-95294: UI misrepresentation in Browser
  • CVE-2026-95295: Information leak in Mobile
  • CVE-2026-95296: Missing authorization in Core
  • CVE-2026-95297: Missing authorization in Contextual Tasks
  • CVE-2026-95298: Use after free in Browser
  • CVE-2026-95299: Use after free in GPU
  • CVE-2026-95300: Missing authorization in DevTools
  • CVE-2026-95301: Missing authorization in Extensions
  • CVE-2026-95302: Incorrect authorization in WebAPKs
  • CVE-2026-95303: Incomplete cleanup in SmartCard
  • CVE-2026-95304: Out of bounds write in V8
  • CVE-2026-95305: UI misrepresentation in Chromoting
  • CVE-2026-95306: Type confusion in V8
  • CVE-2026-95307: UI misrepresentation in ExtensionsMenu
  • CVE-2026-95308: Integer overflow in Metrics
  • CVE-2026-95309: UI misrepresentation in Mobile
  • CVE-2026-95310: Use after free in AdFilter
  • CVE-2026-95311: Free of non-heap memory in Fonts
  • CVE-2026-95312: Information leak in Passwords
  • CVE-2026-95313: Use after free in Fullscreen
  • CVE-2026-95314: Incorrect authorization in HID
  • CVE-2026-95315: Use after free in Aura
  • CVE-2026-95316: Unchecked return value in Performance
  • CVE-2026-95317: Incorrect authorization in MediaCapture
  • CVE-2026-95318: Buffer overflow in Video
  • CVE-2026-95319: Use after free in Printing
  • CVE-2026-95320: Missing authorization in Navigation
  • CVE-2026-95321: UI misrepresentation in Payments
  • CVE-2026-95322: Out of bounds write in GPU
  • CVE-2026-95323: UI misrepresentation in Chromium
  • CVE-2026-95324: Uninitialized resource in GPU
  • CVE-2026-95325: Use after free in ANGLE
  • CVE-2026-95326: Incomplete cleanup in Bluetooth
  • CVE-2026-95327: Information leak in Networking
  • CVE-2026-95328: Confused deputy in Mobile
  • CVE-2026-95329: Out of bounds write in WebGL
  • CVE-2026-95330: Improper state validation in Downloads
  • CVE-2026-95331: Out of bounds write in ANGLE
  • CVE-2026-95332: Use of uninitialized variable in Tint
  • CVE-2026-95333: Use after free in Metrics
  • CVE-2026-95334: Incorrect reference resolution in WebProtect
  • CVE-2026-95335: Use after free in HID
  • CVE-2026-95336: Information leak in Transactions Platform
  • CVE-2026-95337: UI misrepresentation in Messages
  • CVE-2026-95338: Use after free in PDFium
  • CVE-2026-95339: Use after free in ServiceWorker
  • CVE-2026-95340: Incorrect authorization in PictureInPicture
  • CVE-2026-95341: Improper input validation in Desktop
  • CVE-2026-95342: Missing authorization in V8
  • CVE-2026-95343: Use after free in WebAudio
  • CVE-2026-95344: Race condition in DevTools
  • CVE-2026-95345: Use after free in Actor
  • CVE-2026-95346: UI misrepresentation in Chromoting
  • CVE-2026-95347: Use after free in Updater
  • CVE-2026-95348: Use after free in Bluetooth
  • CVE-2026-95349: Buffer overflow in WebGL
  • CVE-2026-95350: Buffer overflow in ANGLE
  • CVE-2026-95351: Use after free in Views
  • CVE-2026-95352: Incorrect authorization in DevTools
  • CVE-2026-95353: Use after free in Bindings
  • CVE-2026-95354: Use after free in Verifier
  • CVE-2026-95355: Incorrect authorization in Navigation
  • CVE-2026-95356: Use after free in WindowDialog
  • CVE-2026-95357: Out of bounds write in GPU
  • CVE-2026-95358: Incorrect authorization in Mobile
  • CVE-2026-95359: Uninitialized resource in GPU
  • CVE-2026-95360: Race condition in Editing
  • CVE-2026-95361: Confused deputy in DevTools
  • CVE-2026-95362: Cross-site request forgery in DevTools
  • CVE-2026-95363: UI misrepresentation in FileSystem
  • CVE-2026-95364: Improper input validation in Passwords
  • CVE-2026-95365: Type confusion in IndexedDB
  • CVE-2026-95366: Use of released resource in Core
  • CVE-2026-95367: Information leak in DataTransfer
  • CVE-2026-95368: Incorrect authorization in DevTools
  • CVE-2026-95369: Inappropriate implementation in XML
  • CVE-2026-95370: Inappropriate implementation in NFC
  • CVE-2026-95371: Missing authorization in Views
  • CVE-2026-95372: Use after free in Chromecast
  • CVE-2026-95373: Use after free in DevTools
  • CVE-2026-95374: Incorrect authorization in Network
  • CVE-2026-95375: Incorrect authorization in BrowserTag
  • CVE-2026-95376: Externally controlled reference in DevTools
  • CVE-2026-95380: Type confusion in V8
  • CVE-2026-95381: Improper input validation in Printing
  • CVE-2026-95382: Improper input validation in Auth
  • CVE-2026-95384: Race condition in Transactions Platform
  • CVE-2026-95385: Inappropriate implementation in PlatformIntegration

chromium-154.0.8037.57-1.fc43

Fedora Security Advisories
4 days 11 hours ago
FEDORA-2026-8729b61cd3 Packages in this update:
  • chromium-154.0.8037.57-1.fc43
Update description:

Update to 154.0.8037.57

  • CVE-2026-95274: Improper output encoding in DevTools
  • CVE-2026-95275: Incorrect reference resolution in MediaStream
  • CVE-2026-95276: Improper input validation in Themes
  • CVE-2026-95277: Use after free in Views
  • CVE-2026-95278: Missing authorization in WakeLock
  • CVE-2026-95279: UI misrepresentation in Omnibox
  • CVE-2026-95280: Race condition in V8
  • CVE-2026-95281: Buffer overflow in ANGLE
  • CVE-2026-95282: Use after free in Platform
  • CVE-2026-95283: Buffer overflow in Tint
  • CVE-2026-95284: Buffer overflow in ANGLE
  • CVE-2026-95285: Missing authorization in WebView
  • CVE-2026-95286: Type confusion in Bindings
  • CVE-2026-95287: Missing authorization in Navigation
  • CVE-2026-95288: UI misrepresentation in Mobile
  • CVE-2026-95289: Incorrect authorization in Scroll
  • CVE-2026-95290: Missing authorization in NFC
  • CVE-2026-95291: UI misrepresentation in SecurityIndicators
  • CVE-2026-95292: Incorrect authorization in Safebrowsing
  • CVE-2026-95293: Uninitialized resource in GPU
  • CVE-2026-95294: UI misrepresentation in Browser
  • CVE-2026-95295: Information leak in Mobile
  • CVE-2026-95296: Missing authorization in Core
  • CVE-2026-95297: Missing authorization in Contextual Tasks
  • CVE-2026-95298: Use after free in Browser
  • CVE-2026-95299: Use after free in GPU
  • CVE-2026-95300: Missing authorization in DevTools
  • CVE-2026-95301: Missing authorization in Extensions
  • CVE-2026-95302: Incorrect authorization in WebAPKs
  • CVE-2026-95303: Incomplete cleanup in SmartCard
  • CVE-2026-95304: Out of bounds write in V8
  • CVE-2026-95305: UI misrepresentation in Chromoting
  • CVE-2026-95306: Type confusion in V8
  • CVE-2026-95307: UI misrepresentation in ExtensionsMenu
  • CVE-2026-95308: Integer overflow in Metrics
  • CVE-2026-95309: UI misrepresentation in Mobile
  • CVE-2026-95310: Use after free in AdFilter
  • CVE-2026-95311: Free of non-heap memory in Fonts
  • CVE-2026-95312: Information leak in Passwords
  • CVE-2026-95313: Use after free in Fullscreen
  • CVE-2026-95314: Incorrect authorization in HID
  • CVE-2026-95315: Use after free in Aura
  • CVE-2026-95316: Unchecked return value in Performance
  • CVE-2026-95317: Incorrect authorization in MediaCapture
  • CVE-2026-95318: Buffer overflow in Video
  • CVE-2026-95319: Use after free in Printing
  • CVE-2026-95320: Missing authorization in Navigation
  • CVE-2026-95321: UI misrepresentation in Payments
  • CVE-2026-95322: Out of bounds write in GPU
  • CVE-2026-95323: UI misrepresentation in Chromium
  • CVE-2026-95324: Uninitialized resource in GPU
  • CVE-2026-95325: Use after free in ANGLE
  • CVE-2026-95326: Incomplete cleanup in Bluetooth
  • CVE-2026-95327: Information leak in Networking
  • CVE-2026-95328: Confused deputy in Mobile
  • CVE-2026-95329: Out of bounds write in WebGL
  • CVE-2026-95330: Improper state validation in Downloads
  • CVE-2026-95331: Out of bounds write in ANGLE
  • CVE-2026-95332: Use of uninitialized variable in Tint
  • CVE-2026-95333: Use after free in Metrics
  • CVE-2026-95334: Incorrect reference resolution in WebProtect
  • CVE-2026-95335: Use after free in HID
  • CVE-2026-95336: Information leak in Transactions Platform
  • CVE-2026-95337: UI misrepresentation in Messages
  • CVE-2026-95338: Use after free in PDFium
  • CVE-2026-95339: Use after free in ServiceWorker
  • CVE-2026-95340: Incorrect authorization in PictureInPicture
  • CVE-2026-95341: Improper input validation in Desktop
  • CVE-2026-95342: Missing authorization in V8
  • CVE-2026-95343: Use after free in WebAudio
  • CVE-2026-95344: Race condition in DevTools
  • CVE-2026-95345: Use after free in Actor
  • CVE-2026-95346: UI misrepresentation in Chromoting
  • CVE-2026-95347: Use after free in Updater
  • CVE-2026-95348: Use after free in Bluetooth
  • CVE-2026-95349: Buffer overflow in WebGL
  • CVE-2026-95350: Buffer overflow in ANGLE
  • CVE-2026-95351: Use after free in Views
  • CVE-2026-95352: Incorrect authorization in DevTools
  • CVE-2026-95353: Use after free in Bindings
  • CVE-2026-95354: Use after free in Verifier
  • CVE-2026-95355: Incorrect authorization in Navigation
  • CVE-2026-95356: Use after free in WindowDialog
  • CVE-2026-95357: Out of bounds write in GPU
  • CVE-2026-95358: Incorrect authorization in Mobile
  • CVE-2026-95359: Uninitialized resource in GPU
  • CVE-2026-95360: Race condition in Editing
  • CVE-2026-95361: Confused deputy in DevTools
  • CVE-2026-95362: Cross-site request forgery in DevTools
  • CVE-2026-95363: UI misrepresentation in FileSystem
  • CVE-2026-95364: Improper input validation in Passwords
  • CVE-2026-95365: Type confusion in IndexedDB
  • CVE-2026-95366: Use of released resource in Core
  • CVE-2026-95367: Information leak in DataTransfer
  • CVE-2026-95368: Incorrect authorization in DevTools
  • CVE-2026-95369: Inappropriate implementation in XML
  • CVE-2026-95370: Inappropriate implementation in NFC
  • CVE-2026-95371: Missing authorization in Views
  • CVE-2026-95372: Use after free in Chromecast
  • CVE-2026-95373: Use after free in DevTools
  • CVE-2026-95374: Incorrect authorization in Network
  • CVE-2026-95375: Incorrect authorization in BrowserTag
  • CVE-2026-95376: Externally controlled reference in DevTools
  • CVE-2026-95380: Type confusion in V8
  • CVE-2026-95381: Improper input validation in Printing
  • CVE-2026-95382: Improper input validation in Auth
  • CVE-2026-95384: Race condition in Transactions Platform
  • CVE-2026-95385: Inappropriate implementation in PlatformIntegration

chromium-154.0.8037.57-1.fc44

Fedora Security Advisories
4 days 11 hours ago
FEDORA-2026-1e015b5959 Packages in this update:
  • chromium-154.0.8037.57-1.fc44
Update description:

Update to 154.0.8037.57

  • CVE-2026-95274: Improper output encoding in DevTools
  • CVE-2026-95275: Incorrect reference resolution in MediaStream
  • CVE-2026-95276: Improper input validation in Themes
  • CVE-2026-95277: Use after free in Views
  • CVE-2026-95278: Missing authorization in WakeLock
  • CVE-2026-95279: UI misrepresentation in Omnibox
  • CVE-2026-95280: Race condition in V8
  • CVE-2026-95281: Buffer overflow in ANGLE
  • CVE-2026-95282: Use after free in Platform
  • CVE-2026-95283: Buffer overflow in Tint
  • CVE-2026-95284: Buffer overflow in ANGLE
  • CVE-2026-95285: Missing authorization in WebView
  • CVE-2026-95286: Type confusion in Bindings
  • CVE-2026-95287: Missing authorization in Navigation
  • CVE-2026-95288: UI misrepresentation in Mobile
  • CVE-2026-95289: Incorrect authorization in Scroll
  • CVE-2026-95290: Missing authorization in NFC
  • CVE-2026-95291: UI misrepresentation in SecurityIndicators
  • CVE-2026-95292: Incorrect authorization in Safebrowsing
  • CVE-2026-95293: Uninitialized resource in GPU
  • CVE-2026-95294: UI misrepresentation in Browser
  • CVE-2026-95295: Information leak in Mobile
  • CVE-2026-95296: Missing authorization in Core
  • CVE-2026-95297: Missing authorization in Contextual Tasks
  • CVE-2026-95298: Use after free in Browser
  • CVE-2026-95299: Use after free in GPU
  • CVE-2026-95300: Missing authorization in DevTools
  • CVE-2026-95301: Missing authorization in Extensions
  • CVE-2026-95302: Incorrect authorization in WebAPKs
  • CVE-2026-95303: Incomplete cleanup in SmartCard
  • CVE-2026-95304: Out of bounds write in V8
  • CVE-2026-95305: UI misrepresentation in Chromoting
  • CVE-2026-95306: Type confusion in V8
  • CVE-2026-95307: UI misrepresentation in ExtensionsMenu
  • CVE-2026-95308: Integer overflow in Metrics
  • CVE-2026-95309: UI misrepresentation in Mobile
  • CVE-2026-95310: Use after free in AdFilter
  • CVE-2026-95311: Free of non-heap memory in Fonts
  • CVE-2026-95312: Information leak in Passwords
  • CVE-2026-95313: Use after free in Fullscreen
  • CVE-2026-95314: Incorrect authorization in HID
  • CVE-2026-95315: Use after free in Aura
  • CVE-2026-95316: Unchecked return value in Performance
  • CVE-2026-95317: Incorrect authorization in MediaCapture
  • CVE-2026-95318: Buffer overflow in Video
  • CVE-2026-95319: Use after free in Printing
  • CVE-2026-95320: Missing authorization in Navigation
  • CVE-2026-95321: UI misrepresentation in Payments
  • CVE-2026-95322: Out of bounds write in GPU
  • CVE-2026-95323: UI misrepresentation in Chromium
  • CVE-2026-95324: Uninitialized resource in GPU
  • CVE-2026-95325: Use after free in ANGLE
  • CVE-2026-95326: Incomplete cleanup in Bluetooth
  • CVE-2026-95327: Information leak in Networking
  • CVE-2026-95328: Confused deputy in Mobile
  • CVE-2026-95329: Out of bounds write in WebGL
  • CVE-2026-95330: Improper state validation in Downloads
  • CVE-2026-95331: Out of bounds write in ANGLE
  • CVE-2026-95332: Use of uninitialized variable in Tint
  • CVE-2026-95333: Use after free in Metrics
  • CVE-2026-95334: Incorrect reference resolution in WebProtect
  • CVE-2026-95335: Use after free in HID
  • CVE-2026-95336: Information leak in Transactions Platform
  • CVE-2026-95337: UI misrepresentation in Messages
  • CVE-2026-95338: Use after free in PDFium
  • CVE-2026-95339: Use after free in ServiceWorker
  • CVE-2026-95340: Incorrect authorization in PictureInPicture
  • CVE-2026-95341: Improper input validation in Desktop
  • CVE-2026-95342: Missing authorization in V8
  • CVE-2026-95343: Use after free in WebAudio
  • CVE-2026-95344: Race condition in DevTools
  • CVE-2026-95345: Use after free in Actor
  • CVE-2026-95346: UI misrepresentation in Chromoting
  • CVE-2026-95347: Use after free in Updater
  • CVE-2026-95348: Use after free in Bluetooth
  • CVE-2026-95349: Buffer overflow in WebGL
  • CVE-2026-95350: Buffer overflow in ANGLE
  • CVE-2026-95351: Use after free in Views
  • CVE-2026-95352: Incorrect authorization in DevTools
  • CVE-2026-95353: Use after free in Bindings
  • CVE-2026-95354: Use after free in Verifier
  • CVE-2026-95355: Incorrect authorization in Navigation
  • CVE-2026-95356: Use after free in WindowDialog
  • CVE-2026-95357: Out of bounds write in GPU
  • CVE-2026-95358: Incorrect authorization in Mobile
  • CVE-2026-95359: Uninitialized resource in GPU
  • CVE-2026-95360: Race condition in Editing
  • CVE-2026-95361: Confused deputy in DevTools
  • CVE-2026-95362: Cross-site request forgery in DevTools
  • CVE-2026-95363: UI misrepresentation in FileSystem
  • CVE-2026-95364: Improper input validation in Passwords
  • CVE-2026-95365: Type confusion in IndexedDB
  • CVE-2026-95366: Use of released resource in Core
  • CVE-2026-95367: Information leak in DataTransfer
  • CVE-2026-95368: Incorrect authorization in DevTools
  • CVE-2026-95369: Inappropriate implementation in XML
  • CVE-2026-95370: Inappropriate implementation in NFC
  • CVE-2026-95371: Missing authorization in Views
  • CVE-2026-95372: Use after free in Chromecast
  • CVE-2026-95373: Use after free in DevTools
  • CVE-2026-95374: Incorrect authorization in Network
  • CVE-2026-95375: Incorrect authorization in BrowserTag
  • CVE-2026-95376: Externally controlled reference in DevTools
  • CVE-2026-95380: Type confusion in V8
  • CVE-2026-95381: Improper input validation in Printing
  • CVE-2026-95382: Improper input validation in Auth
  • CVE-2026-95384: Race condition in Transactions Platform
  • CVE-2026-95385: Inappropriate implementation in PlatformIntegration

chromium-154.0.8037.57-1.fc45

Fedora Security Advisories
4 days 11 hours ago
FEDORA-2026-735231f9e0 Packages in this update:
  • chromium-154.0.8037.57-1.fc45
Update description:

Update to 154.0.8037.57

  • CVE-2026-95274: Improper output encoding in DevTools
  • CVE-2026-95275: Incorrect reference resolution in MediaStream
  • CVE-2026-95276: Improper input validation in Themes
  • CVE-2026-95277: Use after free in Views
  • CVE-2026-95278: Missing authorization in WakeLock
  • CVE-2026-95279: UI misrepresentation in Omnibox
  • CVE-2026-95280: Race condition in V8
  • CVE-2026-95281: Buffer overflow in ANGLE
  • CVE-2026-95282: Use after free in Platform
  • CVE-2026-95283: Buffer overflow in Tint
  • CVE-2026-95284: Buffer overflow in ANGLE
  • CVE-2026-95285: Missing authorization in WebView
  • CVE-2026-95286: Type confusion in Bindings
  • CVE-2026-95287: Missing authorization in Navigation
  • CVE-2026-95288: UI misrepresentation in Mobile
  • CVE-2026-95289: Incorrect authorization in Scroll
  • CVE-2026-95290: Missing authorization in NFC
  • CVE-2026-95291: UI misrepresentation in SecurityIndicators
  • CVE-2026-95292: Incorrect authorization in Safebrowsing
  • CVE-2026-95293: Uninitialized resource in GPU
  • CVE-2026-95294: UI misrepresentation in Browser
  • CVE-2026-95295: Information leak in Mobile
  • CVE-2026-95296: Missing authorization in Core
  • CVE-2026-95297: Missing authorization in Contextual Tasks
  • CVE-2026-95298: Use after free in Browser
  • CVE-2026-95299: Use after free in GPU
  • CVE-2026-95300: Missing authorization in DevTools
  • CVE-2026-95301: Missing authorization in Extensions
  • CVE-2026-95302: Incorrect authorization in WebAPKs
  • CVE-2026-95303: Incomplete cleanup in SmartCard
  • CVE-2026-95304: Out of bounds write in V8
  • CVE-2026-95305: UI misrepresentation in Chromoting
  • CVE-2026-95306: Type confusion in V8
  • CVE-2026-95307: UI misrepresentation in ExtensionsMenu
  • CVE-2026-95308: Integer overflow in Metrics
  • CVE-2026-95309: UI misrepresentation in Mobile
  • CVE-2026-95310: Use after free in AdFilter
  • CVE-2026-95311: Free of non-heap memory in Fonts
  • CVE-2026-95312: Information leak in Passwords
  • CVE-2026-95313: Use after free in Fullscreen
  • CVE-2026-95314: Incorrect authorization in HID
  • CVE-2026-95315: Use after free in Aura
  • CVE-2026-95316: Unchecked return value in Performance
  • CVE-2026-95317: Incorrect authorization in MediaCapture
  • CVE-2026-95318: Buffer overflow in Video
  • CVE-2026-95319: Use after free in Printing
  • CVE-2026-95320: Missing authorization in Navigation
  • CVE-2026-95321: UI misrepresentation in Payments
  • CVE-2026-95322: Out of bounds write in GPU
  • CVE-2026-95323: UI misrepresentation in Chromium
  • CVE-2026-95324: Uninitialized resource in GPU
  • CVE-2026-95325: Use after free in ANGLE
  • CVE-2026-95326: Incomplete cleanup in Bluetooth
  • CVE-2026-95327: Information leak in Networking
  • CVE-2026-95328: Confused deputy in Mobile
  • CVE-2026-95329: Out of bounds write in WebGL
  • CVE-2026-95330: Improper state validation in Downloads
  • CVE-2026-95331: Out of bounds write in ANGLE
  • CVE-2026-95332: Use of uninitialized variable in Tint
  • CVE-2026-95333: Use after free in Metrics
  • CVE-2026-95334: Incorrect reference resolution in WebProtect
  • CVE-2026-95335: Use after free in HID
  • CVE-2026-95336: Information leak in Transactions Platform
  • CVE-2026-95337: UI misrepresentation in Messages
  • CVE-2026-95338: Use after free in PDFium
  • CVE-2026-95339: Use after free in ServiceWorker
  • CVE-2026-95340: Incorrect authorization in PictureInPicture
  • CVE-2026-95341: Improper input validation in Desktop
  • CVE-2026-95342: Missing authorization in V8
  • CVE-2026-95343: Use after free in WebAudio
  • CVE-2026-95344: Race condition in DevTools
  • CVE-2026-95345: Use after free in Actor
  • CVE-2026-95346: UI misrepresentation in Chromoting
  • CVE-2026-95347: Use after free in Updater
  • CVE-2026-95348: Use after free in Bluetooth
  • CVE-2026-95349: Buffer overflow in WebGL
  • CVE-2026-95350: Buffer overflow in ANGLE
  • CVE-2026-95351: Use after free in Views
  • CVE-2026-95352: Incorrect authorization in DevTools
  • CVE-2026-95353: Use after free in Bindings
  • CVE-2026-95354: Use after free in Verifier
  • CVE-2026-95355: Incorrect authorization in Navigation
  • CVE-2026-95356: Use after free in WindowDialog
  • CVE-2026-95357: Out of bounds write in GPU
  • CVE-2026-95358: Incorrect authorization in Mobile
  • CVE-2026-95359: Uninitialized resource in GPU
  • CVE-2026-95360: Race condition in Editing
  • CVE-2026-95361: Confused deputy in DevTools
  • CVE-2026-95362: Cross-site request forgery in DevTools
  • CVE-2026-95363: UI misrepresentation in FileSystem
  • CVE-2026-95364: Improper input validation in Passwords
  • CVE-2026-95365: Type confusion in IndexedDB
  • CVE-2026-95366: Use of released resource in Core
  • CVE-2026-95367: Information leak in DataTransfer
  • CVE-2026-95368: Incorrect authorization in DevTools
  • CVE-2026-95369: Inappropriate implementation in XML
  • CVE-2026-95370: Inappropriate implementation in NFC
  • CVE-2026-95371: Missing authorization in Views
  • CVE-2026-95372: Use after free in Chromecast
  • CVE-2026-95373: Use after free in DevTools
  • CVE-2026-95374: Incorrect authorization in Network
  • CVE-2026-95375: Incorrect authorization in BrowserTag
  • CVE-2026-95376: Externally controlled reference in DevTools
  • CVE-2026-95380: Type confusion in V8
  • CVE-2026-95381: Improper input validation in Printing
  • CVE-2026-95382: Improper input validation in Auth
  • CVE-2026-95384: Race condition in Transactions Platform
  • CVE-2026-95385: Inappropriate implementation in PlatformIntegration

chromium-154.0.8037.57-1.el10_3

Fedora Security Advisories
4 days 11 hours ago
FEDORA-EPEL-2026-355d0a235d Packages in this update:
  • chromium-154.0.8037.57-1.el10_3
Update description:

Update to 154.0.8037.57

  • CVE-2026-95274: Improper output encoding in DevTools
  • CVE-2026-95275: Incorrect reference resolution in MediaStream
  • CVE-2026-95276: Improper input validation in Themes
  • CVE-2026-95277: Use after free in Views
  • CVE-2026-95278: Missing authorization in WakeLock
  • CVE-2026-95279: UI misrepresentation in Omnibox
  • CVE-2026-95280: Race condition in V8
  • CVE-2026-95281: Buffer overflow in ANGLE
  • CVE-2026-95282: Use after free in Platform
  • CVE-2026-95283: Buffer overflow in Tint
  • CVE-2026-95284: Buffer overflow in ANGLE
  • CVE-2026-95285: Missing authorization in WebView
  • CVE-2026-95286: Type confusion in Bindings
  • CVE-2026-95287: Missing authorization in Navigation
  • CVE-2026-95288: UI misrepresentation in Mobile
  • CVE-2026-95289: Incorrect authorization in Scroll
  • CVE-2026-95290: Missing authorization in NFC
  • CVE-2026-95291: UI misrepresentation in SecurityIndicators
  • CVE-2026-95292: Incorrect authorization in Safebrowsing
  • CVE-2026-95293: Uninitialized resource in GPU
  • CVE-2026-95294: UI misrepresentation in Browser
  • CVE-2026-95295: Information leak in Mobile
  • CVE-2026-95296: Missing authorization in Core
  • CVE-2026-95297: Missing authorization in Contextual Tasks
  • CVE-2026-95298: Use after free in Browser
  • CVE-2026-95299: Use after free in GPU
  • CVE-2026-95300: Missing authorization in DevTools
  • CVE-2026-95301: Missing authorization in Extensions
  • CVE-2026-95302: Incorrect authorization in WebAPKs
  • CVE-2026-95303: Incomplete cleanup in SmartCard
  • CVE-2026-95304: Out of bounds write in V8
  • CVE-2026-95305: UI misrepresentation in Chromoting
  • CVE-2026-95306: Type confusion in V8
  • CVE-2026-95307: UI misrepresentation in ExtensionsMenu
  • CVE-2026-95308: Integer overflow in Metrics
  • CVE-2026-95309: UI misrepresentation in Mobile
  • CVE-2026-95310: Use after free in AdFilter
  • CVE-2026-95311: Free of non-heap memory in Fonts
  • CVE-2026-95312: Information leak in Passwords
  • CVE-2026-95313: Use after free in Fullscreen
  • CVE-2026-95314: Incorrect authorization in HID
  • CVE-2026-95315: Use after free in Aura
  • CVE-2026-95316: Unchecked return value in Performance
  • CVE-2026-95317: Incorrect authorization in MediaCapture
  • CVE-2026-95318: Buffer overflow in Video
  • CVE-2026-95319: Use after free in Printing
  • CVE-2026-95320: Missing authorization in Navigation
  • CVE-2026-95321: UI misrepresentation in Payments
  • CVE-2026-95322: Out of bounds write in GPU
  • CVE-2026-95323: UI misrepresentation in Chromium
  • CVE-2026-95324: Uninitialized resource in GPU
  • CVE-2026-95325: Use after free in ANGLE
  • CVE-2026-95326: Incomplete cleanup in Bluetooth
  • CVE-2026-95327: Information leak in Networking
  • CVE-2026-95328: Confused deputy in Mobile
  • CVE-2026-95329: Out of bounds write in WebGL
  • CVE-2026-95330: Improper state validation in Downloads
  • CVE-2026-95331: Out of bounds write in ANGLE
  • CVE-2026-95332: Use of uninitialized variable in Tint
  • CVE-2026-95333: Use after free in Metrics
  • CVE-2026-95334: Incorrect reference resolution in WebProtect
  • CVE-2026-95335: Use after free in HID
  • CVE-2026-95336: Information leak in Transactions Platform
  • CVE-2026-95337: UI misrepresentation in Messages
  • CVE-2026-95338: Use after free in PDFium
  • CVE-2026-95339: Use after free in ServiceWorker
  • CVE-2026-95340: Incorrect authorization in PictureInPicture
  • CVE-2026-95341: Improper input validation in Desktop
  • CVE-2026-95342: Missing authorization in V8
  • CVE-2026-95343: Use after free in WebAudio
  • CVE-2026-95344: Race condition in DevTools
  • CVE-2026-95345: Use after free in Actor
  • CVE-2026-95346: UI misrepresentation in Chromoting
  • CVE-2026-95347: Use after free in Updater
  • CVE-2026-95348: Use after free in Bluetooth
  • CVE-2026-95349: Buffer overflow in WebGL
  • CVE-2026-95350: Buffer overflow in ANGLE
  • CVE-2026-95351: Use after free in Views
  • CVE-2026-95352: Incorrect authorization in DevTools
  • CVE-2026-95353: Use after free in Bindings
  • CVE-2026-95354: Use after free in Verifier
  • CVE-2026-95355: Incorrect authorization in Navigation
  • CVE-2026-95356: Use after free in WindowDialog
  • CVE-2026-95357: Out of bounds write in GPU
  • CVE-2026-95358: Incorrect authorization in Mobile
  • CVE-2026-95359: Uninitialized resource in GPU
  • CVE-2026-95360: Race condition in Editing
  • CVE-2026-95361: Confused deputy in DevTools
  • CVE-2026-95362: Cross-site request forgery in DevTools
  • CVE-2026-95363: UI misrepresentation in FileSystem
  • CVE-2026-95364: Improper input validation in Passwords
  • CVE-2026-95365: Type confusion in IndexedDB
  • CVE-2026-95366: Use of released resource in Core
  • CVE-2026-95367: Information leak in DataTransfer
  • CVE-2026-95368: Incorrect authorization in DevTools
  • CVE-2026-95369: Inappropriate implementation in XML
  • CVE-2026-95370: Inappropriate implementation in NFC
  • CVE-2026-95371: Missing authorization in Views
  • CVE-2026-95372: Use after free in Chromecast
  • CVE-2026-95373: Use after free in DevTools
  • CVE-2026-95374: Incorrect authorization in Network
  • CVE-2026-95375: Incorrect authorization in BrowserTag
  • CVE-2026-95376: Externally controlled reference in DevTools
  • CVE-2026-95380: Type confusion in V8
  • CVE-2026-95381: Improper input validation in Printing
  • CVE-2026-95382: Improper input validation in Auth
  • CVE-2026-95384: Race condition in Transactions Platform
  • CVE-2026-95385: Inappropriate implementation in PlatformIntegration

chromium-154.0.8037.57-1.el9

Fedora Security Advisories
4 days 11 hours ago
FEDORA-EPEL-2026-130a6951ed Packages in this update:
  • chromium-154.0.8037.57-1.el9
Update description:

Update to 154.0.8037.57

  • CVE-2026-95274: Improper output encoding in DevTools
  • CVE-2026-95275: Incorrect reference resolution in MediaStream
  • CVE-2026-95276: Improper input validation in Themes
  • CVE-2026-95277: Use after free in Views
  • CVE-2026-95278: Missing authorization in WakeLock
  • CVE-2026-95279: UI misrepresentation in Omnibox
  • CVE-2026-95280: Race condition in V8
  • CVE-2026-95281: Buffer overflow in ANGLE
  • CVE-2026-95282: Use after free in Platform
  • CVE-2026-95283: Buffer overflow in Tint
  • CVE-2026-95284: Buffer overflow in ANGLE
  • CVE-2026-95285: Missing authorization in WebView
  • CVE-2026-95286: Type confusion in Bindings
  • CVE-2026-95287: Missing authorization in Navigation
  • CVE-2026-95288: UI misrepresentation in Mobile
  • CVE-2026-95289: Incorrect authorization in Scroll
  • CVE-2026-95290: Missing authorization in NFC
  • CVE-2026-95291: UI misrepresentation in SecurityIndicators
  • CVE-2026-95292: Incorrect authorization in Safebrowsing
  • CVE-2026-95293: Uninitialized resource in GPU
  • CVE-2026-95294: UI misrepresentation in Browser
  • CVE-2026-95295: Information leak in Mobile
  • CVE-2026-95296: Missing authorization in Core
  • CVE-2026-95297: Missing authorization in Contextual Tasks
  • CVE-2026-95298: Use after free in Browser
  • CVE-2026-95299: Use after free in GPU
  • CVE-2026-95300: Missing authorization in DevTools
  • CVE-2026-95301: Missing authorization in Extensions
  • CVE-2026-95302: Incorrect authorization in WebAPKs
  • CVE-2026-95303: Incomplete cleanup in SmartCard
  • CVE-2026-95304: Out of bounds write in V8
  • CVE-2026-95305: UI misrepresentation in Chromoting
  • CVE-2026-95306: Type confusion in V8
  • CVE-2026-95307: UI misrepresentation in ExtensionsMenu
  • CVE-2026-95308: Integer overflow in Metrics
  • CVE-2026-95309: UI misrepresentation in Mobile
  • CVE-2026-95310: Use after free in AdFilter
  • CVE-2026-95311: Free of non-heap memory in Fonts
  • CVE-2026-95312: Information leak in Passwords
  • CVE-2026-95313: Use after free in Fullscreen
  • CVE-2026-95314: Incorrect authorization in HID
  • CVE-2026-95315: Use after free in Aura
  • CVE-2026-95316: Unchecked return value in Performance
  • CVE-2026-95317: Incorrect authorization in MediaCapture
  • CVE-2026-95318: Buffer overflow in Video
  • CVE-2026-95319: Use after free in Printing
  • CVE-2026-95320: Missing authorization in Navigation
  • CVE-2026-95321: UI misrepresentation in Payments
  • CVE-2026-95322: Out of bounds write in GPU
  • CVE-2026-95323: UI misrepresentation in Chromium
  • CVE-2026-95324: Uninitialized resource in GPU
  • CVE-2026-95325: Use after free in ANGLE
  • CVE-2026-95326: Incomplete cleanup in Bluetooth
  • CVE-2026-95327: Information leak in Networking
  • CVE-2026-95328: Confused deputy in Mobile
  • CVE-2026-95329: Out of bounds write in WebGL
  • CVE-2026-95330: Improper state validation in Downloads
  • CVE-2026-95331: Out of bounds write in ANGLE
  • CVE-2026-95332: Use of uninitialized variable in Tint
  • CVE-2026-95333: Use after free in Metrics
  • CVE-2026-95334: Incorrect reference resolution in WebProtect
  • CVE-2026-95335: Use after free in HID
  • CVE-2026-95336: Information leak in Transactions Platform
  • CVE-2026-95337: UI misrepresentation in Messages
  • CVE-2026-95338: Use after free in PDFium
  • CVE-2026-95339: Use after free in ServiceWorker
  • CVE-2026-95340: Incorrect authorization in PictureInPicture
  • CVE-2026-95341: Improper input validation in Desktop
  • CVE-2026-95342: Missing authorization in V8
  • CVE-2026-95343: Use after free in WebAudio
  • CVE-2026-95344: Race condition in DevTools
  • CVE-2026-95345: Use after free in Actor
  • CVE-2026-95346: UI misrepresentation in Chromoting
  • CVE-2026-95347: Use after free in Updater
  • CVE-2026-95348: Use after free in Bluetooth
  • CVE-2026-95349: Buffer overflow in WebGL
  • CVE-2026-95350: Buffer overflow in ANGLE
  • CVE-2026-95351: Use after free in Views
  • CVE-2026-95352: Incorrect authorization in DevTools
  • CVE-2026-95353: Use after free in Bindings
  • CVE-2026-95354: Use after free in Verifier
  • CVE-2026-95355: Incorrect authorization in Navigation
  • CVE-2026-95356: Use after free in WindowDialog
  • CVE-2026-95357: Out of bounds write in GPU
  • CVE-2026-95358: Incorrect authorization in Mobile
  • CVE-2026-95359: Uninitialized resource in GPU
  • CVE-2026-95360: Race condition in Editing
  • CVE-2026-95361: Confused deputy in DevTools
  • CVE-2026-95362: Cross-site request forgery in DevTools
  • CVE-2026-95363: UI misrepresentation in FileSystem
  • CVE-2026-95364: Improper input validation in Passwords
  • CVE-2026-95365: Type confusion in IndexedDB
  • CVE-2026-95366: Use of released resource in Core
  • CVE-2026-95367: Information leak in DataTransfer
  • CVE-2026-95368: Incorrect authorization in DevTools
  • CVE-2026-95369: Inappropriate implementation in XML
  • CVE-2026-95370: Inappropriate implementation in NFC
  • CVE-2026-95371: Missing authorization in Views
  • CVE-2026-95372: Use after free in Chromecast
  • CVE-2026-95373: Use after free in DevTools
  • CVE-2026-95374: Incorrect authorization in Network
  • CVE-2026-95375: Incorrect authorization in BrowserTag
  • CVE-2026-95376: Externally controlled reference in DevTools
  • CVE-2026-95380: Type confusion in V8
  • CVE-2026-95381: Improper input validation in Printing
  • CVE-2026-95382: Improper input validation in Auth
  • CVE-2026-95384: Race condition in Transactions Platform
  • CVE-2026-95385: Inappropriate implementation in PlatformIntegration

USN-8823-1: PyJWT vulnerabilities

Ubuntu Security Advisories
4 days 13 hours ago
It was discovered that PyJWT incorrectly handled certain URIs when using PyJWKClient. A remote attacker could possibly use this issue to perform server-side request forgery (SSRF) or expose sensitive local files. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-48522) It was discovered that PyJWT incorrectly verified cryptographic signatures when decoding tokens with PyJWK keys. A remote attacker could possibly use this issue to bypass signature verification and forge valid JSON Web Tokens. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-48523) It was discovered that PyJWT incorrectly handled unknown key identifiers in PyJWKClient. A remote attacker could possibly use this issue to cause PyJWT to make excessive network requests, resulting in a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-48524) It was discovered that PyJWT incorrectly handled payload decoding during detached JWS token verification. A remote attacker could possibly use this issue to cause PyJWT to consume excessive resources, resulting in a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-48525) It was discovered that PyJWT incorrectly validated JSON Web Keys when decoding tokens with both HMAC and asymmetric algorithms enabled. A remote attacker could possibly use this issue to forge valid tokens, resulting in an authentication bypass. (CVE-2026-48526)

libical-3.0.20-5.fc43

Fedora Security Advisories
4 days 13 hours ago
FEDORA-2026-d4c8dad1fd Packages in this update:
  • libical-3.0.20-5.fc43
Update description:

Add a patch for CVE-2026-88383: Denial of Service via crafted iCalendar property parsing

libical-3.0.20-8.fc44

Fedora Security Advisories
4 days 13 hours ago
FEDORA-2026-a76bba1412 Packages in this update:
  • libical-3.0.20-8.fc44
Update description:

Add a patch for CVE-2026-88383: Denial of Service via crafted iCalendar property parsing

libical-3.0.20-10.fc45

Fedora Security Advisories
4 days 13 hours ago
FEDORA-2026-9616ace61b Packages in this update:
  • libical-3.0.20-10.fc45
Update description:

Add a patch for CVE-2026-88383: Denial of Service via crafted iCalendar property parsing