Aggregator

chromium-156.0.8078.79-1.fc44

Fedora Security Advisories
1 day 21 hours ago
FEDORA-2026-3e0794fe4b Packages in this update:
  • chromium-156.0.8078.79-1.fc44
Update description:

Update to 156.0.8078.73, include 21 security fixes

* CVE-2026-119260: Use after free in Frames * CVE-2026-119261: Improper input validation in Skia * CVE-2026-119262: Improper input validation in V8 * CVE-2026-119263: Memory corruption in GarbageCollection * CVE-2026-119264: Memory corruption in Dawn * CVE-2026-119265: Memory corruption in Quota * CVE-2026-119266: Use after free in Quota * CVE-2026-119267: Memory corruption in DOM * CVE-2026-119268: Integer overflow in Editing * CVE-2026-119269: Use after free in Blink * CVE-2026-119270: Improper input validation in CacheStorage * CVE-2026-119271: Use after free in Skia * CVE-2026-119272: Out of bounds read in FileSystem * CVE-2026-76024: Memory corruption in MediaStream * CVE-2026-76025: Use after free in FileSystem * CVE-2026-76026: Memory corruption in Autofill * CVE-2026-76027: Memory corruption in CacheStorage * CVE-2026-76028: Use after free in FileSystem * CVE-2026-76029: Memory corruption in Network * CVE-2026-76030: Memory corruption in FileSystem * CVE-2026-76031: Use after free in Input

chromium-156.0.8078.79-1.el10_4

Fedora Security Advisories
1 day 21 hours ago
FEDORA-EPEL-2026-5f7b590a5d Packages in this update:
  • chromium-156.0.8078.79-1.el10_4
Update description:

Update to 156.0.8078.73, include 21 security fixes

* CVE-2026-119260: Use after free in Frames * CVE-2026-119261: Improper input validation in Skia * CVE-2026-119262: Improper input validation in V8 * CVE-2026-119263: Memory corruption in GarbageCollection * CVE-2026-119264: Memory corruption in Dawn * CVE-2026-119265: Memory corruption in Quota * CVE-2026-119266: Use after free in Quota * CVE-2026-119267: Memory corruption in DOM * CVE-2026-119268: Integer overflow in Editing * CVE-2026-119269: Use after free in Blink * CVE-2026-119270: Improper input validation in CacheStorage * CVE-2026-119271: Use after free in Skia * CVE-2026-119272: Out of bounds read in FileSystem * CVE-2026-76024: Memory corruption in MediaStream * CVE-2026-76025: Use after free in FileSystem * CVE-2026-76026: Memory corruption in Autofill * CVE-2026-76027: Memory corruption in CacheStorage * CVE-2026-76028: Use after free in FileSystem * CVE-2026-76029: Memory corruption in Network * CVE-2026-76030: Memory corruption in FileSystem * CVE-2026-76031: Use after free in Input

chromium-156.0.8078.79-1.el9

Fedora Security Advisories
1 day 21 hours ago
FEDORA-EPEL-2026-4b6e49f0ce Packages in this update:
  • chromium-156.0.8078.79-1.el9
Update description:

Update to 156.0.8078.73, include 21 security fixes

* CVE-2026-119260: Use after free in Frames * CVE-2026-119261: Improper input validation in Skia * CVE-2026-119262: Improper input validation in V8 * CVE-2026-119263: Memory corruption in GarbageCollection * CVE-2026-119264: Memory corruption in Dawn * CVE-2026-119265: Memory corruption in Quota * CVE-2026-119266: Use after free in Quota * CVE-2026-119267: Memory corruption in DOM * CVE-2026-119268: Integer overflow in Editing * CVE-2026-119269: Use after free in Blink * CVE-2026-119270: Improper input validation in CacheStorage * CVE-2026-119271: Use after free in Skia * CVE-2026-119272: Out of bounds read in FileSystem * CVE-2026-76024: Memory corruption in MediaStream * CVE-2026-76025: Use after free in FileSystem * CVE-2026-76026: Memory corruption in Autofill * CVE-2026-76027: Memory corruption in CacheStorage * CVE-2026-76028: Use after free in FileSystem * CVE-2026-76029: Memory corruption in Network * CVE-2026-76030: Memory corruption in FileSystem * CVE-2026-76031: Use after free in Input

chromium-156.0.8078.79-1.el10_2

Fedora Security Advisories
1 day 21 hours ago
FEDORA-EPEL-2026-ddcaa74c3e Packages in this update:
  • chromium-156.0.8078.79-1.el10_2
Update description:

Update to 156.0.8078.73, include 21 security fixes

* CVE-2026-119260: Use after free in Frames * CVE-2026-119261: Improper input validation in Skia * CVE-2026-119262: Improper input validation in V8 * CVE-2026-119263: Memory corruption in GarbageCollection * CVE-2026-119264: Memory corruption in Dawn * CVE-2026-119265: Memory corruption in Quota * CVE-2026-119266: Use after free in Quota * CVE-2026-119267: Memory corruption in DOM * CVE-2026-119268: Integer overflow in Editing * CVE-2026-119269: Use after free in Blink * CVE-2026-119270: Improper input validation in CacheStorage * CVE-2026-119271: Use after free in Skia * CVE-2026-119272: Out of bounds read in FileSystem * CVE-2026-76024: Memory corruption in MediaStream * CVE-2026-76025: Use after free in FileSystem * CVE-2026-76026: Memory corruption in Autofill * CVE-2026-76027: Memory corruption in CacheStorage * CVE-2026-76028: Use after free in FileSystem * CVE-2026-76029: Memory corruption in Network * CVE-2026-76030: Memory corruption in FileSystem * CVE-2026-76031: Use after free in Input

chromium-156.0.8078.79-1.el10_3

Fedora Security Advisories
1 day 21 hours ago
FEDORA-EPEL-2026-9ab80774b9 Packages in this update:
  • chromium-156.0.8078.79-1.el10_3
Update description:

Update to 156.0.8078.73, include 21 security fixes

* CVE-2026-119260: Use after free in Frames * CVE-2026-119261: Improper input validation in Skia * CVE-2026-119262: Improper input validation in V8 * CVE-2026-119263: Memory corruption in GarbageCollection * CVE-2026-119264: Memory corruption in Dawn * CVE-2026-119265: Memory corruption in Quota * CVE-2026-119266: Use after free in Quota * CVE-2026-119267: Memory corruption in DOM * CVE-2026-119268: Integer overflow in Editing * CVE-2026-119269: Use after free in Blink * CVE-2026-119270: Improper input validation in CacheStorage * CVE-2026-119271: Use after free in Skia * CVE-2026-119272: Out of bounds read in FileSystem * CVE-2026-76024: Memory corruption in MediaStream * CVE-2026-76025: Use after free in FileSystem * CVE-2026-76026: Memory corruption in Autofill * CVE-2026-76027: Memory corruption in CacheStorage * CVE-2026-76028: Use after free in FileSystem * CVE-2026-76029: Memory corruption in Network * CVE-2026-76030: Memory corruption in FileSystem * CVE-2026-76031: Use after free in Input

dotnet11.0-11.0.100~rc.3.26522.148-0.13.fc43

Fedora Security Advisories
1 day 22 hours ago
FEDORA-2026-3a916dbb6c Packages in this update:
  • dotnet11.0-11.0.100~rc.3.26522.148-0.13.fc43
Update description:

Update to .NET SDK 11.0.100-rc.3.26522.148 and Runtime 11.0.0-rc.3.26522.148

Fixes: CVE-2026-102870, CVE-2026-105016, CVE-2026-111497, CVE-2026-114148, CVE-2026-58280, CVE-2026-66822, CVE-2026-69651, CVE-2026-70007, CVE-2026-70035, CVE-2026-70159, CVE-2026-70161, CVE-2026-70162, CVE-2026-70165, CVE-2026-70174, CVE-2026-70183, CVE-2026-70188, CVE-2026-70190, CVE-2026-70194, CVE-2026-70197, CVE-2026-83520, CVE-2026-84008, CVE-2026-85363, CVE-2026-85790, CVE-2026-87697, CVE-2026-88092, CVE-2026-92707, CVE-2026-96224, CVE-2026-96225, CVE-2026-96229, CVE-2026-96230, CVE-2026-96231, CVE-2026-96232, CVE-2026-96233, CVE-2026-96234, CVE-2026-96235, CVE-2026-96236, CVE-2026-96238, CVE-2026-96957, CVE-2026-96958, CVE-2026-96959, CVE-2026-96960

Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/11.0/11.0.0-rc.2.26504.105/11.0.100-rc.2.26504.105.md - SDK: https://github.com/dotnet/core/blob/main/release-notes/11.0/11.0.0-rc.3.26522.148/11.0.100-rc.3.26522.148.md - Runtime: https://github.com/dotnet/core/blob/main/release-notes/11.0/11.0.0-rc.2.26504.105/11.0.0-rc.2.26504.105.md - Runtime: https://github.com/dotnet/core/blob/main/release-notes/11.0/11.0.0-rc.3.26522.148/11.0.0-rc.3.26522.148.md

dotnet11.0-11.0.100~rc.3.26522.148-0.13.fc44

Fedora Security Advisories
1 day 22 hours ago
FEDORA-2026-094b09b38e Packages in this update:
  • dotnet11.0-11.0.100~rc.3.26522.148-0.13.fc44
Update description:

Update to .NET SDK 11.0.100-rc.3.26522.148 and Runtime 11.0.0-rc.3.26522.148

Fixes: CVE-2026-102870, CVE-2026-105016, CVE-2026-111497, CVE-2026-114148, CVE-2026-58280, CVE-2026-66822, CVE-2026-69651, CVE-2026-70007, CVE-2026-70035, CVE-2026-70159, CVE-2026-70161, CVE-2026-70162, CVE-2026-70165, CVE-2026-70174, CVE-2026-70183, CVE-2026-70188, CVE-2026-70190, CVE-2026-70194, CVE-2026-70197, CVE-2026-83520, CVE-2026-84008, CVE-2026-85363, CVE-2026-85790, CVE-2026-87697, CVE-2026-88092, CVE-2026-92707, CVE-2026-96224, CVE-2026-96225, CVE-2026-96229, CVE-2026-96230, CVE-2026-96231, CVE-2026-96232, CVE-2026-96233, CVE-2026-96234, CVE-2026-96235, CVE-2026-96236, CVE-2026-96238, CVE-2026-96957, CVE-2026-96958, CVE-2026-96959, CVE-2026-96960

Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/11.0/11.0.0-rc.2.26504.105/11.0.100-rc.2.26504.105.md - SDK: https://github.com/dotnet/core/blob/main/release-notes/11.0/11.0.0-rc.3.26522.148/11.0.100-rc.3.26522.148.md - Runtime: https://github.com/dotnet/core/blob/main/release-notes/11.0/11.0.0-rc.2.26504.105/11.0.0-rc.2.26504.105.md - Runtime: https://github.com/dotnet/core/blob/main/release-notes/11.0/11.0.0-rc.3.26522.148/11.0.0-rc.3.26522.148.md

dotnet11.0-11.0.100~rc.3.26522.148-0.13.fc45

Fedora Security Advisories
1 day 22 hours ago
FEDORA-2026-a2c4eee1ec Packages in this update:
  • dotnet11.0-11.0.100~rc.3.26522.148-0.13.fc45
Update description:

Update to .NET SDK 11.0.100-rc.3.26522.148 and Runtime 11.0.0-rc.3.26522.148

Fixes: CVE-2026-102870, CVE-2026-105016, CVE-2026-111497, CVE-2026-114148, CVE-2026-58280, CVE-2026-66822, CVE-2026-69651, CVE-2026-70007, CVE-2026-70035, CVE-2026-70159, CVE-2026-70161, CVE-2026-70162, CVE-2026-70165, CVE-2026-70174, CVE-2026-70183, CVE-2026-70188, CVE-2026-70190, CVE-2026-70194, CVE-2026-70197, CVE-2026-83520, CVE-2026-84008, CVE-2026-85363, CVE-2026-85790, CVE-2026-87697, CVE-2026-88092, CVE-2026-92707, CVE-2026-96224, CVE-2026-96225, CVE-2026-96229, CVE-2026-96230, CVE-2026-96231, CVE-2026-96232, CVE-2026-96233, CVE-2026-96234, CVE-2026-96235, CVE-2026-96236, CVE-2026-96238, CVE-2026-96957, CVE-2026-96958, CVE-2026-96959, CVE-2026-96960

Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/11.0/11.0.0-rc.2.26504.105/11.0.100-rc.2.26504.105.md - SDK: https://github.com/dotnet/core/blob/main/release-notes/11.0/11.0.0-rc.3.26522.148/11.0.100-rc.3.26522.148.md - Runtime: https://github.com/dotnet/core/blob/main/release-notes/11.0/11.0.0-rc.2.26504.105/11.0.0-rc.2.26504.105.md - Runtime: https://github.com/dotnet/core/blob/main/release-notes/11.0/11.0.0-rc.3.26522.148/11.0.0-rc.3.26522.148.md

erlang-26.2.5.21-11.fc43

Fedora Security Advisories
1 day 22 hours ago
FEDORA-2026-9b9186651e Packages in this update:
  • erlang-26.2.5.21-11.fc43
Update description:

Security update: backport upstream Erlang/OTP security fixes to OTP 26.2.5.21.

  • CVE-2026-59696: denial of service via unbounded integer parsing (uri_string port, httpc headers/Content-Length, eldap referral port, snmp BER integers). httpc gains max_header_size / max_body_size request options.
  • CVE-2026-94200: a malicious TLS 1.3 server could crash the ssl application on the client through a malformed NewSessionTicket; extensions are now only accepted in the handshake messages that may carry them.
  • CVE-2026-105236: TLS 1.2 session resumption now checks that the SNI host matches the one the session was established for, preventing an authentication bypass across virtual hosts with different client-certificate trust.

Backport fixes for CVE-2026-75538 (Erlang/OTP TCP driver: remote DoS via signed length overflow) and CVE-2026-73270 (Erlang/OTP inets httpd: information disclosure via case-insensitive path bypass).

erlang-26.2.5.21-11.fc44

Fedora Security Advisories
1 day 22 hours ago
FEDORA-2026-1fcb57f32e Packages in this update:
  • erlang-26.2.5.21-11.fc44
Update description:

Security update: backport upstream Erlang/OTP security fixes to OTP 26.2.5.21.

  • CVE-2026-59696: denial of service via unbounded integer parsing (uri_string port, httpc headers/Content-Length, eldap referral port, snmp BER integers). httpc gains max_header_size / max_body_size request options.
  • CVE-2026-94200: a malicious TLS 1.3 server could crash the ssl application on the client through a malformed NewSessionTicket; extensions are now only accepted in the handshake messages that may carry them.
  • CVE-2026-105236: TLS 1.2 session resumption now checks that the SNI host matches the one the session was established for, preventing an authentication bypass across virtual hosts with different client-certificate trust.

Backport fixes for CVE-2026-75538 (Erlang/OTP TCP driver: remote DoS via signed length overflow) and CVE-2026-73270 (Erlang/OTP inets httpd: information disclosure via case-insensitive path bypass).

python-crate-ingredients-0.3.3-2.fc44

Fedora Security Advisories
2 days ago
FEDORA-2026-29236f6dd2 Packages in this update:
  • python-crate-ingredients-0.3.3-2.fc44
Update description:

Rebuilt with webpki-roots 1.0.11 (removed emSign Root CA - C1/C3)

This provides added protection against trusting compromised certificates.