Fedora Security Advisories

• chromium-155.0.8059.84-1.el10_4

Update to 155.0.8059.84, includes 10 security fixes

• CVE-2026-110913: Memory corruption in DOM
• CVE-2026-110914: Memory corruption in Workers
• CVE-2026-110915: Use after free in Compositing
• CVE-2026-110916: Improper input validation in Desktop
• CVE-2026-110917: Memory corruption in SVG
• CVE-2026-110918: Memory corruption in Core
• CVE-2026-110919: Use after free in V8
• CVE-2026-110920: Memory corruption in V8
• CVE-2026-110921: Use after free in V8
• CVE-2026-110922: Use after free in Prerender

• chromium-155.0.8059.84-1.fc44

Update to 155.0.8059.84, includes 10 security fixes

• CVE-2026-110913: Memory corruption in DOM
• CVE-2026-110914: Memory corruption in Workers
• CVE-2026-110915: Use after free in Compositing
• CVE-2026-110916: Improper input validation in Desktop
• CVE-2026-110917: Memory corruption in SVG
• CVE-2026-110918: Memory corruption in Core
• CVE-2026-110919: Use after free in V8
• CVE-2026-110920: Memory corruption in V8
• CVE-2026-110921: Use after free in V8
• CVE-2026-110922: Use after free in Prerender

• chromium-155.0.8059.84-1.el10_3

Update to 155.0.8059.84, includes 10 security fixes

• CVE-2026-110913: Memory corruption in DOM
• CVE-2026-110914: Memory corruption in Workers
• CVE-2026-110915: Use after free in Compositing
• CVE-2026-110916: Improper input validation in Desktop
• CVE-2026-110917: Memory corruption in SVG
• CVE-2026-110918: Memory corruption in Core
• CVE-2026-110919: Use after free in V8
• CVE-2026-110920: Memory corruption in V8
• CVE-2026-110921: Use after free in V8
• CVE-2026-110922: Use after free in Prerender

• chromium-155.0.8059.84-1.el9

Update to 155.0.8059.84, includes 10 security fixes

• CVE-2026-110913: Memory corruption in DOM
• CVE-2026-110914: Memory corruption in Workers
• CVE-2026-110915: Use after free in Compositing
• CVE-2026-110916: Improper input validation in Desktop
• CVE-2026-110917: Memory corruption in SVG
• CVE-2026-110918: Memory corruption in Core
• CVE-2026-110919: Use after free in V8
• CVE-2026-110920: Memory corruption in V8
• CVE-2026-110921: Use after free in V8
• CVE-2026-110922: Use after free in Prerender

• chromium-155.0.8059.84-1.el10_2

Update to 155.0.8059.84, includes 10 security fixes

• CVE-2026-110913: Memory corruption in DOM
• CVE-2026-110914: Memory corruption in Workers
• CVE-2026-110915: Use after free in Compositing
• CVE-2026-110916: Improper input validation in Desktop
• CVE-2026-110917: Memory corruption in SVG
• CVE-2026-110918: Memory corruption in Core
• CVE-2026-110919: Use after free in V8
• CVE-2026-110920: Memory corruption in V8
• CVE-2026-110921: Use after free in V8
• CVE-2026-110922: Use after free in Prerender

• chromium-155.0.8059.84-1.fc43

Update to 155.0.8059.84, includes 10 security fixes

• CVE-2026-110913: Memory corruption in DOM
• CVE-2026-110914: Memory corruption in Workers
• CVE-2026-110915: Use after free in Compositing
• CVE-2026-110916: Improper input validation in Desktop
• CVE-2026-110917: Memory corruption in SVG
• CVE-2026-110918: Memory corruption in Core
• CVE-2026-110919: Use after free in V8
• CVE-2026-110920: Memory corruption in V8
• CVE-2026-110921: Use after free in V8
• CVE-2026-110922: Use after free in Prerender

• chromium-155.0.8059.84-1.fc45

Update to 155.0.8059.84, includes 10 security fixes

• CVE-2026-110913: Memory corruption in DOM
• CVE-2026-110914: Memory corruption in Workers
• CVE-2026-110915: Use after free in Compositing
• CVE-2026-110916: Improper input validation in Desktop
• CVE-2026-110917: Memory corruption in SVG
• CVE-2026-110918: Memory corruption in Core
• CVE-2026-110919: Use after free in V8
• CVE-2026-110920: Memory corruption in V8
• CVE-2026-110921: Use after free in V8
• CVE-2026-110922: Use after free in Prerender

• helix-25.07.1-13.fc44
• rust-dua-cli-2.38.1-3.fc44
• rust-gengo-bin-0.15.0-3.fc44
• rust-gitui-0.28.1-4.fc44
• stgit-2.6.1-3.fc44

Rebuilt several packages with faster-hex version 0.10.1 to fix RUSTSEC-2026-0306, an unsoundness issue on x86 and x86_64 when AVX2 is enabled.

• helix-25.07.1-13.fc45
• rust-dua-cli-2.38.1-3.fc45
• rust-gengo-bin-0.15.0-3.fc45
• rust-gitui-0.28.1-4.fc45
• stgit-2.6.1-3.fc45

Rebuilt several packages with faster-hex version 0.10.1 to fix RUSTSEC-2026-0306, an unsoundness issue on x86 and x86_64 when AVX2 is enabled.

• perl-Plack-1.0055-1.fc44
• perl-Plack-Middleware-ReverseProxy-0.17-1.fc44

A number of security issues were found in the Plack stack: SECURITY Fix memory leak of every request env in Plack::Middleware::Recursive (CVE-2026-110333) Plack::Request::Upload->basename never returns '', '.' or '..' (CVE-2026-110332) Plack::App::URLMap matches SERVER_PORT literally when stripping it from Host (CVE-2026-110335) BUG FIXES Plack::Middleware::ErrorDocument restores the env after a subrequest, so outer middleware such as AccessLog sees the original request (CVE-2026-110334) DOCUMENTATION Document that Plack::Handler::FCGI and Apache2 keep dot segments in PATH_INFO and warn against relying on front-server path-based access control (CVE-2026-110336)

• perl-Plack-1.0055-1.fc45
• perl-Plack-Middleware-ReverseProxy-0.17-1.fc45

A number of security issues were found in the Plack stack: SECURITY Fix memory leak of every request env in Plack::Middleware::Recursive (CVE-2026-110333) Plack::Request::Upload->basename never returns '', '.' or '..' (CVE-2026-110332) Plack::App::URLMap matches SERVER_PORT literally when stripping it from Host (CVE-2026-110335) BUG FIXES Plack::Middleware::ErrorDocument restores the env after a subrequest, so outer middleware such as AccessLog sees the original request (CVE-2026-110334) DOCUMENTATION Document that Plack::Handler::FCGI and Apache2 keep dot segments in PATH_INFO and warn against relying on front-server path-based access control (CVE-2026-110336)

• perl-Plack-1.0055-1.fc43
• perl-Plack-Middleware-ReverseProxy-0.17-1.fc43

A number of security issues were found in the Plack stack: SECURITY Fix memory leak of every request env in Plack::Middleware::Recursive (CVE-2026-110333) Plack::Request::Upload->basename never returns '', '.' or '..' (CVE-2026-110332) Plack::App::URLMap matches SERVER_PORT literally when stripping it from Host (CVE-2026-110335) BUG FIXES Plack::Middleware::ErrorDocument restores the env after a subrequest, so outer middleware such as AccessLog sees the original request (CVE-2026-110334) DOCUMENTATION Document that Plack::Handler::FCGI and Apache2 keep dot segments in PATH_INFO and warn against relying on front-server path-based access control (CVE-2026-110336)

• libinstpatch-1.1.6-12.el8

Apply a proposed fix for CVE-2026-111136

• nix-2.31.6-1.el10_2

Update to 2.31.6 which addresses:

• CVE-2026-110450 (High, https://github.com/NixOS/nix/security/advisories/GHSA-jwvx-xq5j-gc56) and other Moderate issues:
• see https://discourse.nixos.org/t/security-advisory-for-nix-and-lix-october-2026/80547

bugfixes:

• nix.fish and nix-daemon.fish should live in fish/vendor_conf.d
• switch back to editline from readline to fix repl history (#2536840)

• rust-faster-hex-0.10.1-1.el10_3

Update to version 0.10.1.

This includes a fix for a potential buffer overflow (assigned RUSTSEC-2026-0306). Rebuilds of affected applications are tracked in rust/backlog#45.

• rust-faster-hex-0.10.1-1.fc45

Update to version 0.10.1.

This includes a fix for a potential buffer overflow (assigned RUSTSEC-2026-0306). Rebuilds of affected applications are tracked in rust/backlog#45.

• rust-faster-hex-0.10.1-1.el10_4

Update to version 0.10.1.

This includes a fix for a potential buffer overflow (assigned RUSTSEC-2026-0306). Rebuilds of affected applications are tracked in rust/backlog#45.

• rust-faster-hex-0.10.1-1.el9

Update to version 0.10.1.

This includes a fix for a potential buffer overflow (assigned RUSTSEC-2026-0306). Rebuilds of affected applications are tracked in rust/backlog#45.

• rust-faster-hex-0.10.1-1.fc44

Update to version 0.10.1.

This includes a fix for a potential buffer overflow (assigned RUSTSEC-2026-0306). Rebuilds of affected applications are tracked in rust/backlog#45.

• rust-faster-hex-0.10.1-1.el10_2

Update to version 0.10.1.

This includes a fix for a potential buffer overflow (assigned RUSTSEC-2026-0306). Rebuilds of affected applications are tracked in rust/backlog#45.