Fedora Security Advisories

• mingw-openexr-3.3.8-1.fc43

Update to openexr-3.4.6 resp 3.3.8.

• mingw-openexr-3.4.6-1.fc44

Update to openexr-3.4.6 resp 3.3.8.

• mingw-openexr-3.3.8-1.fc42

Update to openexr-3.4.6 resp 3.3.8.

• yarnpkg-1.22.22-17.el10_3

Update vendor bundle.

• yarnpkg-1.22.22-17.fc44

Update vendor bundle.

• yarnpkg-1.22.22-17.fc43

Update vendor bundle.

• yarnpkg-1.22.22-17.fc42

Update vendor bundle.

• chromium-145.0.7632.159-1.el10_3

Update to 145.0.7632.159

• CVE-2026-3536: Integer overflow in ANGLE
• CVE-2026-3537: Object lifecycle issue in PowerVR
• CVE-2026-3538: Integer overflow in Skia
• CVE-2026-3539: Object lifecycle issue in DevTools
• CVE-2026-3540: Inappropriate implementation in WebAudio
• CVE-2026-3541: Inappropriate implementation in CSS
• CVE-2026-3542: Inappropriate implementation in WebAssembly
• CVE-2026-3543: Inappropriate implementation in V8
• CVE-2026-3544: Heap buffer overflow in WebCodecs
• CVE-2026-3545: Insufficient data validation in Navigation

• chromium-145.0.7632.159-1.fc43

Update to 145.0.7632.159

• CVE-2026-3536: Integer overflow in ANGLE
• CVE-2026-3537: Object lifecycle issue in PowerVR
• CVE-2026-3538: Integer overflow in Skia
• CVE-2026-3539: Object lifecycle issue in DevTools
• CVE-2026-3540: Inappropriate implementation in WebAudio
• CVE-2026-3541: Inappropriate implementation in CSS
• CVE-2026-3542: Inappropriate implementation in WebAssembly
• CVE-2026-3543: Inappropriate implementation in V8
• CVE-2026-3544: Heap buffer overflow in WebCodecs
• CVE-2026-3545: Insufficient data validation in Navigation

• chromium-145.0.7632.159-1.el10_1

Update to 145.0.7632.159

• CVE-2026-3536: Integer overflow in ANGLE
• CVE-2026-3537: Object lifecycle issue in PowerVR
• CVE-2026-3538: Integer overflow in Skia
• CVE-2026-3539: Object lifecycle issue in DevTools
• CVE-2026-3540: Inappropriate implementation in WebAudio
• CVE-2026-3541: Inappropriate implementation in CSS
• CVE-2026-3542: Inappropriate implementation in WebAssembly
• CVE-2026-3543: Inappropriate implementation in V8
• CVE-2026-3544: Heap buffer overflow in WebCodecs
• CVE-2026-3545: Insufficient data validation in Navigation

• chromium-145.0.7632.159-1.fc44

Update to 145.0.7632.159

• CVE-2026-3536: Integer overflow in ANGLE
• CVE-2026-3537: Object lifecycle issue in PowerVR
• CVE-2026-3538: Integer overflow in Skia
• CVE-2026-3539: Object lifecycle issue in DevTools
• CVE-2026-3540: Inappropriate implementation in WebAudio
• CVE-2026-3541: Inappropriate implementation in CSS
• CVE-2026-3542: Inappropriate implementation in WebAssembly
• CVE-2026-3543: Inappropriate implementation in V8
• CVE-2026-3544: Heap buffer overflow in WebCodecs
• CVE-2026-3545: Insufficient data validation in Navigation

• chromium-145.0.7632.159-1.el9

Update to 145.0.7632.159

• CVE-2026-3536: Integer overflow in ANGLE
• CVE-2026-3537: Object lifecycle issue in PowerVR
• CVE-2026-3538: Integer overflow in Skia
• CVE-2026-3539: Object lifecycle issue in DevTools
• CVE-2026-3540: Inappropriate implementation in WebAudio
• CVE-2026-3541: Inappropriate implementation in CSS
• CVE-2026-3542: Inappropriate implementation in WebAssembly
• CVE-2026-3543: Inappropriate implementation in V8
• CVE-2026-3544: Heap buffer overflow in WebCodecs
• CVE-2026-3545: Insufficient data validation in Navigation

• chromium-145.0.7632.159-1.el10_2

Update to 145.0.7632.159

• CVE-2026-3536: Integer overflow in ANGLE
• CVE-2026-3537: Object lifecycle issue in PowerVR
• CVE-2026-3538: Integer overflow in Skia
• CVE-2026-3539: Object lifecycle issue in DevTools
• CVE-2026-3540: Inappropriate implementation in WebAudio
• CVE-2026-3541: Inappropriate implementation in CSS
• CVE-2026-3542: Inappropriate implementation in WebAssembly
• CVE-2026-3543: Inappropriate implementation in V8
• CVE-2026-3544: Heap buffer overflow in WebCodecs
• CVE-2026-3545: Insufficient data validation in Navigation

• chromium-145.0.7632.159-1.fc42

Update to 145.0.7632.159

• CVE-2026-3536: Integer overflow in ANGLE
• CVE-2026-3537: Object lifecycle issue in PowerVR
• CVE-2026-3538: Integer overflow in Skia
• CVE-2026-3539: Object lifecycle issue in DevTools
• CVE-2026-3540: Inappropriate implementation in WebAudio
• CVE-2026-3541: Inappropriate implementation in CSS
• CVE-2026-3542: Inappropriate implementation in WebAssembly
• CVE-2026-3543: Inappropriate implementation in V8
• CVE-2026-3544: Heap buffer overflow in WebCodecs
• CVE-2026-3545: Insufficient data validation in Navigation

• cef-145.0.28^chromium145.0.7632.159-1.fc42

Bump to cef-145.0.28+g51162e8 + chromium 145.0.7632.159 (rhbz#2437035)

• CVE-2026-3536: Integer overflow in ANGLE
• CVE-2026-3537: Object lifecycle issue in PowerVR
• CVE-2026-3538: Integer overflow in Skia
• CVE-2026-3539: Object lifecycle issue in DevTools
• CVE-2026-3540: Inappropriate implementation in WebAudio
• CVE-2026-3541: Inappropriate implementation in CSS
• CVE-2026-3542: Inappropriate implementation in WebAssembly
• CVE-2026-3543: Inappropriate implementation in V8
• CVE-2026-3544: Heap buffer overflow in WebCodecs
• CVE-2026-3545: Insufficient data validation in Navigation
• CVE-2026-3061: Out of bounds read in Media
• CVE-2026-3062: Out of bounds read and write in Tint
• CVE-2026-3063: Inappropriate implementation in DevTools
• CVE-2026-2648: Heap buffer overflow in PDFium
• CVE-2026-2649: Integer overflow in V8
• CVE-2026-2650: Heap buffer overflow in Media

• alertmanager-0.31.1-2.fc43

Initial build after rename and update to 0.31.1

• pgadmin4-9.13-1.fc42

Update to pgadmin4-9.13.

• pgadmin4-9.13-1.fc43

Update to pgadmin4-9.13.

• pgadmin4-9.13-1.fc44

Update to pgadmin4-9.13.

• zabbix6.0-6.0.44-1.el8

Update to 6.0.44 (CVE-2025-49642, CVE-2025-49643, CVE-2026-23925)