Fedora Security Advisories

FEDORA-EPEL-2026-4387d686da Packages in this update:

• openvpn-2.7_rc5-1.el10_2

Update description:

Update to upstream 2.7_rc5 release Fixes CVE-2025-15497

FEDORA-EPEL-2026-1353d8e248 Packages in this update:

• openvpn-2.7_rc5-1.el10_1

Update description:

Update to upstream 2.7_rc5 release Fixes CVE-2025-15497

FEDORA-2026-3d29b96a25 Packages in this update:

• wireshark-4.6.3-1.fc43

Update description:

New version 4.6.3

FEDORA-2026-eea5babc00 Packages in this update:

• wireshark-4.6.3-1.fc42

Update description:

New version 4.6.3

FEDORA-2026-975a15098b Packages in this update:

• python3.9-3.9.25-3.fc43

Update description:

Security fix for CVE-2025-12084

FEDORA-2026-43e2b1e209 Packages in this update:

• python3.9-3.9.25-3.fc42

Update description:

Security fix for CVE-2025-12084

FEDORA-2026-65945d88e4 Packages in this update:

• chromium-144.0.7559.59-1.fc43

Update description:

Update to 144.0.7559.59

* CVE-2026-0899: Out of bounds memory access in V8 * CVE-2026-0900: Inappropriate implementation in V8 * CVE-2026-0901: Inappropriate implementation in Blink * CVE-2026-0902: Inappropriate implementation in V8 * CVE-2026-0903: Insufficient validation of untrusted input in Downloads * CVE-2026-0904: Incorrect security UI in Digital Credentials * CVE-2026-0905: Insufficient policy enforcement in Network * CVE-2026-0906: Incorrect security UI * CVE-2026-0907: Incorrect security UI in Split View * CVE-2026-0908: Use after free in ANGLE

FEDORA-EPEL-2026-e68610338c Packages in this update:

• chromium-144.0.7559.59-1.el10_1

Update description:

Update to 144.0.7559.59

* CVE-2026-0899: Out of bounds memory access in V8 * CVE-2026-0900: Inappropriate implementation in V8 * CVE-2026-0901: Inappropriate implementation in Blink * CVE-2026-0902: Inappropriate implementation in V8 * CVE-2026-0903: Insufficient validation of untrusted input in Downloads * CVE-2026-0904: Incorrect security UI in Digital Credentials * CVE-2026-0905: Insufficient policy enforcement in Network * CVE-2026-0906: Incorrect security UI * CVE-2026-0907: Incorrect security UI in Split View * CVE-2026-0908: Use after free in ANGLE

FEDORA-EPEL-2026-0ff4a46f49 Packages in this update:

• chromium-144.0.7559.59-1.el9

Update description:

Update to 144.0.7559.59

* CVE-2026-0899: Out of bounds memory access in V8 * CVE-2026-0900: Inappropriate implementation in V8 * CVE-2026-0901: Inappropriate implementation in Blink * CVE-2026-0902: Inappropriate implementation in V8 * CVE-2026-0903: Insufficient validation of untrusted input in Downloads * CVE-2026-0904: Incorrect security UI in Digital Credentials * CVE-2026-0905: Insufficient policy enforcement in Network * CVE-2026-0906: Incorrect security UI * CVE-2026-0907: Incorrect security UI in Split View * CVE-2026-0908: Use after free in ANGLE

FEDORA-2026-3736e2ff1a Packages in this update:

• chromium-144.0.7559.59-1.fc42

Update description:

Update to 144.0.7559.59

* CVE-2026-0899: Out of bounds memory access in V8 * CVE-2026-0900: Inappropriate implementation in V8 * CVE-2026-0901: Inappropriate implementation in Blink * CVE-2026-0902: Inappropriate implementation in V8 * CVE-2026-0903: Insufficient validation of untrusted input in Downloads * CVE-2026-0904: Incorrect security UI in Digital Credentials * CVE-2026-0905: Insufficient policy enforcement in Network * CVE-2026-0906: Incorrect security UI * CVE-2026-0907: Incorrect security UI in Split View * CVE-2026-0908: Use after free in ANGLE

FEDORA-EPEL-2026-ba3b30fe06 Packages in this update:

• chromium-144.0.7559.59-1.el10_2

Update description:

Update to 144.0.7559.59

* CVE-2026-0899: Out of bounds memory access in V8 * CVE-2026-0900: Inappropriate implementation in V8 * CVE-2026-0901: Inappropriate implementation in Blink * CVE-2026-0902: Inappropriate implementation in V8 * CVE-2026-0903: Insufficient validation of untrusted input in Downloads * CVE-2026-0904: Incorrect security UI in Digital Credentials * CVE-2026-0905: Insufficient policy enforcement in Network * CVE-2026-0906: Incorrect security UI * CVE-2026-0907: Incorrect security UI in Split View * CVE-2026-0908: Use after free in ANGLE

FEDORA-2026-c7954c45b7 Packages in this update:

• perl-HarfBuzz-Shaper-0.032-2.fc43

Update description:

Upgrade to upstream 0.032 to fix CVE-2026-22693.

FEDORA-2026-55dfa04750 Packages in this update:

• perl-HarfBuzz-Shaper-0.032-1.fc42

Update description:

Upgrade to upstream 0.032.

FEDORA-2026-f6fadfed32 Packages in this update:

• vsftpd-3.0.5-14.fc42

Update description:

Resolve CVE-2025-14242

FEDORA-2026-67442bdd84 Packages in this update:

• vsftpd-3.0.5-14.fc43

Update description:

Resolve CVE-2025-14242

FEDORA-2026-bac983cf83 Packages in this update:

• harfbuzz-10.4.0-2.fc42

Update description:

Backport security fix for CVE-2026-22693 (fix RHBZ#2429278)

FEDORA-2026-b38fe572ef Packages in this update:

• harfbuzz-11.5.1-2.fc43

Update description:

Backport security fix for CVE-2026-22693 (fix RHBZ#2429288)

FEDORA-2026-9af71a53ce Packages in this update:

• hcloud-1.59.0-1.fc42

Update description:

Update to 1.59.0

FEDORA-EPEL-2026-cf3b9d64bd Packages in this update:

• rclone-1.72.1-1.el9

Update description:

Update to 1.72.1

FEDORA-2026-a193f1698f Packages in this update:

• freerdp-3.20.2-1.fc42

Update description:

Update to 3.20.2