pgadmin4-9.14-1.fc44
FEDORA-2026-e54aebce7c
Packages in this update:
- pgadmin4-9.14-1.fc44
Update to lodash 9.14.
Fedora Security Advisories
pgadmin4-9.14-1.fc43
FEDORA-2026-ead60fa20d
Packages in this update:
- pgadmin4-9.14-1.fc43
Update to lodash 9.14.
pgadmin4-9.14-1.fc42
FEDORA-2026-5e39475fb3
Packages in this update:
- pgadmin4-9.14-1.fc42
Update to lodash 9.14.
mupdf-1.25.4-5.el10_3
FEDORA-EPEL-2026-7bead9ad13
Packages in this update:
- mupdf-1.25.4-5.el10_3
fix CVE-2026-3308 (rhbz#2454359)
mupdf-1.26.3-6.fc42
FEDORA-2026-b56fe1f040
Packages in this update:
- mupdf-1.26.3-6.fc42
fix CVE-2026-3308 (rhbz#2454360)
mupdf-1.27.1-10.fc43
FEDORA-2026-7a9c0c8c04
Packages in this update:
- mupdf-1.27.1-10.fc43
fix CVE-2026-3308 (rhbz#2454361)
mupdf-1.27.1-10.fc44
FEDORA-2026-0ebdbc98c5
Packages in this update:
- mupdf-1.27.1-10.fc44
fix CVE-2026-3308 (rhbz#2454361)
mupdf-1.27.1-10.fc45
FEDORA-2026-563f85e690
Packages in this update:
- mupdf-1.27.1-10.fc45
Automatic update for mupdf-1.27.1-10.fc45.
Changelog * Thu Apr 2 2026 Michael J Gruber <mjg@fedoraproject.org> - 1.27.1-10 - fix CVE-2026-3308 (rhbz#2454361)chromium-146.0.7680.177-1.el10_1
FEDORA-EPEL-2026-3dc5de63cc
Packages in this update:
- chromium-146.0.7680.177-1.el10_1
Update to 146.0.7680.177
- High CVE-2026-5273: Use after free in CSS
- High CVE-2026-5272: Heap buffer overflow in GPU
- High CVE-2026-5274: Integer overflow in Codecs
- High CVE-2026-5275: Heap buffer overflow in ANGLE
- High CVE-2026-5276: Insufficient policy enforcement in WebUSB
- High CVE-2026-5277: Integer overflow in ANGLE
- High CVE-2026-5278: Use after free in Web MIDI
- High CVE-2026-5279: Object corruption in V8
- High CVE-2026-5280: Use after free in WebCodecs
- High CVE-2026-5281: Use after free in Dawn
- High CVE-2026-5282: Out of bounds read in WebCodecs
- High CVE-2026-5283: Inappropriate implementation in ANGLE
- High CVE-2026-5284: Use after free in Dawn
- High CVE-2026-5285: Use after free in WebGL
- High CVE-2026-5286: Use after free in Dawn
- High CVE-2026-5287: Use after free in PDF
- High CVE-2026-5288: Use after free in WebView
- High CVE-2026-5289: Use after free in Navigation
- High CVE-2026-5290: Use after free in Compositing
- Medium CVE-2026-5291: Inappropriate implementation in WebGL
- Medium CVE-2026-5292: Out of bounds read in WebCodecs
chromium-146.0.7680.177-1.el9
FEDORA-EPEL-2026-6a5f534eb8
Packages in this update:
- chromium-146.0.7680.177-1.el9
Update to 146.0.7680.177
- High CVE-2026-5273: Use after free in CSS
- High CVE-2026-5272: Heap buffer overflow in GPU
- High CVE-2026-5274: Integer overflow in Codecs
- High CVE-2026-5275: Heap buffer overflow in ANGLE
- High CVE-2026-5276: Insufficient policy enforcement in WebUSB
- High CVE-2026-5277: Integer overflow in ANGLE
- High CVE-2026-5278: Use after free in Web MIDI
- High CVE-2026-5279: Object corruption in V8
- High CVE-2026-5280: Use after free in WebCodecs
- High CVE-2026-5281: Use after free in Dawn
- High CVE-2026-5282: Out of bounds read in WebCodecs
- High CVE-2026-5283: Inappropriate implementation in ANGLE
- High CVE-2026-5284: Use after free in Dawn
- High CVE-2026-5285: Use after free in WebGL
- High CVE-2026-5286: Use after free in Dawn
- High CVE-2026-5287: Use after free in PDF
- High CVE-2026-5288: Use after free in WebView
- High CVE-2026-5289: Use after free in Navigation
- High CVE-2026-5290: Use after free in Compositing
- Medium CVE-2026-5291: Inappropriate implementation in WebGL
- Medium CVE-2026-5292: Out of bounds read in WebCodecs
chromium-146.0.7680.177-1.fc44
FEDORA-2026-450ba465fd
Packages in this update:
- chromium-146.0.7680.177-1.fc44
Update to 146.0.7680.177
- High CVE-2026-5273: Use after free in CSS
- High CVE-2026-5272: Heap buffer overflow in GPU
- High CVE-2026-5274: Integer overflow in Codecs
- High CVE-2026-5275: Heap buffer overflow in ANGLE
- High CVE-2026-5276: Insufficient policy enforcement in WebUSB
- High CVE-2026-5277: Integer overflow in ANGLE
- High CVE-2026-5278: Use after free in Web MIDI
- High CVE-2026-5279: Object corruption in V8
- High CVE-2026-5280: Use after free in WebCodecs
- High CVE-2026-5281: Use after free in Dawn
- High CVE-2026-5282: Out of bounds read in WebCodecs
- High CVE-2026-5283: Inappropriate implementation in ANGLE
- High CVE-2026-5284: Use after free in Dawn
- High CVE-2026-5285: Use after free in WebGL
- High CVE-2026-5286: Use after free in Dawn
- High CVE-2026-5287: Use after free in PDF
- High CVE-2026-5288: Use after free in WebView
- High CVE-2026-5289: Use after free in Navigation
- High CVE-2026-5290: Use after free in Compositing
- Medium CVE-2026-5291: Inappropriate implementation in WebGL
- Medium CVE-2026-5292: Out of bounds read in WebCodecs
chromium-146.0.7680.177-1.fc42
FEDORA-2026-2b2e6a12de
Packages in this update:
- chromium-146.0.7680.177-1.fc42
Update to 146.0.7680.177
- High CVE-2026-5273: Use after free in CSS
- High CVE-2026-5272: Heap buffer overflow in GPU
- High CVE-2026-5274: Integer overflow in Codecs
- High CVE-2026-5275: Heap buffer overflow in ANGLE
- High CVE-2026-5276: Insufficient policy enforcement in WebUSB
- High CVE-2026-5277: Integer overflow in ANGLE
- High CVE-2026-5278: Use after free in Web MIDI
- High CVE-2026-5279: Object corruption in V8
- High CVE-2026-5280: Use after free in WebCodecs
- High CVE-2026-5281: Use after free in Dawn
- High CVE-2026-5282: Out of bounds read in WebCodecs
- High CVE-2026-5283: Inappropriate implementation in ANGLE
- High CVE-2026-5284: Use after free in Dawn
- High CVE-2026-5285: Use after free in WebGL
- High CVE-2026-5286: Use after free in Dawn
- High CVE-2026-5287: Use after free in PDF
- High CVE-2026-5288: Use after free in WebView
- High CVE-2026-5289: Use after free in Navigation
- High CVE-2026-5290: Use after free in Compositing
- Medium CVE-2026-5291: Inappropriate implementation in WebGL
- Medium CVE-2026-5292: Out of bounds read in WebCodecs
chromium-146.0.7680.177-1.fc43
FEDORA-2026-bdd01d79ba
Packages in this update:
- chromium-146.0.7680.177-1.fc43
Update to 146.0.7680.177
- High CVE-2026-5273: Use after free in CSS
- High CVE-2026-5272: Heap buffer overflow in GPU
- High CVE-2026-5274: Integer overflow in Codecs
- High CVE-2026-5275: Heap buffer overflow in ANGLE
- High CVE-2026-5276: Insufficient policy enforcement in WebUSB
- High CVE-2026-5277: Integer overflow in ANGLE
- High CVE-2026-5278: Use after free in Web MIDI
- High CVE-2026-5279: Object corruption in V8
- High CVE-2026-5280: Use after free in WebCodecs
- High CVE-2026-5281: Use after free in Dawn
- High CVE-2026-5282: Out of bounds read in WebCodecs
- High CVE-2026-5283: Inappropriate implementation in ANGLE
- High CVE-2026-5284: Use after free in Dawn
- High CVE-2026-5285: Use after free in WebGL
- High CVE-2026-5286: Use after free in Dawn
- High CVE-2026-5287: Use after free in PDF
- High CVE-2026-5288: Use after free in WebView
- High CVE-2026-5289: Use after free in Navigation
- High CVE-2026-5290: Use after free in Compositing
- Medium CVE-2026-5291: Inappropriate implementation in WebGL
- Medium CVE-2026-5292: Out of bounds read in WebCodecs
chromium-146.0.7680.177-1.el10_2
FEDORA-EPEL-2026-189ae4f7fc
Packages in this update:
- chromium-146.0.7680.177-1.el10_2
Update to 146.0.7680.177
- High CVE-2026-5273: Use after free in CSS
- High CVE-2026-5272: Heap buffer overflow in GPU
- High CVE-2026-5274: Integer overflow in Codecs
- High CVE-2026-5275: Heap buffer overflow in ANGLE
- High CVE-2026-5276: Insufficient policy enforcement in WebUSB
- High CVE-2026-5277: Integer overflow in ANGLE
- High CVE-2026-5278: Use after free in Web MIDI
- High CVE-2026-5279: Object corruption in V8
- High CVE-2026-5280: Use after free in WebCodecs
- High CVE-2026-5281: Use after free in Dawn
- High CVE-2026-5282: Out of bounds read in WebCodecs
- High CVE-2026-5283: Inappropriate implementation in ANGLE
- High CVE-2026-5284: Use after free in Dawn
- High CVE-2026-5285: Use after free in WebGL
- High CVE-2026-5286: Use after free in Dawn
- High CVE-2026-5287: Use after free in PDF
- High CVE-2026-5288: Use after free in WebView
- High CVE-2026-5289: Use after free in Navigation
- High CVE-2026-5290: Use after free in Compositing
- Medium CVE-2026-5291: Inappropriate implementation in WebGL
- Medium CVE-2026-5292: Out of bounds read in WebCodecs
chromium-146.0.7680.177-1.el10_3
FEDORA-EPEL-2026-efc00c94b6
Packages in this update:
- chromium-146.0.7680.177-1.el10_3
Update to 146.0.7680.177
- High CVE-2026-5273: Use after free in CSS
- High CVE-2026-5272: Heap buffer overflow in GPU
- High CVE-2026-5274: Integer overflow in Codecs
- High CVE-2026-5275: Heap buffer overflow in ANGLE
- High CVE-2026-5276: Insufficient policy enforcement in WebUSB
- High CVE-2026-5277: Integer overflow in ANGLE
- High CVE-2026-5278: Use after free in Web MIDI
- High CVE-2026-5279: Object corruption in V8
- High CVE-2026-5280: Use after free in WebCodecs
- High CVE-2026-5281: Use after free in Dawn
- High CVE-2026-5282: Out of bounds read in WebCodecs
- High CVE-2026-5283: Inappropriate implementation in ANGLE
- High CVE-2026-5284: Use after free in Dawn
- High CVE-2026-5285: Use after free in WebGL
- High CVE-2026-5286: Use after free in Dawn
- High CVE-2026-5287: Use after free in PDF
- High CVE-2026-5288: Use after free in WebView
- High CVE-2026-5289: Use after free in Navigation
- High CVE-2026-5290: Use after free in Compositing
- Medium CVE-2026-5291: Inappropriate implementation in WebGL
- Medium CVE-2026-5292: Out of bounds read in WebCodecs
mbedtls-3.6.6-1.fc44
FEDORA-2026-3a9536df40
Packages in this update:
- mbedtls-3.6.6-1.fc44
Update to 3.6.6
mbedtls-3.6.6-1.fc43
FEDORA-2026-8c332fbf00
Packages in this update:
- mbedtls-3.6.6-1.fc43
Update to 3.6.6
mbedtls-3.6.6-1.fc42
FEDORA-2026-10443c65e3
Packages in this update:
- mbedtls-3.6.6-1.fc42
Update to 3.6.6
trafficserver-10.1.2-1.fc43
FEDORA-2026-7b719a7a58
Packages in this update:
- trafficserver-10.1.2-1.fc43
Resolves: CVE-2025-58136 - A simple legitimate POST request causes a crash CVE-2025-65114 - Malformed chunked message body allows request smuggling
Changes with Apache Traffic Server 10.1.2 #12864 - Fix ppa log field #13037 - Fix prev_is_cr flag handling in chunked encoding parser #13040 - HttpSM - make sure we have a valid buffer to write on.
trafficserver-10.1.2-1.fc44
FEDORA-2026-7839a46d9d
Packages in this update:
- trafficserver-10.1.2-1.fc44
Resolves: CVE-2025-58136 - A simple legitimate POST request causes a crash CVE-2025-65114 - Malformed chunked message body allows request smuggling
Changes with Apache Traffic Server 10.1.2 #12864 - Fix ppa log field #13037 - Fix prev_is_cr flag handling in chunked encoding parser #13040 - HttpSM - make sure we have a valid buffer to write on.