stable

chromium-147.0.7727.55-1.fc43

FEDORA-2026-952f3c3d9e created by than 4 months ago for Fedora 43

Update to 147.0.7727.55

  • Critical CVE-2026-5858: Heap buffer overflow in WebML
  • Critical CVE-2026-5859: Integer overflow in WebML
  • High CVE-2026-5860: Use after free in WebRTC
  • High CVE-2026-5861: Use after free in V8
  • High CVE-2026-5862: Inappropriate implementation in V8
  • High CVE-2026-5863: Inappropriate implementation in V8
  • High CVE-2026-5864: Heap buffer overflow in WebAudio
  • High CVE-2026-5865: Type Confusion in V8
  • High CVE-2026-5866: Use after free in Media
  • High CVE-2026-5867: Heap buffer overflow in WebML
  • High CVE-2026-5868: Heap buffer overflow in ANGLE
  • High CVE-2026-5869: Heap buffer overflow in WebML
  • High CVE-2026-5870: Integer overflow in Skia
  • High CVE-2026-5871: Type Confusion in V8
  • High CVE-2026-5872: Use after free in Blink
  • High CVE-2026-5873: Out of bounds read and write in V8
  • Medium CVE-2026-5874: Use after free in PrivateAI
  • Medium CVE-2026-5875: Policy bypass in Blink
  • Medium CVE-2026-5876: Side-channel information leakage in Navigation
  • Medium CVE-2026-5877: Use after free in Navigation
  • Medium CVE-2026-5878: Incorrect security UI in Blink
  • Medium CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
  • Medium CVE-2026-5880: Incorrect security UI in browser UI
  • Medium CVE-2026-5881: Policy bypass in LocalNetworkAccess
  • Medium CVE-2026-5882: Incorrect security UI in Fullscreen
  • Medium CVE-2026-5883: Use after free in Media
  • Medium CVE-2026-5884: Insufficient validation of untrusted input in Media
  • Medium CVE-2026-5885: Insufficient validation of untrusted input in WebML
  • Medium CVE-2026-5886: Out of bounds read in WebAudio
  • Medium CVE-2026-5887: Insufficient validation of untrusted input in Downloads
  • Medium CVE-2026-5888: Uninitialized Use in WebCodecs
  • Medium CVE-2026-5889: Cryptographic Flaw in PDFium
  • Medium CVE-2026-5890: Race in WebCodecs
  • Medium CVE-2026-5891: Insufficient policy enforcement in browser UI
  • Medium CVE-2026-5892: Insufficient policy enforcement in PWAs
  • Medium CVE-2026-5893: Race in V8
  • Low CVE-2026-5894: Inappropriate implementation in PDF
  • Low CVE-2026-5895: Incorrect security UI in Omnibox
  • Low CVE-2026-5896: Policy bypass in Audio
  • Low CVE-2026-5897: Incorrect security UI in Downloads
  • Low CVE-2026-5898: Incorrect security UI in Omnibox
  • Low CVE-2026-5899: Incorrect security UI in History Navigation
  • Low CVE-2026-5900: Policy bypass in Downloads
  • Low CVE-2026-5901: Policy bypass in DevTools
  • Low CVE-2026-5902: Race in Media
  • Low CVE-2026-5903: Policy bypass in IFrameSandbox
  • Low CVE-2026-5904: Use after free in V8
  • Low CVE-2026-5905: Incorrect security UI in Permissions
  • Low CVE-2026-5906: Incorrect security UI in Omnibox
  • Low CVE-2026-5907: Insufficient data validation in Media
  • Low CVE-2026-5908: Integer overflow in Media
  • Low CVE-2026-5909: Integer overflow in Media
  • Low CVE-2026-5910: Integer overflow in Media
  • Low CVE-2026-5911: Policy bypass in ServiceWorkers
  • Low CVE-2026-5912: Integer overflow in WebRTC
  • Low CVE-2026-5913: Out of bounds read in Blink
  • Low CVE-2026-5914: Type Confusion in CSS
  • Low CVE-2026-5915: Insufficient validation of untrusted input in WebML
  • Low CVE-2026-5918: Inappropriate implementation in Navigation
  • Low CVE-2026-5919: Insufficient validation of untrusted input in WebSockets

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2026-952f3c3d9e

This update has been submitted for testing by than.

4 months ago

This update's test gating status has been changed to 'ignored'.

4 months ago

This update has been pushed to testing.

4 months ago
User Icon wasser19641 provided feedback 4 months ago
karma
BZ#2457163 CVE-2026-5858 CVE-2026-5859 CVE-2026-5860 CVE-2026-5861 CVE-2026-5874 CVE-2026-5875 CVE-2026-5876 CVE-2026-5894 chromium: various flaws [fedora-all]
BZ#2457164 CVE-2026-5858 CVE-2026-5859 CVE-2026-5860 CVE-2026-5861 CVE-2026-5874 CVE-2026-5875 CVE-2026-5876 CVE-2026-5894 chromium: various flaws [epel-all]

This update has been submitted for stable by bodhi.

4 months ago

This update has been pushed to stable.

4 months ago

Please log in to add feedback.

Metadata
Type
security
Severity
high
Karma
1
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
1
Stable by Time
7 days
Dates
submitted
4 months ago
in testing
4 months ago
in stable
4 months ago
approved
4 months ago
Builds
1
chromium-147.0.7727.55-1.fc43
BZ#2457163 CVE-2026-5858 CVE-2026-5859 CVE-2026-5860 CVE-2026-5861 CVE-2026-5874 CVE-2026-5875 CVE-2026-5876 CVE-2026-5894 chromium: various flaws [fedora-all]
0
1
BZ#2457164 CVE-2026-5858 CVE-2026-5859 CVE-2026-5860 CVE-2026-5861 CVE-2026-5874 CVE-2026-5875 CVE-2026-5876 CVE-2026-5894 chromium: various flaws [epel-all]
0
1
chromium-147.0.7727.55-1.fc43

Automated Test Results

Copyright © 2007-2026 Red Hat, Inc. and others.

Running bodhi-server 26.4.0 on bodhi-web-69455fd696-8lmph.

bodhi is Free Software. Please file issues if you have any problems. Read the documentation.

• Composes • Legal • Privacy policy •