stable

chromium-151.0.7922.71-1.fc44

FEDORA-2026-976bbbc661 created by than 3 days ago for Fedora 44

security release chromium-151.0.7922.71 includes 370 security fixes: CVE-2026-17650 - CVE-2026-18019

Logout Required
After installing this update it is required that you logout of your current user session and log back in to ensure the changes supplied by this update are applied properly.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2026-976bbbc661

This update has been submitted for testing by than.

3 days ago

This update's test gating status has been changed to 'waiting'.

3 days ago

This update's test gating status has been changed to 'passed'.

3 days ago

This update has been pushed to testing.

3 days ago
User Icon wasser19641 provided feedback 2 days ago
karma
BZ#2509039 CVE-2026-17735 chromium: Chromium: Sandbox escape via crafted HTML page in BFCache [epel-all]
BZ#2509040 CVE-2026-17735 chromium: Chromium: Sandbox escape via crafted HTML page in BFCache [fedora-all]
BZ#2509041 CVE-2026-17928 chromium: Chromium: Cross-origin data leakage via DataTransfer [epel-all]
BZ#2509042 CVE-2026-17928 chromium: Chromium: Cross-origin data leakage via DataTransfer [fedora-all]
BZ#2509043 CVE-2026-17858 chromium: chromium-browser: Uninitialized Use in WebNN [epel-all]
BZ#2509044 CVE-2026-17858 chromium: chromium-browser: Uninitialized Use in WebNN [fedora-all]
BZ#2509045 CVE-2026-17865 chromium: chromium-browser: Inappropriate implementation in Crypto [epel-all]
BZ#2509046 CVE-2026-17865 chromium: chromium-browser: Inappropriate implementation in Crypto [fedora-all]
BZ#2509047 CVE-2026-17823 chromium: Google Chrome: Same-Origin Policy Bypass via Insufficient Policy Enforcement in WebXR [fedora-all]
BZ#2509048 CVE-2026-17823 chromium: Google Chrome: Same-Origin Policy Bypass via Insufficient Policy Enforcement in WebXR [epel-all]
BZ#2509049 CVE-2026-17778 chromium: Google Chrome: Arbitrary code execution via crafted Chrome Extension [fedora-all]

This update has been submitted for stable by bodhi.

2 days ago
User Icon ephmo provided feedback 2 days ago
karma
BZ#2509039 CVE-2026-17735 chromium: Chromium: Sandbox escape via crafted HTML page in BFCache [epel-all]
BZ#2509040 CVE-2026-17735 chromium: Chromium: Sandbox escape via crafted HTML page in BFCache [fedora-all]
BZ#2509041 CVE-2026-17928 chromium: Chromium: Cross-origin data leakage via DataTransfer [epel-all]
BZ#2509042 CVE-2026-17928 chromium: Chromium: Cross-origin data leakage via DataTransfer [fedora-all]
BZ#2509043 CVE-2026-17858 chromium: chromium-browser: Uninitialized Use in WebNN [epel-all]
BZ#2509044 CVE-2026-17858 chromium: chromium-browser: Uninitialized Use in WebNN [fedora-all]
BZ#2509045 CVE-2026-17865 chromium: chromium-browser: Inappropriate implementation in Crypto [epel-all]
BZ#2509046 CVE-2026-17865 chromium: chromium-browser: Inappropriate implementation in Crypto [fedora-all]
BZ#2509047 CVE-2026-17823 chromium: Google Chrome: Same-Origin Policy Bypass via Insufficient Policy Enforcement in WebXR [fedora-all]
BZ#2509048 CVE-2026-17823 chromium: Google Chrome: Same-Origin Policy Bypass via Insufficient Policy Enforcement in WebXR [epel-all]
BZ#2509049 CVE-2026-17778 chromium: Google Chrome: Arbitrary code execution via crafted Chrome Extension [fedora-all]

This update has been pushed to stable.

a day ago

Please log in to add feedback.

Metadata
Type
security
Severity
urgent
Karma
2
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
1
Stable by Time
7 days
Dates
submitted
3 days ago
in testing
3 days ago
in stable
a day ago
approved
2 days ago
Builds
1
chromium-151.0.7922.71-1.fc44
BZ#2509039 CVE-2026-17735 chromium: Chromium: Sandbox escape via crafted HTML page in BFCache [epel-all]
0
2
BZ#2509040 CVE-2026-17735 chromium: Chromium: Sandbox escape via crafted HTML page in BFCache [fedora-all]
0
2
BZ#2509041 CVE-2026-17928 chromium: Chromium: Cross-origin data leakage via DataTransfer [epel-all]
0
2
BZ#2509042 CVE-2026-17928 chromium: Chromium: Cross-origin data leakage via DataTransfer [fedora-all]
0
2
BZ#2509043 CVE-2026-17858 chromium: chromium-browser: Uninitialized Use in WebNN [epel-all]
0
2
BZ#2509044 CVE-2026-17858 chromium: chromium-browser: Uninitialized Use in WebNN [fedora-all]
0
2
BZ#2509045 CVE-2026-17865 chromium: chromium-browser: Inappropriate implementation in Crypto [epel-all]
0
2
BZ#2509046 CVE-2026-17865 chromium: chromium-browser: Inappropriate implementation in Crypto [fedora-all]
0
2
BZ#2509047 CVE-2026-17823 chromium: Google Chrome: Same-Origin Policy Bypass via Insufficient Policy Enforcement in WebXR [fedora-all]
0
2
BZ#2509048 CVE-2026-17823 chromium: Google Chrome: Same-Origin Policy Bypass via Insufficient Policy Enforcement in WebXR [epel-all]
0
2
BZ#2509049 CVE-2026-17778 chromium: Google Chrome: Arbitrary code execution via crafted Chrome Extension [fedora-all]
0
2
chromium-151.0.7922.71-1.fc44

Automated Test Results

Copyright © 2007-2026 Red Hat, Inc. and others.

Running bodhi-server 26.4.0 on bodhi-web-69455fd696-cr7bs.

bodhi is Free Software. Please file issues if you have any problems. Read the documentation.

• Composes • Legal • Privacy policy •