stable

cef-146.0.9^chromium146.0.7680.164-1.fc43

FEDORA-2026-a67eba175f created by hoshinolina 6 months ago for Fedora 43

Update to cef-146.0.9+g3ca6a87 + chromium 146.0.7680.164

  • High CVE-2026-4673: Heap buffer overflow in WebAudio
  • High CVE-2026-4674: Out of bounds read in CSS
  • High CVE-2026-4675: Heap buffer overflow in WebGL
  • High CVE-2026-4676: Use after free in Dawn
  • High CVE-2026-4677: Out of bounds read in WebAudio
  • High CVE-2026-4678: Use after free in WebGPU
  • High CVE-2026-4679: Integer overflow in Fonts
  • High CVE-2026-4680: Use after free in FedCM
  • CVE-2026-4439: Out of bounds memory access in WebGL
  • CVE-2026-4440: Out of bounds read and write in WebGL
  • CVE-2026-4441: Use after free in Base
  • CVE-2026-4442: Heap buffer overflow in CSS
  • CVE-2026-4443: Heap buffer overflow in WebAudio
  • CVE-2026-4444: Stack buffer overflow in WebRTC
  • CVE-2026-4445: Use after free in WebRTC
  • CVE-2026-4446: Use after free in WebRTC
  • CVE-2026-4447: Inappropriate implementation in V8
  • CVE-2026-4448: Heap buffer overflow in ANGLE
  • CVE-2026-4449: Use after free in Blink
  • CVE-2026-4450: Out of bounds write in V8
  • CVE-2026-4451: Insufficient validation of untrusted input in Navigation
  • CVE-2026-4452: Integer overflow in ANGLE
  • CVE-2026-4453: Integer overflow in Dawn
  • CVE-2026-4454: Use after free in Network
  • CVE-2026-4455: Heap buffer overflow in PDFium
  • CVE-2026-4456: Use after free in Digital Credentials API
  • CVE-2026-4457: Type Confusion in V8
  • CVE-2026-4458: Use after free in Extensions
  • CVE-2026-4459: Out of bounds read and write in WebAudio
  • CVE-2026-4460: Out of bounds read in Skia
  • CVE-2026-4461: Inappropriate implementation in V8
  • CVE-2026-4462: Out of bounds read in Blink
  • CVE-2026-4463: Heap buffer overflow in WebRTC
  • CVE-2026-4464: Integer overflow in ANGLE
  • CVE-2026-3909: Out of bounds write in Ski
  • CVE-2026-3909: Out of bounds write in Skia
  • CVE-2026-3910: Inappropriate implementation in V8
  • CVE-2026-3913: Heap buffer overflow in WebML
  • CVE-2026-3914: Integer overflow in WebML
  • CVE-2026-3915: Heap buffer overflow in WebML
  • CVE-2026-3916: Out of bounds read in Web Speech
  • CVE-2026-3917: Use after free in Agents
  • CVE-2026-3909: Out of bounds write in Skia
  • CVE-2026-3910: Inappropriate implementation in V8
  • CVE-2026-3913: Heap buffer overflow in WebML
  • CVE-2026-3914: Integer overflow in WebML
  • CVE-2026-3915: Heap buffer overflow in WebML
  • CVE-2026-3916: Out of bounds read in Web Speech
  • CVE-2026-3917: Use after free in Agents
  • CVE-2026-3918: Use after free in WebMCP
  • CVE-2026-3919: Use after free in Extensions
  • CVE-2026-3920: Out of bounds memory access in WebML
  • CVE-2026-3921: Use after free in TextEncoding
  • CVE-2026-3922: Use after free in MediaStream
  • CVE-2026-3923: Use after free in WebMIDI
  • CVE-2026-3924: Use after free in WindowDialog
  • CVE-2026-3925: Incorrect security UI in LookalikeChecks
  • CVE-2026-3926: Out of bounds read in V8
  • CVE-2026-3927: Incorrect security UI in PictureInPicture
  • CVE-2026-3928: Insufficient policy enforcement in Extensions
  • CVE-2026-3929: Side-channel information leakage in ResourceTiming
  • CVE-2026-3930: Unsafe navigation in Navigation
  • CVE-2026-3931: Heap buffer overflow in Skia
  • CVE-2026-3932: Insufficient policy enforcement in PDF
  • CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
  • CVE-2026-3935: Incorrect security UI in WebAppInstalls
  • CVE-2026-3936: Use after free in WebView
  • CVE-2026-3937: Incorrect security UI in Downloads
  • CVE-2026-3938: Insufficient policy enforcement in Clipboard
  • CVE-2026-3939: Insufficient policy enforcement in PDF
  • CVE-2026-3940: Insufficient policy enforcement in DevTools
  • CVE-2026-3941: Insufficient policy enforcement in DevTools
  • CVE-2026-3942: Incorrect security UI in PictureInPicture

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2026-a67eba175f

This update has been submitted for testing by hoshinolina.

6 months ago

This update's test gating status has been changed to 'ignored'.

6 months ago

This update has been pushed to testing.

5 months ago

This update has been submitted for stable by bodhi.

5 months ago

This update has been pushed to stable.

5 months ago

Please log in to add feedback.

Metadata
Type
security
Severity
high
Karma
0
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
1
Stable by Time
7 days
Dates
submitted
6 months ago
in testing
5 months ago
in stable
5 months ago
approved
5 months ago
Builds
1
cef-146.0.9^chromium146.0.7680.164-1.fc43
BZ#2451647 cef-146.0.9 is available
0
0
cef-146.0.9^chromium146.0.7680.164-1.fc43

Automated Test Results

Copyright © 2007-2026 Red Hat, Inc. and others.

Running bodhi-server 26.4.0 on bodhi-web-7dd4cfcc55-96wpv.

bodhi is Free Software. Please file issues if you have any problems. Read the documentation.

• Composes • Legal • Privacy policy •