FEDORA-2026-e71e71d1fe — security update for chromium

stable

chromium-146.0.7680.71-1.fc42

FEDORA-2026-e71e71d1fe created by than 4 months ago for Fedora 42

Update to 146.0.7680.71

CVE-2026-3913: Heap buffer overflow in WebML
CVE-2026-3914: Integer overflow in WebML
CVE-2026-3915: Heap buffer overflow in WebML
CVE-2026-3916: Out of bounds read in Web Speech
CVE-2026-3917: Use after free in Agents
CVE-2026-3918: Use after free in WebMCP
CVE-2026-3919: Use after free in Extensions
CVE-2026-3920: Out of bounds memory access in WebML
CVE-2026-3921: Use after free in TextEncoding
CVE-2026-3922: Use after free in MediaStream
CVE-2026-3923: Use after free in WebMIDI
CVE-2026-3924: Use after free in WindowDialog
CVE-2026-3925: Incorrect security UI in LookalikeChecks
CVE-2026-3926: Out of bounds read in V8
CVE-2026-3927: Incorrect security UI in PictureInPicture
CVE-2026-3928: Insufficient policy enforcement in Extensions
CVE-2026-3929: Side-channel information leakage in ResourceTiming
CVE-2026-3930: Unsafe navigation in Navigation
CVE-2026-3931: Heap buffer overflow in Skia
CVE-2026-3932: Insufficient policy enforcement in PDF
CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
CVE-2026-3935: Incorrect security UI in WebAppInstalls
CVE-2026-3936: Use after free in WebView
CVE-2026-3937: Incorrect security UI in Downloads
CVE-2026-3938: Insufficient policy enforcement in Clipboard
CVE-2026-3939: Insufficient policy enforcement in PDF
CVE-2026-3940: Insufficient policy enforcement in DevTools
CVE-2026-3941: Insufficient policy enforcement in DevTools
CVE-2026-3942: Incorrect security UI in PictureInPicture

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2026-e71e71d1fe

This update has been submitted for testing by than.

4 months ago

This update's test gating status has been changed to 'ignored'.

4 months ago

This update has been pushed to testing.

4 months ago

boycottsystemd1 provided feedback 4 months ago

karma

This update has been submitted for stable by bodhi.

4 months ago

This update has been pushed to stable.

4 months ago

Please log in to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

4 months ago

in testing

4 months ago

in stable

4 months ago

approved

4 months ago

Builds

chromium-146.0.7680.71-1.fc42

Automated Test Results

ignored