Update to cef-145.0.25 + chromium 145.0.7632.75 CVE-2026-1861: Heap buffer overflow in libvpx CVE-2026-1862: Type Confusion in V8 CVE-2026-2313: Use after free in CSS CVE-2026-2314: Heap buffer overflow in Codecs. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-a48b5f36ec 2026-03-02 00:56:30.545282+00:00 -------------------------------------------------------------------------------- Name : cef Product : Fedora 42 Version : 145.0.25^chromium145.0.7632.75 Release : 4.fc42 URL : https://bitbucket.org/chromiumembedded/cef Summary : Chromium Embedded Framework Description : CEF is an embeddable build of Chromium, powered by WebKit (Blink). -------------------------------------------------------------------------------- Update Information: Update to cef-145.0.25 + chromium 145.0.7632.75 CVE-2026-1861: Heap buffer overflow in libvpx CVE-2026-1862: Type Confusion in V8 CVE-2026-2313: Use after free in CSS CVE-2026-2314: Heap buffer overflow in Codecs CVE-2026-2315: Inappropriate implementation in WebGPU CVE-2026-2316: Insufficient policy enforcement in Frames CVE-2026-2317: Inappropriate implementation in Animation CVE-2026-2318: Inappropriate implementation in PictureInPicture CVE-2026-2319: Race in DevTools CVE-2026-2320: Inappropriate implementation in File input CVE-2026-2321: Use after free in Ozone CVE-2026-2322: Inappropriate implementation in File input CVE-2026-2323: Inappropriate implementation in Downloads CVE-2026-2441: Use after free in CSS -------------------------------------------------------------------------------- ChangeLog: * Fri Feb 20 2026 Than Ngo - 145.0.25^chromium145.0.7632.75-1 - Update to 145.0.7632.75 - * CVE-2026-2441: Use after free in CSS - Fix FTFS on aarch64/ppc64le caused by missing include file (el9) - Enable rustc_nightly_capability * Fri Feb 20 2026 Than Ngo - 145.0.25^chromium145.0.7632.45-1 - Update to 145.0.7632.45 - *CVE-2026-2313: Use after free in CSS - * CVE-2026-2314: Heap buffer overflow in Codecs - * CVE-2026-2315: Inappropriate implementation in WebGPU - * CVE-2026-2316: Insufficient policy enforcement in Frames - * CVE-2026-2317: Inappropriate implementation in Animation - * CVE-2026-2318: Inappropriate implementation in PictureInPicture - * CVE-2026-2319: Race in DevTools - * CVE-2026-2320: Inappropriate implementation in File input - * CVE-2026-2321: Use after free in Ozone - * CVE-2026-2322: Inappropriate implementation in File input - * CVE-2026-2323: Inappropriate implementation in Downloads - Hoshino Lina: Update to cef-145.0.25+g265860d * Fri Feb 20 2026 Than Ngo - 144.0.11^chromium144.0.7559.132-1 - Update to 144.0.7559.132 - * CVE-2026-1861: Heap buffer overflow in libvpx - * CVE-2026-1862: Type Confusion in V8 - Add BR on esbuild - Disable devtool bundle - Update scripts for downloading the source -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-a48b5f36ec' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
CVE-2025-8010: Type Confusion in V8 CVE-2025-8011: Type Confusion in V8 CVE-2025-8576: Use after free in Extensions CVE-2025-8578: Use after free in Cast CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-b7cb89ddd3 2025-08-31 01:07:52.461295+00:00 -------------------------------------------------------------------------------- Name : cef Product : Fedora 42 Version : 139.0.26^chromium139.0.7258.127 Release : 1.fc42 URL : https://bitbucket.org/chromiumembedded/cef Summary : Chromium Embedded Framework Description : CEF is an embeddable build of Chromium, powered by WebKit (Blink). -------------------------------------------------------------------------------- Update Information: CVE-2025-8010: Type Confusion in V8 CVE-2025-8011: Type Confusion in V8 CVE-2025-8576: Use after free in Extensions CVE-2025-8578: Use after free in Cast CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome CVE-2025-8580: Inappropriate implementation in Filesystems CVE-2025-8581: Inappropriate implementation in Extensions CVE-2025-8582: Insufficient validation of untrusted input in DOM CVE-2025-8583: Inappropriate implementation in Permissions CVE-2025-8879: Heap buffer overflow in libaom CVE-2025-8880: Race in V8 CVE-2025-8901: Out of bounds write in ANGLE CVE-2025-8881: Inappropriate implementation in File Picker CVE-2025-8882: Use after free in Aura -------------------------------------------------------------------------------- ChangeLog: * Thu Aug 21 2025 Asahi Lina - 139.0.26^chromium139.0.7258.127-1 - Update to cef-139.0.26+g9d80e0d * Thu Aug 14 2025 Than Ngo - 139.0.20^chromium139.0.7258.127-1 - Updated to 139.0.7258.127 (rhbz#2381869) - * CVE-2025-8879: Heap buffer overflow in libaom - * CVE-2025-8880: Race in V8 - * CVE-2025-8901: Out of bounds write in ANGLE - * CVE-2025-8881: Inappropriateimplementation in File Picker - * CVE-2025-8882: Use after free in Aura * Thu Aug 14 2025 Than Ngo - 139.0.20^chromium139.0.7258.66-1 - Updated to 139.0.7258.66 - Asahi Lina: Update to cef-139.0.20+g60bd77d - * CVE-2025-8576: Use after free in Extensions - * CVE-2025-8578: Use after free in Cast - * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome - * CVE-2025-8580: Inappropriate implementation in Filesystems - * CVE-2025-8581: Inappropriate implementation in Extensions - * CVE-2025-8582: Insufficient validation of untrusted input in DOM - * CVE-2025-8583: Inappropriate implementation in Permissions * Thu Aug 14 2025 Than Ngo - 138.0.25^chromium138.0.7204.183-1 - Update to 138.0.7204.183 - * CVE-2025-8292: Use after free in Media Stream * Thu Aug 14 2025 Than Ngo - 138.0.25^chromium138.0.7204.168-1 - Update to 138.0.7204.168 - * CVE-2025-8010: Type Confusion in V8 - * CVE-2025-8011: Type Confusion in V8 * Thu Aug 14 2025 Tom Stellard - 138.0.25^chromium138.0.7204.157-4 - Backport fix for build failure with clang-21 * Thu Jul 24 2025 Dominik Mierzejewski - 138.0.25^chromium138.0.7204.157-3 - drop unused yasm build dependency * Wed Jul 23 2025 Fedora Release Engineering - 138.0.25^chromium138.0.7204.157-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2389708 - cef-139.0.28 is available https://bugzilla.redhat.com/show_bug.cgi?id=2389708 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-b7cb89ddd3' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can befound at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.