public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/chromium] epel9-next: add CVEs
@ 2026-08-07 16:08 Than Ngo
  0 siblings, 0 replies; 2+ messages in thread
From: Than Ngo @ 2026-08-07 16:08 UTC (permalink / raw)
  To: git-commits

          A new commit has been pushed.

          Repo   : rpms/chromium
          Branch : epel9-next
          Commit : 31a3271e2aa04d141ffb9a42fb587cfa6b439cb0
          Author : Than Ngo <than@redhat.com>
          Date   : 2026-03-06T12:47:45+01:00
          Stats  : +11/-1 in 1 file(s)
          URL    : https://src.fedoraproject.org/rpms/chromium/c/31a3271e2aa04d141ffb9a42fb587cfa6b439cb0?branch=epel9-next

          Log:
          add CVEs

* CVE-2026-3536: Integer overflow in ANGLE
* CVE-2026-3537: Object lifecycle issue in PowerVR
* CVE-2026-3538: Integer overflow in Skia
* CVE-2026-3539: Object lifecycle issue in DevTools
* CVE-2026-3540: Inappropriate implementation in WebAudio
* CVE-2026-3541: Inappropriate implementation in CSS
* CVE-2026-3542: Inappropriate implementation in WebAssembly
* CVE-2026-3543: Inappropriate implementation in V8
* CVE-2026-3544: Heap buffer overflow in WebCodecs
* CVE-2026-3545: Insufficient data validation in Navigation

---
diff --git a/chromium.spec b/chromium.spec
index a4da7ab..4698807 100644
--- a/chromium.spec
+++ b/chromium.spec
@@ -1851,8 +1851,18 @@ fi
 %endif
 
 %changelog
-* Wed Mar 04 2026 Than Ngo <than@redhat.com> - 145.0.7632.159-1
+* Wed Mar 06 2026 Than Ngo <than@redhat.com> - 145.0.7632.159-1
 - Update to 145.0.7632.159
+  * CVE-2026-3536: Integer overflow in ANGLE
+  * CVE-2026-3537: Object lifecycle issue in PowerVR
+  * CVE-2026-3538: Integer overflow in Skia
+  * CVE-2026-3539: Object lifecycle issue in DevTools
+  * CVE-2026-3540: Inappropriate implementation in WebAudio
+  * CVE-2026-3541: Inappropriate implementation in CSS
+  * CVE-2026-3542: Inappropriate implementation in WebAssembly
+  * CVE-2026-3543: Inappropriate implementation in V8
+  * CVE-2026-3544: Heap buffer overflow in WebCodecs
+  * CVE-2026-3545: Insufficient data validation in Navigation
 
 * Tue Feb 24 2026 Than Ngo <than@redhat.com> - 145.0.7632.116-1
 - Update to 145.0.7632.116

^ permalink raw reply related	[flat|nested] 2+ messages in thread
* [rpms/chromium] epel9-next: Add CVEs
@ 2026-08-07 16:08 Than Ngo
  0 siblings, 0 replies; 2+ messages in thread
From: Than Ngo @ 2026-08-07 16:08 UTC (permalink / raw)
  To: git-commits

          A new commit has been pushed.

          Repo   : rpms/chromium
          Branch : epel9-next
          Commit : 4447db4676d92dd9cc6adf7673eefa7e506a553c
          Author : Than Ngo <than@redhat.com>
          Date   : 2026-04-23T23:13:16+02:00
          Stats  : +3/-0 in 1 file(s)
          URL    : https://src.fedoraproject.org/rpms/chromium/c/4447db4676d92dd9cc6adf7673eefa7e506a553c?branch=epel9-next

          Log:
          Add CVEs
* High CVE-2026-6919: Use after free in DevTools
* High CVE-2026-6920: Out of bounds read in GPU
* Medium CVE-2026-6921: Race in GPU

---
diff --git a/chromium.spec b/chromium.spec
index e0cdccc..a1630c6 100644
--- a/chromium.spec
+++ b/chromium.spec
@@ -1859,6 +1859,9 @@ fi
 %changelog
 * Thu Apr 23 2026 Than Ngo <than@redhat.com> - 147.0.7727.116-1
 - Update to 147.0.7727.116
+  * High CVE-2026-6919: Use after free in DevTools
+  * High CVE-2026-6920: Out of bounds read in GPU
+  * Medium CVE-2026-6921: Race in GPU
 - Fix rhbz#2458171, unexpanded macros in manpage
 
 * Wed Apr 15 2026 Than Ngo <than@redhat.com> - 147.0.7727.101-1

^ permalink raw reply related	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2026-08-07 16:08 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-08-07 16:08 [rpms/chromium] epel9-next: add CVEs Than Ngo
2026-08-07 16:08 [rpms/chromium] epel9-next: Add CVEs Than Ngo

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox