Fedora Linux 9291 Published by

Fedora 44 received multiple security updates covering critical software like Chromium, Wireshark, and FreeRDP. Significant releases for several .NET versions are also included, bringing SDKs and runtimes up to date on platforms nine and ten alongside version eight. Updates resolve critical flaws like buffer overflows and use-after-free errors within components such as WebAudio to maintain overall system integrity.

Fedora 44 Update: chromium-146.0.7680.164-1.fc44
Fedora 44 Update: dotnet8.0-8.0.125-1.fc44
Fedora 44 Update: dotnet9.0-9.0.115-1.fc44
Fedora 44 Update: dotnet10.0-10.0.104-1.fc44
Fedora 44 Update: wireshark-4.6.4-2.fc44
Fedora 44 Update: freerdp-3.24.0-2.fc44




[SECURITY] Fedora 44 Update: chromium-146.0.7680.164-1.fc44


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-4d42fffb2b
2026-03-26 02:29:19.225700+00:00
--------------------------------------------------------------------------------

Name : chromium
Product : Fedora 44
Version : 146.0.7680.164
Release : 1.fc44
URL : http://www.chromium.org/Home
Summary : A WebKit (Blink) powered web browser that Google doesn't want you to use
Description :
Chromium is an open-source web browser, powered by WebKit (Blink).

--------------------------------------------------------------------------------
Update Information:

Update to 146.0.7680.164
* High CVE-2026-4673: Heap buffer overflow in WebAudio
* High CVE-2026-4674: Out of bounds read in CSS
* High CVE-2026-4675: Heap buffer overflow in WebGL
* High CVE-2026-4676: Use after free in Dawn
* High CVE-2026-4677: Out of bounds read in WebAudio
* High CVE-2026-4678: Use after free in WebGPU
* High CVE-2026-4679: Integer overflow in Fonts
* High CVE-2026-4680: Use after free in FedCM
--------------------------------------------------------------------------------
ChangeLog:

* Tue Mar 24 2026 Than Ngo [than@redhat.com] - 146.0.7680.164-1
- Update to 146.0.7680.164
* High CVE-2026-4673: Heap buffer overflow in WebAudio
* High CVE-2026-4674: Out of bounds read in CSS
* High CVE-2026-4675: Heap buffer overflow in WebGL
* High CVE-2026-4676: Use after free in Dawn
* High CVE-2026-4677: Out of bounds read in WebAudio
* High CVE-2026-4678: Use after free in WebGPU
* High CVE-2026-4679: Integer overflow in Fonts
* High CVE-2026-4680: Use after free in FedCM
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-4d42fffb2b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new



[SECURITY] Fedora 44 Update: dotnet8.0-8.0.125-1.fc44


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-702a03ac4d
2026-03-26 02:29:19.225640+00:00
--------------------------------------------------------------------------------

Name : dotnet8.0
Product : Fedora 44
Version : 8.0.125
Release : 1.fc44
URL : https://github.com/dotnet/
Summary : .NET Runtime and SDK
Description :
.NET is a fast, lightweight and modular platform for creating
cross platform applications that work on Linux, macOS and Windows.

It particularly focuses on creating console applications, web
applications and micro-services.

.NET contains a runtime conforming to .NET Standards a set of
framework libraries, an SDK containing compilers and a 'dotnet'
application to drive everything.

--------------------------------------------------------------------------------
Update Information:

This is the March 2026 release of .NET 8
Release Notes:
SDK: https://github.com/dotnet/core/blob/main/release-
notes/8.0/8.0.25/8.0.125.md
Runtime: https://github.com/dotnet/core/blob/main/release-
notes/8.0/8.0.25/8.0.25.md
--------------------------------------------------------------------------------
ChangeLog:

* Wed Mar 11 2026 Omair Majid [omajid@redhat.com] - 8.0.125-1
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-702a03ac4d' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new



[SECURITY] Fedora 44 Update: dotnet9.0-9.0.115-1.fc44


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-624e30e8a7
2026-03-26 02:29:19.225629+00:00
--------------------------------------------------------------------------------

Name : dotnet9.0
Product : Fedora 44
Version : 9.0.115
Release : 1.fc44
URL : https://github.com/dotnet/
Summary : .NET Runtime and SDK
Description :
.NET is a fast, lightweight and modular platform for creating
cross platform applications that work on Linux, macOS and Windows.

It particularly focuses on creating console applications, web
applications and micro-services.

.NET contains a runtime conforming to .NET Standards a set of
framework libraries, an SDK containing compilers and a 'dotnet'
application to drive everything.

--------------------------------------------------------------------------------
Update Information:

This is the March 2026 release of .NET 9.
Release Notes:
SDK: https://github.com/dotnet/core/blob/main/release-
notes/9.0/9.0.14/9.0.115.md
Runtime: https://github.com/dotnet/core/blob/main/release-
notes/9.0/9.0.14/9.0.14.md
--------------------------------------------------------------------------------
ChangeLog:

* Wed Mar 11 2026 Omair Majid [omajid@redhat.com] - 9.0.115-1
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-624e30e8a7' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new



[SECURITY] Fedora 44 Update: dotnet10.0-10.0.104-1.fc44


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-956fc306c4
2026-03-26 02:29:19.225625+00:00
--------------------------------------------------------------------------------

Name : dotnet10.0
Product : Fedora 44
Version : 10.0.104
Release : 1.fc44
URL : https://github.com/dotnet/
Summary : .NET 10.0 Runtime and SDK
Description :
.NET is a fast, lightweight and modular platform for creating
cross platform applications that work on Linux, macOS and Windows.

It particularly focuses on creating console applications, web
applications and micro-services.

.NET contains a runtime conforming to .NET Standards a set of
framework libraries, an SDK containing compilers and a 'dotnet'
application to drive everything.

--------------------------------------------------------------------------------
Update Information:

This is the March 2026 release of .NET 10.
Release Notes:
SDK: https://github.com/dotnet/core/blob/main/release-
notes/10.0/10.0.4/10.0.104.md
Runtime: https://github.com/dotnet/core/blob/main/release-
notes/10.0/10.0.4/10.0.4.md
--------------------------------------------------------------------------------
ChangeLog:

* Wed Mar 11 2026 Omair Majid [omajid@redhat.com] - 10.0.104-1
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-956fc306c4' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new



[SECURITY] Fedora 44 Update: wireshark-4.6.4-2.fc44


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-71154797a5
2026-03-26 02:29:19.225633+00:00
--------------------------------------------------------------------------------

Name : wireshark
Product : Fedora 44
Version : 4.6.4
Release : 2.fc44
URL : http://www.wireshark.org/
Summary : Network traffic analyzer
Description :
Wireshark allows you to examine protocol data stored in files or as it is
captured from wired or wireless (WiFi or Bluetooth) networks, USB devices,
and many other sources. It supports dozens of protocol capture file formats
and understands more than a thousand protocols.

It has many powerful features including a rich display filter language
and the ability to reassemble multiple protocol packets in order to, for
example, view a complete TCP stream, save the contents of a file which was
transferred over HTTP or CIFS, or play back an RTP audio stream.

--------------------------------------------------------------------------------
Update Information:

Enabling a couple of python tools
New version 6.4.6
--------------------------------------------------------------------------------
ChangeLog:

* Tue Mar 17 2026 Michal Ruprich [mruprich@redhat.com] - 1:4.6.4-2
- Adding a couple of python tools
* Wed Mar 4 2026 Michal Ruprich [mruprich@redhat.com] - 1:4.6.4-1
- New version 4.6.4
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2421941 - [patch] Add config.h to include files of devel package
https://bugzilla.redhat.com/show_bug.cgi?id=2421941
[ 2 ] Bug #2442699 - CVE-2026-3201 wireshark: Improperly Controlled Sequential Memory Allocation in Wireshark [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2442699
[ 3 ] Bug #2442701 - CVE-2026-3202 wireshark: NULL Pointer Dereference in Wireshark [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2442701
[ 4 ] Bug #2442705 - CVE-2026-3203 wireshark: Buffer Over-read in Wireshark [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2442705
[ 5 ] Bug #2442866 - wireshark-4.6.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2442866
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-71154797a5' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new



[SECURITY] Fedora 44 Update: freerdp-3.24.0-2.fc44


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-2c1ab5b23b
2026-03-26 02:29:19.225552+00:00
--------------------------------------------------------------------------------

Name : freerdp
Product : Fedora 44
Version : 3.24.0
Release : 2.fc44
URL : http://www.freerdp.com/
Summary : Free implementation of the Remote Desktop Protocol (RDP)
Description :
The xfreerdp & wlfreerdp Remote Desktop Protocol (RDP) clients from the FreeRDP
project.

xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows
machines, xrdp and VirtualBox.

--------------------------------------------------------------------------------
Update Information:

Update to 3.24.0 (CVE-2026-29774, CVE-2026-29775, CVE-2026-29776,
CVE-2026-31806, CVE-2026-31883, CVE-2026-31884, CVE-2026-31885, CVE-2026-31897)
--------------------------------------------------------------------------------
ChangeLog:

* Tue Mar 17 2026 Adam Williamson [awilliam@redhat.com] - 2:3.24.0-2
- Backport PR #12484 to fix NTLM auth broken in 3.24.0
* Mon Mar 16 2026 Ondrej Holy [oholy@redhat.com] - 2:3.24.0-1
- Update to 3.24.0 (CVE-2026-29774, CVE-2026-29775, CVE-2026-29776,
CVE-2026-31806, CVE-2026-31883, CVE-2026-31884, CVE-2026-31885,
CVE-2026-31897)
Resolves: rhbz#2447295, rhbz#2447393, rhbz#2447412, rhbz#2447415
Resolves: rhbz#2447417, rhbz#2447419, rhbz#2447423, rhbz#2447428
Resolves: rhbz#2447431
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-2c1ab5b23b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new