CVE-2026-49825 affecting package python-lxml for versions less than 4.9.3-3

CVE-2026-49825 affecting package python-lxml for versions less than 4.9.3-3. A patched version of the package is available...

CVE-2026-53585 affecting package libgit2 for versions less than 1.7.2-2

CVE-2026-53585 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...

CVE-2026-76641 affecting package expat for versions less than 2.8.3-2

CVE-2026-76641 affecting package expat for versions less than 2.8.3-2. A patched version of the package is available...

CVE-2026-79255

Improper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79076

Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79267

Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79065

Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78986

Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-79031

Improper resource exposure in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-59184

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 allow a crafted EXR with a nonzero dataWindow.min to make TypedFlatImageChannel::row return an...

CVE-2026-79770

Nokogiri versions before 1.19.3 contain regular expression denial of service vulnerabilities in the CSS selector tokenizer affecting string-literal and identifier tokenization. Attackers can inject adversarial CSS selectors into methods like Nodecss, Nodeatcss, and Searchablesearch to cause...

CVE-2026-15310

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion...

CVE-2026-16599

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...

[SECURITY] Fedora 44 Update: jfrog-cli-2.120.0-1.fc44

JFrog CLI is a client that provides a simple interface that automates access to the JFrog products...

xorg-x11-server security update

1.20.4-29.0.11 - Security update for CVE-2026-55999 Orabug: 39831768 1.20.4-29.0.9 - Security update for CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263 CVE-2026-50264 Orabug: 39695293 Tue Jun 09 2026 Ronan Pigott 1.20.4-29.0...

MariaDB -- Multiple vulnerabilities

The MariaDB project reports: Details in links...

GHSA-8WR5-JM2H-8R4F vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, vllm-openai-cuda-12.9...

GHSA-RWXX-MRJM-WC2M vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, vllm-openai-cuda-12.9...

CVE-2026-55514 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, vllm-openai-cuda-12.9...

firefox: Integer overflow in the Graphics component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Graphics component...