ROS-20260716-73-0054

The vulnerability in Chromium is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260716-73-0042

The vulnerability of the didsetspelllang function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

ROS-20260716-73-0009

The vulnerability of the Google Chrome browser’s Media component is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure through the use of a specially created video file...

ROS-20260716-73-0002

The vulnerability in Chromium is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker who operates remotely to gain unauthorized access to protected information...

keylime security update

7.14.1-6 - keylime: Fix hardcoded attestation challenge nonce CVE-2026-6420 RHEL-168795...

GHSA-58W9-8G37-X9V5 vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

GHSA-5WVM-RXCF-6CG8 vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

GHSA-PRJF-86W9-MFQV vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

GHSA-RGJC-H3X7-9MWG vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

CVE-2026-54448 vulnerabilities

Vulnerabilities for packages: cloudbeat, cloudbeat-fips, trivy-operator-fips, trivy-operator...

CVE-2022-41720 vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

GHSA-RGJC-H3X7-9MWG vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

CVE-2026-15131 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15130 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15110 vulnerabilities

Vulnerabilities for packages: chromium...

nodejs: Node.js WebCrypto: Denial of Service via large input to subtle.encrypt()

A flaw was found in the Node.js WebCrypto implementation. A remote attacker could exploit this vulnerability by providing an input to the subtle.encrypt function that is a multiple of 2 gigabytes GiB. This could lead to a denial of service DoS by crashing the Node.js process...

CVE-2026-61866

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the JNG encoder when a blob cannot be opened. Attackers can trigger the memory leak by providing malformed JNG files that fail blob operations, causing resource exhaustion...

CVE-2026-61864

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in color transformation to the log colorspace: when the operation fails, a small amount of memory is not released...

CVE-2026-61860

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a use-after-free vulnerability that occurs when freetype initialization fails: the method does not exit and continues to use memory that was already freed. This can be triggered during image processing and may lead to a denial of service...

firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Denial-of-service in the Graphics: ImageLib component...