DEBIAN-CVE-2026-67291

FreeRDP before 3.29.0 affected versions = 3.28.0 contains a heap out-of-bounds read in updateprocessglyphfragments/glyphcachefragmentput in libfreerdp/cache/glyph.c. When handling a GLYPHFRAGMENTADD update, the code reads a one-byte server-controlled declared fragment size but does not verify it...

UBUNTU-CVE-2026-67297

FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...

JLSEC-2026-1090

Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0...

DEBIAN-CVE-2026-53505

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:proportion filter does not enforce an upper bound on and runs in the post-transform phase. An attacker can trigger extremely large resizes CPU/memory exhaustion and cause denial of service. This issu...

DEBIAN-CVE-2026-53502

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, fileloader decodes percent-encoded path segments after its root-boundary validation, allowing traversal outside FILELOADERROOTPATH through watermark or frame filter input. This issue is fixed in 7.8.0...

BELL-CVE-2026-64558

Bulletin has no description...

BELL-CVE-2026-56850

Bulletin has no description...

UBUNTU-CVE-2026-53587

Unknown description...

UBUNTU-CVE-2026-66756

Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recommended to upgrade to version 4.0.0-beta-1, which fixes the issue...

UBUNTU-CVE-2026-7260

Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9...

CLEANSTART-2026-QV45802 Security fixes in velero-plugin-for-csi 0.7.1-r1

Package velero-plugin-for-csi version 0.7.1-r1 fixes 1 vulnerabilities: CVE-2025-61729...

CLEANSTART-2026-CT11931 Security fixes in prometheus-mysqld-exporter 0.18.0-r3

Package prometheus-mysqld-exporter version 0.18.0-r3 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-KX00546 Security fixes in harbor-registry-fips 2.8.3-r0

Package harbor-registry-fips version 2.8.3-r0 fixes 1 vulnerabilities: CVE-2025-29923...

CLEANSTART-2026-GF33583 Security fixes in kustomize-fips 5.7.1-r1

Package kustomize-fips version 5.7.1-r1 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-CQ67878 Security fixes in prometheus-mysqld-exporter 0.17.2-r2

Package prometheus-mysqld-exporter version 0.17.2-r2 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-II73843 Security fixes in nvidia-container-toolkit 1.18.2-r0

Package nvidia-container-toolkit version 1.18.2-r0 fixes 1 vulnerabilities: CVE-2026-39824...

CLEANSTART-2026-WZ41154 Security fixes in minio-operator 7.0.1-r3

Package minio-operator version 7.0.1-r3 fixes 1 vulnerabilities: CVE-2025-30204...

CLEANSTART-2026-KI68145 Security fixes in cloudnative-pg 1.26.3-r1

Package cloudnative-pg version 1.26.3-r1 fixes 10 vulnerabilities: ghsa-xgrm-4fwx-7qm8, ghsa-9jj7-4m8r-rfcm, CVE-2026-33815, CVE-2026-33816, ghsa-j88v-2chj-qfwx...

Important: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

CVE-2026-46681

A flaw was found in the @nevware21/ts-utils library. This vulnerability allows a remote attacker to manipulate the fundamental properties of objects within an application. By exploiting this, an attacker could potentially execute unauthorized code, leading to a complete compromise of the...