GHSA-8FQ6-P869-285X vulnerabilities

Vulnerabilities for packages: firefox-esr...

RHEL 8 : gnutls and libtasn1 (RHSA-2026:30849)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:30849 advisory. The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such a...

OPENSUSE-SU-2026:11136-1 ocaml-4.14.4-1.1 on GA media

These are all security issues fixed in the ocaml-4.14.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11127-1 ImageMagick-7.1.2.25-3.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.25-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11118-1 jackson-databind-2.18.8-1.1 on GA media

These are all security issues fixed in the jackson-databind-2.18.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11117-1 giflib-devel-32bit-5.2.2-4.1 on GA media

These are all security issues fixed in the giflib-devel-32bit-5.2.2-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11107-1 containerd-1.7.33-1.1 on GA media

These are all security issues fixed in the containerd-1.7.33-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2020-8614

This update for xar fixes the following issues: Changes in xar: - Switch to the maintained Apple xar lineage build 503, versioned 1.8.0.0.503: the mackyle 1.6.1 fork this package tracked has been dead since 2012, and Debian, Fedora and Gentoo all moved to Apple's xar apple-oss-distributions/xar...

OPENSUSE-SU-2026:11052-1 MozillaFirefox-152.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-152.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11040-1 grafana-11.6.14+security04-4.1 on GA media

These are all security issues fixed in the grafana-11.6.14+security04-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11021-1 kitty-0.47.3-1.1 on GA media

These are all security issues fixed in the kitty-0.47.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11028-1 librav1e0_8-0.8.1-2.1 on GA media

These are all security issues fixed in the librav1e08-0.8.1-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-49119

Name of the Vulnerable Software and Affected Versions Tornado versions prior to 6.5.6 Description Gzip decompression routines process data in limited-size chunks but lack an overall limit for the total size of accumulated decompressed chunks. This allows a malicious server to consume unlimited...

OPENSUSE-SU-2026:11009-1 ffmpeg-7-7.1.4-3.1 on GA media

These are all security issues fixed in the ffmpeg-7-7.1.4-3.1 package on the GA media of openSUSE Tumbleweed...

gstreamer1 -- multiple vulnerabilities

The GStreamer project reports: Multiple security issues were identified and fixed in the GStreamer framework. GStreamer-SA-2026-0030: Missing bounds checks in RTCP SDES packet parsing GStreamer-SA-2026-0031: Integer overflow and truncation in MXF demuxer GStreamer-SA-2026-0032: Out-of-bounds read...

OPENSUSE-SU-2026:10995-1 enc-1.1.5-2.1 on GA media

These are all security issues fixed in the enc-1.1.5-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10994-1 cpp-httplib-devel-0.46.1-1.1 on GA media

These are all security issues fixed in the cpp-httplib-devel-0.46.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10993-1 apptainer-1.5.1-1.1 on GA media

These are all security issues fixed in the apptainer-1.5.1-1.1 package on the GA media of openSUSE Tumbleweed...

MGASA-2026-0187 Updated tor packages fix security issues

This update provides lots of security issues fixed by upstream since our current version. Please see the links for details...

PT-2026-48599

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.4.0 through 3.4.11 Description The HTJ2K High-Throughput JPEG 2000 decoder in OpenEXRCore contains a heap-buffer-overflow READ in the ht undo impl function. This occurs because the function copies decoded pixels from a...