CVE-2026-7320

Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1...

CVE-2026-41603

Rejected reason: This CVE ID is Rejected and will not be used. The record incorrectly described the affected language binding and fixed version. Use CVE-2026-66053, which was assigned to the vulnerability...

SUSE CVE-2026-35328

unknown...

yggdrasil security update

0.4.8-4 - Bump release for rebuild...

CVE-2026-41604

Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

CVE-2026-22009 affecting package mysql for versions less than 8.0.46-1

CVE-2026-22009 affecting package mysql for versions less than 8.0.46-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-35236 affecting package mysql for versions less than 8.0.46-1

CVE-2026-35236 affecting package mysql for versions less than 8.0.46-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-54505

A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the floating point divisor unit, potentially resulting in loss of confidentiality...

GHSA-58QW-9MGM-455V vulnerabilities

Vulnerabilities for packages: kubeflow-katib, pypy-3.11, py3.14-virtualenv, py3-cassandra-medusa, py3-pip, py3-virtualenv, py3-pip-wheel-bootstrap, datadog-agent, pypy-3.10...

firefox security update

140.10.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.10.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.10.0-1 - Update to 140.10.0 ESR...

CVE-2026-33557 vulnerabilities

Vulnerabilities for packages: apache-nifi, debezium, debezium-connector-spanner, debezium-connector-ibmi, debezium-connector-informix...

[SECURITY] Fedora 44 Update: stb-0^20260313git904aa67-2.fc44

Single-file public domain libraries for C/C++...

CVE-2026-39388 vulnerabilities

Vulnerabilities for packages: openbao...

GHSA-P49J-V9WC-WG57 vulnerabilities

Vulnerabilities for packages: openbao...

CVE-2026-39946 vulnerabilities

Vulnerabilities for packages: openbao...

GHSA-7CCV-RP6M-RFFR vulnerabilities

Vulnerabilities for packages: openbao...

CVE-2026-41043

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Apache ActiveMQ, Apache ActiveMQ Web. An authenticated attacker can show malicious content when browsing queues in the web console by overriding the content type to be HTML instead of XML and by injecting...

GHSA-76HW-P97H-883F vulnerabilities

Vulnerabilities for packages: nemo...

CVE-2026-41681 vulnerabilities

Vulnerabilities for packages: sqlx, sdp-k8s-injector, deno, sccache, vector, rpm-sequoia, rustup...

CVE-2026-35058

Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7alpha1 through 2.7.1 allows authenticated attackers to trigger a fatal assertion and cause a denial of service via a specially crafted packet...