CVE-2026-68744

A flaw was found in SSSD. The sssnssprotocolfillinitgr function in the NSS responder pre-allocates reply space for all group entries but does not shrink the packet when groups are skipped, causing uninitialized heap bytes to be transmitted to the client. A local attacker can exploit this to...

CVE-2026-42169

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

GHSA-35PC-QWV6-4858 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-rails-ce...

CVE-2026-6267 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-rails-ce...

GHSA-86R3-Q889-HVG2 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-rails-ce...

CVE-2025-14562 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-rails-ce...

GHSA-G9G2-QC64-JGCJ vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-rails-ce...

CVE-2026-14341 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-rails-ce...

GHSA-45H8-QRQH-XR5V vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-rails-ce...

CVE-2026-6336 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-rails-ce...

CVE-2026-3093 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-rails-ce...

GHSA-6FHJ-CGMM-XFX6 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-rails-ce...

GHSA-94P8-87FF-W336 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-rails-ce...

GHSA-2RC9-8CX9-FXPR vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-rails-ce...

CVE-2026-4672 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-rails-ce...

CVE-2026-12436 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-rails-ce...

CVE-2026-14351 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-rails-ce...

GHSA-8JC8-CVQJ-P926 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-cng, gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-rails-ce...

CVE-2026-58041

A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSynccreateTagStore to continue executing a cached prepared statement after it has been reset and rebound with new parameters. SQLTagStore resets cached statements using sqlite3reset directly, bypassing the...

thunderbird security update

140.13.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 140.13.0 - Add OpenELA debranding 140.13.0-1 - Update to 140.13.0 ESR...