CVE-2025-11246

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.4 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user with specific permissions to remove all project runners from unrelated projects by manipulating GraphQL runner...

CVE-2025-71072

In the Linux kernel, the following vulnerability has been resolved: shmem: fix recovery on rename failures mapletree insertions can fail if we are seriously short on memory; simpleoffsetrename does not recover well if it runs into that. The same goes for simpleoffsetrenameexchange. Moreover,...

Important: Red Hat Security Advisory: Red Hat Quay 3.16.1

Red Hat Quay 3.16.1 is now available with bug fixes. Quay 3.16.1...

January 13, 2026—KB5073457 (OS Build 20348.4648)

None None...

January 13, 2026—KB5073455 (OS Build 22631.6491)

None None...

January 13, 2026—KB5074109 (OS Builds 26200.7623 and 26100.7623)

None None...

Description of the security update for SharePoint Server 2019: January 13, 2026 (KB5002825)

None None...

Astra Linux – Vulnerability in containerd-app

Containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 have a severe default permission vulnerability. The directory paths /var/lib/containerd,...

MiracleLinux 9 : thunderbird-128.14.0-3.el9_6.ML.1 (AXSA:2025-10805:20)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-10805:20 advisory. firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component CVE-2025-9182 thunderbird: firefox: Sandbox escap...

MiracleLinux 7 : git-1.8.3.1-25.0.6.el7.AXS7 (AXSA:2025-10998:13)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10998:13 advisory. CVE-2025-46835: prevent malicious creating and overwriting of user's files CVEs: CVE-2025-46835 Git GUI allows you to use the Git source control management...

.NET 8.0 Update - January 13, 2026

None None...

.NET 10.0 Update - January 13, 2026

None None...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 144 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 144.0.7559.59 Linux 144.0.7559.59/60 Windows/Mac contains a number of fixes and improvements -- a list of changes is availab...

OPENSUSE-SU-2026:10036-1 cockpit-repos-4.6-1.1 on GA media

These are all security issues fixed in the cockpit-repos-4.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10039-1 kernel-devel-6.18.5-1.1 on GA media

These are all security issues fixed in the kernel-devel-6.18.5-1.1 package on the GA media of openSUSE Tumbleweed...

RHEL 10 : kernel (RHSA-2026:0453)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:0453 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: HID: multitouch: fix slab...

openSUSE 16 : Security update of valkey (openSUSE-SU-2026:20003-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20003-1 advisory. Update to 8.0.6: - Security fixes: - CVE-2025-49844: Fixed that a Lua script may lead to remote code execution bsc1250995 - CVE-2025-46817: Fixe...

MiracleLinux 7 : ImageMagick-6.9.10.68-7.0.3.el7.AXS7 (AXSA:2025-10859:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10859:01 advisory. CVE-2025-53014: fix heap buffer overflow in InterpretImageFilename CVEs: CVE-2025-53014 ImageMagick is free and open-source software used for editing and...

.NET 9.0 Update - January 13, 2026

None None...

chromium -- multiple security fixes

Chrome Releases reports: This update includes 10 security fixes: 458914193 High CVE-2026-0899: Out of bounds memory access in V8. Reported by @p1nky4745 on 2025-11-08 465730465 High CVE-2026-0900: Inappropriate implementation in V8. Reported by Google on 2025-12-03 40057499 High CVE-2026-0901:...