Advisory ROSA-SA-2026-3199

Software: rsync 3.1.3 OS: ROSA Virtualization 2.1 unaffected versions = rsync-3.1.3-23.rv3 affected versions rsync-3.1.3-23.rv3 CVE-ID: CVE-2024-12087 BDU-ID: 2025-00377 CVE-Crit: HIGH CVE-DESC.: A configuration vulnerability in the --inc-recursive configuration of the rsyncd daemon of the Rsync...

Advisory ROSA-SA-2026-3190

Software: libsndfile 1.0.28 OS: ROSA Virtualization 2.1 unaffected versions = libsndfile-1.0.28-16.0.2.rv3 affected versions libsndfile-1.0.28-16.0.2.rv3 CVE-ID: CVE-2017-14634 BDU-ID: 2021-03755 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the double64init function of the libsndfile library is...

gpsd:FuzzDrivers: Use-of-uninitialized-value in tsip_parse_input

Project: https://gitlab.com/gpsd/gpsd.git Detailed Report: https://oss-fuzz.com/testcase?key=5753755172929536 Project: gpsd Fuzzing Engine: libFuzzer Fuzz Target: FuzzDrivers Job Type: libfuzzermsangpsd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

Advisory ROSA-SA-2026-3177

Software: nghttp2 1.57.0 OS: ROSA Virtualization 3.0 unaffected versions = nghttp2-1.57.0-2.0.2.rv30 affected versions nghttp2-1.57.0-2.0.2.rv30 CVE-ID: CVE-2024-28182 BDU-ID: 2024-02691 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the nghttp2 library as part of the HTTP/2 protocol...

Advisory ROSA-SA-2026-3172

Software: libssh 0.9.6 OS: ROSA Virtualization 3.0 unaffected versions = libssh-0.9.6-16.rv30 affected versions libssh-0.9.6-16.rv30 CVE-ID: CVE-2025-5372 BDU-ID: 2025-07644 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the libssh library's sshkdf function is related to incorrect code generation...

Advisory ROSA-SA-2026-3146

Software: grafana 9.2.10 OS: ROSA Virtualization 3.1 unaffected versions = grafana-9.2.10-27.rv31 affected versions grafana-9.2.10-27.rv31 CVE-ID: CVE-2025-22871 BDU-ID: 2025-04014 CVE-Crit: CRITICAL CVE-DESC.: A vulnerability in the net/http package of the Go programming language is related to...

kde-thumbnailers:gsthumbnail_fuzzer: Heap-buffer-overflow in dsc_copy_string

Detailed Report: https://oss-fuzz.com/testcase?key=4745094870925312 Project: kde-thumbnailers Fuzzing Engine: libFuzzer Fuzz Target: gsthumbnailfuzzer Job Type: libfuzzerasankde-thumbnailers Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x773f9a7e23c0 Crash State:...

CVE-2026-2320

Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-2319

Race in DevTools in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures and install a malicious extension to potentially exploit object corruption via a malicious file. Chromium security severity: Medium...

CVE-2026-2320

Google Chrome versions prior to 145.0.7632.45 are vulnerable to UI spoofing due to an inappropriate implementation in the File input component. A remote attacker can exploit this by convincing a user to perform specific UI gestures while interacting with a crafted HTML page, leading to informatio...

CVE-2026-2317

Inappropriate implementation in Animation in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-2318

Google Chrome versions prior to 145.0.7632.45 are vulnerable to a UI spoofing vulnerability in the PictureInPicture component. An inappropriate implementation allows a remote attacker to perform UI spoofing via a crafted HTML page by convincing a user to perform specific UI gestures. This issue c...

CVE-2026-2317

Inappropriate implementation in Animation in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-2316

Insufficient policy enforcement in Frames in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

assimp:assimp_fuzzer_fbx: Container-overflow in Assimp::FBX::FBXConverter::ConvertMeshMultiMaterial

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6379452920823808 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzerfbx Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Container-overflow READ 4 Crash Address:...

Security Advisory EPM February 2026 for EPM 2024

Update 18 Feb: Added FAQ on patching Agents. Summary Ivanti has released updates for Ivanti Endpoint Manager which addresses one high severity vulnerability and one medium severity vulnerability. Successful exploitation could allow a remote authenticated attacker to leak arbitrary data or...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

gpsd:FuzzDriversStructured: Crash in gpsd_poll

Project: https://gitlab.com/gpsd/gpsd.git Detailed Report: https://oss-fuzz.com/testcase?key=5794326172205056 Project: gpsd Fuzzing Engine: afl Fuzz Target: FuzzDriversStructured Job Type: aflasangpsd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x56000000fc00 Crash State: gpsdpoll...

pcapplusplus:FuzzTargetNg: Crash in pcpp::Packet::destructPacketData

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5782362540802048 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTargetNg Job Type: libfuzzerubsanpcapplusplus Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

gpsd:FuzzClient: Use-of-uninitialized-value in ntrip_parse_url

Project: https://gitlab.com/gpsd/gpsd.git Detailed Report: https://oss-fuzz.com/testcase?key=4998897021026304 Project: gpsd Fuzzing Engine: libFuzzer Fuzz Target: FuzzClient Job Type: libfuzzermsangpsd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...