CVE-2026-76022

Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-76020

Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-76023

Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-77641

tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUXSWITCH cell fails. The return value of relaysendcommandfromedge was ignored, so a send failure which calls circuitmarkforclose and removes the leg via cfxdelleg would go undetected, causing the caller to write to the...

CVE-2026-77640

tor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip stream with done=1. A truncated stream never reaches ZSTREAMEND, causing zlib to return ZBUFERROR with no input remaining, which bufaddcompress mistook for a full output buffer and retried forever. Fixed by...

UBUNTU-CVE-2026-77640

tor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip stream with done=1. A truncated stream never reaches ZSTREAMEND, causing zlib to return ZBUFERROR with no input remaining, which bufaddcompress mistook for a full output buffer and retried forever. Fixed by...

UBUNTU-CVE-2026-77584

Tor before 0.4.9.10 did not reject a CONFLUXLINK cell that arrives on a circuit which already has attached streams. A malicious client could send a RELAYCOMMANDBEGIN before the CONFLUXLINK on the same circuit, attaching an exit stream that would later end up orphan leaving a dangling circuit...

USN-8543-2: Wget regression

USN-8543-1 fixed vulnerabilities in Wget. The update for CVE-2026-58472 was incomplete and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Wget mishandled semicolons in the userinfo subcomponent of ...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: java-25-openjdk: java-25-openjdk-25.0.4.1.1-1.1.hum1 aarch64, x8664 java-25-openjdk-crypto-adapter-25.0.4.1.1-1.1.hum1 aarch64, x8664 java-25-openjdk-crypto-adapter-fastdebug-25.0.4.1.1-1.1.hum1...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.11: python3.11-3.11.16-1.hum1 aarch64, x8664 python3.11-debug-3.11.16-1.hum1 aarch64, x8664 python3.11-devel-3.11.16-1.hum1 aarch64, x8664 python3.11-idle-3.11.16-1.hum1 aarch64, x8664...

CVE-2026-14677 affecting package postgresql for versions less than 16.15-1

CVE-2026-14677 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14668 affecting package postgresql for versions less than 16.15-1

CVE-2026-14668 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64653 affecting package gh for versions less than 2.97.0-1

CVE-2026-64653 affecting package gh for versions less than 2.97.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14664 affecting package postgresql for versions less than 16.15-1

CVE-2026-14664 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-55950 affecting package erlang for versions less than 26.2.5.21-5

CVE-2026-55950 affecting package erlang for versions less than 26.2.5.21-5. A patched version of the package is available...

CVE-2026-64655 affecting package gh for versions less than 2.97.0-1

CVE-2026-64655 affecting package gh for versions less than 2.97.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-72816 affecting package gh for versions less than 2.97.0-1

CVE-2026-72816 affecting package gh for versions less than 2.97.0-1. A patched version of the package is available...

CVE-2026-18024 affecting package postgresql for versions less than 16.15-1

CVE-2026-18024 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14666 affecting package postgresql for versions less than 16.15-1

CVE-2026-14666 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-18938 affecting package p11-kit for versions less than 0.26.5-1

CVE-2026-18938 affecting package p11-kit for versions less than 0.26.5-1. An upgraded version of the package is available that resolves this issue...