Multiple security vulnerabilities have been identified and fixed in Mozilla Thunderbird, including use-after-free, memory safety bugs, privilege escalation, sandbox escapes, incorrect boundary conditions, integer overflows, race conditions, information disclosure, denial-of-service, and spoofing issues. These vulnerabilities affect various components such as the JavaScript engine, graphics, audio/video, WebRTC signaling, XPCOM, and IMAP parsing. The update addresses these issues in Thunderbird ESR 140.9 and Thunderbird 149, among others. Red Hat Enterprise Linux 8 distributions including Extended Life Cycle versions are affected and have received security updates.
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.
Security Fix(es):
* nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files (CVE-2026-32647)
* NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module (CVE-2026-27654)
* NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file (CVE-2026-27784)
* NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled (CVE-2026-27651)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Multiple security vulnerabilities have been identified in GStreamer plugins (gstreamer1-plugins-bad-free, gstreamer1-plugins-base, and gstreamer1-plugins-good) affecting Red Hat Enterprise Linux 8. These include arbitrary code execution and remote code execution via heap-based buffer overflows, integer overflows, and out-of-bounds writes in various media file parsers and handlers such as ASF, JPEG, AVI, RTP, and DVB subtitles. Red Hat has issued an important security advisory with updates to address these issues.
Two security vulnerabilities were identified in the Capstone disassembly framework used in Red Hat Hardened Images. The first is a memory corruption issue via an unchecked vsnprintf return (CVE-2025-68114). The second, CVE-2025-67873, is a heap buffer overflow caused by improper bounds checking of the skipdata callback length, which can be exploited by a local attacker to cause denial of service or arbitrary code execution. These vulnerabilities require local access and user interaction to exploit. Red Hat has released updated Capstone RPM packages to address these issues.
Multiple security vulnerabilities have been identified in FreeRDP, a free implementation of the Remote Desktop Protocol (RDP) used by the xfreerdp client to connect to various RDP servers. These include heap-use-after-free, heap-buffer-overflow, NULL pointer dereference, denial of service, and arbitrary code execution issues. The vulnerabilities affect Red Hat Enterprise Linux 8 and related distributions. Red Hat has issued a security advisory with updates to address these issues.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: Linux kernel (net/mlx5): Use-after-free in ECVF vports unload leads to denial of service (CVE-2025-38109)
* kernel: Linux kernel: Local denial of service and memory leak in DAMON sysfs via setup failure (CVE-2026-23144)
* kernel: Linux kernel: Use-after-free in bonding module can cause system crash or arbitrary code execution (CVE-2026-23171)
* kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CVE-2026-23193)
* kernel: macvlan: fix error recovery in macvlan_common_newlink() (CVE-2026-23209)
* kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204)
* kernel: ALSA: aloop: Fix racy access at PCM trigger (CVE-2026-23191)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: nouveau: fix instmem race condition around ptr stores (CVE-2024-26984)
* kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CVE-2026-23193)
* kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain() (CVE-2026-23231)
* kernel: Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential privilege escalation. (CVE-2025-71238)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
This security update for dnsdist addresses two vulnerabilities: CVE-2025-8671, which introduces mitigations for the HTTP/2 MadeYouReset attack, and CVE-2025-30187, a denial of service vulnerability via crafted DNS-over-HTTPS (DoH) exchanges. The update is included in dnsdist version 1.9.11. No specific affected versions are provided. The severity of the denial of service vulnerability is rated low. There is no CVSS score available for these issues.
CVE-2026-4177 is a critical heap-based buffer overflow vulnerability in YAML::Syck versions through 1.36 for Perl. The flaw occurs when class names exceed the initial 512-byte allocation in the YAML emitter. Additional issues include a base64 decoder reading past buffer ends on trailing newlines, corruption of shared node data due to strtok mutating type IDs, and a memory leak when adding anchors to nodes that already have one. Red Hat has issued security advisories and updates addressing these vulnerabilities.
A security update for tinyproxy addresses multiple issues including CVE-2026-3945, which fixes a denial of service vulnerability exploitable by unauthenticated remote attackers. The update also includes enhancements such as the addition of BasicAuthRealm, fixes to basic authentication error statuses, configuration documentation improvements, and a fix for an integer overflow in port number processing.
Two critical vulnerabilities in FreeRDP, a free implementation of the Remote Desktop Protocol, allow arbitrary code execution due to heap out-of-bounds write and heap buffer overflow in specific decode and rendering paths. These issues affect certain versions of FreeRDP included in Red Hat Enterprise Linux 9.6 Extended Update Support and related packages. Red Hat has issued security updates to address these flaws.
The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.
Security Fix(es):
* rsync: Rsync: Out of bounds array access via negative index (CVE-2025-10158)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
This security update addresses two vulnerabilities in gvfs related to FTP protocol handling: an information disclosure issue from untrusted PASV responses and an arbitrary FTP command injection via unsanitized CRLF sequences in user-supplied file paths. The update to gvfs version 1.59.90 includes fixes for these issues along with other stability and security improvements. The vulnerabilities could allow an attacker to disclose information or inject arbitrary FTP commands when interacting with FTP servers. No specific affected versions were provided in the source data. The update is part of a broader security and functionality update for gnome-online-accounts and gvfs.
This security update for the expat XML parsing library addresses three vulnerabilities that can cause application crashes or denial of service. The issues include a NULL pointer dereference when processing empty external parameter entities, a denial of service from an infinite loop in DTD content parsing, and a NULL pointer dereference in the setContext function after an out-of-memory condition. These vulnerabilities have been assigned CVE identifiers CVE-2026-32776, CVE-2026-32777, and CVE-2026-32778. No specific patch or affected version details are provided in the input data.