This security update addresses multiple issues in the Orthanc ecosystem, including orthanc, orthanc-authorization, orthanc-postgresql, and orthanc-dicomweb components. The update includes a major rewrite of DICOM file handling, REST API upgrades, security and robustness improvements, and fixes for several bugs and vulnerabilities. Specific fixes include permission enhancements, audit logging improvements, and error handling corrections. The update does not specify exact CVEs or detailed vulnerability descriptions but indicates medium severity based on the nature of the fixes.
A security update for Chromium version 152.0.7977.64 addresses multiple critical vulnerabilities including use-after-free, buffer overflows, type confusion, race conditions, improper input validation, incorrect authorization, information leaks, and memory corruption across various components such as ANGLE, Aura, Chromecast, Views, V8, GPU, and others. These vulnerabilities could allow attackers to cause memory corruption, unauthorized access, or information disclosure. The update was released by the SUSE Product Security Team on 2026-08-25.
A security update for wicked2nm addresses a vulnerability in the serde_with library where KeyValueMap serialization could panic on empty sequences or map entries. The update to version 1.5.2 includes this fix along with other bug fixes and dependency updates.
An update to wicked2nm (v1.5.2) addresses a security issue in the serde_with library where KeyValueMap serialization could panic on empty sequences or map entries. This update also includes other bug fixes and dependency bumps.
This security update provides a functional equivalent of RHSA-2026:62144.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:62144.
A denial of service vulnerability (CVE-2026-6479) exists in PostgreSQL due to uncontrolled recursion in SSL/GSS negotiation. This issue affects multiple PostgreSQL versions and related Red Hat and SUSE packages. A security update addressing this vulnerability is available from vendors including Red Hat. The vulnerability is rated with high severity based on impact descriptions.
A critical security update for Mozilla Firefox Extended Support Release (ESR) 153.1.0 addresses multiple vulnerabilities across components such as graphics, JavaScript engine, DOM, and networking. The issues include use-after-free, privilege escalation, information disclosure, mitigation bypasses, same-origin policy bypass, integer overflow, race conditions, and denial-of-service. These vulnerabilities affect Firefox ESR 153.1.0 and related branding and translation packages.
This security update for Chromium addresses multiple critical vulnerabilities affecting various components such as Codecs, Blink, V8, GPU, WebRTC, and many others. The issues include out-of-bounds writes, use-after-free errors, type confusion, integer overflows, and insufficient validation of untrusted input, among others. These vulnerabilities span Chromium versions from 150.0.7871.46 through 150.0.7871.186. The update improves stability and security by mitigating these critical memory safety and input validation flaws.
This security update for Chromium addresses multiple critical vulnerabilities including use-after-free bugs, heap buffer overflows, out-of-bounds reads and writes, insufficient validation of untrusted input, race conditions, and incorrect security UI. The vulnerabilities affect various Chromium components such as WebShare, Digital Credentials, WebView, WebRTC, GPU, Extensions, and Passwords. The update fixes issues in Chromium versions 149.0.7827.102, 149.0.7827.114, and 149.0.7827.155. These vulnerabilities could lead to memory corruption and potential security breaches if exploited.
A security update for Chromium addresses multiple critical vulnerabilities including out of bounds reads and writes, use after free, integer overflows, heap buffer overflows, uninitialized use, and insufficient validation of untrusted input in various components. These vulnerabilities could allow attackers to cause memory corruption or execute arbitrary code. The update fixes these issues in Chromium version 148.0.7778.215.
Multiple critical security vulnerabilities affecting Chromium have been addressed in updates culminating in version 146.0.7680.177. These vulnerabilities include use-after-free, heap buffer overflows, integer overflows, out-of-bounds reads and writes, insufficient policy enforcement, and incorrect security UI implementations across various components such as CSS, GPU, WebGL, V8, WebCodecs, Dawn, PDF, WebAudio, and WebRTC. The issues have been fixed in Chromium version 146.0.7680.177.
This security update for Chromium addresses multiple critical vulnerabilities including use-after-free bugs, heap buffer overflows, integer overflows, type confusion, insufficient validation of untrusted input, race conditions, and policy enforcement issues. The vulnerabilities affect various components such as Canvas, iOS, Accessibility, GPU, ANGLE, Skia, Media, WebRTC, V8, PDFium, and Blink. These issues could lead to memory corruption, information leakage, or bypass of security policies. The update covers several Chromium versions including 147.0.7727.55, 147.0.7727.101, 147.0.7727.116, and 147.0.7727.137. The vulnerabilities have been fixed in this update, and no known exploits are reported in the wild.
Multiple security vulnerabilities have been identified and fixed in Chromium versions prior to 144.0.7559.132. These vulnerabilities include heap buffer overflow, type confusion, race conditions, out-of-bounds memory access, use-after-free, and incorrect security UI implementations. The flaws could lead to remote code execution and memory corruption when processing crafted web content. A security update addressing these issues is available.
A security update for Chromium addresses multiple vulnerabilities including integer overflows, heap buffer overflows, use-after-free issues, and inappropriate implementations in various components such as ANGLE, PowerVR, Skia, DevTools, WebAudio, CSS, WebAssembly, V8, WebCodecs, Media, PDFium, and WebGPU. The affected versions range from 145.0.7632.45 through 145.0.7632.159. These vulnerabilities have been assigned CVE identifiers from CVE-2026-2313 to CVE-2026-3545. The update also includes packaging and build improvements. No explicit patch links or vendor advisory details were provided.
This security update for Chromium addresses multiple vulnerabilities across several versions, including issues such as use-after-free, out-of-bounds memory access, type confusion, and insufficient policy enforcement. The vulnerabilities affect components like WebView, WebGPU, V8 JavaScript engine, ANGLE, Password Manager, Toolbar, Google Updater, DevTools, Digital Credentials, Downloads, Loader, Media Stream, WebRTC, and Passwords. One of the issues fixed in version 143.0.7499.109 is known to have an exploit in the wild. The update includes fixes for CVE-2025-13630 and numerous other CVEs, improving overall security posture. No CVSS scores are provided for these vulnerabilities. The affected versions are not explicitly stated in the input data.
A security update for libgpg-error addresses an out-of-bounds read vulnerability in the _gpgrt_vfnameconcat function within stringutils.c when the GPGRT_FCONCAT_SYSCONF flag is used. This flaw could potentially lead to memory access issues. The severity is assessed as medium. No specific affected versions or CVSS score are provided. No known exploits in the wild have been reported.
A security update for libgpg-error addresses an out-of-bounds read vulnerability in the _gpgrt_vfnameconcat function within stringutils.c when the GPGRT_FCONCAT_SYSCONF flag is used. This issue could potentially lead to memory safety problems. The vulnerability is rated medium severity. No specific affected versions or CVSS score are provided.
A security update for libgpg-error addresses an out-of-bounds read vulnerability in the _gpgrt_vfnameconcat function within stringutils.c when the GPGRT_FCONCAT_SYSCONF flag is used. This issue could potentially lead to memory safety problems. The vulnerability is rated medium severity. No specific affected versions or patch details are provided in the available data.
Multiple security issues have been addressed in the incus-7.4-1.1 package on the GA media of openSUSE Tumbleweed. These fixes resolve vulnerabilities identified by various CVEs. The overall severity of these issues is assessed as medium. No specific affected versions are detailed beyond the fixed package version. There is no CVSS score available for these vulnerabilities. No known exploits are reported in the wild for these issues.