Security

CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5

Release of stargz snapshotter v0.19.0, containing fixes for CVE-2026-71482 and CVE-2026-77395. Release note is available on https://github.com/containerd/stargz-snapshotter/releases/tag/v0.19.0LinuxSecurity – Security AdvisoriesRead

Update to 1.1.8, including fixes for CVE-2026-111136 and for a memory leak.LinuxSecurity – Security AdvisoriesRead More

Rebuilt with faster-hex 0.10.1 for RUSTSEC-2026-0306LinuxSecurity – Security AdvisoriesRead More

Changes for version 1.656 Remove lock file on end of scope Prevent dbi_profile crash (CVE-2026-108518) (Henrik Teichmann) Memory corruption via

Fix CVE-2026-106585: Denial of service via oversized decompressed packetsLinuxSecurity – Security AdvisoriesRead More

Upgrade to upstream release v2.41.6 with security-related patches.LinuxSecurity – Security AdvisoriesRead More

Update to 156.0.8078.47, include 353 security fixes: CVE-2026-112992 – CVE-2026-113344LinuxSecurity – Security AdvisoriesRead More

Fixes CVE-2026-77205, CVE-2026-77206, CVE-2026-77207 and CVE-2026-9445LinuxSecurity – Security AdvisoriesRead More

Fixes CVE-2026-96807 and CVE-2026-96808LinuxSecurity – Security AdvisoriesRead More