It was discovered that GNOME Shell did not properly validate icon dimensions when processing icons from a remote search provider. An attacker could possibly use this issue to cause GNOME Shell to crash, resulting in a denial of service, or…
It was discovered that GVfs did not properly validate data returned by an SFTP server. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-84267) It was discovered that GVfs did not properly validate…
It was discovered that Bind incorrectly handled certain DNS messages with repeated singleton records such as SOA, CNAME, or DNAME records. A remote attacker could possibly use this issue to cause Bind to use excessive memory, leading to a …
Improved security, multi-domain changes, and translated messages The AI Assistant no longer asks for your AI App Builder API token in the chat, and a password that you type into a request is no longer kept in the stored conversation after …
Fixed web applications behind standalone NGINX A web application is now reachable over HTTP and HTTPS when NGINX runs in standalone mode, instead of returning a 403 Forbidden error. Adding or removing a database on a running web applicatio…