This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.
[TLP:CLEAR] Overview of notable vulnerabilities
below you will find an overview of notable vulnerabilities that we did not have time to cover in more detail: Atlassian fixes 102 vulnerabilities in its products [1]. Docker Desktop for macOS fixes a high-severity vulnerability [2]. Elastic fixes multiple vulnerabilities in its Kibana and Elasticsearch products [3]. FFmpeg fixes 10 vulnerabilities; an overview can be found, for example, at [4]. GitHub Enterprise Server version 3.20.5 fixes three vulnerabilities [5]. Google Chrome/Chromium versions 150.0.7871.186/.187 (Windows/macOS) 150.0.7871.186 (Linux) [6] and Microsoft Edge version 150.0.4078.96 [7] fix four vulnerabilities. HPE Aruba Networking fixes six vulnerabilities [8][9]. MongoDB fixes 23 vulnerabilities in MongoDB Server and one in Compass; an overview can be found, for example, at [10]. Mozilla Foundation fixes over 60 vulnerabilities in Firefox [11], Firefox (ESR) [12][13] and Thunderbird [14][15]. OpenStack fixes two vulnerabilities in Ironic Python Agent [16][17] and one in Zaqar [18]. Oracle fixes vulnerabilities in its products; an overview can be found at [19]. PowerDNS Recursor fixes three vulnerabilities [20][21]. Roundcube Webmail versions 1.6.17 and 1.7.2 fix six vulnerabilities [22]. WebKitGTK and WPE WebKit version 2.52.5 fix 23 vulnerabilities [23][24]. Zimbra Collaboration Suite version 10.1.20 fixes nine vulnerabilities [25].
Links
- [1] https://confluence.atlassian.com/security/security-bulletin-july-21-2026-1821999345.html
- [2] https://www.zerodayinitiative.com/advisories/ZDI-26-451/
- [3] https://discuss.elastic.co/c/announcements/security-announcements/31
- [4] https://app.opencve.io/cve/?vendor=ffmpeg
- [5] https://docs.github.com/en/enterprise-server@3.20/admin/release-notes
- [6] https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01320465736.html
- [7] https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#july-23-2026
- [8] https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05013en_us
- [9] https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05081en_us
- [10] https://app.opencve.io/cve/?q=vendor%3Amongodb&page=1
- [11] https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/
- [12] https://www.mozilla.org/en-US/security/advisories/mfsa2026-69/
- [13] https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/
- [14] https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/
- [15] https://www.mozilla.org/en-US/security/advisories/mfsa2026-71/
- [16] https://security.openstack.org/ossa/OSSA-2026-027.html
- [17] https://security.openstack.org/ossa/OSSA-2026-028.html
- [18] https://www.openwall.com/lists/oss-security/2026/07/23/7
- [19] https://www.oracle.com/security-alerts/cpujul2026.html
- [20] https://blog.powerdns.com/2026/07/22/powerdns-security-advisory-2026-10-for-powerdns-recursor
- [21] https://github.com/PowerDNS/pdns/pull/17748
- [22] https://roundcube.net/news/2026/07/05/security-updates-1.6.17-and-1.7.2
- [23] https://wpewebkit.org/security/WSA-2026-0004.html
- [24] https://webkitgtk.org/security/WSA-2026-0004.html
- [25] https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.20
By CESNET, z.s.p.o. Michaela Ručková on 24. 7. 2026.