Magento-APSB22-48-Security-Patches

Patch ufficiali di Magento sono state rilasciate:Documentazione Magento Queste patch risolvono gli stessi problemi di sicurezza di questo repository. Tuttavia abbiamo aggiunto alcune correzioni per versioni più datate di Magento. Patch di sicurezza per APSB22-48 Questo repository contiene file di...

CVE-2026-67551

creationtimestamp| type| source ---|---|--- 2026-08-04 19:48:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/6xhmka3yohgj5 2026-08-05 06:24:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5imjmiyodl5vq...

CVE-2026-67357

creationtimestamp| type| source ---|---|--- 2026-08-02 15:34:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms4coplchp25 2026-08-02 15:34:50+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3ms4coppunl23...

CVE-2026-51280

creationtimestamp| type| source ---|---|--- 2026-08-01 02:48:41+00:00| seen| https://gist.github.com/programmervuln/7c5c38470d3414ac9657e7b59986f137...

JLSEC-2026-1021 ImageMagick: Heap Buffer Over-Read in distributed pixel cache server

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an attacker who can connect to a magick -distribute-cache service can cause a heap buffer over-read in the server process. This issue has been patched in versio...

JLSEC-2026-1014 ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.23 and 6.9.13-48, due to a missing check in the MIFF decoder, a crafted file could cause an infinite loop resulting in CPU exhaustion. Versions 7.1.2.23 and 6.9.13-48 fix the iss...

CLEANSTART-2026-HA17896 Security fixes in local-static-provisioner 2.8.0-r2

Package local-static-provisioner version 2.8.0-r2 fixes 48 vulnerabilities: ghsa-4x4m-3c2p-qppc, ghsa-r6j8-c6r2-37rr, CVE-2025-13281, CVE-2025-5187, CVE-2026-25679...

CVE-2026-67193

creationtimestamp| type| source ---|---|--- 2026-07-29 18:48:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrslnxpa4t2q 2026-07-29 20:15:17+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-67193 2026-07-30 20:27:00+00:00| seen|...

CVE-2026-14870

creationtimestamp| type| source ---|---|--- 2026-07-28 08:48:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrozocfqqs2i...

CVE-2026-48487

creationtimestamp| type| source ---|---|--- 2026-07-17 20:24:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqulgkrrgf22...

CVE-2025-56362

creationtimestamp| type| source ---|---|--- 2026-07-14 23:49:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnfifeijg24 2026-07-27 09:09:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmkejrkej2p...

MiracleLinux 8 : kernel-4.18.0-553.139.1.el8_10 (AXSA:2026-1250:48)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1250:48 advisory. kernel: scsi: target: iscsi: Fix use-after-free in iscsitdecconnusagecount CVE-2026-23216 kernel: gfs2: Fix use-after-free in iomap inline data writ...

CVE-2026-13811

creationtimestamp| type| source ---|---|--- 2026-07-01 19:48:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmbw2ej462q 2026-07-02 07:19:28+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 12:26:39+00:00| seen|...

EUVD-2026-36185

ImageMagick: Policy Bypass can read disallowed files via symlink...

EUVD-2026-36183

ImageMagick has a Heap Buffer Over-Write in MAT decoder on 32-bit systems...

CVE-2026-8039

creationtimestamp| type| source ---|---|--- 2026-06-18 11:48:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokqzz5mzx2a...

SUSE CVE-2026-45359

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-22, an invalid connected-components:keep-top value could result in a heap buffer over-read when performing the connected components operation. This issue has been...

SUSE CVE-2026-46521

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when using LZMA compression in the MIFF encoder an out of bounds write can occur due to a missing check. This issue has been patched in versions 6.9.13-48 and...

SUSE CVE-2026-46693

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an attacker who can connect to a magick -distribute-cache service can hijack a file descriptor in the server process when a race condition is met. This issue ha...

SUSE CVE-2026-47166

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an attacker who can connect to a magick -distribute-cache service can cause a heap buffer over-read in the server process. This issue has been patched in versio...