Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147041)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147041 advisory. A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: sctp: close UDP tunnel sockets during netns teardown CVE-2026-68161 In the Linux kernel, the following vulnerability has been resolved: tipc: fix integer overflow in tipcrecvmsg and tipcrecvstream CVE-2026-68289 I...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-3336)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3336 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: close UDP tunnel sockets during netns teardown CVE-2026-68161 In the Linux kernel, the following vulnerability has bee...

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling CVE-2026-72288 kernel: KVM: arm64: vgic: Check t...

Important: expat security update

Expat is a C library for parsing XML documents. Security Fixes: expat: expat: Denial of Service via integer overflow in expatrealloc CVE-2026-102633 expat: expat: Information disclosure via heap buffer over-read in XMLParseBuffer CVE-2026-77214 For more details about the security issues, includin...

CVE-2026-115889

A flaw was found in Wasmtime. An attacker could achieve a sandbox escape and compromise the host system by supplying a specially crafted WebAssembly Wasm module. When compiling functions containing an unusually large number of internal values, an integer overflow in the Cranelift compiler backend...

CVE-2026-117555

CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the loadbmp function of CImg.h caused by an integer overflow in the row byte count. Attackers can supply a crafted BMP file with a large header width that wraps dxbytes, causing crashes or heap memory disclosure into the decod...

CVE-2026-111496

Kafka Streams derives its stream-time clock from record timestamps. PunctuationSchedule.next computed the next punctuation time as timestamp + intervalsMissed + 1 interval with no overflow check. A record with a timestamp at or near Long.MAXVALUE advances stream time to that value, so the next...

CVE-2026-103410

An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unauthenticated remote attacker to cause a denial of service via a specially crafted TLS server certificate...

CVE-2026-103411

An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an attacker with local network access to cause information disclosure and a denial of service via a malicious DHCP reply...

CVE-2026-111496

Apache Kafka Streams is vulnerable to a StreamThread hang due to an integer overflow in the PunctuationSchedule.next() method. The application derives its stream-time clock from record timestamps; if a record with a timestamp near Long.MAX_VALUE is processed without overflow checks, the next punc...

CVE-2026-111496 Apache Kafka: Kafka Streams StreamThread hang from integer overflow in stream-time punctuation

Kafka Streams derives its stream-time clock from record timestamps. PunctuationSchedule.next computed the next punctuation time as timestamp + intervalsMissed + 1 interval with no overflow check. A record with a timestamp at or near Long.MAXVALUE advances stream time to that value, so the next...

CVE-2026-103411 Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsing

An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an attacker with local network access to cause information disclosure and a denial of service via a malicious DHCP reply...

EUVD-2026-112208

An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an attacker with local network access to cause information disclosure and a denial of service via a malicious DHCP reply...

CVE-2026-103411

The Juniper Networks Session Smart Router is affected by an Integer Underflow vulnerability in the DhcpMessageDecoder component. An attacker with local network access can exploit this flaw by sending a malicious DHCP reply, leading to information disclosure and a denial of service (service crash)...

CVE-2026-103410

The Juniper Networks Session Smart Router is affected by an Integer Overflow vulnerability in its DPI certificate scanner . An unauthenticated remote attacker can exploit this flaw by providing a specially crafted TLS server certificate , resulting in a denial of service (DoS) . Technical details...

CVE-2026-103410 Session Smart Router: Integer overflow causes denial of service during TLS certificate inspection

An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unauthenticated remote attacker to cause a denial of service via a specially crafted TLS server certificate...

EUVD-2026-112211

An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unauthenticated remote attacker to cause a denial of service via a specially crafted TLS server certificate...

Security update for perl-Cpanel-JSON-XS

This update for perl-Cpanel-JSON-XS fixes the following issues: CVE-2025-40929: integer overflow bsc1249331. CVE-2026-9334: type confusion via duplicate object keys when dupkeysasarrayref is enabled bsc1267546. CVE-2026-9516: denial of service via UTF-8 BOM prefixed input when a decode filter...

CVE-2026-106971

An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service via crafted MessagePack input when the application runs on 32-bit PHP...