OESA-2026-4382 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

OESA-2026-4380 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

OESA-2026-4357 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist Index allocation requires at least one bit in the $BITMAP attribute to track usage of inde...

OESA-2026-4346 qt5-qtbase security update

Qt is a software toolkit for developing applications. Security Fixes: QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input.CVE-2026-19248...

OESA-2026-4339 hplip security update

The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals. Security Fixes: A flaw was found in HPLIP HP Linux Imaging and Printing Software. This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalat...

OESA-2026-4338 hplip security update

The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals. Security Fixes: A flaw was found in HPLIP HP Linux Imaging and Printing Software. This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalat...

OESA-2026-4337 hplip security update

The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals. Security Fixes: A flaw was found in HPLIP HP Linux Imaging and Printing Software. This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalat...

OESA-2026-4336 hplip security update

The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals. Security Fixes: A flaw was found in HPLIP HP Linux Imaging and Printing Software. This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalat...

OESA-2026-4272 GraphicsMagick security update

GraphicsMagick is the swiss army knife of image processing. Comprised of 267K physical lines according to David A. Wheeler's SLOCCount of source code in the base package or 1,225K including 3rd party libraries it provides a robust and efficient collection of tools and libraries which support...

OESA-2026-4270 GraphicsMagick security update

GraphicsMagick is the swiss army knife of image processing. Comprised of 267K physical lines according to David A. Wheeler's SLOCCount of source code in the base package or 1,225K including 3rd party libraries it provides a robust and efficient collection of tools and libraries which support...

OESA-2026-4271 GraphicsMagick security update

GraphicsMagick is the swiss army knife of image processing. Comprised of 267K physical lines according to David A. Wheeler's SLOCCount of source code in the base package or 1,225K including 3rd party libraries it provides a robust and efficient collection of tools and libraries which support...

OESA-2026-4269 GraphicsMagick security update

GraphicsMagick is the swiss army knife of image processing. Comprised of 267K physical lines according to David A. Wheeler's SLOCCount of source code in the base package or 1,225K including 3rd party libraries it provides a robust and efficient collection of tools and libraries which support...

OESA-2026-4264 librsvg2 security update

An SVG library based on cairo. Security Fixes: A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entit...

OESA-2026-4265 librsvg2 security update

An SVG library based on cairo. Security Fixes: A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entit...

OESA-2026-4263 librsvg2 security update

An SVG library based on cairo. Security Fixes: A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entit...

OESA-2026-4262 librsvg2 security update

An SVG library based on cairo. Security Fixes: A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entit...

CVE-2026-98417

A flaw was found in the Linux kernel's XFRM IPsec encryption framework subsystem. A remote attacker could exploit this issue by sending specially crafted ESP-in-TCP Encapsulating Security Payload over Transmission Control Protocol packets with invalid transport header offsets. This improper...

CVE-2026-98414

A flaw was found in the Linux kernel. An issue in the memory control group memcg subsystem occurs when memory allocated within a child control group is transferred to the root group upon group deletion. Subsequent memory reclamation improperly charges pages to the root group without ever unchargi...

CVE-2026-98413

A flaw was found in the Linux kernel's SELinux Security-Enhanced Linux subsystem. When an access check is performed with an empty permission set, the Access Vector Cache AVC fails to initialize the access decision structure before returning. A local attacker can exploit this flaw by triggering...

CVE-2026-98416

A flaw was found in the Linux kernel's Texas Instruments K3 UDMA Unified Direct Memory Access driver. This vulnerability can lead to a Denial of Service DoS caused by a null pointer dereference when freeing resources during a failed channel request. Under resource-exhaustion conditions, the...