CVE-2026-67589 Apache Qpid ProtonJ2: Type size/count handling can lead to excessive allocation pre-authentication

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...

CVE-2026-67589

A vulnerability exists in Apache Qpid ProtonJ2 (versions through 1.1.0) where a flaw in type size and count handling allows a pre-authentication attacker to trigger excessive memory allocation . This can result in a Denial of Service (DoS) , potentially making the affected system unavailable to l...

EUVD-2026-53035

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...

CVE-2026-67551 Apache Qpid Proton Dotnet: Type size/count handling can lead to excessive allocation pre-authentication

pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...

CVE-2026-67551

pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...

CVE-2026-68060

Apache Qpid Broker-J versions through 10.0.1 are vulnerable to a pre-authentication denial of service (DoS) due to unchecked AMQP 1.0 list and map size/count handling . The vulnerability resides in the ListConstructor and MapConstructor codec classes, where a remote attacker can deliver a malform...

CVE-2026-68060 Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the issue...

kernel security, bug fix, and enhancement update

4.18.0-553.151.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

CVE-2026-70377: Memory Allocation with Excessive Size Value

imagecli's pipeline operation Scale::apply in src/imageops.rs computes output width/height as dimension as f32 ratio as u32 with no upper-bound validation on the CLI-supplied ratio, which is parsed via nom::number::complete::float with no range check. Any application embedding imagecli as a libra...

CVE-2026-67589: Memory Allocation with Excessive Size Value

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...

CVE-2026-67551: Memory Allocation with Excessive Size Value

pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...

CVE-2026-66273: Memory Allocation with Excessive Size Value

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue...

PT-2026-67959

Name of the Vulnerable Software and Affected Versions Apache Qpid Broker-J versions prior to 10.1.0 Description A pre-authentication attacker can exploit type size and count handling to trigger excessive memory allocation, which may result in a denial of service. Recommendations Upgrade to versio...

PT-2026-67956

Name of the Vulnerable Software and Affected Versions Apache Qpid Proton-Dotnet versions prior to 1.1.0 Description A pre-authentication attacker can exploit the way type size and count are handled to trigger excessive memory allocation, which may result in a denial of service. Recommendations...

PT-2026-67952

Name of the Vulnerable Software and Affected Versions Apache Qpid Proton-J versions prior to 0.35.0 Description A pre-authentication attacker can exploit the way type size and count are handled to trigger excessive memory allocation, which may result in a denial of service. Recommendations Upgrad...

PT-2026-68031

Name of the Vulnerable Software and Affected Versions Apache Lucy affected versions not specified Description Apache Lucy contains a memory allocation issue where an excessive size value can be used, potentially leading to system instability or crashes. Recommendations Restrict access to the...

PT-2026-67958

Name of the Vulnerable Software and Affected Versions Apache Qpid ProtonJ2 versions prior to 1.2.0 Description A pre-authentication attacker can exploit the way type size and count are handled to trigger excessive memory allocation, which may result in a denial of service. Recommendations Upgrade...

PT-2026-68334

Name of the Vulnerable Software and Affected Versions Nuxt versions 3.1.0 through 3.21.9 Nuxt versions 4.0.0 through 4.5.0 Description An unauthenticated attacker can cause a Nuxt server to crash by triggering unbounded Server-Side Rendering SSR memory allocation. This occurs when a server island...

CLSA-2026-1785886642 Fix CVE(s): CVE-2026-56408

SECURITY UPDATE: integer overflow in copyString allocation size - debian/patches/CVE-2026-56408.patch: guard the copyString allocation length against integer overflow backport of libexpat commit 16e2efd, issue 565. - CVE-2026-56408...

python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files

A flaw was found in Pillow, a Python imaging library. When processing a specially crafted font file, the library's font compilation function does not adequately check for excessive memory allocation. This oversight allows a remote attacker to trigger an unreasonable consumption of system memory,...