CLSA-2026-1792603232 php: Fix of 2 CVEs

CVE-2026-109618: stop re-entering the engine after an allocator failure in Zend/zendalloc.c, report it and exit instead of bailing out - CVE-2026-109619: avoid stale global state via bailout in main/rfc1867.c and ext/session/session.c, disabling the session upload-progress callback...

SUSE CVE-2026-23044

In the Linux kernel, the following vulnerability has been resolved: PM: hibernate: Fix crash when freeing invalid crypto compressor When cryptoallocacomp fails, it returns an ERRPTR value, not NULL. The cleanup code in savecompressedimage and loadcompressedimage unconditionally calls...

EUVD-2018-8570

Malware in sbrugna...

AZL-53603 CVE-2024-50277 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: dm: fix a crash if blkallocdisk fails If blkallocdisk fails, the variable md-disk is set to an error value. cleanupmappeddevice will see that md-disk is non-NULL and it will attempt to access it, causing a crash on this statement...

WAVM Denial of Service Vulnerability (CNVD-2019-09772)

WAVM is the WebAssembly Virtual Machine. A denial-of-service vulnerability exists in WAVM 2018-07-26 and earlier versions, which stems from a failure of a certain newallocator allocation call and can be exploited by an attacker to cause a denial of service application crash by sending a specially...