Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php (UTSA-2026-146121)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146121 advisory. In PHP versions 8.2. before 8.2.32, 8.3. before 8.3.32, 8.4. before 8.4.23, 8.5. before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contain...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php (UTSA-2026-146120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146120 advisory. In PHP versions 8.2. before 8.2.32, 8.3. before 8.3.32, 8.4. before 8.4.23, 8.5. before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contain...

CVE-2026-114629

Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters. Web::Dispatch::ParamParser::getunpackedbodyfrom reads an application/x-www-form-urlencoded body using a single read call, with no cap and the return value ignored. Perl'...

CVE-2026-114629

Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters. Web::Dispatch::ParamParser::getunpackedbodyfrom reads an application/x-www-form-urlencoded body using a single read call, with no cap and the return value ignored. Perl'...

PT-2026-122604

Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters. Web::Dispatch::ParamParser::get unpacked body from reads an application/x-www-form-urlencoded body using a single read call, with no cap and the return value ignored...

Linux Distros Unpatched Vulnerability : CVE-2026-114629

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters...

CLSA-2026-1792503867 lrzsz: Fix of 3 CVEs

CVE-2026-105840: reject absolute path names in restricted mode in lrz received files and lsz sent files, not only in PUBDIR builds - CVE-2026-105841: remove the pipe mode that ran received files through a shell command when lrz was invoked as rzCOMMAND - CVE-2026-105842: allocate the received...

xorg-x11-server: glamor: size tmp_bits buffer for source coordinate range in upload_boxes

A flaw was found in xorg-x11-server. In the Glamor 2D graphics acceleration module, a buffer allocation error occurs during color depth conversion when processing an image whose source dimensions exceed the destination dimensions. A local user can exploit this vulnerability to trigger an...

xorg-x11-server: glamor: size tmp_bits buffer for source coordinate range in upload_boxes

A flaw was found in xorg-x11-server. In the Glamor 2D graphics acceleration module, a buffer allocation error occurs during color depth conversion when processing an image whose source dimensions exceed the destination dimensions. A local user can exploit this vulnerability to trigger an...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net/mlx5e: Fixed the issue where zero-sized buffers were allocated for HV VHCA statistics. The function mlx5ehvvhcastatscreate is called from mlx5enicenable, before mlx5eopen. At that point, priv-statsnch remains zero, because...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: octeonep: Added handling of SKB allocation failures in octepoqprocessrx. The buildskb function returns NULL in case of a memory allocation failure. Therefore, this behavior should be handled within octepoqprocessrx to prevent NUL...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: dlink: handle copythresh allocation failure The driver did not handle the failure of netdevallocskbip-align. If the allocation fails, dereferencing skb-protocol could lead to a NULL pointer dereference. This patch attempts t...

CVE-2026-109273 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure in PostScript Decoder

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byte longer than the data it decoded. Attackers can supply a crafted PostScript file to expose a single uninitialized byte of memory conten...

CVE-2026-109273

ImageMagick versions prior to 6.9.13-57 and 7.x before 7.1.2-32 are vulnerable to an information disclosure vulnerability within the PostScript decoder . The root cause is a buffer allocation error where the decoder allocates a buffer one byte longer than the decoded data, allowing an attacker to...

RHLW-2026-2324B17F545E0135 Lightwell Security Advisory: jackson-dataformat-cbor 2.10.0.rhlw-00001

Red Hat Lightwell has released com.fasterxml.jackson.dataformat:jackson-dataformat-cbor 2.10.0.rhlw-00001 with a backported security fix. CVE-2020-28491: This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1...

EUVD-2026-93865

yawkat LZ4 Java: LZ4FrameInputStream reallocates block buffers for every frame, allowing CPU and GC amplification from small inputs...

CVE-2026-81535

In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen in src/internal.c gates only direct-tcpip channel opens with the forwarding policy callback. forwarded-tcpip opens are admitted without an authorization check and are not capped in number, allowing a malicious SSH peer to make an...

CVE-2026-81535

In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen in src/internal.c gates only direct-tcpip channel opens with the forwarding policy callback. forwarded-tcpip opens are admitted without an authorization check and are not capped in number, allowing a malicious SSH peer to make an...

CVE-2026-81535

In wolfSSH versions prior to 1.5.1, a vulnerability exists when built with the --enable-fwd flag. The DoChannelOpen() function in src/internal.c only applies forwarding policy callbacks to direct-tcpip channel opens, allowing forwarded-tcpip opens to bypass authorization checks and remain uncappe...

CVE-2026-81535 wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check

In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen in src/internal.c gates only direct-tcpip channel opens with the forwarding policy callback. forwarded-tcpip opens are admitted without an authorization check and are not capped in number, allowing a malicious SSH peer to make an...