MGASA-2026-0496 Updated cjose packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Heap buffer overflow in AES Key Wrap decryption A128KW/A192KW/A256KW. CVE-2026-53938 All-zero Content Encryption Key used for AES-CBC-HMAC JWE encryption. CVE-2026-53939...

MGASA-2026-0495 Updated ugrep package fixes a security vulnerability

ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malformed .Z files that cause the decompressor to read one byte past the allocated heap buffer, potentially crashing the process...

MGASA-2026-0493 Updated wireshark package fixes security vulnerabilities

Loop with Unreachable Exit Condition 'Infinite Loop' in Wireshark. CVE-2026-95386 Heap-based Buffer Overflow in Wireshark. CVE-2026-95387 Heap-based Buffer Overflow in Wireshark. CVE-2026-95388 Heap-based Buffer Overflow in Wireshark. CVE-2026-95389 NULL Pointer Dereference in Wireshark...

Updated cjose packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Heap buffer overflow in AES Key Wrap decryption A128KW/A192KW/A256KW. CVE-2026-53938 All-zero Content Encryption Key used for AES-CBC-HMAC JWE encryption. CVE-2026-53939...

kernel: x86/bugs: Enable IBPB flush on BPF JIT allocation

A flaw was found in the Linux kernel. This vulnerability involves an incomplete defense against Spectre-v2, a type of attack that can expose sensitive information by exploiting how modern processors predict future operations. Specifically, when the Berkeley Packet Filter BPF Just-In-Time JIT...

Security Bulletin: IBM Sterling Connect:Direct for Unix is impacted by a vulnerability

Summary The apnotify utility was used by IBM Sterling Connect:Direct for UNIX in asset protection and may be seen in some IBM Connect:Direct for UNIX installation locations that have been upgraded in place since 2017 or earlier. IBM Sterling Connect:Direct for UNIX is impacted by a vulnerability ...

Updated polkit package fixes a security vulnerability

Regression in CVE-2026-4897 fix polkit readcookie - stack buffer underflow. CVE-2026-85498...

Updated ntfs-3g package fixes security vulnerabilities

Heap buffer overflow in ntfsaclowner Heap buffer overflow in ntfssamesid Denial-of-service in ntfsinodeattachallextents Heap buffer overflow in ntfscheckrestartarea Heap buffer overflow in ntfseacheckwsldev Heap buffer overflow in ntfsexternalattrfind Heap data corruption in...

Updated thunderbird packages fix security vulnerabilities

Heap buffer overflow opening large email. CVE-2026-103500 Incorrect boundary conditions in the Audio/Video: Playback component. CVE-2026-100756 Use-after-free in the Widget component. CVE-2026-100757 Sandbox escape in the DOM: Navigation component. CVE-2026-100758 Uninitialized memory in the...

MGASA-2026-0492 Updated thunderbird packages fix security vulnerabilities

Heap buffer overflow opening large email. CVE-2026-103500 Incorrect boundary conditions in the Audio/Video: Playback component. CVE-2026-100756 Use-after-free in the Widget component. CVE-2026-100757 Sandbox escape in the DOM: Navigation component. CVE-2026-100758 Uninitialized memory in the...

MGASA-2026-0485 Updated polkit package fixes a security vulnerability

Regression in CVE-2026-4897 fix polkit readcookie - stack buffer underflow. CVE-2026-85498...

MGASA-2026-0482 Updated ntfs-3g package fixes security vulnerabilities

Heap buffer overflow in ntfsaclowner Heap buffer overflow in ntfssamesid Denial-of-service in ntfsinodeattachallextents Heap buffer overflow in ntfscheckrestartarea Heap buffer overflow in ntfseacheckwsldev Heap buffer overflow in ntfsexternalattrfind Heap data corruption in...

CVE-2026-109281

A flaw was found in ImageMagick. An attacker can trigger a heap buffer over-read by providing a specially crafted -fx expression for processing. This vulnerability allows the application to read memory beyond allocated boundaries, potentially leading to unauthorized information disclosure or a...

CVE-2026-108915

A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formWlanMP. Such manipulation of the argument ateBW leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was...

Wordfence Argus Discovers Critical Vulnerability in Ghostscript, the Program That Turns Uploaded PDFs into Thumbnails on Your Server

On September 8, 2026, Artifex released Ghostscript 10.08.0, closing a critical heap buffer overflow that the Wordfence Threat Intelligence team, using Wordfence Argus, discovered and reported sixteen days earlier. It is tracked as CVE-2026-39919 and carries a CVSS score of 9.8 out of 10. A crafte...

glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

A flaw was found in the GNU C Library glibc. This vulnerability could allow an attacker with local access to trigger a heap buffer overflow by manipulating how the fopen function handles certain input. This could lead to minor disruptions in system operations or limited access to sensitive...

Moderate: Red Hat Security Advisory: glibc security update

An update for glibc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CVE-2026-109265

A flaw was found in ImageMagick. A remote attacker can exploit this vulnerability to trigger an application crash, resulting in a Denial of Service DoS. The issue is caused by improper string termination in Extensible Metadata Platform XMP profiles, which leads to a heap buffer over-read when...

rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace() function

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

Important: Red Hat Security Advisory: rsyslog security, bug fix, and enhancement update

An update for rsyslog is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...