CLSA-2026-1790065872 freerdp: Fix of 2 CVEs

CVE-2026-67291: fix heap out-of-bounds read in updateprocessglyphfragments; reject a GLYPHFRAGMENTADD update whose one-byte server-declared fragment size exceeds the bytes remaining in the received order buffer, instead of passing it straight to glyphcachefragmentput which copies that many bytes...

CLSA-2026-1789401857 freerdp: Fix of 2 CVEs

CVE-2026-67291: fix heap out-of-bounds read in updateprocessglyphfragments; reject a GLYPHFRAGMENTADD update whose one-byte server-declared fragment size exceeds the bytes remaining in the received order buffer, instead of passing it straight to glyphcachefragmentput which copies that many bytes...

CVE-2026-42473

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize on data from the filesystem in the FileHandler object...

EUVD-2026-26673

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize on data from Redis in the RedisHandler object...