AZL-97512 CVE-2026-72854 affecting package lttng-tools 2.13.11-1

msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...

CVE-2026-72367

Technical details about CVE-2026-72367 are not publicly provided in the supplied documents; monitor for updates.

lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around.

...