RLSA-2026:87151 Important: php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: php: Denial of Service via unbounded recursion in SOAP parser CVE-2026-91765 php: OOM bailout during request parsing leads to memory corruption and RCE CVE-2026-109618 php: fatal error...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

php security update

An update is available for php. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list PHP is an HTML-embedded scripting language commonly used with the Apache HTTP...

php:8.3 security update

An update is available for module.php-pecl-rrd, module.php-pecl-redis6, php-pecl-xdebug3, php-pecl-zip, module.php, php-pecl-rrd, php-pecl-redis6, php, module.php-pecl-apcu, module.php-pecl-xdebug3, php-pecl-apcu, module.php-pecl-zip. This update affects Rocky Linux 9. A Common Vulnerability...

RLSA-2026:87079 Important: php:8.3 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: php: Denial of Service via unbounded recursion in SOAP parser CVE-2026-91765 php: OOM bailout during request parsing leads to memory corruption and RCE CVE-2026-109618 php: fatal error...

php:8.2 security update

An update is available for module.php-pecl-rrd, php-pecl-xdebug3, php-pecl-zip, php-pecl-rrd, module.php, php, module.php-pecl-apcu, module.php-pecl-xdebug3, php-pecl-apcu, module.php-pecl-zip. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a...

RLSA-2026:86907 Important: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests...

php:7.4 security update

An update is available for module.php-pecl-rrd, php-pecl-zip, module.libzip, libzip, php-pear, module.php-pear, module.php, php-pecl-rrd, php-pecl-xdebug, module.php-pecl-xdebug, php, module.php-pecl-apcu, php-pecl-apcu, module.php-pecl-zip. This update affects Rocky Linux 8. A Common Vulnerabili...

librsvg2 security update

An update is available for librsvg2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The librsvg2 packages provide a Scalable Vector Graphics SVG library based o...

RLSA-2026:86842 Important: librsvg2 security update

The librsvg2 packages provide a Scalable Vector Graphics SVG library based on the libart library. Security Fixes: librsvg: Use-after-free when XML includes have duplicated entities CVE-2026-96889,RUSTSEC-2026-0305 For more details about the security issues, including the impact, a CVSS score,...

xorg-x11-server-Xwayland security update

An update is available for xorg-x11-server-Xwayland. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Xwayland is an X server for running X clients under Wayland...

PHP 8.5.12 Fiber Callable Use-After-Free

PHP version 8.5.12 and earlier affected versions contain a Fiber callable use-after-free vulnerability that can lead to type confusion, information disclosure, and remote code execution. Proof of concept code is included. https://packetstorm.news/download/237053...

PHP 8.5.11 Out-of-Memory Vulnerability Check

PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain use-after-free conditions caused by out-of-memory handling during request parsing. This tool sends crafted multipart uploads or runs PHP OOM regression tests to check for the conditions...

AlmaLinux 10 : php (ALSA-2026:87070)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:87070 advisory. php: php: Denial of Service via unbounded recursion in SOAP parser CVE-2026-91765 php: OOM bailout during request parsing leads to memory corruption and...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crlsa-2026_85773)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202685773 advisory. kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-52935 kernel: USB: serial: ioti: fix heap overflow in getmanufinfo CVE-2026-5319...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142685)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142685 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: invoke pmgenpdremove before freeing genpd Call pmgenpdremove to unregister from globa...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142763)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142763 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent lock owner use-after-free during client teardown destroyclient releases a client's...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142690)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142690 advisory. In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation skbudptunnelsegment gets the UDP header...

Linux Distros Unpatched Vulnerability : CVE-2026-114042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream with the owned-stream deallocator when totalLength ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143103)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143103 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: clear newtransport when removing a peer sctpprocessasconfparam stores a newly added peer...