Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2026-93586: use-after-free in the ImagesToBlob method can lead to a process crash bsc1281912. CVE-2026-93587: policy bypass in the PCD, CUBE and HALD coders can lead to extra memory allocation and a denial of service bsc1281909...

Exploit for CVE-2026-109618

php2shell — CVE-2026-109618 / CVE-2026-109619 Research Indepe...

Security update for libpng16

This update for libpng16 fixes the following issue: CVE-2026-46675: Use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP decompression bsc1283183. Changes for libpng16: version update to 1.6.59: Fixed a regression introduced in version 1.6.47 that caused libpng to reject...

CLSA-2026-1777643521 Fix of 13 CVEs

Ubuntu: 4.15.0-255.266 CVE-2026-31431 - crypto: authencesn - reject too-short AAD assoclen8 to match ESP/ESN spec CVE-2026-31431 - crypto: scatterwalk - Backport memcpysglist CVE-2026-31431 - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption CVE-2026-31431 - crypto...

Exploit for CVE-2026-109618

php-up-2026 PHP session.uploadprogress UAF validation bundle...

Exploit for CVE-2026-109618

PHP2Shell Lab CVE-2026-109618 / CVE-2026-109619 Use-After-Fr...

RLSA-2026:85774 Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-52935 kernel: USB: serial: ioti: fix heap overflow in getmanufin...

kernel-rt security, bug fix, and enhancement update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

python3 security update

An update is available for python3. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming language,...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

RLSA-2026:85239 Important: python3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

CLSA-2026-1783355084 kernel: Fix of 60 CVEs

net/sched: fix pedit partial COW leading to page cache corruption CVE-2026-46331 - unshare: fix unsharefs handling CVE-2026-43472 - net/sched: schhfsc: fix divide-by-zero in rtscmin CVE-2026-31423 - net/sched: clsflow: fix NULL pointer dereference on shared blocks CVE-2026-31422 - net/sched:...

CLSA-2026-1786350974 kernel: Fix of 119 CVEs

KVM: x86: Check for invalid/obsolete root after making MMU pages available CVE-2026-64561 - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level CVE-2026-63807 - Input: uinput - zero-initialize uinputffuploadcompat to avoid info leak CVE-2025-40035 - thunderbolt: Limit...

CLSA-2026-1779987841 kernel: Fix of 110 CVEs

smb: client: reject userspace cifs.spnego descriptions - mlxsw: spectrumacltcam: Fix possible use-after-free during rehash CVE-2024-35854 - cifs: Fix memory leak when build ntlmssp negotiate blob failed CVE-2022-50372 - scsi: lpfc: Check kzalloc in lpfcsli4cgnparamsread CVE-2023-53038 -...

Exploit for CVE-2026-109618

CVE-2026-109618 / CVE-2026-109619 Audit: the claimed session...

Exploit for CVE-2026-109618

php-uploadprogress-waf Defensive detection rules for the repo...

Exploit for CVE-2026-109618

Source: https://jackalsyn.com/posts/php-up-2026.html Top-level...

Use After Free

Overview org.webjars.npm:sharp is a High performance Node.js image processing, the fastest module to resize JPEG, PNG, WebP, GIF, AVIF and TIFF images Affected versions of this package are vulnerable to Use After Free via a memory-related vulnerability in the bundled librsvg dependency. An attack...

Use After Free

Overview sharp is a High performance Node.js image processing, the fastest module to resize JPEG, PNG, WebP, GIF, AVIF and TIFF images Affected versions of this package are vulnerable to Use After Free via a memory-related vulnerability in the bundled librsvg dependency. An attacker can supply an...

CVE-2026-113221

A flaw was found in the Google Lens component of chromium-browser. This issue is caused by a use-after-free vulnerability, which occurs when memory is accessed after it has been released. A remote attacker could exploit this flaw by enticing a user to open a specially crafted HTML page, potential...