Updated peazip package fixes security vulnerabilities

CVE-2026-102514 - Out-of-bounds Write CWE-787 in the PEA archive extraction routine pea.pas, unpeaprocedure of the first-party pea component in PeaZip 11.2.0 and earlier allows an attacker who convinces a victim to open or extract a crafted .pea archive to execute arbitrary code as the user runni...

Updated python-pytest package fixes a security vulnerability

On UNIX, pytest uses a predictable naming scheme under /tmp with a UID check for added security. The UID check however will follow symlinks, and is vulnerable to TOCTOU. This leaves pytest vulnerable to several well-known vulnerabilities on multi-user systems. The risk ultimately depends on how...

Updated amule packages fix security vulnerabilities

A security release first: it fixes 15 vulnerabilities reported through GitHub Security Advisories, and 11 of them are also present in aMule 2.3.3. If you still run 2.3.x or any 3.x release, please upgrade. The release is 455 merged PRs on top of 3.1.0, including the 12 advisory fixes merged at...

Updated python-django package fixes security vulnerabilities

CVE-2026-108147: Potential memory exhaustion in MultiPartParser via base64-encoded file upload CVE-2026-111211: Potential log injection via unescaped geometry form values CVE-2026-111362: Server-side request forgery via crs member of GeoJSON geometries CVE-2026-113593: Potential exposure of priva...

Updated nginx package fixes security vulnerabilities

NGINX ngxhttpcoremodule vulnerability. CVE-2026-15176 NGINX map directive and regex matching vulnerability. CVE-2026-93479 NGINX ngxhttpv3module vulnerability. CVE-2026-95101 NGINX ngxhttpcoremodule vulnerability. CVE-2026-97205 NGINX ngxhttpsslmodule vulnerability. CVE-2026-97629...

Updated mopidy package fixes a security vulnerability

Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/mediadirs because FileLibraryProvider.lookup lacks a containment check. Attackers can call core.library.lookup or core.tracklist.add over JSON-RPC or WebSocket with...

Updated python-dulwich & rust-similar3 packages fixes security vulnerabilities

Commit subjects not sanitized in porcelain.formatpatch Unbounded memory allocation in receive-pack from crafted thin packs Dulwich from 0.22.5 before 1.2.8 contains a path traversal vulnerability in stash.py pop that allows attackers to write arbitrary files outside the worktree through...

Updated sofia-sip package fixes a security vulnerability

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

Updated rclone package fixes security vulnerabilities

This update brings new features, bugs and vulnerabilities fixed in the rclone and golang components used to build it...

Updated python-aiohttp package fixes security vulnerabilities

Please see the links for additional information about the vulnerabilities and changes performed by developers since the version 3.13.3...

Updated firefox, firefox-l10n, nss packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Same-origin policy bypass in the DOM: Navigation component. CVE-2026-117860 Sandbox escape in the DOM: Navigation component. CVE-2026-117861 Privilege escalation due to incorrect boundary conditions in the Networking component. CVE-2026-117862...

Updated glibc package fixes security vulnerabilities

Passing an effectively empty string to the ,ccs= syntax extension of the mode argument in the fopen function in the GNU C Library version 2.45 or earlier may result in a heap buffer overflow when the mode string input to the function is attacker controlled. This usage pattern is not seen in...

Updated php-smarty package fixes a security vulnerability

Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level nocachehash is never restored during extends:/multi-component template inheritance, leaving it null. Attackers can supply assigned data containing a forged SmartyNocache marker that is copied...

Updated thunderbird package fixes security vulnerabilities

Displaying a message could load an attacker-chosen URL through an OpenPGP key attachment. CVE-2026-118174 Content of other messages could be included when replying to a crafted message. CVE-2026-118175 Bypass of remote UNC path restriction in mailbox: URLs. CVE-2026-118176 Calendar discovery...

Updated python-gitpython package fixes security vulnerabilities

Please see the links for additional information...

Updated suricata package fixes security vulnerabilities

This new suricata version fixes several security vulnerabilities,...

Updated gimp packages fix security vulnerabilities

This update to v. 3.2.8 fixes several security issues...

Updated stunnel package fixes security vulnerabilities

Localhost-filter bypass in SOCKS server mode. CVE-2026-70367 Out-of-bounds memory access when logging long protocol messages. CVE-2026-70368...

Updated znc package fixes security vulnerabilities

Updated the old bundled vulnerable version of jQuery to 3.5.1. CVE-2020-11022 Use-after-free when unloading modules, triggered by unprivileged users. CVE-2026-82373 Null pointer dereference in crypt module, triggered by IRC server. CVE-2026-82374...

Updated zvbi package fixes a security vulnerability

libzvbi through 0.2.45 contains an out-of-bounds write vulnerability in the Teletext decoder that allows attackers to corrupt memory by supplying unvalidated DRCS pixel-mode values in X/28/3 packets. Attackers can send a crafted Teletext stream decoded via vbidecode with every slot set to...

Updated python-pypdf package fixes security vulnerabilities

This new version fixes several security vulnerabilities...

Updated minetest package fixes security vulnerabilities

The client mesh loaders suffer from memory safety issues including unbounded out-of-bounds heap writes and use-after-free, which might be used to obtain arbitrary code execution on the client. High Installing content from an untrusted ContentDB instance can result in remote code execution. Modera...

Updated java-latest-openjdk, timezone, java-21-openjdk, java-17-openjdk packages fix security vulnerabilities

Enhance PKCS5 padding. CVE-2026-83374 Enhance TLS certificate handling. CVE-2026-83376 Improve C2 loop transformations. CVE-2026-83378 Enhance LDAP logins. CVE-2026-83380 Enhance SASL Authentication. CVE-2026-83381 Enhance WebRowSets. CVE-2026-83387 Enhance HTTP Client Response Handling...

Updated unbound package fixes security vulnerabilities

Bypass of a configured island trust anchor underneath an insecure parent from an attacker-controlled NSEC record. Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent. Aggregate DNS name chained pointer decompression work leads t...

Updated libgit2 package fixes security vulnerabilities

Inverted IP SubjectAltName Comparison in OpenSSL Backend. CVE-2026-53583 Submodule path traversal. CVE-2026-53584 Unbounded Memory Allocation via Delta Object Result-Size Header. CVE-2026-53585 HTTP transport can leak credentials to an offsite redirect target. CVE-2026-53586 Unauthenticated...

Updated libsolv package fixes security vulnerabilities

Stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service. CVE-2026-48863 Heap buffer overflow in libsolv repoaddsolv via negative maxsize from crafted .solv file. CVE-2026-9149 Stack-based buffer overflow in libsolv's debian metadata parser when handling...

Updated tomcat package fixes security vulnerabilities

OpenSSL-FFM FIPS failure does not prevent start-up. CVE-2026-74048 Jasper JSTL plug-in implementation omits page abort SKIPPAGE. CVE-2026-74049 TOCTOU when setting specific permissions for Unix Domain Sockets - Fix for CVE-2026-65183 did not address APR connector. CVE-2026-80353 HTTP/2 trailer...

Updated xrdp package fixes security vulnerabilities

libpaletteupdate Heap Buffer Overflow & RCE. CVE-2026-41252 libframebufferupdate Has Integer Overflow Heap Info Leak & ASLR Bypass. CVE-2026-41521 Channel Data Forwarding Fixed-Size Buffer Overflow. CVE-2026-44178 XRDP is vulnerable to a server timing attack, leading to user enumeration...

Updated cfitsio package fixes security vulnerabilities

CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the imcompress.c unquantize helpers that allows attackers to read memory before the fitsrandvalue table via a zero or negative ZDITHER0 seed. Attackers can supply a crafted FITS file with a SUBTRACTIVEDITHER1 compress...

Updated python3 & python-pip packages fixes security vulnerabilities

CVE-2026-12345 The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags...

Updated fio package fixes a security vulnerability

A NULL pointer dereference vulnerability exists in fio Flexible I/O Tester v3.41 when parsing job files containing the fdppli option. The callback function strfdpplicb does not validate the input pointer and calls strdup on a NULL value when the option is specified without an argument. This resul...

Updated perl-Text-CSV_XS package fixes security vulnerabilities

Text::CSVXS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index of an RFC 7111 selector in fragment. CVE-2026-110752 Text::CSVXS versions from 1.46 before 1.65 for Perl have a use-after-free of bindcolumns variables when skipemptyrows skips an empty line in...

Updated arrow, thrift, ceph packages fix security vulnerabilities

The updated packages fix many security vulnerabilities. Please see the links for additional information...

Updated sogo package fixes a security vulnerability

SOGo before 5.12.11 Password Reset Token Interception via Origin Header. CVE-2026-93453...

Updated libxml2 package fixes a security vulnerability

Null pointer dereference parsing nextcatalog without catalog attribute. CVE-2026-76781...

Updated util-linux package fixes security vulnerabilities

Additional fix for CVE-2024-28085. Local Privilege Escalation via TOCTOU in mount8 hookowner.c chmod/chown. CVE-2026-53612 Local Privilege Escalation via TOCTOU in mount8 — Target Path Redirection. CVE-2026-53613 Local Privilege Escalation via LIBMOUNTFORCEMOUNT2 Environment Variable —...

Updated perl-Cpanel-JSON-XS package fixes security vulnerabilities

Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeysasarrayref is enabled. CVE-2026-9334 Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws. CVE-2026-9516...

Updated cifs-utils package fixes a security vulnerability

cifs-utils 4.2-7.8 mount-option injection in mount.cifs. CVE-2026-104715...

Updated weechat package fixes security vulnerabilities

Decompression Bomb in Relay WebSocket DoS. CVE-2026-53524 Non-Constant-Time Password Hash Comparison in Relay Authentication. CVE-2026-53525...

Updated perl-Imager package fixes a security vulnerability

Heap out-of-bounds read in Imager::File::GIF gifconsolidate reader ireadgiflow via crafted colour-map index. CVE-2026-112202...

Updated perl-DBI package fixes security vulnerabilities

dbiprofile: crash type confusion when a database handle is destroyed while its Profile Path contains attr elements. CVE-2026-108518 Failed DBD::DBM file creation left lock files in place. CVE-2026-111879...

Updated libde265 packages fixes a security vulnerability

Zero-length NAL passed to de265pushNAL makes memcpy run with a NULL destination. CVE-2026-88373...

Updated evolution package fixes a security vulnerability

Javascript execution via spoofed vcard control bypasses mail script-markup restriction. CVE-2026-88859...

Updated vim package fixes security vulnerabilities

Ex Command Injection via Unescaped Buffer Name in signjump in Vim v9.2.1090 Arbitrary Code Execution via Ruby Omni-Completion in Vim 9.2.1177 Command Execution via Rmd Syntax Highlighting in Vim 9.2.1178 Ex Command Execution via Cargo Quickfix Hooks in Vim 9.2.1201...

Updated libical package fixes security vulnerabilities

Denial of Service via crafted iCalendar property parsing. CVE-2026-88383 Heap Out-of-Bounds Read via icalvaluedecodeicalstring. CVE-2026-111269...

Updated freetype2 packages fixes a security vulnerability

Denial of service via repeated subroutine allocations in cid font loader. CVE-2026-95512...

Updated perl-ExtUtils-Typemaps-Default package fixes security vulnerabilities

ExtUtils::Typemaps::STL::String versions before 1.06 for Perl TSTDSTRING typemap may read the SV length before stringifying the argument. CVE-2026-107373 ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. CVE-2026-107794...

Updated libxtst, libxrender, libxi packages fix security vulnerabilities

The updated packages fix security vulnerabilities: libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow. CVE-2026-109089 libXi XGetDeviceControl DEVICEENABLE Heap Buffer Overflow. CVE-2026-109090 Out-of-bounds read in libXrender's XRenderQueryFormat reply parser. CVE-2026-88807...

Updated ghostscript package fixes a security vulnerability

Ghostscript 10.08.0 Heap Buffer Overflow via JPEG 2000 Output Adapter. CVE-2026-39919...

Updated kronosnet package fixes security vulnerabilities

Encryption key exposure in memory after cryptographic configuration changes. CVE-2026-15811 Access control list bypass via link id spoofing on unencrypted dynamic links. CVE-2026-15812 Memory corruption and out-of-bounds access via malformed network packet defragmentation. CVE-2026-15813...