This security update for PHP 8 addresses multiple vulnerabilities including SQL injection, out-of-bounds reads, use-after-free, cross-site scripting (XSS), denial of service, memory corruption, information disclosure, and infinite loops. The update also includes an upgrade to PHP version 8.4.21. These issues affect various components such as the PDO Firebird driver, mbstring encoding functions, SOAP handling, PHP-FPM status page, ctype functions, and XML processing.
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.
Security Fix(es):
* freerdp: FreeRDP: Denial of service due to use-after-free vulnerability (CVE-2026-25952)
* freerdp: FreeRDP: Denial of Service via double free vulnerability during disconnect (CVE-2026-26986)
* freerdp: FreeRDP: Denial of Service via endless blocking loop in Stream_EnsureCapacity (CVE-2026-27951)
* freerdp: FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId (CVE-2026-29775)
* freerdp: FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks (CVE-2026-31885)
* freerdp: FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0 (CVE-2026-31884)
* freerdp: FreeRDP: Denial of Service via crafted audio data in RDP (CVE-2026-31883)
* FreeRDP: FreeRDP: Information disclosure via heap memory out of bounds read (CVE-2026-33985)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
This security update for raylib addresses two vulnerabilities: a heap-based buffer overflow in the GenImageFontAtlas function (CVE-2025-15533) and an integer overflow in LoadFontData (CVE-2025-15534). These issues could lead to memory corruption or crashes when processing font data. The update also includes numerous new features and improvements unrelated to security. No affected versions are explicitly stated in the provided data.
A vulnerability in the lxml library used by recon-ng allows XML External Entity (XXE) attacks via the default configuration of iterparse() and ETCompatXMLParser(). This enables untrusted XML input to read local files. The issue is addressed in lxml 6.1.0 by changing the default resolve_entities setting to 'internal', preventing local file access. Users can also mitigate by explicitly setting resolve_entities to 'internal' or false.
Multiple security issues in grub2 have been addressed in a security update. These include use-after-free vulnerabilities due to missing unregister calls for several commands and an out-of-bounds write in the grub_usb_get_string() function. The update also includes an upstream SBAT generation bump to version 6.
This update for tor fixes the following issues:
Changes in tor:
- Update to 0.4.9.8
* Fix out-of-bounds read (boo#1264341, CVE-2026-44597, TROVE-2026-011)
* Do not attempt or accept BEGIN_DIR via conflux legs
(boo#1264342, CVE-2026-44599,TROVE-2026-008)
* Adjust conflux out-of-order queue accounting when clearing a queue
(boo#1264343, CVE-2026-44600, TROVE-2026-010)
* Fix a client-side crash caused by double-close of a circuit while
under circuit queue memory pressure
(boo#1264344, CVE-2026-44601, TROVE-2026-009)
* Fix null pointer dereference when receiving a CERT cell out of
order (boo#1264345, CVE-2026-44602, TROVE-2026-006)
* Fix off-by-one out-of-bounds read if a malformed BEGIN cell is
received (boo#1264346, CVE-2026-44603, TROVE-2026-007)
- upate to 0.4.9.5:
* first stable release in the 0.4.9 series
* introduces a new circuit-level encryption design for better
client security
* introduce a more scalable way for large relay operators to
annotate which relays they run so clients can avoid using too
many of them in a single circuit
This security update for php-composer2 addresses two vulnerabilities involving arbitrary command injection through malicious Perforce repository definitions and source references or URLs. These flaws could allow an attacker to execute arbitrary commands if they can supply crafted Perforce repository data to the affected software.
Multiple security vulnerabilities have been identified and fixed in cpp-httplib, including server-side request forgery via header injection, denial of service through unsafe handling of compressed HTTP requests and crafted POST requests, information leakage through exception handling, and payload size limit bypass via gzip decompression. These issues could allow attackers to cause denial of service or leak sensitive information. The update addresses these vulnerabilities to improve the security of cpp-httplib.
A security update addresses a denial of service vulnerability (CVE-2025-22869) in the golang.org/x/crypto/ssh package used by multiple Terraform providers. The flaw occurs when SSH clients do not complete the key exchange in servers implementing file transfer protocols, potentially causing service disruption.
This security update for nginx addresses multiple vulnerabilities including a plain text data injection via MITM, a buffer overflow in the ngx_http_dav_module, a memory overread or overwrite triggered by a crafted MP4 file, and arbitrary header injection into SMTP upstream requests via a malicious DNS server. These issues could lead to data exposure, process crashes, or request manipulation. The update fixes these vulnerabilities to enhance nginx security.
A security update for perl-Text-CSV_XS addresses CVE-2026-7111, a use-after-free vulnerability triggered when registered callbacks extend the Perl argument stack. This flaw may lead to type confusion or memory corruption. The issue is identified by SUSE Product Security Team and classified as high severity. No specific affected versions or patch details are provided in the available data.
A security update for freeipmi addresses CVE-2026-33554, which involves improper memory handling and data validation that can lead to stack buffer overflows and acceptance of malformed payloads or responses. This vulnerability poses a high severity risk due to potential memory corruption.
A security update for 389-ds addresses a heap buffer overflow vulnerability identified as CVE-2025-14905. The flaw is due to improper size calculation in the schema_attr_enum_callback function. The update also includes multiple other bug fixes and improvements.
This security update for jetty-minimal addresses two vulnerabilities: CVE-2026-2332, an HTTP/1.1 request smuggling issue related to chunk extensions, and CVE-2026-5795, a broken access control flaw in JaspiAuthenticator. Both issues have been fixed in this update.
A security update for librsvg addresses a vulnerability identified as CVE-2026-25727. The issue involves the RFC 2822 date parser, where parsing user-provided input can cause stack exhaustion. This vulnerability could lead to denial of service conditions. The update fixes this parsing flaw to prevent potential exploitation.
This security update for log4cxx addresses multiple issues including incorrect encoding of non-ASCII characters in JSON output, invalid characters in XML output, program termination caused by recursive XML configuration references, possible undefined behavior during configuration changes, message loss during logging, and incorrect lifetimes of ODBCAppender prepared statement value buffers. The update includes changes up to versions 1.6.0 and 1.7.0. No specific affected versions are stated. The severity is assessed as medium.
A security update for the Cairo graphics library addresses CVE-2025-50422, which causes a crash in the Poppler component when processing malformed input. The vulnerability has been rated as low severity. No specific affected versions or patch details are provided in the available data.
Multiple security vulnerabilities affecting the rack component in rmt-server have been fixed in version 2.27. These include issues such as multipart boundary parsing flaws, header injection, response splitting, root directory disclosure, unintended file exposure, header bypass, denial of service via resource exhaustion, unbounded chunked uploads, and improper HTTP response framing. Additional fixes address ReDoS and out-of-bounds read bugs in related components.
A time-of-check to time-of-use (TOCTOU) race condition vulnerability in python-pytest can lead to denial of service or potentially privilege escalation. This issue is addressed by a security update from the SUSE Product Security Team.
This security update for Xen addresses multiple vulnerabilities including a floating point divider state sampling issue on AMD CPUs (CVE-2025-54505), a denial-of-service vulnerability in xenstored via the XS_RESET_WATCHES command (CVE-2026-23557), and a race condition in grant table v2 status page mapping (CVE-2026-23558). The update includes the Xen 4.20.3 bug fix release that resolves these issues.