Свежие уязвимости · Страница 91

Moderate: libXi security update

X.Org X11 libXi runtime library Security Fix(es): * libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser (CVE-2026-93543) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

• Обновитесь до 0:1.7.10-2.el8_10

Important: libXrender security update

X.Org X11 libXrender runtime library Security Fix(es): * libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats (CVE-2026-88807) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

• Обновитесь до 0:0.9.10-8.el8_10

Moderate: gcc-toolset-15-gcc security update

The gcc-toolset-15-gcc package contains the GNU Compiler Collection version 15. Security Fix(es): * gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if (CVE-2026-102010) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

• Обновитесь до 0:15.2.1-7.2.el8_10

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-92035) * firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-100832) * firefox: Use-after-free in the Layout: Text and Fonts component (CVE-2026-100784) * firefox: thunderbird: Privilege escalation in the DLL Services component (CVE-2026-100801) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization component (CVE-2026-100794) * firefox: thunderbird: Privilege escalat

• Обновитесь до 0:140.17.0-1.el8_10

Important: pki-deps:10.6 security update

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System. Security Fix(es): * com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing (CVE-2026-89425) * com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion (CVE-2026-91777) * com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via excessively long JSON property name

• Обновитесь до 0:1.2.0-16.module+el8.10.0+1763+c7c02164
• Обновитесь до 0:1.2.0-16.module+el8.10.0+2052+1b0fb438
• Обновитесь до 0:1.2.13-9.module+el8.10.0+1763+c7c02164
• Обновитесь до 0:1.2.13-9.module+el8.10.0+2052+1b0fb438
• Обновитесь до 0:2.6-21.module+el8.10.0+1763+c7c02164
• Обновитесь до 0:2.6-21.module+el8.3.0+74+855e3f5d
• Обновитесь до 0:3.2.2-10.module+el8.10.0+1763+c7c02164
• Обновитесь до 0:3.2.2-10.module+el8.10.0+2052+1b0fb438
• Обновитесь до 0:3.2.2-10.module+el8.3.0+74+855e3f5d
• Обновитесь до 0:3.6-3.module+el8.10.0+1763+c7c02164
• Обновитесь до 0:3.6-3.module+el8.10.0+2052+1b0fb438
• Обновитесь до 0:3.6-3.module+el8.3.0+74+855e3f5d

Important: libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN). Security Fix(es): * libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP (CVE-2026-94453) * libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code (CVE-2026-77206) * libreswan: Null Pointer Dereference in PKCS#7 bundle with no CERTS (CVE-2026-77207) For more details about the security issue(s), including the impact, a CVSS sc

• Обновитесь до 0:4.12-2.el8_10.7

Important: java-17-openjdk security update for Rocky Linux 8

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * JDK: Enhance PKCS5 padding (CVE-2026-83374) * JDK: Enhance TLS certificate handling (CVE-2026-83376) * JDK: Enhance LDAP logins (CVE-2026-83380) * JDK: Enhance SASL Authentication (CVE-2026-83381) * JDK: Enhance WebRowSets (CVE-2026-83387) * JDK: Enhance HTTP Client Response Handling (CVE-2026-83395) * JDK: Enhance XML Processing (CVE-2026-83400) * JDK: Enhance XPath Expressions (CVE-2026-87290) * JDK: Enhance Network Clients (CVE-2026-87292) * JDK: Enhance Certificate Name Checks (CVE-2

• Обновитесь до 1:17.0.21.0.9-2.1.el8_10

Important: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

• Обновитесь до 1:26.1-15.el8_10.4

Important: python-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser (CVE-2026-97689) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

• Обновитесь до 0:1.24.2-11.el8_10

Important: brotli security update

Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression. Security Fix(es): * brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

• Обновитесь до 0:1.0.6-5.el8_10

Gitea draft release creation disclosing attachment metadata

Creating a draft release through the API returned an `assets` list that was built from a release without an ID, which matched every attachment that was not linked to a release. A user who could create a draft release in a repository therefore received the metadata (file name, UUID, upload time, size and download count) of issue and comment attachments of repositories they could not read, and of abandoned uploads.

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103 bsc#1280176). - CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). - CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). - CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). - CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). - CVE-2026-74587: sctp: fix use-after

• Обновитесь до 1-150400.9.3.1
• Обновитесь до 5.14.21-150400.24.246.1
• Обновитесь до 5.14.21-150400.24.246.1.150400.24.124.1

oapi-codegen 2.0.0 before 2.8.1 Code Injection via Non-String Enum Values

oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplying non-literal enum entries in integer, number, or boolean schemas. Attackers controlling an OpenAPI document can craft an enum entry that closes the const block in constants.tmpl and injects a func init(), executing code when the generated package is built and imported.

• Обновитесь до 2.8.1

oapi-codegen 2.5.0 before 2.8.1 Code Injection via servers[].x-go-name Extension

oapi-codegen 2.5.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplying a crafted servers[].x-go-name value emitted unescaped by the server-urls template. Attackers who control an OpenAPI document can define an injected func init() that executes when the victim builds and imports the generated package.

• Обновитесь до 2.8.1

CVE-2026-109822

Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure storage of sensitive information. Configuration files generated by the CONFIG file export function may be read by an unauthenticated attacker.

CVE-2026-97854

Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the affected product.

CVE-2026-103665

The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries (DLLs). When the installer is launched in a directory containing a specially crafted DLL file, the malicious DLL may be loaded, resulting in arbitrary code execution with administrative privileges.

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). - CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). - CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742). - CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). - CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). - CVE-2026-74587: sctp: fix use-afte

• Обновитесь до 1-150500.11.3.1
• Обновитесь до 5.14.21-150500.55.195.1
• Обновитесь до 5.14.21-150500.55.195.1.150500.6.91.1

CVE-2026-97860

YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges.

WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.62.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith-paypal-express-checkout-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH PayPal Express Checkout for WooCommerce: from n/a through 1.62.0.

• Обновитесь до 1.62.1