DEBIAN-CVE-2026-64570

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix filsdiscovery double free on alloc failure ieee80211setfilsdiscovery calls kfreercu on the old template before allocating the replacement. If the kzalloc then fails, it returns -ENOMEM while...

CVE-2026-64576

In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...

CVE-2026-64575

In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: fix double sock release on batch realloc bpfitertcpbatch releases the current batch via bpfitertcpputbatch, which drops the socket refs and rewrites each slot with the socket cookie, then grows the batch. cursk/endsk ar...

MINI-RWHR-FPXJ-W476

Bulletin has no description...

MINI-WJ74-XP5X-4QQQ

Bulletin has no description...

MINI-RWVQ-2GRX-CRH8

Bulletin has no description...

MINI-2922-G8M3-XM4F

Bulletin has no description...

MINI-33MR-M7CG-GJ3G

Bulletin has no description...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for July 2026.

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation released in July 2026. Vulnerability Details CVEID:CVE-2026-40984 DESCRIPTION: In Micrometer, it is possible for a user to provid...

CVE-2026-68080 Apache Qpid Broker-J: Unbounded echo flow responses can lead to denial of service

It was not possible to govern the rate at which the broker would respond to an echo flow, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version...

CVE-2026-66277

The Apache Qpid Proton-J messaging library (versions through 0.34.1 ) is vulnerable to a resource exhaustion flaw. An authenticated attacker can cause excessive resource usage and a potential denial of service (DoS) by sending an excessive number of transfer frames in a single delivery, as the sy...

EUVD-2026-53051

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue...

CVE-2026-46384 vulnerabilities

Vulnerabilities for packages: dapr, bento, opentelemetry-collector-contrib, splunk-otel-collector...

MINI-M6XH-36VV-55FM

Bulletin has no description...

RXSA-2026:49857 Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipc: limit nextid allocation to the valid ID range CVE-2026-52923 Bug Fixes and Enhancements: Rocky Linux SIG Cloud8.10 - KVM: s390: Limit adapter indicator access to mapped page JIRA:Roc...

Important: gimp security update

The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: GIMP APNG...

The vulnerability of the WTF web browsers Google Chrome and Microsoft Edge, which allows a hacker to trigger a service failure

The vulnerability of the WTF web browsers Google Chrome and Microsoft Edge is related to errors in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

SUSE SLES15 Security Update : valkey (SUSE-SU-2026:3483-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3483-1 advisory. This update for valkey fixes the following issues - CVE-2026-56684: use-after-free in TLS connection handling bsc1272443. -...

RHEL 9 : fence-agents (RHSA-2026:50653)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:50653 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable...

libXfont2 -- multiple vulnerabilities

Zhixi "Jace" Sun, independent security researcher reports: CVE-2026-44950: Font Server Client Cumulative Glyph Data Heap Buffer Overflow CVE-2026-59679: Font Server Client encoding Out-Of-Bounds Read/Write...