DEBIAN-CVE-2026-56211

A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC Scalable Video Coding layer ID control allows an attacker to supply crafted video frame pixels that overlap with internal encoder layer contex...

DEBIAN-CVE-2026-56131

libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur similar to the CVE-2026-50219 situation...

DEBIAN-CVE-2026-56132

In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers...

DEBIAN-CVE-2026-48617

A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: Node.js 22,...

RHSA-2026:26563 Red Hat Security Advisory: kernel security update

Bulletin has no description...

RHSA-2026:26515 Red Hat Security Advisory: kernel security update

Bulletin has no description...

CGA-2FJG-J4JJ-X26W

Bulletin has no description...

CGA-83J8-X434-F52W

Bulletin has no description...

MINI-6X5R-XCFG-7W4X

Bulletin has no description...

RHSA-2026:26452 Red Hat Security Advisory: 389-ds-base security update

Bulletin has no description...

RHSA-2026:26428 Red Hat Security Advisory: kernel-rt security update

Bulletin has no description...

RHSA-2026:26427 Red Hat Security Advisory: kernel security update

Bulletin has no description...

RHSA-2026:26204 Red Hat Security Advisory: postgresql:18 security update

Bulletin has no description...

RHSA-2026:26203 Red Hat Security Advisory: postgresql:16 security update

Bulletin has no description...

DEBIAN-CVE-2026-46448

In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation...

DEBIAN-CVE-2026-12306

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...

MINI-4537-MV78-833M

Bulletin has no description...

MINI-H8R4-C658-Q69G

Bulletin has no description...

MINI-Q5P6-WF2Q-QF5P

Bulletin has no description...

MINI-H8M5-J693-3H57

Bulletin has no description...