RHSA-2026:50290 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

RHSA-2026:11413 Red Hat Security Advisory: yggdrasil security update

Bulletin has no description...

MINI-CFCJ-HP6Q-GWV2

Bulletin has no description...

DEBIAN-CVE-2026-64573

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: fix NVM tag length underflow in TLV parser In the TLVTYPENVM branch of qcatlvcheckdata the tag loop bound is "while idx length - sizeofstruct tlvtypenvm". "length" is a signed int from the firmware TLV header and...

DEBIAN-CVE-2026-64579

In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: preallocate inexact bins before xfrmhashrebuild reinsert xfrmhashrebuild's first loop preallocates the bins/chains the reinsert loop needs, so the reinsert after hlistdelrcu cannot allocate or fail. But its guard is...

DEBIAN-CVE-2026-64577

In the Linux kernel, the following vulnerability has been resolved: gtp: check skbpulldata return in gtp1usendechoresp gtp1usendechoresp ignores skbpulldata's return value. Its caller gtp1uudpencaprecv only guarantees 16 bytes udphdr + gtp1header, but the pull requests 20 gtp1headerlong + udphdr...

DEBIAN-CVE-2026-67590

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...

CGA-MFCR-J98W-873F

Bulletin has no description...

MINI-PVWH-596M-9GQC

Bulletin has no description...

CGA-592H-Q6C7-9F56

Bulletin has no description...

DEBIAN-CVE-2026-18784

A vulnerability was found in o6 open62541 up to 1.5.5. This issue affects the function UAClientreadNodeClassAttribute of the file src/client/uaclienthighlevel.c. Performing a manipulation results in heap-based buffer overflow. Attacking locally is a requirement. The exploit has been made public a...

DEBIAN-CVE-2026-15920

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.contrib.admin.utils.displayforfield renders URLField values as clickable links in the admin without validating the URL. A value stored with an unsafe scheme is displayed as a link on changelist and read-only admin...

MINI-R796-978C-66X9

Bulletin has no description...

MINI-GF86-J4H2-77W5

Bulletin has no description...

MINI-792V-PWP8-76GG

Bulletin has no description...

MINI-J3HC-PP65-86G7

Bulletin has no description...

MINI-3P6G-MW5X-FHFF

Bulletin has no description...

MINI-FW52-QGH5-F27C

Bulletin has no description...

MINI-QG32-V54G-JJC7

Bulletin has no description...

DEBIAN-CVE-2026-64565

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix heap-buffer-overflow in imspcuprocessdata The imspcuprocessdata processes incoming URB data byte by byte. However, it fails to check if the readpos index exceeds IMSPCUBUFSIZE. If a malicious USB device sends...