6437 matches found
DEBIAN-CVE-2026-56135
In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...
DEBIAN-CVE-2026-56136
In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfsirnill in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name...
DEBIAN-CVE-2026-62867
Incus is a system container and virtual machine manager. Prior to version 7.3.0, improper validation of user-provided block.createoptions in storage volume configuration leads to argument injection in the constructed filesystem creation command line. This allows a project-scoped user to inject...
DEBIAN-CVE-2026-48752
Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image or instance backup can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command execution. Version 7.2.0 patches the issue...
DEBIAN-CVE-2026-55192
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP H.264 decoder backends can return YUV planes sized from the bitstream without comparing the decoded width and height to the RDPGFX surface dimensions used to validate region rectangles. A malicious RDP serve...
MINI-VFF6-R53X-G3FX
Bulletin has no description...
DEBIAN-CVE-2026-47766
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
DEBIAN-CVE-2026-58224
A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequa...
MINI-5X4G-64X9-PV2G
Bulletin has no description...
RHSA-2026:52400 Red Hat Security Advisory: python3 security update
Bulletin has no description...
RHSA-2026:52389 Red Hat Security Advisory: osbuild-composer security update
Bulletin has no description...
MINI-W379-Q9VM-X77V
Bulletin has no description...
MINI-554V-F598-828M
Bulletin has no description...
MINI-35CH-627G-3C85
Bulletin has no description...
MINI-883G-58RC-5GC6
Bulletin has no description...
MINI-RQ38-PHV8-J899
Bulletin has no description...
MINI-CR2G-3538-4F7J
Bulletin has no description...
MINI-9877-GC24-42Q2
Bulletin has no description...