DEBIAN-CVE-2026-54891

Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Erlang/OTP ssl tlsgenconnection module allows a network-positioned attacker to inject unauthenticated plaintext that the TLS client application later treats as authenticated server data. The...

DEBIAN-CVE-2026-54887

Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl DTLS server allows predictable DTLS cookie computation during the startup window, enabling source address verification bypass. On DTLS server startup, dtlsserverconnection:initialhello/3 initializes previouscookiesecret to the empty...

CGA-9F2F-GX28-G784

Bulletin has no description...

DEBIAN-CVE-2026-50195

containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a vulnerability in the CRI checkpoint import process where it fails to validate the image references specified within a checkpoint image's configuration. An attacker with permissions to create pods ca...

DEBIAN-CVE-2026-47262

containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service DoS condition. When creating a container from this image, memory exhaustion occurs, leading to an...

ECHO-B018-4984-724F

Bulletin has no description...

ECHO-6730-A8B1-7371

Bulletin has no description...

ECHO-74C9-0FDE-A62D

Bulletin has no description...

DEBIAN-CVE-2026-53340

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix clock and pinctrl state inconsistency in runtime PM In i2cimxruntimesuspend, the clock is disabled before switching the pinctrl state to sleep. If pinctrlpmselectsleepstate fails, the runtime suspend is aborted but...

DEBIAN-CVE-2026-53327

In the Linux kernel, the following vulnerability has been resolved: debugobjects: Do not fillpool if piblockedon On RT enabled kernels, fillpool ends up calling rtlocklock, which asserts if current::piblockedon is set, because a task can obviously only block on one lock as otherwise the priority...

CGA-FFQQ-F3QR-JVV4

Bulletin has no description...

CGA-4H66-C47G-54GF

Bulletin has no description...

CGA-4PR4-9P6R-RPVC

Bulletin has no description...

CGA-4338-C93J-8C47

Bulletin has no description...

RHSA-2026:33771 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

CGA-9958-M67J-PPWW

Bulletin has no description...

RHSA-2026:33229 Red Hat Security Advisory: glibc security update

Bulletin has no description...

RHSA-2026:33170 Red Hat Security Advisory: glibc security update

Bulletin has no description...

DEBIAN-CVE-2026-54369

acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions aclgetfile, aclsetfile, aclextendedfile, and acldeletedeffile that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who contr...

MINI-F5FP-65J3-6GRX

Bulletin has no description...