DEBIAN-CVE-2026-44950

fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c copies each glyph's bitmap into a single buffer. Existing checks validates only that the source slice position, length lies within the source bitmap buffer. It does not check whether the running destination cursor has exceeded the...

DEBIAN-CVE-2026-59679

fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c indexes the per-character encoding array using numchars from the FSQueryXBitmaps16 reply, but that array was allocated with a size derived from numextents in the separate FSQueryXExtents16 reply. The two CARD32 fields are never...

MINI-62RW-GWG3-RH5C

Bulletin has no description...

MINI-FXQ6-4595-W39C

Bulletin has no description...

DEBIAN-CVE-2026-50190

Shaarli is a personal bookmarking service. Versions prior to 0.16.3 are vulnerable to stored XSS in application/front/controller/visitor/BookmarkListController.php. The permalink handler concatenates the raw $bookmark-getTitle into the pagetitle template variable and the RainTPL template emits it...

MINI-6G2F-H297-6J9J

Bulletin has no description...

MINI-F9MV-FWM9-4HWQ

Bulletin has no description...

MINI-MM5V-5H2J-5V9X

Bulletin has no description...

MINI-3QW3-8QVC-27X8

Bulletin has no description...

MINI-XV52-4HMM-3F5V

Bulletin has no description...

MINI-4PVP-XGQC-44PC

Bulletin has no description...

CVE-2026-70463

rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name contains a space. The space within the...

CVE-2026-70458

rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINKBUMP processing on file entries with the FLAGHLINKED flag set while the hard-link preservation option is inactive. Attackers can exploit the missing FSUM field in the...

RHSA-2026:52396 Red Hat Security Advisory: postgresql:12 security update

Bulletin has no description...

RHSA-2026:52395 Red Hat Security Advisory: postgresql security update

Bulletin has no description...

MINI-VXXQ-X393-RX83

Bulletin has no description...

MINI-VRC8-J3RH-QM2M

Bulletin has no description...

MINI-VGQX-8VCC-XCFR

Bulletin has no description...

MINI-8QMJ-9F3W-8GG4

Bulletin has no description...

DEBIAN-CVE-2026-15534

Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in Sregmatch. The regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject...