RLSA-2026:22649 Important: php8.4 security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

MINI-C4MW-FG89-P234

Bulletin has no description...

MINI-VXQ3-F99X-F6MM

Bulletin has no description...

MINI-4R5X-FJ47-XF67

Bulletin has no description...

MINI-VH6X-PQ67-594F

Bulletin has no description...

MINI-5F4V-W729-444C

Bulletin has no description...

MINI-QW3Q-X2PH-C22W

Bulletin has no description...

MINI-WM65-89V5-QG3P

Bulletin has no description...

BIT-MLFLOW-2026-4035 Environment Variable Resolution Vulnerability in mlflow/mlflow

A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI Gateway secrets, which can be exploited to exfiltrate sensitive server-side environment credentials to an attacker-controlled endpoint. This issue arises because the apikey field in...

MINI-QG39-MH3H-CF8J

Bulletin has no description...

MINI-RX7G-CPX8-FJ9P

Bulletin has no description...

MINI-623J-RH55-FF4F

Bulletin has no description...

MINI-Q76C-2QJ5-262X

Bulletin has no description...

MINI-7262-PJW3-WMMH

Bulletin has no description...

EUVD-2026-34780

A heap-based buffer overflow vulnerability in the dot11ah.ko HaLow Wi-Fi kernel driver in Morse Micro HaLowLink 2 software versions prior to 2.11.13 allows an unauthenticated attacker within radio range to cause a Denial of Service kernel panic or potentially achieve Remote Code Execution via a...

MINI-QC2H-2HMR-FPV2

Bulletin has no description...

EUVD-2026-34469

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted XML file. Chromium security severity: Medium...

EUVD-2026-34432

Insufficient validation of untrusted input in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-11259

Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-11259

Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...