MINI-RRQR-6G9J-R9FP

Bulletin has no description...

MINI-9568-98HX-PRQ6

Bulletin has no description...

MINI-3663-PJH6-3VRC

Bulletin has no description...

DEBIAN-CVE-2026-10725

Protocol::HTTP2 versions before 1.13 for Perl is vulnerable to a HTTP/2 Bomb. Protocol::HTTP2's inbound HPACK path has no header-list size limit, so a small HTTP/2 request can expand into large server memory the "HTTP/2 bomb". The headersdecode method materialises a full key+value copy per indexe...

MINI-WHC6-53W4-MQJV

Bulletin has no description...

DEBIAN-CVE-2026-50260

A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter. A client that sets up multiple SyncCounters and awaits on those triggers can trigger a use-after-free when destroying those counters via a second client connection. This may be used to crash the server, or for...

MINI-2H5P-3767-MXJV

Bulletin has no description...

MINI-XHG3-PRJ8-8C9R

Bulletin has no description...

MINI-X94H-5V25-3C84

Bulletin has no description...

DEBIAN-CVE-2026-45022

go-git is an extensible git implementation library written in pure Go. Prior to 5.19.0 and 6.0.0-alpha.3, go-git may parse malformed Git objects in a way that differs from upstream Git. When commit or tag objects contain ambiguous or malformed headers, go-git’s decoded representation may expose...

MINI-X6M2-J968-7C5X

Bulletin has no description...

DEBIAN-CVE-2026-43130

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode Commit 4fc82cd907ac "iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected" relies on pcidevisdisconnected to skip ATS...

MINI-VGC9-M7CX-6GJ4

Bulletin has no description...

BELL-CVE-2026-23312

Bulletin has no description...

ECHO-2738-AEB3-E4E1

Bulletin has no description...

DEBIAN-CVE-2026-23201

In the Linux kernel, the following vulnerability has been resolved: ceph: fix oops due to invalid pointer for kfree in parselongname This fixes a kernel oops when reading ceph snapshot directories .snap, for example by simply running ls /mnt/myceph/.snap. The variable str is guarded by freekfree,...

BELL-CVE-2025-71189

Bulletin has no description...

CGA-W6FJ-XRHF-QQ4M

Bulletin has no description...

CGA-XRJC-8JC2-9H2C

Bulletin has no description...

DEBIAN-CVE-2025-55130

A flaw in Node.js’s Permissions model allows attackers to bypass --allow-fs-read and --allow-fs-write restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files...