DEBIAN-CVE-2026-55677

Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router and static file handler disagree on URL path decoding. The router matches routes using the raw encoded path preserving %2F as-is, while StaticDirectoryHandler unescapes %2F to / before resolving filesystem paths. This allows an...

MINI-78V5-2325-97M6

Bulletin has no description...

MINI-W4M4-766J-HM5J

Bulletin has no description...

MINI-VRMP-P92C-RQ45

Bulletin has no description...

MINI-WQP7-MMHW-9XGH

Bulletin has no description...

DEBIAN-CVE-2026-48752

Bulletin has no description...

BELL-CVE-2026-53110

Bulletin has no description...

BELL-CVE-2026-53087

Bulletin has no description...

BELL-CVE-2026-53069

Bulletin has no description...

BELL-CVE-2026-53071

Bulletin has no description...

BELL-CVE-2026-52991

Bulletin has no description...

BELL-CVE-2026-52981

Bulletin has no description...

BELL-CVE-2026-52957

Bulletin has no description...

BELL-CVE-2026-52931

Bulletin has no description...

BELL-CVE-2026-53096

Bulletin has no description...

ECHO-1C14-FF79-B2F0

Bulletin has no description...

DEBIAN-CVE-2026-57454

Vim is an open source, command line text editor. From 9.2.0320 until 9.2.0679, a crafted undo or swap file can store a virtual-text property whose offset and length point outside the line's property data. When Vim restores or displays such a line it converts the offset into a pointer and reads th...

DEBIAN-CVE-2026-57452

Vim is an open source, command line text editor. Prior to 9.2.0671, when Vim opens a file encrypted with the VimCrypt04! or VimCrypt05! method xchacha20poly1305, requires the +sodium feature whose body is shorter than a single libsodium secretstream header, an unsigned length calculation underflo...

DEBIAN-CVE-2026-52690

Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail...

DEBIAN-CVE-2026-42389

This fix provides extra hardening for the 5.4.x branch by doing extra validation of incoming answers from authoritative servers...