DEBIAN-CVE-2026-47763

pdm is a Python package and dependency manager supporting the latest PEP standards. In versions prior to 2.27.0, pdm writes several project-local state or configuration files without symlink protection. If a malicious repository places those files as symlinks, local PDM operations can overwrite t...

DEBIAN-CVE-2026-53503

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:convolution, , filter passes the user-controlled value to a C extension thumbor/ext/filters/convolution.c where it is used as a divisor for % and / without validating columns 0. When columns=0, the C...

DEBIAN-CVE-2026-58177

The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 10.1.4, which fix the issue...

BELL-CVE-2026-64410 CVE-2026-64410 does not affect BellSoft software

Bulletin has no description...

MINI-H6MW-FXC4-8PVX

Bulletin has no description...

MINI-J2RX-452F-R3PJ

Bulletin has no description...

DEBIAN-CVE-2026-64465

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix sleep in atomic context in xhcifreestreams When a USB device with active stream endpoints is disconnected, xhcifreestreams is called from the hubevent workqueue to free the stream resources. It calls...

DEBIAN-CVE-2026-64439

In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implementations at alloc krb5aeadencrypt, krb5aeaddecrypt in rfc3961simplified.c and rfc8009encrypt, rfc8009decrypt in rfc8009aes2.c set a NULL completion callback and treat any negative retur...

CGA-7F54-J9QG-6RVJ

Bulletin has no description...

MINI-G6H8-29GV-GFVH

Bulletin has no description...

MINI-QF7W-XJ9R-GMXW

Bulletin has no description...

MINI-7V8F-5MVP-5G8J

Bulletin has no description...

MINI-22R6-MJ52-7H6R

Bulletin has no description...

MINI-W54P-PGWJ-H48J

Bulletin has no description...

DEBIAN-CVE-2026-50584

Bulletin has no description...

DEBIAN-CVE-2026-50588

Bulletin has no description...

BELL-CVE-2026-63817

Bulletin has no description...

DEBIAN-CVE-2026-9499

An out-of-bounds read buffer over-read vulnerability exists in QTextCodec::codecForName in Qt. When the function is called with a QByteArray that is not NUL-terminated for example, one created with QByteArray::fromRawData, the codec-name matching routine reads past the end of the supplied buffer...

MINI-G5PC-R32W-FFWJ

Bulletin has no description...

DEBIAN-CVE-2026-54538

xrdp is an open source RDP server. In versions 0.10.6 and prior, a n issue was discovered where the software fails to properly validate the totalLength field within the RDP protocol control header during packet reception. An unauthenticated remote attacker can exploit this vulnerability by sendin...