DEBIAN-CVE-2026-54707

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Prior to 2.6.4, OnionShare CLI/Desktop does not enforce the Receive mode disablefiles setting in cli/onionsharecli/web/receivemode.py, where...

DEBIAN-CVE-2026-64607

HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported Content-Encoding header value in the response message. Please note this defect does not affect HttpClient based on the async i/o...

ECHO-3C21-5ED0-4DC8

Bulletin has no description...

ECHO-E128-62C8-AE12

Bulletin has no description...

ECHO-C166-2243-A830

Bulletin has no description...

CGA-4Q4P-3VPX-6VPP

Bulletin has no description...

DEBIAN-CVE-2026-58216

An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's KDC password change kpasswd service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of th...

MINI-C224-MH7W-562G

Bulletin has no description...

DEBIAN-CVE-2026-56848

Bulletin has no description...

DEBIAN-CVE-2026-56846

Bulletin has no description...

RHSA-2026:48222 Red Hat Security Advisory: kernel-rt security update

Bulletin has no description...

RHSA-2026:47997 Red Hat Security Advisory: kpatch-patch security update

Bulletin has no description...

RHSA-2026:47910 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

RHSA-2026:47719 Red Hat Security Advisory: golang security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:47712 Red Hat Security Advisory: golang security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:47619 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

DEBIAN-CVE-2026-16526

A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root...

MINI-H88Q-X828-QR69

Bulletin has no description...

MINI-MMRC-M528-57WP

Bulletin has no description...

DEBIAN-CVE-2026-16729

undici's setCookie function does not fully sanitize cookie attributes. In undici before 6.28.0, from 7.0.0 up to before 7.29.0, and from 8.0.0 up to before 8.9.0, a domain value is not checked for semicolons and entries in the unparsed array are not sanitized, so attacker-influenced input can...