DEBIAN-CVE-2026-41855

In an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2MessageConverter and org.springframework.jms.support.converter.JacksonJsonMessageConverter allow arbitrary class instantiation, which can lead to unauthorized actions via gadget class deserialization. Affect...

DEBIAN-CVE-2026-41841

Spring MVC and WebFlux applications are vulnerable to Information Disclosure attacks when resolving static resources. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48...

MINI-QCV5-6X94-F54J

Bulletin has no description...

MINI-44JC-3HJP-J8P9

Bulletin has no description...

MINI-3Q78-PC4R-7CQ7

Bulletin has no description...

MINI-C2HG-9CX4-V3M4

Bulletin has no description...

MINI-37XJ-25WH-7WVM

Bulletin has no description...

MINI-945G-XW8W-3CR3

Bulletin has no description...

MINI-232C-V6F5-F99P

Bulletin has no description...

MINI-R6RV-9248-6HHV

Bulletin has no description...

MINI-G9GX-H8J5-X3G8

Bulletin has no description...

MINI-WGXH-5438-2Q23

Bulletin has no description...

MINI-VX7C-CVWG-R23V

Bulletin has no description...

MINI-XXG2-PCHV-78GP

Bulletin has no description...

MINI-M5X2-4VF2-52GR

Bulletin has no description...

MINI-Q4HX-MHW7-RHP8

Bulletin has no description...

MINI-J377-X5XR-CF7M

Bulletin has no description...

MINI-MQ7R-VM4X-9F55

Bulletin has no description...

DEBIAN-CVE-2026-46301

In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbind Give the driver a chance to flush its queue before releasing the DMA buffers on driver unbind...

DEBIAN-CVE-2026-46295

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Do IRR scan in kvmapicupdateirr even if PIR is empty Fall back to apicfindhighestvector when PID.ON is set but PIR turns out to be empty, to correctly report the highest pending interrupt from the existing IRR. In a...