11613 matches found
BELL-CVE-2026-40250
Bulletin has no description...
CVE-2026-33257
A flaw was found in PowerDNS DNSdist. An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default...
CVE-2026-33261
A flaw was found in PowerDNS Recursor. A zone transition from NSEC to NSEC3 might trigger an internal inconsistency and cause a denial of service...
DEBIAN-CVE-2026-35358
The cp utility in uutils coreutils, when performing recursive copies -R, incorrectly treats character and block device nodes as stream sources rather than preserving them. Because the implementation reads bytes into regular files at the destination instead of using mknod, device semantics are...
DEBIAN-CVE-2026-35344
The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result::ok on truncation attempts. While intended to mimic GNU behavior for special files like /dev/null, the uutils implementation also hides failures on regular files and directorie...
MINI-XJ2Q-G28V-GJ2V
Bulletin has no description...
MINI-R4CP-744C-8MX5
Bulletin has no description...
MINI-VWH3-W5XP-H793
Bulletin has no description...
MINI-3WPH-H6R9-HG7H
Bulletin has no description...
DEBIAN-CVE-2026-31522
In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: avoid memory leak in magicmousereportfixup The magicmousereportfixup function was returning a newly kmemdup-allocated buffer, but never freeing it. The caller of reportfixup does not take ownership of the returne...
DEBIAN-CVE-2026-31502
In the Linux kernel, the following vulnerability has been resolved: team: fix headerops type confusion with non-Ethernet ports Similar to commit 950803f72547 "bonding: fix type confusion in bondsetupbyslave" team has the same class of headerops type confusion. For non-Ethernet ports,...
DEBIAN-CVE-2026-31464
In the Linux kernel, the following vulnerability has been resolved: scsi: ibmvfc: Fix OOB access in ibmvfcdiscovertargetsdone A malicious or compromised VIO server can return a numwritten value in the discover targets MAD response that exceeds maxtargets. This value is stored directly in...
DEBIAN-CVE-2026-31461
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix drmedid leak in amdgpudm WHAT When a sink is connected, aconnector-drmedid was overwritten without freeing the previous allocation, causing a memory leak on resume. HOW Free the previous drmedid before updati...
DEBIAN-CVE-2026-31456
In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix race between concurrent split and refault The splitting of a PUD entry in walkpudrange can race with a concurrent thread refaulting the PUD leaf entry causing it to try walking a PMD range that has disappeared. A...
DEBIAN-CVE-2026-31453
In the Linux kernel, the following vulnerability has been resolved: xfs: avoid dereferencing log items after push callbacks After xfsaildpushitem calls ioppush, the log item may have been freed if the AIL lock was dropped during the push. Background inode reclaim or the dquot shrinker can free th...
DEBIAN-CVE-2026-31440
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix leaking event log memory During the device remove process, the device is reset, causing the configuration registers to go back to their default state, which is zero. As the driver is checking if the event log...
RHSA-2026:9656 Red Hat Security Advisory: freerdp security update
Bulletin has no description...
RHSA-2026:9345 Red Hat Security Advisory: thunderbird security update
Bulletin has no description...