RHSA-2026:3551 Red Hat Security Advisory: libpng security update

Bulletin has no description...

BELL-CVE-2026-28420

Bulletin has no description...

BELL-CVE-2026-28418

Bulletin has no description...

MINI-294M-235H-5GCF

Bulletin has no description...

RHSA-2026:3489 Red Hat Security Advisory: go-toolset:rhel8 security update

Bulletin has no description...

The vulnerability of the Apache NiFi data processing platform, related to the lack of authentication, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Apache NiFi data processing platform lies in the lack of authentication. Exploiting this vulnerability allows a malicious actor to remotely compromise the confidentiality, integrity, and accessibility of the protected information...

DSA-6153-1 lxd - security update

Bulletin has no description...

MINI-536J-HVCP-XH6P

Bulletin has no description...

MINI-CV6M-52FQ-Q4JV

Bulletin has no description...

MINI-QX9P-2HHM-4M6P

Bulletin has no description...

BELL-CVE-2025-61143

Bulletin has no description...

DEBIAN-CVE-2026-25959

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, xfcliprdrprovidedata passes freed pDstData to XChangeProperty because the cliprdr channel thread calls xfcliprdrserverformatdataresponse which converts and uses the clipboard data without holding any lock,...

CGA-624V-J5JQ-2HPH

Bulletin has no description...

MINI-P8XM-P67M-J8WP

Bulletin has no description...

DEBIAN-CVE-2026-27624

Coturn is a free open source implementation of TURN and STUN Server. Coturn is commonly configured to block loopback and internal ranges using "denied-peer-ip" and/or default loopback restrictions. CVE-2020-26262 addressed bypasses involving "0.0.0.0", "::1" and "::", but IPv4-mapped IPv6 is not...

MINI-V3XR-72H6-G9HC

Bulletin has no description...

BELL-CVE-2026-2474

Bulletin has no description...

DEBIAN-CVE-2026-27572

Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.6, 36.0.6, 4.0.04, 41.0.4, and 42.0.0, Wasmtime's implementation of the wasi:http/types.fields resource is susceptible to panics when too many fields are added to the set of headers. Wasmtime's implementation in the wasmtime-wasi-http...

DEBIAN-CVE-2026-27571

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. The WebSockets handling of NATS messages handles compressed messages via the WebSockets negotiated compression. Prior to versions 2.11.2 and 2.12.3, the implementation bound the memory size of a NATS...

DEBIAN-CVE-2026-27586

Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, two swallowed errors in ClientAuthentication.provision cause mTLS client certificate authentication to silently fail open when a CA certificate file is missing, unreadable, or malformed. The server starts...