MINI-RW43-5R5J-MRFR

Bulletin has no description...

MINI-9CPG-QF2R-WCXR

Bulletin has no description...

MINI-X8PR-HJVC-2XM8

Bulletin has no description...

MINI-W9MW-HW82-W448

Bulletin has no description...

MINI-Q959-3RWF-CPJ5

Bulletin has no description...

MINI-4RX3-J4J6-RQH3

Bulletin has no description...

MINI-RJPJ-5297-54XP

Bulletin has no description...

MINI-W9XM-WJ7Q-5MM5

Bulletin has no description...

MINI-JCVH-39JW-98J3

Bulletin has no description...

CLSA-2026-1787668008 TuxCare security update for io.netty (6 CVEs)

TuxCare rebuilt 47 io.netty packages to address 6 CVEs. Fixed in 4.1.93.Final-tuxcare.3...

DEBIAN-CVE-2026-79655

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...

CLSA-2026-1787664518 TuxCare security update for io.netty (2 CVEs)

TuxCare rebuilt 40 io.netty packages to address 2 CVEs. Fixed in 4.1.49.Final-tuxcare.3...

CLSA-2026-1787664257 TuxCare security update for follow-redirects (13 CVEs)

TuxCare rebuilt follow-redirects to address 13 CVEs. Fixed in 1.5.10-tuxcare.2...

DEBIAN-CVE-2026-75803

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

DEBIAN-CVE-2026-63076

Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid...

DEBIAN-CVE-2026-63073

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate...

DEBIAN-CVE-2026-63075

Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadata for the lifetime of the connection. Impact summary: A remote peer that can complete a QUIC...

DEBIAN-CVE-2026-63072

Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a...

DEBIAN-CVE-2026-63074

Issue summary: The OpenSSL Certificate Management Protocol CMP caches additional certificates extraCerts sent in a CMP message, but never expunges them for instance if they are invalid. If a server reuses an OSSLCMPCTX frequently, this cache of extraCerts may grow unboundedly, and a malicious...

DEBIAN-CVE-2026-54874

Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large...