MINI-QRC3-J5H9-8548

Bulletin has no description...

DLA-4485-1 ca-certificates - CA certificates update

Bulletin has no description...

DEBIAN-CVE-2026-26223

SPIP before 4.4.8 allows cross-site scripting XSS in the private area via malicious iframe tags. The application does not properly sandbox or escape iframe content in the back-office, allowing an attacker to inject and execute malicious scripts. The fix adds a sandbox attribute to iframe tags in...

DEBIAN-CVE-2025-71240

SPIP before 4.2.15 allows Cross-Site Scripting XSS via crafted content in HTML code tags. The application does not properly verify JavaScript within code tags, allowing an attacker to inject malicious scripts that execute in a victim's browser...

MINI-RMRM-MVGX-XC33

Bulletin has no description...

RHSA-2026:2969 Red Hat Security Advisory: gimp security update

Bulletin has no description...

RHSA-2026:2923 Red Hat Security Advisory: munge security update

Bulletin has no description...

RHSA-2026:2914 Red Hat Security Advisory: grafana security update

Bulletin has no description...

BELL-CVE-2026-23179

Bulletin has no description...

BELL-CVE-2026-23148

Bulletin has no description...

BELL-CVE-2026-23144

Bulletin has no description...

BELL-CVE-2026-23128

Bulletin has no description...

BELL-CVE-2026-23121

Bulletin has no description...

ECHO-3D48-BF02-E261 Kernel vulnerabilities are irrelevant in container environments.

Bulletin has no description...

ECHO-4DDC-212A-1B8D Kernel vulnerabilities are irrelevant in container environments.

Bulletin has no description...

ECHO-F7A0-3515-5769 Kernel vulnerabilities are irrelevant in container environments.

Bulletin has no description...

CVE-2026-22860

A path traversal flaw has been discovered in the rubygem Rack. Rack::Directory’s path check used a string prefix match on the expanded path. A request like /../rootexample/ can escape the configured root if the target path starts with the root string, allowing directory listing outside the intend...

DEBIAN-CVE-2026-2661

A security flaw has been discovered in Squirrel up to 3.2. This affects the function SQObjectPtr::operator in the library squirrel/sqobject.h. The manipulation results in heap-based buffer overflow. The attack needs to be approached locally. The exploit has been released to the public and may be...

MINI-X2JR-Q39X-HW6Q

Bulletin has no description...

DEBIAN-CVE-2026-23230

In the Linux kernel, the following vulnerability has been resolved: smb: client: split cachedfid bitfields to avoid shared-byte RMW races isopen, haslease and onlist are stored in the same bitfield byte in struct cachedfid but are updated in different code paths that may run concurrently. Bitfiel...