DEBIAN-CVE-2026-71498

node-re2 provides RE2 regular expression bindings for Node.js. Prior to version 1.26.1, passing a Buffer whose final bytes form a truncated incomplete multi-byte UTF-8 sequence could cause the native binding to read past the end of the allocated buffer while attempting to decode the final,...

glib2: Fix of 4 CVEs

CVE-2026-58010: heap buffer over-read off-by-one in gvstupleisnormal in glib/gvariant-serialiser.c when checking untrusted tuple GVariant data for normal form - CVE-2026-58012: buffer over-read in gregexreplace/gregexreplaceeval when a GREGEXRAW match ends in a truncated multi-byte sequence and a...

Xterm 输入验证错误漏洞

XTerm is a terminal emulator on the X Window System used to provide multiple independent SHELL inputs and outputs. An input validation error vulnerability exists in Xterm that originates from allowing remote attackers to cause a denial of service segmentation error or possibly have unspecified...