16291 matches found
MINI-3HJH-7XQ3-45JR
Bulletin has no description...
MINI-2R92-GJ9X-FQ6X
Bulletin has no description...
ECHO-E3C1-3A3B-83BA Integer overflow in xmlURIEscapeStr (uri.c). Upstream fix (8edbbdb0) adds `if (len == 0) return(NULL);` after xmlStrlen to catch overflow where xmlStrlen returns 0 for a non-empty input. Debian trixie's 2.9.14-based package already has the equivalent guard `if (!(len > 0)) return(NULL);` at the same site, so the bot's CVE-2026-86139 backport (#21567) is a no-op cosmetic rewrite and is not carried. Verified against the deb13u3 source tree.
Bulletin has no description...
ECHO-93FA-AC30-F68B
Bulletin has no description...
DEBIAN-CVE-2026-86145
PCRE2 before 10.48 allows a pcre2dfamatch out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check even though a newly allocated block, for the same purpose, does have a size check. This outcome requires an attacker-controlled regula...
CVE-2026-84131 vulnerabilities
Vulnerabilities for packages: firefox...
MINI-CJ78-5HGH-CCRG
Bulletin has no description...
MINI-6J96-WCXC-Q996
Bulletin has no description...
MINI-C66M-6Q32-MF5M
Bulletin has no description...
MINI-3JJP-RCCQ-38GV
Bulletin has no description...
MINI-XJM7-4V44-JQGW
Bulletin has no description...
MINI-M3XH-G23F-QJ2Q
Bulletin has no description...
MINI-3XRW-7CPQ-QQR3
Bulletin has no description...
MINI-C93R-GC49-VFWP
Bulletin has no description...
MINI-JWVJ-GH43-CV73
Bulletin has no description...
MINI-2XG9-9J5R-87MW
Bulletin has no description...
MINI-4MWC-JGP8-8C7V
Bulletin has no description...
MINI-X62V-74WX-VXHX
Bulletin has no description...