MINI-PWXJ-XJHC-CWXW

Bulletin has no description...

MINI-F9QJ-7766-PMP5

Bulletin has no description...

MINI-9WHQ-7W86-G2Q5

Bulletin has no description...

MINI-53W4-QCC2-RCQC

Bulletin has no description...

MINI-WV69-F5XH-4Q4Q

Bulletin has no description...

MINI-4PGJ-86HX-3MX9

Bulletin has no description...

MINI-57JQ-6CWQ-FVQM

Bulletin has no description...

MINI-X37J-C658-MGJ9

Bulletin has no description...

MINI-3Q5V-5JQ4-5WCP

Bulletin has no description...

MINI-7HVM-R4W7-9892

Bulletin has no description...

MINI-VMJR-4F68-45VH

Bulletin has no description...

MINI-P5RF-3P29-R8H4

Bulletin has no description...

MINI-MM33-2MGM-X3W8

Bulletin has no description...

MINI-3497-RGMQ-FQGR

Bulletin has no description...

MINI-JFJ9-G6JJ-Q79C

Bulletin has no description...

MINI-RX36-WFH7-RQCH

Bulletin has no description...

MINI-5MXJ-VFVJ-CH5W

Bulletin has no description...

MINI-CQ5W-9QGV-G48G

Bulletin has no description...

MINI-P663-QGCX-32GV

Bulletin has no description...

MINI-2C58-Q9H6-R4WW

Bulletin has no description...

MINI-W652-GW5H-QF25

Bulletin has no description...

CVE-2026-97149

In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header on PUT requests. A TempURL signature only covers the method, expiry, and path, and thus the list of disallowed headers is the only defense against a signed PUT request changing what the request does. A...

MGASA-2026-0446 Updated xdg-dbus-proxy packages fix security vulnerabilities

filtering for broadcast messages bypassing path/interface/member checks...

MGASA-2026-0445 Updated perl-URI packages fix a security vulnerability

Apply Unicode NFC normalization in URI::idna nameprep so IDNA host encoding matches other clients instead of emitting a non-standard, non-round-tripping A-label CVE-2026-19953...

MGASA-2026-0444 Updated kbd packages fix a security vulnerability

Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login. CVE-2026-72693...

ECHO-0CC3-B012-3379

Bulletin has no description...

ECHO-27B6-03C0-00F1

Bulletin has no description...

ECHO-A533-403C-92D0

Bulletin has no description...

ECHO-572F-5C1A-F5A1

Bulletin has no description...

ECHO-4B23-9403-AEB9

Bulletin has no description...

ECHO-4380-0B34-4B2F

Bulletin has no description...

CVE-2026-97056 SigNoz before 0.143.0 Insufficient Session Expiration Authentication Bypass

SigNoz versions from v0.98.0 up to but not including v0.143.0, when configured to use the opaque session tokenizer which was not the default before v0.143.0, do not revoke a user's existing login sessions when the user's password is reset with a reset token UpdatePasswordByResetPasswordToken,...

CVE-2026-97055 SigNoz before 0.143.0 Authentication Bypass via Empty JWT Secret

SigNoz from v0.8.0 before v0.143.0 defaults the JWT tokenizer signing secret tokenizer::jwt::secret, set via SIGNOZTOKENIZERJWTSECRET or the deprecated SIGNOZJWTSECRET to an empty string, and Config.Validate does not reject the empty value, so a deployment that does not configure a secret starts ...

USN-8811-1 python-urllib3 vulnerability

It was discovered that urllib3 did not correctly strip sensitive HTTP headers during cross-origin redirects. An attacker could possibly use this issue to leak sensitive information...

CLSA-2026-1790212818 TuxCare security update for 146 packages (1 CVE)

TuxCare rebuilt 146 packages to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

MAL-2026-16486 Malicious code in @baanx/domain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a18b786cad636e5b1ac77f23ac054b08d161ad5981c0ed731e14b116167d4859 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16485 Malicious code in @baanx/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d272d47a4b0d81c2aca10da98d90d30033d41d50bd3aeb3b925fb99cbe40b3f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-8810-1 imagemagick vulnerabilities

It was discovered that ImageMagick did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service. This issue affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS...

UBUNTU-CVE-2026-88357

nDPI 5.1.0 contains a memory access issue in the DNS dissector and ser...

UBUNTU-CVE-2026-93229

In the Linux kernel, the following vulnerability has been resolved: nfsd: add missing read barrier to rpcstatusget dumpit seqcount retry The hand-rolled seqcount-like protocol in nfsdnlrpcstatusgetdumpit is missing a read memory barrier smprmb before its second counter check. The standard kernel...

UBUNTU-CVE-2026-93260

In the Linux kernel, the following vulnerability has been resolved: powerpc/xive: propagate IPI init errors to prevent use-after-free When xiveinitipis fails e.g. irqdomainallocirqs fails, the error path frees the global xiveipis array. However, xivesmpprobe previously ignored this failure and...

OPENSUSE-SU-2026:11884-1 pi-coding-agent-0.87.1-1.1 on GA media

These are all security issues fixed in the pi-coding-agent-0.87.1-1.1 package on the GA media of openSUSE Tumbleweed...

UBUNTU-CVE-2026-93238

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix potential use of uninitialized apmfiltered bitmap The DECLAREBITMAPapmfiltered, APDEVICES macro allocates the bitmap on the stack without zero-initializing it. In vfioapmdevhotplugcfg, the vfioapmdevfiltermatrix...

UBUNTU-CVE-2026-93810

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix double fput Fix a double fput in error handling in cachefilescreatetmpfile...

UBUNTU-CVE-2026-19888

Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to crash the process. A malformed message can make the parser report success while leaving a required value unset, which is then dereferenced ...

UBUNTU-CVE-2026-97519

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix null pointer dereference in devcoredump cleanup In xedevcoredumpsnapshotfree, ss-gt may be NULL when the snapshot was never fully populated e.g., when cleanup is triggered without a prior capture. Guard the...

UBUNTU-CVE-2026-97510

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Release request if tbcfgrequest fails in tbxdomainresponse If tbcfgrequest fails setting up the request for example the control channel is shut down already it returns an error without calling the callback. To avoid...

UBUNTU-CVE-2026-93220

In the Linux kernel, the following vulnerability has been resolved: schedext: Keep kicksync waiting on the rq's own CPU kicksyncwaitbalcb assumes it runs on the rq's CPU from the schedule tail: the snapshots it compares against live in that CPU's percpu area and the busy-wait runs with the rq loc...

UBUNTU-CVE-2026-67235

RabbitMQ is a messaging and streaming broker. Prior to versions 4.3.0, 4.2.6, 4.1.11, 4.0.20, and 3.13.15, The content-header BodySize a uint64 was stored without validation against maxmessagesize. The size check ran only when assembly completed. By declaring bodysize = 2^63-1 and then streaming...

UBUNTU-CVE-2026-97454

In the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in acpipsgetnextfield Add boundary checks in acpipsgetnextfield to prevent out-of-bounds access...