84613 matches found
DEBIAN-CVE-2026-65109
Bulletin has no description...
DEBIAN-CVE-2026-65165
Bulletin has no description...
Linux Distros Unpatched Vulnerability : CVE-2026-65139
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix various issues in unsafe operation/queries to the slurmdbd CVE-2026-65139 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2026-80230
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcu...
Linux Distros Unpatched Vulnerability : CVE-2026-65138
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix heap over-read when unpacking a malformed forward data RPC in slurmd. Fix a slurmd crash when handling a...
Debian dsa-6482 : chromium - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6482 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6482-1 [email protected] https://www.debian.org/securit...
Linux Distros Unpatched Vulnerability : CVE-2026-65165
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix various issues around job steps and node count discrepancies CVE-2026-65165 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2026-65107
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix sbcast shared objects skipping credential verification, Fix possible slurmd crash on invalid sbcast filenames...
Debian dla-4767 : keystone - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4767 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4767-1 [email protected]...
Linux Distros Unpatched Vulnerability : CVE-2026-65108
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix a slurmstepd stack overflow when a job environment contains an oversized SPANK option variable CVE-2026-65108...
Linux Distros Unpatched Vulnerability : CVE-2026-80229
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When performing transfers via libcurl's multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations...
DEBIAN-CVE-2026-84382
HTTPX2 is a next generation HTTP client for Python. Prior to 2.12.0, the HTTPX2 content decoders in src/httpx2/httpx2/decoders.py fully inflate each gzip, deflate, br, or zstd network chunk before iterbytes or aiterbytes yields bounded pieces to the application. A 64 KiB compressed chunk can expa...
DEBIAN-CVE-2026-84378
HTTPX2 is a next generation HTTP client for Python. From 2.5.0 until 2.10.0, the HTTPX2 Server-Sent Events parser in src/httpx2/httpx2/sse.py repeatedly copies and rescans buffered text in SSELineDecoder.decode when an attacker-controlled or compromised SSE endpoint splits one unterminated line...
DEBIAN-CVE-2026-84379
HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, FileField.renderheaders in src/httpx2/httpx2/multipart.py directly interpolates attacker-controlled contenttype values and custom headers from the files= three-element filename, content, contenttype tuple and the files=...
DEBIAN-CVE-2026-84380
HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, Request.prepare in src/httpx2/httpx2/models.py can add a body-derived Content-Length header to a request that already contains a caller-supplied Transfer-Encoding header because its setdefault processing checks each default head...
DEBIAN-CVE-2026-82522
libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers to inject arbitrary metadata by exploiting 64-bit box size truncation to sizet on 32-bit platforms. Attackers can supply a crafted JPEG XL file causing the decoder to parse...
[SECURITY] [DLA 4769-1] libass security update
Debian LTS Advisory DLA-4769-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert September 02, 2026 https://wiki.debian.org/LTS Package : libass Version : 1:0.17.1-1+deb12u1 CVE ID : CVE-2026-61627 A vulnerability has been found in libass, a library for SSA/ASS...
DEBIAN-CVE-2026-84837
A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. This is particularly relevant in automated build or continuous integration CI workflows that ingest...
DEBIAN-CVE-2026-84838
A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary commands. This occurs when rpmuncompress processes a specially crafted archive filename containing shell metacharacters, which are not properly escaped before being passed to shell...