ROOT-OS-DEBIAN-12-CVE-2025-12839 CVE-2025-12839 in openexr - Patched by Root

Root has patched CVE-2025-12839 in the openexr package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-53532 CVE-2026-53532 in openexr - Patched by Root

Root has patched CVE-2026-53532 in the openexr package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-34589 CVE-2026-34589 in openexr - Patched by Root

Root has patched CVE-2026-34589 in the openexr package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-59184 CVE-2026-59184 in openexr - Patched by Root

Root has patched CVE-2026-59184 in the openexr package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2017-14988 CVE-2017-14988 in openexr - Patched by Root

Root has patched CVE-2017-14988 in the openexr package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2023-5841 CVE-2023-5841 in openexr - Patched by Root

Root has patched CVE-2023-5841 in the openexr package for Root:Debian:12. Multiple fixed versions available...

[SECURITY] [DLA 4767-1] keystone security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4767-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 02, 2026 https://wiki.debian.org/LTS -...

DEBIAN-CVE-2026-80220

Bulletin has no description...

DEBIAN-CVE-2026-16658

Bulletin has no description...

DEBIAN-CVE-2026-14957

In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...

Linux Distros Unpatched Vulnerability : CVE-2026-19931

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotiate authentication, when the initial request is done using...

Linux Distros Unpatched Vulnerability : CVE-2026-18924

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in...

Debian dsa-6481 : firefox-esr - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6481 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6481-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2026-80255

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cook...

Linux Distros Unpatched Vulnerability : CVE-2026-80220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - prometheus-postgres-exporter - None Ubuntu Linux - Unknown description CVE-2026-80220 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2026-82209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute...

Linux Distros Unpatched Vulnerability : CVE-2026-13608

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic...

Linux Distros Unpatched Vulnerability : CVE-2026-82208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached...

Linux Distros Unpatched Vulnerability : CVE-2026-16658

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

DEBIAN-CVE-2026-84639

Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...