Linux Distros Unpatched Vulnerability : CVE-2026-65107

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix sbcast shared objects skipping credential verification, Fix possible slurmd crash on invalid sbcast filenames...

Linux Distros Unpatched Vulnerability : CVE-2026-65108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix a slurmstepd stack overflow when a job environment contains an oversized SPANK option variable CVE-2026-65108...

Linux Distros Unpatched Vulnerability : CVE-2026-80229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When performing transfers via libcurl's multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations...

copy_fail_mitigation

copyfailmitigation 1. This script will attempt to mitigate the copyfail attack. CVE-2026-31431 2. Works on all Debian/Ubuntu Arch based platforms i.e. Kali, ParrotSec, BlackArch Usage: 3. cd 4. chmod +x copyfailmitigation.sh 5. Recommended to run as root 6. ./copyfailmitigation.sh...

PortGuard

Port-Guard Port-Guard es una herramienta de gestión y aseguramiento de puertos USB diseñada para Debian. Permite controlar el acceso a los dispositivos USB , mantener una lista blanca personalizada y ejecutar un escaneo automático en segundo plano para detectar cualquier conexión no autorizada. ⚠️...

DEBIAN-CVE-2026-84382

HTTPX2 is a next generation HTTP client for Python. Prior to 2.12.0, the HTTPX2 content decoders in src/httpx2/httpx2/decoders.py fully inflate each gzip, deflate, br, or zstd network chunk before iterbytes or aiterbytes yields bounded pieces to the application. A 64 KiB compressed chunk can expa...

inetutils-telnetd-auth-bypass

مختبر تجاوز المصادقة في inetutils-telnetd، CVE-2026-24061 مختبر صغير للتجربة مع تجاوز المصادقة في inetutils-telnetd الإصدار 1.9.3 - 2.7 كما تم الكشف عنه في القائمة البريدية oss-sec. 0 تعتمد هذه الحاوية على حقيقة أن inetutils-telnetd لا يزال إصدارًا ضعيفًا في Debian 11 Bullseye. في وقت إنشاء هذا،...

DEBIAN-CVE-2026-84378

HTTPX2 is a next generation HTTP client for Python. From 2.5.0 until 2.10.0, the HTTPX2 Server-Sent Events parser in src/httpx2/httpx2/sse.py repeatedly copies and rescans buffered text in SSELineDecoder.decode when an attacker-controlled or compromised SSE endpoint splits one unterminated line...

DEBIAN-CVE-2026-84379

HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, FileField.renderheaders in src/httpx2/httpx2/multipart.py directly interpolates attacker-controlled contenttype values and custom headers from the files= three-element filename, content, contenttype tuple and the files=...

DEBIAN-CVE-2026-84380

HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, Request.prepare in src/httpx2/httpx2/models.py can add a body-derived Content-Length header to a request that already contains a caller-supplied Transfer-Encoding header because its setdefault processing checks each default head...

DEBIAN-CVE-2026-82522

libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers to inject arbitrary metadata by exploiting 64-bit box size truncation to sizet on 32-bit platforms. Attackers can supply a crafted JPEG XL file causing the decoder to parse...

[SECURITY] [DLA 4769-1] libass security update

Debian LTS Advisory DLA-4769-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert September 02, 2026 https://wiki.debian.org/LTS Package : libass Version : 1:0.17.1-1+deb12u1 CVE ID : CVE-2026-61627 A vulnerability has been found in libass, a library for SSA/ASS...

DEBIAN-CVE-2026-84838

A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary commands. This occurs when rpmuncompress processes a specially crafted archive filename containing shell metacharacters, which are not properly escaped before being passed to shell...

DEBIAN-CVE-2026-84837

A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. This is particularly relevant in automated build or continuous integration CI workflows that ingest...

ROOT-OS-DEBIAN-11-CVE-2022-40090 CVE-2022-40090 in tiff - Patched by Root

Root has patched CVE-2022-40090 in the tiff package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-8177 CVE-2025-8177 in tiff - Patched by Root

Root has patched CVE-2025-8177 in the tiff package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-12912 CVE-2026-12912 in tiff - Patched by Root

Root has patched CVE-2026-12912 in the tiff package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-36849 CVE-2026-36849 in tiff - Patched by Root

Root has patched CVE-2026-36849 in the tiff package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-8176 CVE-2025-8176 in tiff - Patched by Root

Root has patched CVE-2025-8176 in the tiff package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-61145 CVE-2025-61145 in tiff - Patched by Root

Root has patched CVE-2025-61145 in the tiff package for Root:Debian:11. Multiple fixed versions available...