[SECURITY] [DLA 4776-1] chromium security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4776-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 07, 2026 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4775-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4775-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 07, 2026 https://wiki.debian.org/LTS -...

DEBIAN-CVE-2026-84732

Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs that trigger a timeout integer overflow...

Linux Distros Unpatched Vulnerability : CVE-2026-78126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin. CVE-2026-78126 Note that Nessus relies on the presence of the package a...

Linux Distros Unpatched Vulnerability : CVE-2026-78135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can ...

Linux Distros Unpatched Vulnerability : CVE-2026-78130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser. CVE-2026-78130 Note that Nessus relies on the...

Debian dla-4776 : chromium - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4776 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4776-1 [email protected]...

Linux Distros Unpatched Vulnerability : CVE-2026-78134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

Debian dla-4775 : thunderbird - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4775 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4775-1 [email protected]...

Linux Distros Unpatched Vulnerability : CVE-2026-78131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser. CVE-2026-78131 No...

Linux Distros Unpatched Vulnerability : CVE-2026-85013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in environment-modules. A local attacker can exploit this vulnerability by placing a maliciously named modulefile in a location visible to the...

Linux Distros Unpatched Vulnerability : CVE-2026-78133

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling. CVE-2026-78133 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2026-78127

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser. CVE-2026-78127 Note that...

Linux Distros Unpatched Vulnerability : CVE-2026-78123

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS7 parsing in the openssl plugin. CVE-2026-78123 Note that Nessus relies on the presence...

Linux Distros Unpatched Vulnerability : CVE-2026-78124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 5.0.2 through 6.0.7 allows PKCS7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime...

Debian dsa-6488 : jbig2dec - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6488 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6488-1 [email protected] https://www.debian.org/security/ Moritz...

Linux Distros Unpatched Vulnerability : CVE-2026-78132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax. CVE-2026-78132 Note that Nessus relies...

Linux Distros Unpatched Vulnerability : CVE-2026-78129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS5 decryption. CVE-2026-78129 Note that Nessus relies on the presence of the package as reported by th...

DEBIAN-CVE-2026-86219

Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. serverstart generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. serverstep...

DEBIAN-CVE-2026-80230

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...