DEBIAN-CVE-2026-59088

A flaw was found in GIMP. A signed integer overflow vulnerability exists in the file-fli plugin when processing FLI image files. This occurs due to an incorrect calculation during memory allocation for image buffers, where the multiplication of image width and height can exceed the maximum intege...

ROOT-OS-DEBIAN-12-CVE-2026-34501 CVE-2026-34501 in apr-util - Patched by Root

Root has patched CVE-2026-34501 in the apr-util package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-32327 CVE-2026-32327 in apr-util - Patched by Root

Root has patched CVE-2026-32327 in the apr-util package for Root:Debian:12. Multiple fixed versions available...

DEBIAN-CVE-2026-71392

GNU Emacs for Android is vulnerable to an integer overflow in the sfntreadcmapformat12 function in src/sfnt.c. When processing a crafted TrueType font file, an unguarded addition in the xmalloc allocation call wraps around on 32-bit builds, causing a heap buffer overflow write. An attacker can...

DEBIAN-CVE-2026-71394

GNU Emacs for Android improperly validates the table header input in sfntreadtabledirectory in src/sfnt.c. Due to an incorrect comparison variable in the read-length check, a crafted font file that claims to contain more table directory entries than actually present causes the parser to return a...

DEBIAN-CVE-2026-71393

GNU Emacs for Android is vulnerable to an integer overflow in sfntreadnametable in src/sfnt.c. The function computes an allocation size using a 32-bit length value from a TrueType font file without overflow checking. On 32-bit targets, a crafted font causes the calculation to wrap, resulting in a...

DEBIAN-CVE-2026-66486

GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality. When listing archive members via cpio -it, member names are printed directly to output without quoting or escaping. An attacker can craft a cpio archive containing member names with...

DEBIAN-CVE-2026-12570

A vulnerability in keras-team/keras versions = 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the keras.models.loadmodel function. The H5IOStore.getitem method in keras/src/saving/savinglib.py does not validate the shape or size of datasets, leading...

DEBIAN-CVE-2026-72522

libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the toUtf16 functions...

Debian dsa-6426 : icinga2 - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6426 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6426-1 [email protected] https://www.debian.org/securit...

Debian dla-4728 : chromium - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4728 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4728-1 [email protected]...

Linux Distros Unpatched Vulnerability : CVE-2026-69184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - c-ares - None Ubuntu Linux - GHSA-pjmc-gx33-gc76: CPU-exhaustion denial of service via unbounded DNS name compression pointer chains CVE-2026-691...

Linux Distros Unpatched Vulnerability : CVE-2026-61551

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to inadequate access control restrictions during peer-node verification checks. CVE-2026-61551 Note that Nessus relies on the...

Debian dla-4730 : libyaml-syck-perl - security update

The remote Debian 11 / 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4730 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4730-1 [email protected]...

Linux Distros Unpatched Vulnerability : CVE-2026-61550

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to an incorrect memory validation boundary mismatch inside remote communication API endpoints. CVE-2026-61550 Note that Nessus reli...

Linux Distros Unpatched Vulnerability : CVE-2026-69186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - c-ares - None Ubuntu Linux - GHSA-jv8r-gqr9-68wj: Memory-amplification denial of service via unvalidated DNS header record counts CVE-2026-69186...

Linux Distros Unpatched Vulnerability : CVE-2026-61552

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to a race condition or state handling loop flaw occurring during automated connection timeouts. CVE-2026-61552 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2026-6791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home...

[SECURITY] [DSA 6424-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6424-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 09, 2026 https://www.debian.org/security/faq -...

DEBIAN-CVE-2026-15534

Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in Sregmatch. The regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject...