DEBIAN-CVE-2026-91766

When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Proxy-Authorization headers unchanged, even when the redirect target is a different host, a different port, or a downgrade from HTTPS to HTTP. A server that can steer a redirect therefore...

DEBIAN-CVE-2026-6103

phartarnumber parses the octal size field of a TAR header into a uint32t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlle...

DEBIAN-CVE-2025-14181

The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server can make the client allocate a buffer far smaller than the data it...

DEBIAN-CVE-2026-93682

When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the heap buffer holding the location. The value of that out-of-bounds byte decides which redirect target is built, so a malicious server...

[SECURITY] [DSA 6514-1] php8.4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6514-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 25, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6513-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6513-1 [email protected] https://www.debian.org/security/ Andres Salomon September 25, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6416-2] jq regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-6416-2 [email protected] https://www.debian.org/security/ Aron Xu September 25, 2026 https://www.debian.org/security/faq -...

ROOT-OS-DEBIAN-12-CVE-2026-66046 CVE-2026-66046 in expat - Patched by Root

Root has patched CVE-2026-66046 in the expat package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-32776 CVE-2026-32776 in expat - Patched by Root

Root has patched CVE-2026-32776 in the expat package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-32777 CVE-2026-32777 in expat - Patched by Root

Root has patched CVE-2026-32777 in the expat package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-59375 CVE-2025-59375 in expat - Patched by Root

Root has patched CVE-2025-59375 in the expat package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-25210 CVE-2026-25210 in expat - Patched by Root

Root has patched CVE-2026-25210 in the expat package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-28757 CVE-2024-28757 in expat - Patched by Root

Root has patched CVE-2024-28757 in the expat package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-24515 CVE-2026-24515 in expat - Patched by Root

Root has patched CVE-2026-24515 in the expat package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-32778 CVE-2026-32778 in expat - Patched by Root

Root has patched CVE-2026-32778 in the expat package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-45186 CVE-2026-45186 in expat - Patched by Root

Root has patched CVE-2026-45186 in the expat package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-84446 CVE-2026-84446 in libheif - Patched by Root

Root has patched CVE-2026-84446 in the libheif package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-80186 CVE-2026-80186 in bluez - Patched by Root

Root has patched CVE-2026-80186 in the bluez package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2023-51589 CVE-2023-51589 in bluez - Patched by Root

Root has patched CVE-2023-51589 in the bluez package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-19774 CVE-2026-19774 in bluez - Patched by Root

Root has patched CVE-2026-19774 in the bluez package for Root:Debian:13. Multiple fixed versions available...