Debian dsa-6506 : chromium - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6506 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6506-1 [email protected] https://www.debian.org/securit...

[SECURITY] [DSA 6503-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6503-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 16, 2026 https://www.debian.org/security/faq -...

DEBIAN-CVE-2026-91102

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

[SECURITY] [DSA 6501-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6501-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 16, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6500-1] tor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6500-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 16, 2026 https://www.debian.org/security/faq -...

DEBIAN-CVE-2026-59944

Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and from 2.3.0 until 2.10.3, a malicious or compromised dependency can bypass the earlier CVE-2026-59946 binary-path hardening because Composer validates literal parent-directory segments only during dependency resolutio...

DEBIAN-CVE-2026-42784

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an...

DEBIAN-CVE-2026-19668

A BIND recursive resolver may experience excessive resource consumption if it encounters large numbers of a particular kind of invalid DNSSEC record. Default limits on "max-records-per-type" and "max-types-per-name" help mitigate the exposure. This issue affects BIND 9 versions 9.11.0 through...

DEBIAN-CVE-2026-81563

A BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS ServiceMode records may fail to properly deallocate internal resources. If this happens repeatedly, resource exhaustion will eventually prevent the resolver from performing new recursive lookups. This...

DEBIAN-CVE-2026-89990

In the Linux kernel, the following vulnerability has been resolved: ceph: lock mutex in cephmdscheckaccess MDS session OPEN handling replaces mdsc-scapauths under mdsc-mutex, freeing the previous array and its strings. cephmdscheckaccess traverses this array without holding the mutex. A concurren...

ROOT-OS-DEBIAN-11-CVE-2026-63383 CVE-2026-63383 in libevent - Patched by Root

Root has patched CVE-2026-63383 in the libevent package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-63384 CVE-2026-63384 in libevent - Patched by Root

Root has patched CVE-2026-63384 in the libevent package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-63385 CVE-2026-63385 in libevent - Patched by Root

Root has patched CVE-2026-63385 in the libevent package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-63382 CVE-2026-63382 in libevent - Patched by Root

Root has patched CVE-2026-63382 in the libevent package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-63387 CVE-2026-63387 in libevent - Patched by Root

Root has patched CVE-2026-63387 in the libevent package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-63388 CVE-2026-63388 in libevent - Patched by Root

Root has patched CVE-2026-63388 in the libevent package for Root:Debian:11. Multiple fixed versions available...

DEBIAN-CVE-2026-89786

In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bounds read in ext4readinlinedir ext4readinlinedir can read a dirent header past the end of its inline buffer, triggering a slab-out-of-bounds read during getdents64: BUG: KASAN: slab-out-of-bounds in...

Linux Distros Unpatched Vulnerability : CVE-2026-91837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in NetworkManager-iodine, the iodine VPN plugin for NetworkManager. A local unprivileged user can exploit a vulnerability in how the 'nameserve...

Debian dsa-6503 : thunderbird - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6503 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6503-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2026-91838

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special...