DEBIAN-CVE-2026-48750

Incus is a system container and virtual machine manager. Prior to version 7.2.0, the record-output parameter of the /instances/$name/exec endpoint stores the output of the command in the exec-output directory of the instance. If exec-output is a symlink, file named execUUID.stdout and...

DEBIAN-CVE-2026-48753

Incus is a system container and virtual machine manager. Prior to version 7.1.0, the S3 protocol upload endpoint is vulnerable to path traversal and allows creation of arbitrary files on the host. This behavior could lead to arbitrary command execution. Version 7.1.0 fixes the issue...

DEBIAN-CVE-2026-47753

Incus is a system container and virtual machine manager. Prior to version 7.1.0, backend.CreateInstanceFromBackup in internal/server/storage/backend.go contains a nil-pointer dereference that an authenticated user with permission to create instances in any project can trigger remotely by uploadin...

DEBIAN-CVE-2026-48752

Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image or instance backup can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command execution. Version 7.2.0 patches the issue...

DEBIAN-CVE-2026-48751

Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the restricted.containers.lowlevel=block setting; allowing for arbitrary command execution on the Incus server by abusing lowlevel hooks such as raw.lxc and raw.qemu. Version 7.2.0 patches t...

DEBIAN-CVE-2026-48754

Incus is a system container and virtual machine manager. Prior to version 7.1.0, backend.createDependentVolumesFromBackup in internal/server/storage/backend.go contains a cluster of unguarded pointer derefs on every dependent-volume entry's VolumeSnapshotsi, Volume, and Pool sub-fields. An...

DEBIAN-CVE-2026-48749

Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command execution. Version 7.2.0 fixes the issue...

[SECURITY] [DLA 4750-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4750-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 21, 2026 https://wiki.debian.org/LTS -...

DEBIAN-CVE-2026-77806

SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection via an X-Spip-Filtre HTTP request header that is mishandled by analyseresultatskel...

ROOT-OS-DEBIAN-11-CVE-2026-41071 CVE-2026-41071 in libheif - Patched by Root

Root has patched CVE-2026-41071 in the libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-32814 CVE-2026-32814 in libheif - Patched by Root

Root has patched CVE-2026-32814 in the libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-32739 CVE-2026-32739 in libheif - Patched by Root

Root has patched CVE-2026-32739 in the libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-32882 CVE-2026-32882 in libheif - Patched by Root

Root has patched CVE-2026-32882 in the libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-32741 CVE-2026-32741 in libheif - Patched by Root

Root has patched CVE-2026-32741 in the libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-32740 CVE-2026-32740 in libheif - Patched by Root

Root has patched CVE-2026-32740 in the libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-47178 CVE-2026-47178 in libheif - Patched by Root

Root has patched CVE-2026-47178 in the libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-62292 CVE-2026-62292 in libheif - Patched by Root

Root has patched CVE-2026-62292 in the libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-49271 CVE-2026-49271 in libheif - Patched by Root

Root has patched CVE-2026-49271 in the libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-41069 CVE-2026-41069 in libheif - Patched by Root

Root has patched CVE-2026-41069 in the libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2024-28757 CVE-2024-28757 in expat - Patched by Root

Root has patched CVE-2024-28757 in the expat package for Root:Debian:11. Multiple fixed versions available...