ROOT-OS-DEBIAN-12-CVE-2004-0230 CVE-2004-0230 in linux - Patched by Root

Root has patched CVE-2004-0230 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-46147 CVE-2026-46147 in linux - Patched by Root

Root has patched CVE-2026-46147 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-38191 CVE-2025-38191 in linux - Patched by Root

Root has patched CVE-2025-38191 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-38135 CVE-2025-38135 in linux - Patched by Root

Root has patched CVE-2025-38135 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-38540 CVE-2025-38540 in linux - Patched by Root

Root has patched CVE-2025-38540 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-53148 CVE-2026-53148 in linux - Patched by Root

Root has patched CVE-2026-53148 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-31603 CVE-2026-31603 in linux - Patched by Root

Root has patched CVE-2026-31603 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-31788 CVE-2026-31788 in linux - Patched by Root

Root has patched CVE-2026-31788 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-63847 CVE-2026-63847 in linux - Patched by Root

Root has patched CVE-2026-63847 in the linux package for Root:Debian:12. Multiple fixed versions available...

CLSA-2026-1787664518 TuxCare security update for io.netty (2 CVEs)

TuxCare rebuilt 40 io.netty packages to address 2 CVEs. Fixed in 4.1.49.Final-tuxcare.3...

CLSA-2026-1787664257 TuxCare security update for follow-redirects (13 CVEs)

TuxCare rebuilt follow-redirects to address 13 CVEs. Fixed in 1.5.10-tuxcare.2...

DEBIAN-CVE-2026-75803

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

DEBIAN-CVE-2026-63076

Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid...

DEBIAN-CVE-2026-63073

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate...

DEBIAN-CVE-2026-63075

Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadata for the lifetime of the connection. Impact summary: A remote peer that can complete a QUIC...

DEBIAN-CVE-2026-63072

Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a...

DEBIAN-CVE-2026-63074

Issue summary: The OpenSSL Certificate Management Protocol CMP caches additional certificates extraCerts sent in a CMP message, but never expunges them for instance if they are invalid. If a server reuses an OSSLCMPCTX frequently, this cache of extraCerts may grow unboundedly, and a malicious...

DEBIAN-CVE-2026-54874

Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large...

CLSA-2026-1787663916 TuxCare security update for 13 packages (2 CVEs)

TuxCare rebuilt 13 packages to address 2 CVEs. Fixed in 13.5.11-tuxcare.16...

DEBIAN-CVE-2026-14457

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...