251074 matches found
DEBIAN-CVE-2026-54874
Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large...
CLSA-2026-1787663916 TuxCare security update for 13 packages (2 CVEs)
TuxCare rebuilt 13 packages to address 2 CVEs. Fixed in 13.5.11-tuxcare.16...
DEBIAN-CVE-2026-14457
Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...
DEBIAN-CVE-2026-18798
Issue summary: QUIC server may double free QRX QUIC record layer RX object when channel creation fails for initial packet. Impact summary: Double free leads to heap corruption, which typically results in termination of QUIC server process, leading to Denial of Service. There is so far no evidence...
@adobe/probot-serverless-openwhisk (>=4.0.24, <=4.0.55), @csnext/cs-layer-server (>=0.0.101-beta.22, <=0.0.132-beta.207) +248 more potentially affected by CVE-2026-16231 via hbs (>=2.1.0, <=4.2.1)
hbs NPM version =2.1.0, =4.0.24, =0.0.101-beta.22, =0.7.0, =0.7.0, =0.7.0, =1.0.0, =0.19.0, =2.0.1, =0.1.5, =1.0.36, =0.9.0, =0.0.1-alpha.0, =0.1.2, =0.1.2, =0.3.2 and more Source cves: CVE-2026-16231 Source advisory: SNYK:JS-HBS-19256914...
ROOT-OS-DEBIAN-12-CVE-2017-17479 CVE-2017-17479 in openjpeg2 - Patched by Root
Root has patched CVE-2017-17479 in the openjpeg2 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2016-9113 CVE-2016-9113 in openjpeg2 - Patched by Root
Root has patched CVE-2016-9113 in the openjpeg2 package for Root:Debian:12. Multiple fixed versions available...
DEBIAN-CVE-2026-79657
NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables. Attackers can craft malicious pickle payloads invoking dangerous in-namespace functions like ReppTokenizer.execute and...
UBUNTU-CVE-2026-79657
NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables. Attackers can craft malicious pickle payloads invoking dangerous in-namespace functions like ReppTokenizer.execute and...
ROOT-OS-DEBIAN-12-CVE-2025-47917 CVE-2025-47917 in mbedtls - Patched by Root
Root has patched CVE-2025-47917 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-23170 CVE-2024-23170 in mbedtls - Patched by Root
Root has patched CVE-2024-23170 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-48965 CVE-2025-48965 in mbedtls - Patched by Root
Root has patched CVE-2025-48965 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2008-1687 CVE-2008-1687 in m4 - Patched by Root
Root has patched CVE-2008-1687 in the m4 package for Root:Debian:12. Multiple fixed versions available...
python-urwid security update
An update is available for python-urwid. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...
ROOT-OS-DEBIAN-12-CVE-2022-25942 CVE-2022-25942 in hdf5 - Patched by Root
Root has patched CVE-2022-25942 in the hdf5 package for Root:Debian:12. Multiple fixed versions available...
CLSA-2026-1787657292 TuxCare security update for koa (4 CVEs)
TuxCare rebuilt koa to address 4 CVEs. Fixed in 2.15.3-tuxcare.1...
ECHO-3347-DE35-61E4
Bulletin has no description...
ROOT-OS-DEBIAN-12-CVE-2026-58050 CVE-2026-58050 in libssh2 - Patched by Root
Root has patched CVE-2026-58050 in the libssh2 package for Root:Debian:12. Multiple fixed versions available...