1441609 matches found
CLSA-2026-1787664518 TuxCare security update for io.netty (2 CVEs)
TuxCare rebuilt 40 io.netty packages to address 2 CVEs. Fixed in 4.1.49.Final-tuxcare.3...
CLSA-2026-1787664257 TuxCare security update for follow-redirects (13 CVEs)
TuxCare rebuilt follow-redirects to address 13 CVEs. Fixed in 1.5.10-tuxcare.2...
DEBIAN-CVE-2026-75803
Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...
DEBIAN-CVE-2026-63076
Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid...
WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android
Meta on Tuesday announced a set of WhatsApp account security features, including support for multiple passkeys to a single account to help users with both iOS and Android devices sign into their accounts using the phishing-resistant method. The tech giant said more than 1 billion people use a...
CLSA-2026-1787663916 TuxCare security update for 13 packages (2 CVEs)
TuxCare rebuilt 13 packages to address 2 CVEs. Fixed in 13.5.11-tuxcare.16...
DEBIAN-CVE-2026-14457
Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues: Update to version 1.26.7 cut from the go1.25-fips-release at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can lead to...
ROOT-OS-DEBIAN-12-CVE-2024-7531 CVE-2024-7531 in nss - Patched by Root
Root has patched CVE-2024-7531 in the nss package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-59996 CVE-2026-59996 in openssh - Patched by Root
Root has patched CVE-2026-59996 in the openssh package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-59995 CVE-2026-59995 in openssh - Patched by Root
Root has patched CVE-2026-59995 in the openssh package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-60000 CVE-2026-60000 in openssh - Patched by Root
Root has patched CVE-2026-60000 in the openssh package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-59997 CVE-2026-59997 in openssh - Patched by Root
Root has patched CVE-2026-59997 in the openssh package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2023-50495 CVE-2023-50495 in ncurses - Patched by Root
Root has patched CVE-2023-50495 in the ncurses package for Root:Debian:12. Multiple fixed versions available...
DEBIAN-CVE-2026-79657
NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables. Attackers can craft malicious pickle payloads invoking dangerous in-namespace functions like ReppTokenizer.execute and...
ROOT-OS-DEBIAN-12-CVE-2026-34873 CVE-2026-34873 in mbedtls - Patched by Root
Root has patched CVE-2026-34873 in the mbedtls package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-42533 CVE-2026-42533 in nginx - Patched by Root
Root has patched CVE-2026-42533 in the nginx package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-33877 CVE-2024-33877 in hdf5 - Patched by Root
Root has patched CVE-2024-33877 in the hdf5 package for Root:Debian:12. Multiple fixed versions available...